About the show
Security Conversations is a series of podcasts covering threat intelligence and the business of cybersecurity, from the lens of veteran journalist and storyteller Ryan Naraine. The Three Buddy Problem show features conversations and debates on nation-state APTs, cyberespionage, spy tradecraft, cryptocurrency theft, advancements in offensive research and targeted malware espionage activity.
Connect with Ryan on Twitter (Open DMs).
Security Conversations on social media
Episodes
-
Project Zero's Maddie Stone on the surge in zero-day discoveries
May 10th, 2022 | 42 mins 10 secs
disclosure, exploits, google, memory safety, project zero, transparency, zero-day
Maddie Stone is a security researcher in Google's Project Zero team. Over the last few years, she has publicly tracked the discovery and disclosure of zero-day malware attacks seen in the wild. On this episode, Maddie joins Ryan to chat about three years of zero-day exploitation data, the nuances around 0day disclosures, the never-ending struggle to mitigate memory corruption attacks and the need for transparency among affected vendors.
-
Prof. Mohit Tiwari on the future of securing data at scale
May 6th, 2022 | 46 mins 1 sec
data security, data security posture management, privacy
Symmetry Systems co-founder Mohit Tiwari has been studying data security and control flow access for more than a decade. On this episode of the podcast, he discusses his transition from academia to data security entrepreneurship, first principles around the data security and privacy, the exploding DSPM (data security posture management) space, and the mission to solve one of cybersecurity's biggest problems.
-
Google's Shane Huntley on zero-days and the nation-state threat landscape
April 4th, 2022 | 40 mins 44 secs
exploits, google, project zero, pwn2own, zero-day
Director at Google's Threat Analysis Group (TAG) Shane Huntley joins the show and talks about lessons from the 2009 Aurora attacks, the surge in zero-day discoveries, the usefulness of IOCs, North Korean APT operations, private sector mercenary hackers, the expanding nation-state threat actor map, and much more...
-
Lamont Orange, CISO, Netskope
March 21st, 2022 | 26 mins 2 secs
Netskope security chief Lamont Orange joins the show to chat about the changing role of the Chief Information Security Officer (CISO), managing security as a business enabler, the cybersecurity skills shortage, and his own unique approach to security leadership.
-
Haroon Meer on the business of cybersecurity
March 19th, 2022 | 1 hr 15 mins
breach detection, canaries, startup, thinkst, venture capital
Thinkst founder and CEO Haroon Meer joins Ryan Naraine on the show to talk about building a successful cybersecurity company without venture capital investment, fast-moving attack surfaces and the never-ending battle to mitigate memory corruption issues.
-
Tony Pepper, co-founder and CEO, Egress
February 22nd, 2022 | 19 mins 37 secs
email security, entrepreneurship, messaging
Chief executive officer at Egress Tony Pepper joins the show to talk about entrepreneurship in the fast-paced age of modern computing, the state of e-mail security, and his company's bet on securing the future of messaging in the enterprise.
-
Microsoft's Justin Campbell on offensive security research
January 8th, 2022 | 27 mins 16 secs
memory safety, microsoft, secure coding, shift-left, windows, zero-days
Justin Campbell leads Microsoft’s Offensive Research and Security Engineering (MORSE) team. He joins the show to talk about his team's discovery of a SolarWinds in-the-wild zero-day, the never-ending stream of memory safety vulnerabilities, the evolving 'shift-left' mindset and Redmond's ongoing work to reduce attack surfaces.
-
Costin Raiu on the .gov mobile exploitation business
December 23rd, 2021 | 41 mins 18 secs
android, apple, exploits, ios malware, nso pegasus, psoas, zero-day
Global director of Kaspersky's GReAT research team Costin Raiu returns to the show for an indepth discussion on the mobile surveillance business, the technically impressive FORCEDENTRY iOS exploit, the ethical questions facing exploit developers and the role of venture capitalists in the mobile malware ecosystem.
-
Amanda Gorton, co-founder and CEO, Corellium
December 20th, 2021 | 46 mins 20 secs
apple, corellium, emulation, ios, virtualization
Corellium co-founder and chief executive Amanda Gorton joins the show to talk about raising $25 million in Series A funding, the market fit for device modeling and software virtualization products, the trials and tribulations of startup life, and the nuances of operating in the world of offensive security research.
-
Intel's Venky Venkateswaran on hardware-enabled security
September 9th, 2021 | 35 mins 20 secs
Venky Venkateswaran works on client security and roadmap planning at Intel Corp. On this episode of the podcast, Venky joins Ryan to talk about a reported surge in firmware attacks, Intel's ongoing investments in cybersecurity, the importance of transparency and open documentation, and the company's push to fight ransomware with its flagship TDT (Threat Detection Technology).
-
Sounil Yu on SBOMs, software supply chain security
July 13th, 2021 | 48 mins 26 secs
open-source, sbom, supply chain
Episode sponsored by SecurityWeek.com
JupiterOne CISO Sounil Yu joins the show to sift through the noise and explain the value of SBOMs (software bill of materials), the U.S. government's response to software supply chain security gaps, and what every buyer and seller should be doing to prepare for major changes in the ecosystem.
-
Algirde Pipikaite, Centre for Cybersecurity, World Economic Forum
July 6th, 2021 | 40 mins 2 secs
ciso, davos, risk management
Episode sponsored by MongoDB.com.
Algirde Pipikaite, the project lead of the Governance and Policy team at the Center for Cybersecurity at the World Economic Forum, joins the podcast to discuss her work to bridge the gap between cybersecurity experts and decision makers. We chat about communicating risk to different audiences, cybersecurity as a business enabler, and the need for more global private-public collaboration.
Algirde Pipikaite, the project lead of the Governance and Policy team at the Center for Cybersecurity at the World Economic Forum, joins the podcast to discuss her work to bridge the gap between cybersecurity experts and decision makers at the highest levels to reinforce the importance of cybersecurity as a key strategic priority.