Technical Resources

Video Tutorials

The holidays bring joy, celebration and unfortunately, hackers who never take time off. This video explores three major cybersecurity risks during the holiday season and how to protect yourself and your family. From toy drop scams targeting eager parents to smartwatch security vulnerabilities and home Wi-Fi risks during gatherings, we cover practical steps you can take to keep your celebrations scam-free. Learn how to spot fake vendor sites, secure your wearable devices, and protect your guests when they connect to your home network. 0:00 - Intro: Hackers don't take holidays off 0:20 - Holiday toy scams and livestream drops 1:15 - How to avoid toy purchasing scams 1:45 - Smartwatch security risks 2:35 - Protecting your smartwatch from hackers 3:05 - Securing your home Wi-Fi for holiday gatherings 4:00 - Tips for keeping your network safe 4:30 - Wrap up: Stay cyber-safe this season About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Avoid getting hacked during the holidays with these 3 critical tips!
Master AI security: Inside ISACA's new AAISM certification for security leaders! 1 in 4 CISOs has faced an AI-generated attack this year. Even worse, 63% of breached organizations had no AI policies — costing U.S. companies an average of $10.2M per attack. ISACA’s Advanced in AI Security Management (AAISM) certification helps CISM and CISSP holders govern, assess, and secure AI at the enterprise level. Organizations with strong AI security save $1.9M in breach costs — and AAISM gives you the skills to make that happen. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
All your AI governance questions, answered!
Master AI security: Inside ISACA's new AAISM certification for security leaders! 1 in 4 CISOs has faced an AI-generated attack this year. Even worse, 63% of breached organizations had no AI policies — costing U.S. companies an average of $10.2M per attack. ISACA’s Advanced in AI Security Management (AAISM) certification helps CISM and CISSP holders govern, assess, and secure AI at the enterprise level. Organizations with strong AI security save $1.9M in breach costs — and AAISM gives you the skills to make that happen. About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
3 things to know about ISACA's new AAISM AI certification
— Access the free Infosec Skills lab environment: https://app.infosecinstitute.com/portal/skills/content/asset/lab/40363?utm_source=youtube&utm_medium=video&utm_campaign=ai+workshop — Save $250 on your Generative and Agentic AI for Cybersecurity Professionals Boot Camp through 2025: https://www.infosecinstitute.com/courses/generative-agentic-ai-cybersecurity-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=ai+workshop Learn how to train your first cybersecurity AI model in this comprehensive 90-minute workshop with Keatron Evans, 20-year cybersecurity veteran and VP of Portfolio Product and AI Strategy at Infosec. This hands-on session walks you through building an anomaly detection model from scratch using real attack data, preparing you for the future of cybersecurity where AI skills are essential. Keatron demonstrates how to transform raw network traffic data into a trained machine learning model that can detect cyber threats — all while making it accessible for cybersecurity professionals without extensive Python experience. You'll see exactly how to prepare data, train models, fine-tune results, and integrate your model with security tools like SIMs. 0:00 - Introduction and workshop overview 2:30 - Why AI skills matter for cybersecurity professionals 5:00 - Accessing the free lab environment 6:20 - Setting up your Python and Jupyter Notebook environment 12:30 - Loading and preparing the KDD Cup dataset 20:00 - Encoding categorical variables for machine learning 29:00 - Traditional vs. agent-driven model training 42:00 - Training your first anomaly detection model 54:00 - Fine-tuning and hyperparameter optimization 1:03:00 - Visualizing training results 1:06:50 - Overview of the Generative and Agentic AI Boot Camp 1:11:00 - Integrating your model with security tools 1:14:30 - Q&A from audience Key takeaways you'll get from this workshop: – Hands-on training with real attack data using the KDD Cup dataset – Step-by-step process for data preparation and model training – Introduction to agentic AI frameworks that automate model fine-tuning – Best practices for keeping training data secure and offline – How to integrate trained models with existing security tools – Prerequisites and learning path for mastering AI in cybersecurity About the new Generative and Agentic AI for Cybersecurity Professionals Boot Camp This workshop features content from Infosec's new Generative and Agentic AI for Cybersecurity Professionals boot camp, launching December 2025. The full bootcamp includes dozens of hands-on labs covering advanced topics like RAG implementation, LLM vulnerability exploitation, malware detection models, and securing AI deployments. About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
Agentic AI workshop: Train your first cybersecurity model in 90 minutes | Free Training and Lab
— Watch the free, interactive Cybersecurity and AI workshop: https://www.youtube.com/watch?v=rufpv4tWS8w — Register for the Generative and Agentic AI for Cybersecurity Professionals Bootcamp: https://www.infosecinstitute.com/courses/generative-agentic-ai-cybersecurity-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=teaser For 20 years, Infosec Institute and Keatron Evans have guided cybersecurity professionals through major technology shifts. First cloud, now AI. Keatron's message. Don't ask yourself "Is AI going to replace my job?" Instead, get ahead of it. Infosec's new 5-day intensive Generative and Agentic AI for Cybersecurity Professionals Boot Camp gives you hands-on experience with the AI skills that will define the next era of cybersecurity. You'll learn to fine-tune models, build AI agents, and integrate generative AI into real-world security operations. What you'll learn: - Fine-tuning AI models for threat detection - Building and deploying AI agents for security automation - Implementing generative AI in cybersecurity workflows - Hands-on labs with real attack data and security tools - How to secure your career by mastering AI + cyber skills Don't let AI anxiety hold you back. Join the professionals who are shaping the future of cybersecurity. About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
New AI Boot Camp for Cybersecurity Professionals | Keatron Evans
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
The Dark Side of AI: Scams, Lies, and Government Sabotage
— Learn about ISACA AAISM training: https://www.infosecinstitute.com/courses/aaism-boot-camp/?utm_source=youtube&utm_medium=video&utm_campaign=aaism — View course dates: https://www.infosecinstitute.com/courses/schedule/?Boot%20camps=ISACA+Advanced+in+AI+Security+Management+(AAISM)+Training+Boot+Camp&utm_source=youtube&utm_medium=video&utm_campaign=aaism — Download ISACA AI Policy Template: https://www.infosecinstitute.com/globalassets/downloads/isaca-ai-acceptable-use-policy.pdf One in four CISOs has already experienced an AI-generated attack this year. Even more concerning? IBM's 2025 research found 63% of breached organizations had no AI policies in place — leaving them exposed to attacks that now cost U.S. organizations an average of $10.2 million. Enter ISACA's Advanced in AI Security Management (AAISM) certification, the industry's answer to the AI security governance problem. Designed exclusively for CISM and CISSP holders, AAISM validates your ability to govern, assess and secure AI implementations at the enterprise level. Organizations with extensive AI security measures save $1.9 million in breach costs compared to those without — and this certification equips you to build that protection. Join Kirsten Lora, VP Product at ISACA, and Keatron Evans, VP of Portfolio Product and AI Strategy at Infosec, to learn: 0:00 - Introduction: AI security challenges and adoption stats 3:45 - Poll: Do you have CISM or CISSP certification? 4:21 - Why CISM or CISSP is required for AAISM 5:40 - Deep dive: ISACA's new AAISM certification explained 9:09 - Three domains covered in the certification 12:18 - The 63% problem: Organizations without AI policies 14:55 - Building AI policies: Getting stakeholders involved 16:41 - Download: Free ISACA AI policy template 17:09 - Leadership pressure: Moving fast vs. security governance 21:01 - New AI risks and how to approach them differently 23:32 - First steps: Building an AI governance program 25:21 - AI skills: Does your team need an AI specialist? 26:30 - Career paths: New opportunities in AI security 29:00 - Infosec's AAISM training program overview 32:00 - Q&A: Use cases for selling AI governance to leadership 33:09 - Real-world threats: Deepfakes, phishing, and exploit development 35:20 - Technical background needed for AAISM 37:06 - What makes Infosec's training different 39:31 - Final thoughts on AI security management's importance About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
ISACA's New AI Security Certification: Is It Worth It? | Keatron Evans & Kirsten Lora
About Infosec Infosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.
Shocking statistics: Cybersecurity crisis in K12 schools!
— Get your free toolkit: https://www.infosecinstitute.com/form/digital-detective-campaign-kit/?utm_source=youtube&utm_medium=video&utm_campaign=cam Dive into the alarming rise of AI-enabled cyber attacks, including the jaw-dropping $25.6 million deepfake scam that fooled a finance worker in Hong Kong. Learn how criminals are using AI to create convincing video calls, voice clones and fake content to infiltrate organizations. This webinar arms you with practical detection techniques and introduces Infosec's free Digital Detective Toolkit — perfect for Cybersecurity Awareness Month and beyond. Featuring insights from cybersecurity expert Keatron Evans, you'll discover the telltale signs of AI-generated videos, audio, images and text that could save your organization from devastating losses. — More free security awareness resources: https://www.infosecinstitute.com/resources/?utm_source=youtube&utm_medium=video&utm_campaign=cam — Speak to someone about security awareness training: https://www.infosecinstitute.com/form/iq-demo/?utm_source=youtube&utm_medium=video&utm_campaign=cam 0:00 - Introduction and the $25.6M deepfake story 2:32 - Recent AI attack examples (Pin Drop Security, Ferrari, FBI warnings) 5:18 - AI threat statistics and audience poll 7:11 - How organizations are being targeted 8:37 - Digital Detective Toolkit overview 10:04 - Video: 4 types of AI detection 14:32 - Toolkit resources breakdown 17:00 - Interactive AI detection challenge 21:00 - Program plan and implementation strategies 26:00 - What makes AI attacks successful 28:06 - Infosec IQ platform features 32:21 - Budget and ROI for security awareness 35:00 - Phishing and AI's impact on attack vectors 36:49 - Engagement strategies for awareness programs 38:49 - Getting started with security awareness 40:19 - Wrap up and resources About Infosec Infosec's mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ's security awareness training. Learn more at infosecinstitute.com.
Detecting AI Deception: How to Identify Deepfakes, Voice clones & AI Scams | Free Toolkit
Subscribe
Speaker Bio(s) Doug Burks started Security Onion in 2008 to provide a comprehensive platform to help folks peel back the layers of their enterprise and make their adversaries cry. Today, Security Onion has over 2,000,000 downloads and is being used by organizations around the world for threat hunting, enterprise security monitoring, and log management. In 2014, Doug started Security Onion Solutions LLC to help those organizations by providing training, professional services, and hardware appliances. Doug is a CEO, public speaker, teacher, former president of the Greater Augusta ISSA, and co-founder of BSides Augusta, but what he really likes the most is catching bad guys.
State of the Onion – You Can Just Do Things
Suricata developer Jeff Lucovsky shares all the latest and greatest features of Suricata 8
Suricata 8
In the Fall semester of 2023, I began teaching a new Cybersecurity Operations course in the graduate program at Canisius University. My goal was simple - to give students exposure to both the high-level concepts and hands-on skills that they would need to be successful blue teamers after they graduate. This talk is about how I integrated Security Onion into the class as a teaching platform to provide that experience in detection engineering, alert investigation, threat hunting, and more. Speaker Bio(s) Matthew Gracie is a defensive security specialist with fifteen years of Blue Team experience in higher education, manufacturing, financial services, and healthcare. He is currently a Senior Engineer at Security Onion Solutions, as well as an adjunct professor of Cybersecurity in the graduate school at Canisius University. Matt is also the lead organizer of Infosec 716, a monthly meetup for security enthusiasts in Western New York, and the BSides Buffalo technology conference. He enjoys good beer, mountain bikes, open source security tools, and college hockey, and can be found on Bluesky as @InfosecGoon.
Security Onion as a Teaching Platform
An informal review of recent developments in Security Onion since the last conference in 2023. Speaker Bio(s) Matthew Gracie is a defensive security specialist with fifteen years of Blue Team experience in higher education, manufacturing, financial services, and healthcare. He is currently a Senior Engineer at Security Onion Solutions, as well as an adjunct professor of Cybersecurity in the graduate school at Canisius University. Matt is also the lead organizer of Infosec 716, a monthly meetup for security enthusiasts in Western New York, and the BSides Buffalo technology conference. He enjoys good beer, mountain bikes, open source security tools, and college hockey, and can be found on Bluesky as @InfosecGoon.
Security Onion: What's New?
Investigation playbooks should never be used to replace or restrict human analysts completely, but they can augment analysts by helping them overcome the limitations of their memory, generate new ideas for specific investigation scenarios, minimize the limitations of their intuition, and consolidate individual knowledge. In this talk, we'll introduce a new framework and standard for creating Human-Centered Investigation Playbooks. The goal for these playbooks is simple: provide a structure for documenting investigative playbooks that is flexible, intuitive, and genuinely helpful to human analysts during incident investigation and response. Chris Sanders will begin by unpacking the theory behind this human-centered approach, grounded in cognitive science and investigative reasoning. You'll learn how traditional playbooks fall short, and how cognitive playbooks can improve decision-making, reduce analyst fatigue, and enable consistent, high-quality outcomes. After that, Josh Brower will demonstrate how this model has been integrated into Security Onion, showing off the new Guided Analysis feature that was recently released. He'll walk through a real-world example of a detection scenario using a playbook built into the platform, highlighting how the tool empowers analysts to make informed choices. Finally, we'll wrap up by describing some best practices for creating playbooks as an educational exercise with a practical outcome. Analysts, SOC leaders, and tool builders should walk away from this talk with a better understanding of how to effectively use investigative playbooks, and a few tools for helping them along that path. Speaker Bio(s) Dr. Chris Sanders is an information security instructor, author, and researcher focused on the intersection of cyber security, education, and cognitive psychology where he studies security analyst cognition and performance. He is the founder of Applied Network Defense, a cyber security training company, and Executive Director of the Rural Technology Fund, a non-profit that provides technology education resources to rural public schools and libraries. In previous roles, Chris worked with the US Department of Defense, InGuardians, and Mandiant. He is the author of several information security books, including Intrusion Detection Honeypots, Applied Network Security Monitoring, and Practical Packet Analysis. Chris received his doctorate in education from Baylor University. He spends his free time building things from wood and studying space rocks. Josh Brower has been crashing computers since his teens, and now he's fortunate enough to do it professionally as a Principal Engineer at Security Onion Solutions. With 17 years in Information Security, he focuses primarily on network and endpoint detection, helping defenders stay one step ahead of attackers. He's also passionate about making security more accessible, especially for non-technical audiences. Whether it's explaining how digital actions have real-world consequences or sharing practical ways to reduce risk, Josh enjoys helping others navigate the digital world more safely.
Investigation Playbooks for Humans
In this video, we'll take a sneak peek at the new Playbooks feature coming in Security Onion 2.4.160! Playbooks will turbocharge your analysis and incident response! If you have words of encouragement for the Security Onion team, please comment below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! Security Onion 2.4.160 is now available! https://blog.securityonion.net/2025/06/security-onion-24160-now-available.html 00:00 Introduction 00:51 Playbooks in SOC Alerts 10:23 Playbooks in SOC Detections 11:05 Outro
Sneak Peek: Security Onion Playbooks
In this video, we discuss the Notifications feature in Security Onion Pro. If you have words of encouragement for the Security Onion team, please comment below. If you have questions or problems, please start a new discussion at https://securityonion.net/discuss. Thanks! 00:00 Introduction 00:45 ElastAlert 01:16 ElastAlert Configuration 02:17 SOC Configuration 05:14 Applying Configuration 05:55 Notifications for Suricata Alerts 07:05 Example of notifications with all fields 08:02 Example of notifications with select fields 09:00 For More Information 09:39 Outro
Security Onion Pro Notifications
In this video, we'll discuss Index Lifecycle Management (ILM) in Security Onion 2.4. If you have words of encouragement to share with the Security Onion team, please post them in the comments below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! 00:00 Introduction to Index Lifecycle Management (ILM) 00:45 What is ILM? 03:00 What are the defaults for ILM? 05:26 Is there a safety net? 07:16 Demonstration 15:24 For More Information
Index Lifecycle Management in Security Onion
In this video, we'll go through an introduction to Security Onion 2.4 including a demo of some of its most powerful features! If you have words of encouragement to share with the Security Onion team, please post them in the comments below. If you have questions or problems, please start a new discussion at https://securityonion.com/discuss. Thanks! 00:00 Introduction 00:43 What is Security Onion? 01:33 Sample Architecture 02:34 Network Traffic Ingestion 04:21 Log File Ingestion 05:54 Analysis Tools 09:15 Installation Options 10:49 Deployment Options 12:33 Security Onion Pro 13:20 Demonstration 51:01 For More Information
Introduction to Security Onion 2.4
Subscribe
Apple and Google issue emergency updates to patch zero-days.  Google links five additional Chinese state-backed hacking groups to “React2Shell.” France’s Ministry of the Interior was hit by a cyberattack. Atlassian patches roughly 30 third-party vulnerabilities. Microsoft says its December 2025 Patch Tuesday updates are breaking Message Queuing. Researchers uncovered a massive exposed database with nearly 4.3 billion professional records openly accessible online. Britain’s new MI6 chief warns of an “aggressive, expansionist, and revisionist” Russia. Monday Business Brief. On today’s Threat Vector, ⁠Michael Heller⁠ from Unit 42 chats with security leaders ⁠Greg Conti⁠ and ⁠Tom Cross⁠ to unpack the hacker mindset and the idea of “dark capabilities”. A cyber holiday gift guide for the rest of us.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . Threat Vector Segment In this segment of Threat Vector, host ⁠Michael Heller⁠ (https://www.linkedin.com/in/mtheller) , Managing Editor for Cortex and Unit 42 and Executive Producer of the podcast, sits down with long-time security leaders ⁠Greg Conti⁠ (https://www.linkedin.com/in/greg-conti-7a8521?utm_source=chatgpt.com) and ⁠Tom Cross⁠ (https://www.linkedin.com/in/tom-cross-71455?utm_source=chatgpt.com) to unpack the hacker mindset and the idea of “dark capabilities” inside modern technology companies. You can listen to their full discussion here (https://www.thecyberwire.com/podcasts/threat-vector/97/notes) . Be sure to catch new episodes of Threat Vector by Palo Alto Networks every Thursday on your favorite podcast app. Selected Reading Apple, Google forced to issue emergency 0-day patches (https://www.theregister.com/2025/12/15/apple_follows_google_by_emergency/) (The Register) Google links more Chinese hacking groups to React2Shell attacks (https://www.bleepingcomputer.com/news/security/google-links-more-chinese-hacking-groups-to-react2shell-attacks/) (Bleeping Computer) French Interior Ministry confirms cyberattack on email servers (https://www.bleepingcomputer.com/news/security/france-interior-ministry-confirms-cyberattack-on-email-servers/) (Bleeping Computer) Atlassian Patches Critical Apache Tika Flaw (https://www.securityweek.com/atlassian-patches-critical-apache-tika-flaw/) (SecurityWeek) Microsoft: December security updates cause Message Queuing failures (https://www.bleepingcomputer.com/news/microsoft/microsoft-december-security-updates-cause-message-queuing-failures/) (Bleeping Computer) 16TB of MongoDB Database Exposes 4.3 Billion Lead Gen Records (https://hackread.com/mongodb-database-expose-lead-gen-records/) (Hackread) MI6 chief warns 'front line is everywhere' and signals intent to pressure Putin (https://therecord.media/mi6-chief-speech-russia-threats-warning) (The Record) Saviynt raises $700 million in Series B growth equity financing. (https://thecyberwire.com/newsletters/business-briefing/7/49) (The CyberWire Business Brief) Last-minute cybersecurity and privacy gifts your friends and family won't hate (https://this.weekinsecurity.com/last-minute-cybersecurity-and-privacy-gifts-that-your-friends-and-family-will-not-hate/) (This Week In Security) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Another day, another emergency patch.
Starfish Space has successfully completed an autonomous rendezvous and proximity operations (RPO) mission in low Earth orbit with Impulse Space. Rocket Lab has marked a milestone with the successful deployment of its first dedicated launch for JAXA. Mission Space has announced its intention to launch its second on-orbit payload with Rogue Space Systems, and more. Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on LinkedIn (https://www.linkedin.com/company/n2k-space/) and Instagram (https://www.instagram.com/n2kspace/) . T-Minus Guest Our guest today is Patrick O'Neill, Public Affairs and Outreach Lead at the International Space Station US National Laboratory. You can connect with Patrick on LinkedIn (https://www.linkedin.com/in/patrick-o-neill-93251617/) , and learn more about the ISS National Lab on their website (https://issnationallab.org/) . Selected Reading Starfish Space Completes Autonomous Rendezvous and Proximity Mission in LEO with Impulse Space (https://www.globenewswire.com/news-release/2025/12/15/3205493/0/en/Starfish-Space-Completes-Autonomous-Rendezvous-and-Proximity-Mission-in-LEO-with-Impulse-Space.html?_gl=1*1pkudvx*_up*MQ..*_ga*ODYwNTQwNjA3LjE3NjU4MDkyMjg.*_ga_ERWPGTJ5X8*czE3NjU4MDkyMjckbzEkZzAkdDE3NjU4MDkyMjckajYwJGwwJGgw) Mission Success: Rocket Lab Deploys First Dedicated Launch for Japan Aerospace Exploration Agency (JAXA) (https://rocketlabcorp.com/updates/f77-mission-success-jaxa/) Mission Space and Rogue Space Announce Launch of Mission Space's Second In-Orbit Payload (https://www.prnewswire.com/news-releases/mission-space-and-rogue-space-announce-launch-of-mission-spaces-second-in-orbit-payload-302640278.html) Virgin Galactic Partners with Lawrence Livermore National Laboratory to Advance High-Altitude Image-Capture Technology (https://www.businesswire.com/news/home/20251215712713/en/Virgin-Galactic-Partners-with-Lawrence-Livermore-National-Laboratory-to-Advance-High-Altitude-Image-Capture-Technology) Space Force will not partner with NRO for next-generation surveillance satellites (https://breakingdefense.com/2025/12/space-force-will-not-partner-with-nro-for-next-generation-surveillance-satellites/) 'Fiddler on the Moon' documentary explores how Judaism might adapt as humanity reaches out into space (https://www.space.com/space-exploration/fiddler-on-the-moon-documentary-explores-how-judaism-might-adapt-as-humanity-reaches-out-into-space) Share your feedback. What do you think about T-Minus Space Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NJYCN2P) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at space@n2k.com (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to space-editor@n2k.com (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Starfish Space completes an autonomous RPO in LEO.
Please enjoy this encore of Career Notes. Chief security officer and chief information officer at Relativity, Amanda Fennell shares her story from archeology to cybersecurity. She shares the path that lead her towards becoming an archeologist and how it turned out not being exactly what she expected. She then shares how she got into the cyber business and how her past has impacted what she's doing now. She describes how she would like to be remembered in the cyber world, she says "I do hope that I left things better than I found them, not just the security of a product or a company, but I believe strongly that every person has a little cyber warrior inside of them." We thank Amanda for sharing her story. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Amanda Fennell: There's a cyber warrior in all of us [Information] [Career Notes]
Please enjoy this encore of Career Notes. Chief security officer and chief information officer at Relativity, Amanda Fennell shares her story from archeology to cybersecurity. She shares the path that lead her towards becoming an archeologist and how it turned out not being exactly what she expected. She then shares how she got into the cyber business and how her past has impacted what she's doing now. She describes how she would like to be remembered in the cyber world, she says "I do hope that I left things better than I found them, not just the security of a product or a company, but I believe strongly that every person has a little cyber warrior inside of them." We thank Amanda for sharing her story. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Amanda Fennell: There's a cyber warrior in all of us [Information]
Daniel Schwalbe (https://www.linkedin.com/in/schwalbe/) , DomainTools (https://www.linkedin.com/company/domaintools/) Head of Investigations and CISO, is sharing their work on "Inside the Great Firewall." This two-part research project analyzes an extraordinary 500–600GB leak that exposes the internal architecture, tooling, and human ecosystem behind China’s Great Firewall. Across both parts, you break down thousands of leaked documents, source code repositories, diagrams, packet captures, and telemetry that reveal how systems like the Traffic Secure Gateway, MAAT, Redis-based analytics, and modular DPI engines work together to censor, surveil, and fingerprint users at scale. Taken together, the research shows how the Great Firewall functions not just as a technical system, but as a living censorship-industrial complex that adapts, learns, and coordinates across government, telecoms, and security vendors. The research can be found here: • Inside the Great Firewall Part 1: The Dump (https://dti.domaintools.com/inside-the-great-firewall-part-1-the-dump/) • Inside the Great Firewall Part 2: Technical Infrastructure (https://dti.domaintools.com/inside-the-great-firewall-part-2-technical-infrastructure/) Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Root access to the great firewall. [Research Saturday]
Canadian Space Mining Corporation (CSMC) is focused on lunar nuclear power and next-generation quantum sensing. We spoke to Daniel Sax, founder and CEO of CSMC, about how CSMC evolved from lunar exploration into developing micro-reactors for the Moon and the Arctic, as well as quantum gravity sensors that could transform subsurface mapping for both Earth and planetary science.  You can connect with Daniel on LinkedIn (https://www.linkedin.com/in/danielsax/) , and learn more about CSMC on their website (https://csmc-scms.ca/) .  Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on LinkedIn (https://www.linkedin.com/company/n2k-space/) and Instagram (https://www.instagram.com/n2kspace/) . Share your feedback. What do you think about T-Minus Space Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NJYCN2P) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at space@n2k.com (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to space-editor@n2k.com (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Lunar nuclear power and next-generation quantum sensing.
Daniel Schwalbe (https://www.linkedin.com/in/schwalbe/) , DomainTools (https://www.linkedin.com/company/domaintools/) Head of Investigations and CISO, is sharing their work on "Inside the Great Firewall." This two-part research project analyzes an extraordinary 500–600GB leak that exposes the internal architecture, tooling, and human ecosystem behind China’s Great Firewall. Across both parts, you break down thousands of leaked documents, source code repositories, diagrams, packet captures, and telemetry that reveal how systems like the Traffic Secure Gateway, MAAT, Redis-based analytics, and modular DPI engines work together to censor, surveil, and fingerprint users at scale. Taken together, the research shows how the Great Firewall functions not just as a technical system, but as a living censorship-industrial complex that adapts, learns, and coordinates across government, telecoms, and security vendors. The research can be found here: • Inside the Great Firewall Part 1: The Dump (https://dti.domaintools.com/inside-the-great-firewall-part-1-the-dump/) • Inside the Great Firewall Part 2: Technical Infrastructure (https://dti.domaintools.com/inside-the-great-firewall-part-2-technical-infrastructure/) Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
Root access to the great firewall.
A new executive order targets states’ AI regulations, while the White House shifts course on an NSA deputy director pick. The UK fines LastPass over inadequate security measures. Researchers warn of active attacks against Gladinet CentreStack instances. OpenAI outlines future cybersecurity plans. MITRE ranks the top 25 vulnerabilities of 2025. CISA orders U.S. federal agencies to urgently patch a critical GeoServer vulnerability. An anti-piracy coalition shuts down one of India’s most popular illegal streaming services. Our guest Mark Lance, Vice President, DFIR & Threat Intelligence, GuidePoint Security, unpacks purple team table top exercises to prepare for AI-generated attacks. Hackers set their sights on DNA. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing (https://thecyberwire.com/newsletters/daily-briefing) , and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn (https://www.linkedin.com/company/10454826/admin/feed/posts/) . CyberWire Guest Mark Lance (https://www.linkedin.com/in/mark-lance-9594234/) , Vice President, DFIR & Threat Intelligence, GuidePoint Security (https://www.linkedin.com/company/guidepointsec/) , is discussing purple team table top exercises to prepare for AI-generated attacks. Selected Reading Trump Signs Executive Order to Block State AI Regulations (https://www.securityweek.com/trump-signs-executive-order-to-block-state-ai-regulations/) (SecurityWeek) Announced pick for No. 2 at NSA won’t get the job as another candidate surfaces (https://therecord.media/announced-nsa-deputy-director-pick-joe-francescon-not-taking-job) (The Record) LastPass Data Breach — Insufficient Security Exposed 1.6 Million Users (https://www.forbes.com/sites/daveywinder/2025/12/12/lastpass-data-breach---insufficient-security-exposed-16-million-users/) (Forbes) Gladinet CentreStack Flaw Exploited to Hack Organizations (https://www.securityweek.com/gladinet-centrestack-flaw-exploited-to-hack-organizations/) (SecurityWeek) OpenAI lays out its plan for major advances in AI cybersecurity features (https://www.scworld.com/news/openai-outlines-plans-to-prepare-for-future-ai-cybersecurity-capabilities) (SC Media) MITRE Releases 2025 List of Top 25 Most Dangerous Software Vulnerabilities (https://www.securityweek.com/mitre-releases-2025-list-of-top-25-most-dangerous-software-vulnerabilities/) (SecurityWeek) CISA orders feds to patch actively exploited Geoserver flaw (https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-geoserver-flaw/) (Bleeping Computer) MKVCinemas streaming piracy service with 142M visits shuts down (https://www.bleepingcomputer.com/news/security/mkvcinemas-streaming-piracy-service-with-142m-visits-shuts-down/) (Bleeping Computer) The Unseen Threat: DNA as Malware (https://www.bankinfosecurity.com/blogs/unseen-threat-dna-as-malware-p-3993) (BankInfoSecurity) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NCFFCZJ) . Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com (http://sponsor.thecyberwire.com/) . The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
One rule to rule them all.
Lawmakers in the US have reintroduced a bipartisan bill to help commercial satellite owners and operators defend against growing cybersecurity threats to satellites. Satellite manufacturer K2 Space has raised  $250 million in Series C funding at a $3 billion valuation. Fortastra has emerged from stealth and has raised over $8 million in seed financing, and more. Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on LinkedIn (https://www.linkedin.com/company/n2k-space/) and Instagram (https://www.instagram.com/n2kspace/) . T-Minus Guest Elysia Segal (https://www.linkedin.com/in/elysiasegal/) brings us the Space Traffic Report from NASASpaceflight.com (http://nasaspaceflight.com) . Selected Reading Lawmakers revive satellite cybersecurity bill to shield commercial space systems from rising threats - Industrial Cyber (https://industrialcyber.co/regulation-standards-and-compliance/lawmakers-revive-satellite-cybersecurity-bill-to-shield-commercial-space-systems-from-rising-threats/) K2 Space Raises $250M at $3B Valuation to Roll Out a New Class of High-Capability Satellites (https://www.prnewswire.com/news-releases/k2-space-raises-250m-at-3b-valuation-to-roll-out-a-new-class-of-high-capability-satellites-302638936.html) Strength Among the Stars: Fortastra Emerges to Build Maneuverable Spacecraft for National Security (https://www.fortastra.com/fortastra-updates/fortastra-news-release) New Orders Signed With MBDA For Over 35m€- Avio (https://www.avio.com/press-release/new-orders-signed-mbda-over-35meu) NASA Selects Two Heliophysics Missions for Continued Development (https://www.nasa.gov/news-release/nasa-selects-two-heliophysics-missions-for-continued-development/) NASA JPL Unveils Rover Operations Center for Moon, Mars Missions (https://www.nasa.gov/missions/mars-2020-perseverance/perseverance-rover/nasa-jpl-unveils-rover-operations-center-for-moon-mars-missions/) Share your feedback. What do you think about T-Minus Space Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey (https://www.surveymonkey.com/r/NJYCN2P) . Thank you for helping us continue to improve our show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here’s our media kit (https://docsend.com/view/5ncb2vvpz2ntg95q) . Contact us at space@n2k.com (mailto:space@n2k.com) to request more info. Want to join us for an interview? Please send your pitch to space-editor@n2k.com (mailto:space-editor@n2k.com) and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices (https://megaphone.fm/adchoices)
From cyber threats to heavy-lift satellites.
Subscribe
Computer password inventor Fernando Corbato dies at 93, Serious Zoom security flaw could let websites hijack Mac cameras, Hackers' Operating System Kali Linux Released for Raspberry Pi 4, Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions, and 25 Million Android Phones Infected With Malware That ‘Hides In WhatsApp’.
Cyber Security News Ending July 14 2019 – Android users be afraid, be very afraid. ransomware
Beware! Playing Untrusted Videos On VLC Player Could Hack Your Computer, U.S. Government Announces Critical Warning For Microsoft Windows Users, Florida city to pay $600K ransom to hacker who seized computer systems weeks ago, Confirmed: NASA Has Been Hacked and US 'launched cyber-attack on Iran weapons systems'.
Cyber Security News Ending June 23 2019 – Cyber War?
Microsoft says mandatory password changing is “ancient and obsolete”, Apple Just Patched a Modem Bug That's Been in Macs Since 1999, Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions, Google confirms that advanced backdoor came preinstalled on Android devices, and Quest Diagnostics data breach: Nearly 12 million patients had personal info exposed.
Cyber Security News ending June 8 2019
A laptop filled with six of the world’s most dangerous viruses is on sale for more than $1 million, Why you should never use phone charging stations at airports, Google Stored G Suite Users' Passwords in Plain-Text for 14 Years, Snapchat Employees Reportedly Spied on Private Snaps, and In Baltimore and Beyond, a Stolen N.S.A. Tool Wreaks Havoc.
Memorial Day Cyber Security News 2019
The Trade Secret: Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers, Huawei has secret ‘backdoor’ into major European telecoms firm, spy agency reportedly says, Hackers breach Stack Overflow Q&A platform and compromise users' data, WhatsApp security breach may have targeted human rights groups, and What you need to know if you e-transfer money.
Cyber Security News Ending May 18 2019
How to stop Google from tracking web history, Baltimore City Hall Computer Network Infected With Ransomware Virus, Officials Say, Types of backup and five backup mistakes to avoid, Binance Security Breach Update, and Israel Neutralizes Cyber Attack by Blowing Up A Building With Hackers.
Cyber Security News Ending May 12 2019 Mothers Day Edition
Microsoft knows password-expiration policies are useless, Docker Hub Suffers a DataBreach, Asks Users to Reset Password, Over 23 million breached accounts used ‘123456’ as password, A 'Blockchain Bandit' Is Guessing Private Keys and Scoring Millions, and Fort Bragg Army cut power to thousands as cyber-attack test.
Cyber Security News ending April 27 2019
Experts: Breach at IT Outsourcing Giant Wipro, Don’t Acquire a Company Until You Evaluate Its Data Security, Microsoft reveals breachaffecting webmail users, Mueller Report Obama’s NSA Director Told U.S. CyberSecurity Team to “Stand Down” in Face of Russian Hackers, and CIA Offers Proof Huawei Has Been Funded By China's Military And Intelligence.
Cyber Security News ending April 21 2019
Mysterious safety-tampering malware infects a second critical infrastructure site, WikiLeaks Founder Julian Assange Arrested After Ecuador Withdraws Asylum, Samsung’s Galaxy S10 fingerprint sensor fooled by 3D printed fingerprint, Security Flaws in WPA3 Protocol Let Attackers Hack WiFi Password, and Secret Service agent inserted malware-infected USB drive into laptop.
Weekly Cyber Security News ending April 13 – From the Cyber Chronicle Cyber Security News Podcast
Subscribe