Threat Talks - Your Gateway to Cybersecurity Insights

May 21 2024
Threat Talks - Your Gateway to Cybersecurity Insights Podcast artwork

Threat Talks is your cybersecurity knowledge hub. Unpack the latest threats, explore industry trends, and hear from top experts as we break down the complexities of cyber threats. Our mission is to make these complex cybersecurity topics accessible and engaging for everyone, from IT professionals to every day internet users. We do so by providing in-depth and first-hand experiences from leading cybersecurity professionals. Join us for monthly deep dives into the dynamic world of cybersecurity, so you can stay informed, and stay secure!

RSS feed Share
Copy RSS


Subscribe on Podcast Addict


DICOM: The hidden risks of Legacy Protocols

May 21 2024 20 mins  
Discover the vulnerabilities of the DICOM protocol in healthcare and the significant risks it poses, including data breaches and manipulation. This deep dive covers practical solutions for protecting sensitive patient information and enhancing cybersecurity measures in medical systems. Join host Lieuwe Jan Koning with guests Jan van Boesschoten and Sina Yazdanmehr as they explore

Healthcare: Responsibilities, regulations and legacies - Threat Talks

May 14 2024 43 mins  
In this episode of Threat Talks, we examine major cybersecurity risks in healthcare. We discuss how old systems like DICOM, still widely used, can lead to serious cyberattacks. How do recent breaches and outdated protocols threaten patient privacy and disrupt healthcare services? Guided by Lieuwe Jan Koning, CTO of ON2IT, alongside cybersecurity experts Sina Yazdanmehr and Rob Maas

Palo Alto Networks CVE-2024-3400: a comprehensive analysis of the vulnerability

May 07 2024 40 mins  
Tune into this special episode of Threat Talks, as we dissect the critical CVE 2024 3400 vulnerability in Palo Alto Networks' GlobalProtect servers. Join our cybersecurity experts for a deep dive into the vulnerability's implications, our response strategies, and practical tips to bolster your defenses against similar threats. For those who crave even more detailed insigh

Deep Dive - Reflection Attack - The most simple dos attack

Apr 30 2024 11 mins  
Understanding Reflection Attacks: A Simple Yet Powerful DOS Method. 👕 Request your own Threat Talks T'shirt: https://threat-talks.com/cant-deny-ddos-in-2024/ Distributed Denial of Service (DDoS) Attacks Explained Picture this: a DDOS attack, but turbocharged by the clever use of network request reflections. This discussion sheds light on how attackers harness the normal fun

Deep Dive - MOVEit: The danger of delegating data to third-party software

Apr 23 2024 14 mins  
Dive into the largest data breach of 2023, a devastating supply chain attack involving the MOVEit software, which impacted over 60 million individuals. Learn how the Klo Ransomware Group exploited a zero-day vulnerability through SQL injection to carry out their attack, and the challenges this presents for cybersecurity measures today. Interested in the full technical info of the

Deep Dive - Log4j: The danger of software dependencies

Apr 16 2024 19 mins  
Join us for a deep dive episode of Threat Talks, focusing on Log4j, the critical logging library at the heart of Java development. Discover Log4j's flexibility in message configuration and how it enhances Java programming. Perfect for those looking to deepen their Java and Log4j knowledge. Interested in the full technical info of the discussed threats? For more detailed inform

Deep Dive - SolarWinds: The danger of third-party software

Apr 09 2024 21 mins  
The SolarWinds incident, affecting 18,000 high-profile environments, including the US government and Fortune 500 companies, was attributed to the state-sponsored group Fancy Bear. This breach demonstrated the complexity and reach of supply chain attacks, emphasizing the challenge of defending against state-backed adversaries. Interested in the full technical info of the discussed

Supply chain: business as usual? - Threat Talks

Apr 02 2024 42 mins  
In this episode of Threat Talks, we explore the covert perils of supply chain attacks. Matthijs Zwart, CIO and CISO at Vitens, acknowledges the risk landscape surrounding supply chain attacks, but also suggests that the occasional incident can offer unforeseen advantages. Featuring Matthijs as the special guest, this episode brings together host Lieuwe Jan Koning and Threat Intel S

Deep Dive - Ivanti EPM

Mar 26 2024 13 mins  
This Threat Talks - deep dive - focuses on a recent SQL injection attack targeting Ivanti EPM software, a powerful endpoint management solution. Lieuwe Jan Koning, Luca Cipriano and Rob Maas explore the attack's mechanics, its implications for network security, and compare it to historical incidents like the SolarWinds supply chain attack. The episode offers a thorough analysi

Deep Dive – Google OAuth bypass

Mar 19 2024 16 mins  
In this deep dive of Threat Talks, we delve into the intricate realm of cybersecurity, spotlighting a newly uncovered vulnerability within Google's OAuth authentication system. Uncover a hidden feature in the Google multi-login API causing significant disruptions. Intended to streamline the authentication process for Google services like Gmail, Calendar, and Maps, this API har