All Episodes
Displaying 21 - 40 of 52 in total
Microsegmentation in Practice Beyond One Big Flat Network
Network microsegmentation can sound like a buzzword until you see how it actually changes the way attackers move inside your environment. In this audio version of our ...
Credential Stuffing and Password Spraying in Plain English
Credential stuffing and password spraying rarely look dramatic at first, but they sit at the center of many account takeover and fraud stories. In this audio edition, ...
Making Security Risk Registers Actually Useful
Security risk registers often feel like an audit checkbox, but they can be one of the most practical tools in your security program when they are done well. In this na...
When “Working as Designed” Breaks Your Security
Business logic flaws can be some of the most damaging weaknesses in an application, yet they rarely show up in scan results or standard test reports. In this episode, ...
Email Security Essentials for Attachments, Links, and Suspicious Messages
This narrated edition of the Tuesday “Insights” feature from Bare Metal Cyber Magazine explores Email Security Essentials in plain language, with a special focus on at...
Making Sense of the Cloud Shared Responsibility Model
When a cloud service goes down or behaves strangely, the first minutes are often spent arguing about ownership instead of solving the problem. This narrated Insight wa...
How User and Entity Behavior Analytics Spots Trouble Early
This narrated Insight walks through User and Entity Behavior Analytics (UEBA) as a practical tool for spotting the weird stuff early. You will hear how UEBA builds a p...
Understanding the Ransomware Attack Lifecycle
Ransomware attacks do not begin with the ransom note – they unfold through a quiet sequence of steps that often look like routine activity. In this Tuesday “Insights” ...
Securing Operational Technology and Industrial Control Systems
This audio edition takes you into the world of Operational Technology (OT) and Industrial Control Systems (ICS) security, where digital access and configuration change...
Browser Security Basics for Real-World Teams
Browser security can feel like a small detail compared to network diagrams and cloud architectures, but for most people in your organization, the browser is where the ...
Making Sense of Static vs Dynamic App Security Testing
Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) both promise better application security, but they look at your systems in v...
Watching What Leaves Your Environment Before It Becomes a Breach
Network egress controls can be the difference between a noisy but contained incident and a quiet data leak that nobody spots until it is too late. In this audio Insigh...
Making Sense of EDR vs XDR for Real-World Teams
In this audio edition of our Tuesday “Insights” feature from Bare Metal Cyber Magazine, we unpack Endpoint Detection and Response (EDR) and Extended Detection and Resp...
Web Security Headers, Big Protection from Small Settings
Web security headers sound technical, but in practice they are small configuration choices that can dramatically change how safely browsers handle your site. In this a...
Backup and Restore Strategies That Actually Survive an Incident
Backup and restore can sound like background plumbing until something goes very wrong. In this audio Insight, we walk through backup and restore strategies from the pe...
Data Retention and Disposal Without the Guesswork
Data retention and disposal can feel like a dry policy topic, but it quietly shapes almost everything you do with information. In this narrated Insight, we walk throug...
Security Debt and the Cost of Old Decisions
Security debt is what happens when yesterday’s “just this once” decisions turn into today’s hidden attack surface. In this narrated Insight, we explore how old excepti...
Making Tabletop Exercises a Core Incident Response Habit
In this audio edition, we explore how tabletop exercises for incident response give your organization a safe space to rehearse tough situations before they happen. You...
Shadow IT and the Tools You Don’t See Coming
Shadow IT often starts as a shortcut: a free SaaS tool, a personal cloud folder, a browser extension that “just makes things easier.” In this audio Insight, we unpack ...
Turning Configuration Baselines into Everyday Defenses
Configuration drift tends to creep in quietly, one “temporary” change at a time. In this narrated Tuesday “Insights” feature from Bare Metal Cyber Magazine, we walk th...