The Cyber Threat Perspective
autor: SecurIT360
Najnowszy odcinek
One Permission Away from Domain Takeover | Ep 201
One Permission Away from Domain Takeover | Ep 201
O tym podcaście
Step into the ever-evolving world of cybersecurity with the offensive security group from SecurIT360. We’re bringing you fresh content from our journeys into penetration testing, threat research and various other interesting topics.
Odcinki
Najnowsze 20 z 241 odcinków
- One Permission Away from Domain Takeover | Ep 201 · 35 min · Sezon 1 Odcinek 201One dangerous permission in Active Directory can be all it takes for an attacker to turn a single compromised account into full control of your domain. On our internal pen tests…
- OWASP Top 10 Part 6: Insecure Design and Business Logic Flaws Explained | Ep 200 · 41 min · Sezon 1 Odcinek 200200 episodes! Thank you to everyone who has listened, watched, and shared The Cyber Threat Perspective along the way. To mark the milestone, Brad Causey and Jordan Natter are…
- OWASP Top 10 Part 5: Injection Attacks and Real Pen Test War Stories | Ep 199 · 40 min · Sezon 1 Odcinek 199We’re halfway through the OWASP Top 10, and this one is a favorite. Brad Causey is joined by Jordan Natter, SecurIT360’s resident web app pen tester, to cover A05: Injection…
- [Replay] Painfully Persistent Problems: Weak Passwords · 36 min · Sezon 1It’s Cybersecurity Awareness Month, so we’re bringing back one of the most practical episodes in our catalog. Strong passwords are one of the basics of good security, but weak…
- Your Employee Got Hacked. Now What? | Ep 198 · 28 min · Sezon 1 Odcinek 198Users will get compromised. Someone will click the link, and credentials will get stolen. The question that really matters is what happens next. In this episode, Spencer and Brad…
- The Basics Still Win: What GreyNoise's PaperCut Report Shows | Ep 197 · 24 min · Sezon 1 Odcinek 197One threat actor compromised at least 440 PaperCut instances across 395 organizations in 48 countries, using AI to run the same playbook at scale. The fastest path to domain…
- One Hacker, 42 Targets: Inside Anthropic's AI Threat Report | Ep 196 · 52 min · Sezon 1 Odcinek 196One French-speaking hacktivist targeted 42 organizations and got internal access to 14 of them, working alone. That is the kind of detail Anthropic's September 2026 threat…
- [Replay] Episode 178: Internal Security Controls That Actually Frustrate Attackers · 31 min · Sezon 1Replay of Episode 178, originally published April 22, 2026. We are re-running this one because it is the question we get asked most on internal pen test debriefs: of everything…
- Every IT Team Has a Joe | Ep 195 · 28 min · Sezon 1 Odcinek 195Interested in a pen test? Visit securit360.com. Every organization has a Joe. He is the long tenured engineer or admin who built half the environment, maintains the other half…
- Service Accounts: The Shortest Path to Domain Admin | Ep 194 · 33 min · Sezon 1 Odcinek 194Service accounts are one of the easiest paths to domain admin on an internal pen test, and one of the most neglected accounts in Active Directory. In this episode, Spencer and…
- Your IT Job Doubled. Nobody Told Your Boss. | Ep 193 · 40 min · Sezon 1 Odcinek 193In July 2026, Microsoft alone released 622 CVEs. In the 2010s, the monthly average was about a dozen. Nobody handed IT teams more time, budget, or headcount to match, and that…
- Subtractive Security: Stop Adding Tools and Start Deleting Attack Paths | Ep 192 · 39 min · Sezon 1 Odcinek 192Work with us --> https://www.securit360.com/#contact-anchor The OWASP Subtractive Security Top 10 Project --> https://github.com/OWASP/OWASP-Subtractive-Hardening-Top-10 The…
- The CrowdStrike Settings That Actually Stop Us | Ep 191 · 38 min · Sezon 1 Odcinek 191Two pen testers have spent thousands of hours inside client networks, and the most common failure they see isn't a missing security product — it's an EDR nobody ever tuned. In…
- Episode 190 | OWASP Top 10 Part 4: Cryptographic Failures · 23 min · Sezon 1 Odcinek 190Most cryptographic findings on your vulnerability report will never be exploited by a real attacker. So why do they keep showing up — and why should you still fix them? In this…
- Episode 189 | OWASP Top 10 Part 3: Software Supply Chain Failures — From SolarWinds to Vibe Coding · 28 min · Sezon 1 Odcinek 189Almost no one writes an application from scratch anymore, and that's exactly the problem. In Part 3 of our OWASP Top 10 series, Brad Causey and Jordan Natter break down A03…
- Guaranteed way to catch threat actors | Ep 188 · 31 min · Sezon 1 Odcinek 188In this episode, Spencer and Tyler discuss why deception is one of the best ways to catch threat actors. Resources Spencer's Cyber Deception WebinarSpencer's X posts on the topic…
- Avoid this cyber leadership trap | Ep 187 · 16 min · Sezon 1 Odcinek 187Need a pentest or vCISO? Work with us! https://www.securit360.com/ A major leadership failure in Cybersecurity is l buying tools first then figuring out where they fit and how to…
- Episode 186: Real Life Active Directory Attack Paths · 36 min · Sezon 1 Odcinek 186In this episode Spencer and Tyler discuss real life Active Directory attack paths, taken from real internal pentest engagements over the last several years. Work with Us…
- [Replay] Episode 172: The Biggest Security Blind Spots in Midsized Companies · 34 min · Sezon 1Some of the most dangerous security gaps aren't sophisticated — they're the ones hiding in plain sight. In this replay, Brad and Spencer break down the biggest blind spots they…
- Episode 185 | A Toddler with a Bazooka: The Real Risk of AI Agents · 46 minAI agents can search the web, manipulate files, run commands, make API requests, access cloud platforms, and operate fully autonomously. They are powerful, they are here, and…
