podcast

Enterprise Linux Security Episode 86 – The ‘xz’ Fiasco

by
Play

Podcast: Play in new window | Download (Duration: 51:35 — 94.5MB)

Subscribe: Apple Podcasts | Spotify | RSS

On this podcast, Jay and Joao have discussed multiple times a situation where a threat actor submits a pull request that’s more than the project bargained for. And now, we have a situation where OpenSSH was (almost) backdoored by a commit by a maintainer of the xz project. Don’t miss this episode for all the details!

Thanks to TuxCare for sponsoring the Enterprise Linux Security podcast. Check out their awesome services to see how they can simplify Linux administration!

Download Links

Relevant Articles

Enterprise Linux Security Episode 83 – FBI/NCA vs Lockbit

by
Play

Podcast: Play in new window | Download (Duration: 36:12 — 66.3MB)

Subscribe: Apple Podcasts | Spotify | RSS

Through a joint effort, the FBI as well as NCA struck a major blow to the Lockbit ransomware group. In this episode, Jay and Joao will discuss this story as well as the state of Linux in the enterprise/open-source landscape.

Thanks to TuxCare for sponsoring the Enterprise Linux Security podcast. Check out their awesome services to see how they can simplify Linux administration!

Relevant Articles

Download Links

/etc

Here’s a screenshot of the snarky message that was mentioned during the podcast.

Enterprise Linux Security Episode 81 – The VMware Graveyard

by
Play

Podcast: Play in new window | Download (Duration: 49:12 — 90.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

Here we are, yet again, with an industry problem caused by the decision of just one software vendor. This time it’s VMware that’s causing a ruckus. In recent news, it’s been reported that VMware will be killing off 56 (yes, 56) of their stand-alone products, and that’s on top of the news that broke late last year regarding changes in their licensing model. In this episode, Jay and Joao discuss these recent VMware-related shenanigans.

Thanks to TuxCare for sponsoring the Enterprise Linux Security podcast. Check out their awesome services to see how they can simplify Linux administration!

Related Articles

Download Links

Enterprise Linux Security Episode 80 – Stop Paying Threat Actors!

by
Play

Podcast: Play in new window | Download (Duration: 41:33 — 76.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

In this episode, Jay and Joao will discuss an update on the GTA source code theft, how much threat actors are making from ransomware, and more!

Thanks to TuxCare for sponsoring this podcast! Check out how they can make managing Linux servers much easier.

Episode-Specific Links

Download Links

Enterprise Linux Security Episode 75 – RepoJacking

by
Play

Podcast: Play in new window | Download (Duration: 36:47 — 67.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

We’ve talked about Supply Chain Attacks on this podcast before, and in this episode Jay and Joao discuss another form of this popular attack vector – RepoJacking! RepoJacking occurs when a repository (such as one hosted on Github) changes information, and due to a link between the old repository info and the new – threat actors can take advantage of this. Join Jay and Joao for a discussion on this attack vector.

Thanks to TuxCare for sponsoring this episode! Check them out to see how they can help take your Linux Administration game to the next level.

Relevant Articles

Download Links

Enterprise Linux Security Episode 69 – Red Hat vs Enterprise IT

by
Play

Podcast: Play in new window | Download (Duration: 1:03:46 — 116.8MB)

Subscribe: Apple Podcasts | Spotify | RSS

When it comes to Linux in the Enterprise, we have quite a few challenges we have to overcome on a day to day basis to ensure we can depend on our technology. We never thought Red Hat themselves would some day become our opponent, but here we are. In this episode, Jay and Joao will discuss discuss the latest impulsive and irresponsible decision Red Hat has made – as well as how that decision results in the company undermining their own customer base, while alienating the Linux Community at the same time.

Download Links

Relevant Articles

Enterprise Linux Security Episode 68 – The Barracuda Vulnerability

by
Play

Podcast: Play in new window | Download (Duration: 43:12 — 79.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

Don’t you just love e-mail? It’s the gift that keeps on giving, and this time managing e-mail is even more annoying for Barracuda’s customers, with CVE-2023-2868. This isn’t just any CVE, this is a complete system own by the threat actors. In fact, it’s so bad that the situation isn’t as simple as installing a patch. In this episode, Jay and Joao discuss this vulnerability and just how big of a deal it is.

Download Links

Relevant articles

Enterprise Linux Security Episode 64 – FIPS

by
Play

Podcast: Play in new window | Download (Duration: 45:59 — 84.3MB)

Subscribe: Apple Podcasts | Spotify | RSS

There are many security certifications that an organization can utilize to prove compliance with one or more standards, and being in compliance can bring additional benefits and opportunities. Federal Information Processing Standard (FIPS) is one of these certifications, and in this episode, Jay and Joao are joined by Nikos from Tuxcare to discuss FIPS and why your organization might consider it.

Download Links

Enterprise Linux Security Episode 63 – Their Cloud

by
Play

Podcast: Play in new window | Download (Duration: 46:57 — 86.0MB)

Subscribe: Apple Podcasts | Spotify | RSS

According to several sources, and confirmed by Western Digital themselves, there’s been a breach regarding the company’s cloud related offerings, such as “My Cloud” and various cloud-enabled storage products. Many of the details have yet to be revealed, but considering that Western Digital filed a 10-K form with the SEC, it’s very possible that it could be serious. In this episode, Jay and Joao discuss this story so far, with more specific details sure to come.

Download Links

Relevant Articles

Enterprise Linux Security Episode 60 – AI Enhanced Security

by
Play

Podcast: Play in new window | Download (Duration: 40:27 — 74.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

When it comes to Enterprise IT (and especially the security sector) we have our work cut out for us. As the workload increases, we look for tools and utilities to help us keep up with the demand. But what about artificial intelligence? As we discussed in a previous episode, AI is here to stay and will be making waves in security. In this episode, Jay and Joao dive in to just a few of the ways this tech might transform the security field and those that work within it (directly or indirectly).

Download Links

Relevant Articles