podcast

Enterprise Linux Security Episode 75 – RepoJacking

by
Play

Podcast: Play in new window | Download (Duration: 36:47 — 67.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

We’ve talked about Supply Chain Attacks on this podcast before, and in this episode Jay and Joao discuss another form of this popular attack vector – RepoJacking! RepoJacking occurs when a repository (such as one hosted on Github) changes information, and due to a link between the old repository info and the new – threat actors can take advantage of this. Join Jay and Joao for a discussion on this attack vector.

Thanks to TuxCare for sponsoring this episode! Check them out to see how they can help take your Linux Administration game to the next level.

Relevant Articles

Download Links

Enterprise Linux Security Episode 69 – Red Hat vs Enterprise IT

by
Play

Podcast: Play in new window | Download (Duration: 1:03:46 — 116.8MB)

Subscribe: Apple Podcasts | Spotify | RSS

When it comes to Linux in the Enterprise, we have quite a few challenges we have to overcome on a day to day basis to ensure we can depend on our technology. We never thought Red Hat themselves would some day become our opponent, but here we are. In this episode, Jay and Joao will discuss discuss the latest impulsive and irresponsible decision Red Hat has made – as well as how that decision results in the company undermining their own customer base, while alienating the Linux Community at the same time.

Download Links

Relevant Articles

Enterprise Linux Security Episode 68 – The Barracuda Vulnerability

by
Play

Podcast: Play in new window | Download (Duration: 43:12 — 79.2MB)

Subscribe: Apple Podcasts | Spotify | RSS

Don’t you just love e-mail? It’s the gift that keeps on giving, and this time managing e-mail is even more annoying for Barracuda’s customers, with CVE-2023-2868. This isn’t just any CVE, this is a complete system own by the threat actors. In fact, it’s so bad that the situation isn’t as simple as installing a patch. In this episode, Jay and Joao discuss this vulnerability and just how big of a deal it is.

Download Links

Relevant articles

Enterprise Linux Security Episode 64 – FIPS

by
Play

Podcast: Play in new window | Download (Duration: 45:59 — 84.3MB)

Subscribe: Apple Podcasts | Spotify | RSS

There are many security certifications that an organization can utilize to prove compliance with one or more standards, and being in compliance can bring additional benefits and opportunities. Federal Information Processing Standard (FIPS) is one of these certifications, and in this episode, Jay and Joao are joined by Nikos from Tuxcare to discuss FIPS and why your organization might consider it.

Download Links

Enterprise Linux Security Episode 63 – Their Cloud

by
Play

Podcast: Play in new window | Download (Duration: 46:57 — 86.0MB)

Subscribe: Apple Podcasts | Spotify | RSS

According to several sources, and confirmed by Western Digital themselves, there’s been a breach regarding the company’s cloud related offerings, such as “My Cloud” and various cloud-enabled storage products. Many of the details have yet to be revealed, but considering that Western Digital filed a 10-K form with the SEC, it’s very possible that it could be serious. In this episode, Jay and Joao discuss this story so far, with more specific details sure to come.

Download Links

Relevant Articles

Enterprise Linux Security Episode 60 – AI Enhanced Security

by
Play

Podcast: Play in new window | Download (Duration: 40:27 — 74.4MB)

Subscribe: Apple Podcasts | Spotify | RSS

When it comes to Enterprise IT (and especially the security sector) we have our work cut out for us. As the workload increases, we look for tools and utilities to help us keep up with the demand. But what about artificial intelligence? As we discussed in a previous episode, AI is here to stay and will be making waves in security. In this episode, Jay and Joao dive in to just a few of the ways this tech might transform the security field and those that work within it (directly or indirectly).

Download Links

Relevant Articles

Enterprise Linux Security Episode 59 – AlmaLinux OS

by
Play

Podcast: Play in new window | Download (Duration: 51:12 — 94.1MB)

Subscribe: Apple Podcasts | Spotify | RSS

AlmaLinux OS was created around the time of “that big CentOS” announcement, and has been a worthy solution for enterprises that wish to continue with Enterprise Linux, but without the fear of the distribution being changed into something else entirely. As a drop-in replacement for Red Hat, AlmaLinux OS continues to tackle new ground and builds a strong community. In this video, Jay and Joao are joined by Atalay Kelestemur who works on the project to discuss this distribution – and there may even be some surprises in store.

Download Links

Relevant Articles

Enterprise Linux Security Episode 57 – Record Breaking DDoS Attacks

by
Play

Podcast: Play in new window | Download (Duration: 41:47 — 76.9MB)

Subscribe: Apple Podcasts | Spotify | RSS

DDoS (Denial of Service) attacks are incredibly common, and apparently, are breaking records. In this episode, Jay and Joao discuss a recent blog post from Cloudflare regarding how popular this attack vector is becoming nowadays, as well as a quick refresher on Denial of Service attacks in general.

Download Links

Relevant Articles

Enterprise Linux Security Episode 56 – Undercover Crypto Leaking

by
Play

Podcast: Play in new window | Download (Duration: 42:40 — 78.5MB)

Subscribe: Apple Podcasts | Spotify | RSS

Ransomware is one of the absolute worst things that can happen to your organization, often resulting in weeks of downtime. We discussed Ransomware recently, and now we have an interesting and time-appropriate story – a popular ransomware group apparently had an imposter within their ranks.

Download links

Relevant Articles

Enterprise Linux Security Episode 55 – Should You Trust Password Managers?

by
Play

Podcast: Play in new window | Download (Duration: 47:43 — 87.7MB)

Subscribe: Apple Podcasts | Spotify | RSS

Passwords – for better or worse, they’re a reality and something we have to deal with. With the average person having many accounts, it’s gotten to the point where we just can’t manage these by ourselves. Password managers help us securely store these confidential secrets, but recently Lastpass (one of the most popular password managers) has suffered a breach. Although no actual passwords within vaults were cracked, recent events do raise a red flag. In this episode, Jay and Joao discuss whether or not you should trust password managers.

Live video version

Download Links

Relevant Articles