CISSP Cyber Training Podcast - CISSP Training Program
autor: Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur
Nejnovější epizoda
CCT 378: Two Feeds, Full Backup, And The Generators Never Started…
CCT 378: Two Feeds, Full Backup, And The Generators Never Started…
O tomto podcastu
Join Shon Gerber on his weekly CISSP Cyber Training podcast, where his extensive 23-year background in cybersecurity shines through. With a rich history spanning corporate sectors, government roles, and academic positions, Shon imparts the essential insights and advice necessary to conquer the CISSP exam. His expertise is not just theoretical; as a CISSP credential holder since 2009, Shon translates his deep understanding into actionable training. Each episode is packed with invaluable security strategies and tips that you can implement right away, giving you an edge in the cybersecurity realm. Tune in and take the reins of your cybersecurity journey—let’s ride into excellence together! 🚀
Epizody
Nejnovějších 50 z 382 epizod
- CCT 378: Two Feeds, Full Backup, And The Generators Never Started (Domain 3) · 43 min · Řada 3 Epizoda 378Send us Fan Mail CISSP Domain 3.9 — design site and facility security controls, built on a real data center power failure where every control in the building worked and the…
- CCT 377: 155 Answers, Nobody Broke In, And The Control Nobody Named (Domain 2) · 43 min · Řada 3 Epizoda 377Send us Fan Mail CISSP Domain 2.6 — data security controls, compliance requirements, and the three states of data, built on an AI hosting exposure that encryption could never…
- CCT 376: Investigation Types and the Device Behind the Television (Domain 1) · 42 min · Řada 3 Epizoda 376Send us Fan Mail A company found a concealed recording device in the room where its executives meet. They pulled it, imaged it, reviewed the camera footage, went through the…
- CCT 375: The Malicious Workflow Was Already There (CISSP Domain 8.2) · 49 min · Řada 3 Epizoda 375Send us Fan Mail A “boring” GitHub Actions workflow file should never be able to empty your secrets vault, yet that is exactly what the Ghost Action campaign shows. We walk…
- CCT 374: They Had Backups, They Could Not Reach Them. (CISSP Domain 7.10) · 38 minSend us Fan Mail 495 organizations woke up and could not get to their servers. Railways. A prefectural police force. A food logistics company that could not receive or ship…
- CCT 373: An AI Agent Was Told No and Got In Anyway (CISSP Domain 6.2) · 37 min · Řada 3 Epizoda 373Send us Fan Mail An AI agent gets blocked by access controls, then calmly finds another way in anyway and that is the wake-up call. I use a recent Hacker News story about an…
- CCT 372: Stolen Sessions and Why MFA Never Saw Them (CISSP Domain 5.6) · 33 min · Řada 3 Epizoda 372Send us Fan Mail A stolen password is annoying. A stolen session token can be invisible, valid, and instantly profitable. Today we dig into a real warning sign from Okta threat…
- CCT 371: Secure Communication Channels and Who Is Really On Your Call (Domain 4.3) · 30 min · Řada 3 Epizoda 371Send us Fan Mail One video hotline feels like a single, simple conversation until you trace the call path and realise there may be seven companies involved in making it work…
- CCT 370: CISSP Cryptography, FIPS Validation, and Post-Quantum (Domain 3) · 39 min · Řada 3 Epizoda 370Send us Fan Mail A compliance deadline can change your security posture without changing a single bit of your encryption. We start with a simple sticker-on-the-windshield analogy…
- CCT 369: Security Models Demystified - CISSP Domain 3.2 (Replay of CCT 278) · 32 min · Řada 3 Epizoda 369Send us Fan Mail 🔁 REPLAY — this episode originally aired as CCT 278 in September 2025. I'm heads-down finishing a Domain 3 cryptography episode, so I'm re-running one of the…
- CCT 368: CISSP Asset Security and Data Classification (Domain 2) · 43 min · Řada 3 Epizoda 368Send us Fan Mail Nine million images. No password. No encryption. And the defence was basically: “It wasn’t public because you had to know the URL.” That single line opens up one…
- CCT 367: Threat Modeling and the AI Agent That Breached Hugging Face (CISSP Domain 1.10) · 43 min · Řada 3 Epizoda 367Send us Fan Mail A rogue AI agent didn’t “hack the future” so much as exploit the oldest security problems in the book: weak boundaries, over-trusted inputs, exposed endpoints…
- CCT 366: Software Supply Chain Security Explained — CISSP Domain 8 (ChainDrop Case Study) · 33 min · Řada 3 Epizoda 366Send us Fan Mail A supply chain attack that leaves your Git history spotless should change how you think about “secure code.” We walk through ChainDrop, a worm discovered in the…
- CCT 365: Malicious QR Code Attacks and Digital Forensics Techniques Every CISSP Should Know [REPLAY] · 25 min · Řada 3 Epizoda 365Send us Fan Mail One careless QR scan can quietly turn a “private” chat into a live wiretap. We start with a timely threat story: Russian APT-style actors abusing Signal’s linked…
- CCT 364: Third Party Risk Management - How One Vendor Breach Exposed 119,000 Users · 46 min · Řada 3 Epizoda 364Send us Fan Mail A breach can hit your headlines even when your own systems never get touched, and that’s exactly why third-party risk management keeps showing up on the CISSP…
- CCT 363: CISSP AI Governance - What Credit Union Examiners Are Really Asking · 45 min · Řada 3 Epizoda 363Send us Fan Mail One bad AI decision can cost you more than money. It can cost you trust, trigger regulators overnight, and put your name on the hook when the board asks, “Who…
- CCT 362: Security Assessment Strategies & Abandoned Cloud Storage Risks (CISSP 6.1) - REPLAY · 34 min · Řada 3 Epizoda 362Send us Fan Mail That forgotten cloud storage you stopped thinking about months ago can become a real attack path today. We start with a simple but dangerous scenario: abandoned…
- CCT 361: Bad Epoll - Root Access in 6 Instructions · 32 min · Řada 3 Epizoda 361Send us Fan Mail A six-instruction timing glitch in the Linux kernel can be the difference between “low-priv user” and full root control, and that is why we dig into the Bad…
- CCT 360: SSA Whistleblower and the Thumb Drive: What CISSP Asset Security Tells Us About This Disaster · 23 min · Řada 3 Epizoda 360Send us Fan Mail Imagine hearing a claim that the most sensitive identity data in the United States could be sitting on a personal thumb drive. That allegation is still…
- CCT 359: ShinyHunters vs. Oracle — Supply Chain Risk Every CISSP Must Know · 43 min · Řada 3 Epizoda 359Send us Fan Mail A vendor gets breached and suddenly your perimeter does not matter, because the attacker does not need to “hack” you. They just reuse the access you already…
- CCT 358: EDR Bypass Ransomware: The Gentle Killer Threat Every CISSP Must Know · 43 min · Řada 3 Epizoda 358Send us Fan Mail Your endpoint tool can be world class and still get taken out first. That’s the unsettling reality behind a new wave of “EDR killer” capabilities being packaged…
- CCT 357: Is Your Encrypted Data Already Stolen? Quantum Risk & Supply Chain Attacks for CISSP · 32 min · Řada 3 Epizoda 357Send us Fan Mail Someone is stealing encrypted data right now and they are not trying to read it today. They are saving it for later, betting that quantum computing will…
- CCT 356: Supply Chain Attacks Are Exploding in 2026 — Here's What the NCSC Wants You to Do · 42 min · Řada 3 Epizoda 356Send us Fan Mail Your software is only as trustworthy as the dependencies you quietly inherit and attackers know it. Today I break down the NCSC warning on software supply chain…
- CCT 355: Zapier Breach Lessons For Cloud Security and Setting Up TPRM Program in 15 Minutes · 24 min · Řada 3 Epizoda 355Send us Fan Mail The breach that takes down a company often does not kick in the front door. It walks in through a “simple” integration you set up months ago, powered by a token…
- CCT 354: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · 37 min · Řada 3 Epizoda 354Send us Fan Mail Your firewall can be patched tomorrow, but what about the place your system hides its real secrets today? We start with a timely warning about a serious Fortinet…
- CCT 353: AI Agent Governance Essentials - CISSP Practice Questions · 28 min · Řada 3 Epizoda 353Send us Fan Mail AI agents are landing in production faster than most security teams can track them, and the scariest part is how normal they can look. When an autonomous agent…
- CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · 40 min · Řada 3 Epizoda 352Send us Fan Mail Your security program can be airtight and still get wrecked by someone else’s breach. We open with a Wired-style reality check: third-party app ecosystems and…
- CCT351: BitLocker Bypass Reality Check (YellowKey) and CISSP Practice Questions · 24 min · Řada 3 Epizoda 351Send us Fan Mail BitLocker feels like a safety net until you see how a single bypass can change the whole risk picture. Today we react to the Yellow Key vulnerability (noted in…
- CCT 350: Investigation Types Made Simple - CISSP Training (Replay) · 45 min · Řada 3 Epizoda 350Send us Fan Mail Default passwords are the kind of problem everyone “knows” about and yet they still open doors for attackers every day. We start with a quick reality check on…
- CCT 349: FOXCONN Hack and Domain 7 CISSP Practice Questions · 28 min · Řada 3 Epizoda 349Send us Fan Mail Eight terabytes of stolen schematics is not just a scary number, it is a reminder that cyber risk becomes business risk fast. We start with the Wired report on…
- CCT Vendor 04: The Practical Realities of Geopolitical Cyber Risk - Next Peak Interview · 28 minSend us Fan Mail Next Peak: https://nextpeak.net/services/icr/ A regional conflict can spike your cyber risk even if your offices never move and your headcount never changes…
- CCT 348: ClaudeBleed - The Hidden Risk In AI Browser Extensions and CISSP Domain 3 · 34 min · Řada 3 Epizoda 348Send us Fan Mail Your browser just became a security boundary you can’t afford to ignore. We start with ClaudeBleed, a vulnerability in the Claude AI Chrome extension that shows…
- CCT 347: AI Poisoning the Quiet Enterprise Threats and CISSP Questions (Domain 1) · 28 min · Řada 3 Epizoda 346Send us Fan Mail Quiet failures are the ones that scare me most, and enterprise AI creates a brand-new way for them to spread. If a chatbot becomes the “trusted employee”…
- CCT 346: Testing Disaster Recovery Plans and Why BEC Still Works Despite MFA (CISSP Domain 7) · 27 min · Řada 3 Epizoda 346Send us Fan Mail MFA feels like the finish line until you watch a company wire tens of millions of dollars to an attacker without a single password being stolen. We dig into why…
- CCT 345: Practice CISSP Questions - Domain 8.4 (Replay) · 23 min · Řada 3 Epizoda 345Send us Fan Mail A single compromised identity can turn your whole environment into a hallway of unlocked doors and cross-domain attacks are built to exploit exactly that. We…
- CCT 344: Trigona RaaS - CISSP 3.7 Crypto - Board Translation Framework (Segment 3) · 36 min · Řada 3 Epizoda 343Send us Fan Mail Ransomware actors are getting quieter, faster, and more custom and that should change how you study for the CISSP and how you defend your environment. We start…
- CCT 343: Microsoft Defender - CISSP EOL-EOS (Part 2) - Board Translation (Segment 2) · 31 min · Řada 3 Epizoda 343Send us Fan Mail Three Microsoft Defender zero-days are reportedly being exploited, and that is the kind of headline that tests whether our security program is real or just…
- CCT 342: US Govt and Mythos - CISSP EOL-EOS (Part 1) - Board Translation (Segment 1) · 38 min · Řada 3 Epizoda 342Send us Fan Mail The next wave of AI in cybersecurity is not a theory project, it’s an operational deadline. I open with a timely look at reporting that the White House wants…
- CCT 341: Deepfake Nudify (Wired) - CISSP Exam Practice Test (Deep Dive) · 31 min · Řada 3 Epizoda 341Send us Fan Mail AI didn’t just make deepfakes easier. It made targeted sexual abuse scalable. I open with a Wired-reported reality that’s hitting schools worldwide: AI tools…
- CCT 340: Anthropic Mythos - Risk Management Concepts (Domain 1.10) · 41 min · Řada 3 Epizoda 340Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 339: Infrastructure Insider - Cyber Career Roadmap - No One is Talking About · 27 min · Řada 3 Epizoda 339Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 338: LinkedIn Monitoring - Support for Patch and Vulnerability Management (Domain 7) · 24 min · Řada 3 Epizoda 338Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 337: UK Manufacture Attacks - CISSP Deep Dive (Domain 4) · 33 min · Řada 3 Epizoda 337Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 336 - Cyber Niche's and Submitting CPEs · 26 min · Řada 3 Epizoda 336Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 335: Indian CCTV and CISSP Question Deep Dive (Domain 3) · 21 min · Řada 3 Epizoda 337Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 334: CISA and Stryker Attack and AI GRC Foundational Concepts · 29 min · Řada 3 Epizoda 334Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 333: Patch Or Get Hacked (iPhones) - CISSP Questions Deep Dive (Domain 2) · 31 min · Řada 3 Epizoda 333Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 332: A Winning CISO/CSO and AI Changing Cyber Forever (Career Planning) · 34 min · Řada 3 Epizoda 332Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 331: AI And Cyber Insurance Risk & CISSP Deep Dive Questions (Domain 1) · 27 min · Řada 3 Epizoda 331Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
- CCT 330: SOC Preparation for Agentic AI Plus Five Skills For Bigger Cyber Security Paychecks · 33 min · Řada 3 Epizoda 330Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get…
