DiscoverBrakeSec Education PodcastHow to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!
How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

Update: 2023-12-04
Share

Description

Show Topic Summary:

Ms. Berlin proposes a question of how to gather more headcount with metrics, we discuss the BLUFFS bluetooth vulnerability, and “Ranty Claus” talks about CISA’s remarks of putting the onus on device product makers to remove choice for customers and implement secure defaults.

#youtube VOD: https://www.youtube.com/watch?v=emcAzTx9z0c 

Questions and topics:

  1. https://cyberscoop.com/cisa-goldstein-secure-by-design/

  2. https://hackaday.com/2023/12/02/update-on-the-bluffs-bluetooth-vulnerability/

Additional information / pertinent LInks (Would you like to know more?):

  1. https://cyberscoop.com/jen-easterly-secure-by-design/

  2. https://www.cisa.gov/resources-tools/resources/stop-passing-buck-cybersecurity 

  3. Examples of companies forcing changes https://www.bleepingcomputer.com/news/microsoft/microsoft-will-roll-out-mfa-enforcing-policies-for-admin-portal-access/  

  4. https://github.com/aya-rs/aya - eBPF implementation in Rust

  5. https://ossfortress.io/  

    6. <li dir="ltr" style= "list-style-type: decimal; font-size: 14pt; font-family: Calibri, sans-serif; color: rgb(0, 0, 0); backgroun
Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
Tanya Janca Talks secure coding, Semgrep Academy, and community building, and more!

Tanya Janca Talks secure coding, Semgrep Academy, and community building, and more!

2024-06-0101:27:18

Managing messaging with management, becoming a CISO with Mary Gardner from Goldiknox

Managing messaging with management, becoming a CISO with Mary Gardner from Goldiknox

2024-04-0901:22:56

1st show of 2024! Our 10th Anniversary...

1st show of 2024! Our 10th Anniversary...

2024-01-0959:35

Brakesec Call to Action 2023

Brakesec Call to Action 2023

2023-12-1802:51

GPS car hacks, Google Threat report, notable topics of 2020, satellite threat modelling, twitter breach(?)

GPS car hacks, Google Threat report, notable topics of 2020, satellite threat modelling, twitter breach(?)

2023-01-1001:25:08

Josh Grossman - building Appsec programs, bridging security and developer gaps

Josh Grossman - building Appsec programs, bridging security and developer gaps

2024-04-1501:16:22

p2-accidentalCISO, building trust in new places

p2-accidentalCISO, building trust in new places

2024-02-1301:13:51

AccidentalCISO on BrakeSecEd, talking Leadership, SaaS development, and Appsec

AccidentalCISO on BrakeSecEd, talking Leadership, SaaS development, and Appsec

2024-02-0229:35

How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

2023-12-0401:19:11

25Oct - okta breached (again), Energy company hit by supply chain attack, and you can help hire the best people

25Oct - okta breached (again), Energy company hit by supply chain attack, and you can help hire the best people

2023-10-2645:53

Nicole Sundin - CPO at Axio - SEC compliance, usable security, setting up risk mgmt programs

Nicole Sundin - CPO at Axio - SEC compliance, usable security, setting up risk mgmt programs

2023-09-2301:06:08

John Aron, letters of marque, what does a "junior" job look like with AI?

John Aron, letters of marque, what does a "junior" job look like with AI?

2023-09-0301:25:21

Megan Roddie - co-author of "Practical Threat Detecion Engineering"

Megan Roddie - co-author of "Practical Threat Detecion Engineering"

2023-08-2501:46:53

meeting new people, walking on your keyboard causes issues, even google gets phone numbers wrong.

meeting new people, walking on your keyboard causes issues, even google gets phone numbers wrong.

2023-07-2101:20:11

Bsides Seattle and Austin, SecureBoot patch, and more

Bsides Seattle and Austin, SecureBoot patch, and more

2023-05-2701:12:36

lynsey wolf, conducting insider threat investigations, CASB and UEBA utlization to good use.

lynsey wolf, conducting insider threat investigations, CASB and UEBA utlization to good use.

2023-04-3001:34:09

3CX supply chain attack, Mark Russinovich and Sysinternals, CISA ransomware notifications, and emotional intelligence

3CX supply chain attack, Mark Russinovich and Sysinternals, CISA ransomware notifications, and emotional intelligence

2023-04-0801:24:50

Dish Network is still busted, John Deere avoiding OSS requests, Is DAST dead?

Dish Network is still busted, John Deere avoiding OSS requests, Is DAST dead?

2023-03-2401:29:37

Nickolas Means talks about Security, Devops velocity, blameless orgs, and conferences infosec should attend

Nickolas Means talks about Security, Devops velocity, blameless orgs, and conferences infosec should attend

2023-03-0401:14:50

SPECIAL INTERVIEW: John Aron and Jerod Brennen

SPECIAL INTERVIEW: John Aron and Jerod Brennen

2023-02-1001:21:10

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!

Brian Boettcher, Amanda Berlin, and Bryan Brake