Distilled Security Podcast

Episode 13 of the Distilled Security Podcast is here!Join us as we explore:The Coinbase Breach: A breakdown of Coinbase’s recent insider-driven breach, including social engineering, bribery of offshore contractors, and how the company responded publicly and operationally.Building Insider Threat Programs: The crew shares practical approaches to detecting insider misuse, behavioral monitoring, and the potential for "job descriptions as code."CISO Liability and Insurance: Discussion on the evolving legal exposure for CISOs, personal liability, and whether directors and officers (D&O) insurance is a must-have.Board-Level Cyber Risk: Should cybersecurity roll up to the audit committee or its own risk committee? The team explores where security leadership best fits in organizational governance.Communication and Legal Risk: How careless comments—public or internal—can be used against organizations, and why CISOs and leaders must strike a balance between transparency and caution.Modern Risk Management: Turning technical issues into business risk conversations, why documentation matters, and how strong risk communication can help CISOs avoid being scapegoated.BSides Pittsburgh Update: With over 600 tickets already sold, the team gives updates on ticket tiers, t-shirts, speaker schedules, and why you should register by June 13.Bourbon Review – Widow Jane Lucky 13: To celebrate episode 13, the crew samples Widow Jane Lucky 13—a smooth, toffee-forward bourbon aged 13 years.Reporting Lines: Where and how security should be structured within the organization, from effectiveness to liability and more.HostsJustin Leapline - LinkedInJoe Wynn - LinkedInRick Yocum - LinkedInConnect with UsWebsite: Distilled Security PodcastTwitter: @DisSecPodEmail: [email protected]

Episode 11 of the Distilled Security Podcast is here!Join us as we cover:Signal, Encrypted Messaging, and Corporate Policy: A deep dive into the use of Signal in sensitive discussions—including a political mishap—and the implications for corporate communication policies, discovery, and compliance.Oracle Cloud Breach Allegations: Evaluating breach claims, early response tactics, and the value of proactive key and credential rotation.DNA Data, 23andMe, and Privacy Concerns: With 23andMe filing for bankruptcy, the team explores risks associated with sharing genetic data and broader privacy implications when personal information changes hands.Hospital Data as Business Assets: A surprising look at how some companies are buying bankrupt hospitals—primarily for access to their medical datasets.Vulnerability Management in the Real World: Tips on building practical, risk-based vulnerability management programs, understanding scanner severity versus real-world risk, and developing responsive processes that scale.Spirits: Calumet Farm Small Batch Bourbon Whiskey https://www.calumetbourbon.com/smallbatchHostsJustin Leapline - LinkedInJoe Wynn - LinkedInRick Yocum - LinkedInConnect with UsWebsite: Distilled Security PodcastTwitter: @DisSecPodEmail: [email protected]

Episode 9 of the Distilled Security Podcast is here!Join us as we explore:Security on a Budget: How teams can optimize tools, manage resource constraints, and build an effective security strategy with limited funding.AI and Efficiency: The impact of AI on job performance, along with the risks of AI-powered note-taking and data classification.Data Breaches & Industry Challenges: Lessons from Marriott’s data breaches, security concerns in the hospitality industry, and evolving consumer protection mandates.Regulatory Shifts & Compliance: A discussion on HIPAA’s 2023 overhaul, required vs. addressable regulations, and the role of dual audits in compliance assurance.Data Sovereignty & Government Oversight: How security teams navigate data sovereignty risks, government requests for information, and evolving security standards.Multi-Factor Authentication & Risk Mitigation: The importance of MFA and its role in strengthening security posture is increasing.SpiritsHeigold Single Barrel Cask Strength https://www.rabbitholedistillery.com/pages/single-barrel-releaseHostsJustin Leapline - LinkedInJoe Wynn - LinkedInRick Yocum - LinkedInReferences2025 HIPAA Security Rule Guide and Compliance Checklist // https://www.seisollc.com/insights/2025-hipaa-rule-guideConnect with UsWebsite: Distilled Security PodcastTwitter: @DisSecPodEmail: [email protected]

Welcome to Episode 7 of the Distilled Security Podcast!In this episode, hosts Justin, Rick, and Joe are joined by special guest Brandon Eckert to explore his fascinating journey in cybersecurity, share industry insights, and enjoy a fun debate on Thanksgiving favorites. Here’s what’s in store:Topics Covered: 🔹 Navigating a Career in CybersecurityReflections on starting out in cybersecurity, overcoming challenges in small-town IT careers, and the role of certifications in shaping career success.🔹 The Value of CertificationsHow certifications like OSCP contribute to career growth, practical knowledge, and their relationship with networking and formal education.🔹 Mentorship and the Pittsburgh Cybersecurity CommunityThe importance of fostering growth, mentoring local talent, and giving back to the Pittsburgh security community.🔹 Networking vs. CertificationsA discussion on what matters more for career advancement and the unique benefits of each.🔹 Auditor Stories and Lessons LearnedHear hilarious and insightful tales from hospital audits, ethical dilemmas, and tips for managing challenging auditor experiences.🔹 Business Continuity ChallengesHow organizations can prepare for rare but impactful events, like solar flares, while building strong auditor relationships.🔹 Thanksgiving FavoritesA lighthearted wrap-up featuring turkey tips, stuffing recipes, and the ultimate leftover turkey sandwich.🔸 LinksWidow Jane Black Opal: https://widowjane.com/🔸 SpiritsWidow Jane Black OpalA rare blend of bourbons, each aged for at least 20 years and finished in Japanese Mizunara oak. Notes of toffee, plum, and tobacco make this whiskey an extraordinary treat.🔸HostsJustin Leapline Joe WynnRick Yocum🔸 Guest🙋🏻‍♂️ Brandon Eckert 🎙 Connect with UsWebsite: Distilled Security Podcast X: @DisSecPodEmail: [email protected]

Join hosts Justin, Rick, and Joe as they cover:Resume Review Insights: Joe offers valuable tips on resume writing, focusing on showcasing accomplishments and using metrics to stand out.Passion Projects and Hobbies: The team discusses how personal projects and volunteer work can make resumes more compelling by demonstrating a passion for the field.Community Engagement at TRISS: The hosts invite listeners to their booth at the upcoming Three Rivers Information Security Symposium (TRISS), where they will be offering resume reviews and engaging with attendees.Counter-Espionage and Pagers: A fascinating look at the use of pagers in recent counter-espionage operations, analyzing their effectiveness and ethical concerns.Supply Chain Security Concerns: A discussion on the risks tied to supply chain vulnerabilities, focusing on hardware inspections.Tabletop Exercises in Cybersecurity: The hosts highlight the importance of tabletop exercises to prepare organizations for security incidents, contrasting them with current trends in incident response training.School Violence Threats: An examination of the rise in school violence threats and the challenges schools face in managing these situations.LinksThree Rivers Information Security Symposium (TRISS)US Maritime Trade and Port CybersecuritySpiritsBoone 1833 12-Year-Old, Snyder's Flask (discontinued) - https://boonedistilling.com/HostsJustin Leapline - LinkedInJoe Wynn - LinkedInRick Yocum - LinkedInConnect with UsWebsite: Distilled Security PodcastTwitter: @DisSecPodEmail: [email protected]

Episode 3 of the Distilled Security Podcast is here!Join us this week as we jump into: CrowdStrike Incident Analysis: A deep dive into a recent mishap by CrowdStrike that led to significant financial losses and operational disruptions, including 5.4 billion in estimated losses.Vendor Accountability: Exploring the legal and financial repercussions of security vendor failures.Business Continuity Planning: The importance of preparing for security vendor failures, including considering alternate vendors and the complexities of implementing such strategies.Kernel-Level Security Risks: A discussion surrounding kernel-level operations in security software, focusing on the controversy between CrowdStrike and SentinelOne.Manual Workarounds and Legacy Systems: The challenges of maintaining business operations during security incidents.Ransomware Recovery vs. Vendor Failures: Comparing ransomware attacks' impact and recovery processes with security vendor-induced failures.Password Management Vulnerabilities: The risks associated with dependency on password management systems like Thycotic/Delinea and LastPass, and the potential fallout if these systems experience downtime.BSides Pittsburgh Recap: the biggest BSidesPGH event yet. Hear the notes and highlights from the conference.North Korean Spy Hired By KnowBe4: Hear how a spy for N. Korea got by the defenses of KnowBe4, how they caught them, and steps they implemented to avoid this in the future.CISOs as Scapegoats: Are CISOs being pegged as scapegoats unfairly?LinksCrowdstrike Incident - https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/SentinelOne Response to Crowdstrike - SentinalOne on Crowdstrike Outage - https://www.crn.com/news/security/2024/sentinelone-ceo-on-crowdstrike-outage-not-just-an-honest-mistakeBSidesPGH - https://www.bsidespgh.com/TRISS - https://www.threeriversinfosec.com/KnowBe4 // N. Korean Spy - https://blog.knowbe4.com/cyberheistnews-vol-14-31-how-the-whole-world-now-knows-about-fake-north-korean-it-workersCISO as Scapegoats - https://www.thestack.technology/were-becoming-scapegoats-how-have-cisos-responded-to-sec-cyber-risk-disclosure-rules/SpiritsRabbit Hole Cavehill // Four Grain Tripple Malt - https://www.rabbitholedistillery.com/pages/cavehill/HostsJustin Leapline - https://www.linkedin.com/in/justinleapline/Joe Wynn - https://www.linkedin.com/in/wynnjoe/Rick Yocum - https://www.linkedin.com/in/rickyocum/Connect with UsWebsite: https://distilledsecuritypodcast.comTwitter: @DisSecPodEmail: [email protected]

Welcome to the first episode of Distilled Security!Join us as we dive into a variety of exciting topics, including:Is College Worth It?: We explore the value of higher education in today's world.Microsoft and Executive Compensation: Analyzing cybersecurity in executive pay at Microsoft.BSides Pittsburgh: Exciting talks are coming to BSidesPGH.Starting as a New CISO: Things to do first coming into a new company.Grab your favorite cocktail and tune in for an engaging and fun-filled discussion!HostsJustin Leapline - https://www.linkedin.com/in/justinleapline/Joe Wynn - https://www.linkedin.com/in/wynnjoe/Rick Yocum - https://www.linkedin.com/in/rickyocum/Connect with UsWebsite: https://distilledsecuritypodcast.comTwitter: @DisSecPodEmail: [email protected]