Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
332 articles
The hosts discuss Cloudflare’s outage, which the company attributed to a database-permissions change rather than a cyberattack, share holiday fraud precautions, and report a wind-farm manager’s punishment for secretly installing crypto-mining equipment.
Security engineer Day shares lessons from security work: ship a useful first-pass IOC-based cloud detection during a monitored crypto-mining campaign, refine it later, model cloud threats at scale, prioritize intelligence by organizational impact, and document repeatab
The video outlines skills for five cybersecurity engineering archetypes: guardian, architect, mercenary, researcher, and diplomat, from detection and secure design to research and cross-functional communication.
The speaker predicts that AI agents will automate cyberattacks, malware may adapt to evade detection, and deepfakes will fuel scams. They urge defenders to learn how to build and deploy AI agents.
The hosts explain how malicious calendar invites can bypass controls and potentially expose credential hashes, recommend disabling automatic invite acceptance, and discuss reported X passkey lockouts and uncertainty about CISA’s future.
Security engineer Day describes five working styles, their strengths and development needs, and suggests ways to build depth and breadth across security disciplines.
A tutorial demonstrates a file-based stack buffer overflow in a 512-byte buffer, overwrites the return address to pivot execution to the stack, and runs custom shellcode with DEP, stack cookies, and ASLR disabled.
The video demonstrates using the Process Environment Block and its initialization-order module list to locate Kernel32’s in-memory base address, including the relevant offsets for 32-bit and 64-bit processes.
The hosts discuss AWS outages they say were not cyberattacks, a withdrawn claim that AI powers over 80% of ransomware attacks, and scams using hijacked hotel accounts or fake WhatsApp messages to solicit travelers’ payment details.
The video argues that AI agents can reduce application-security workload by triaging and correlating scanner findings, identifying exploitable attack paths, and assisting remediation. It presents JIT’s sponsored Sarah agent as an example, with human oversight.
The video argues cloud security engineers should embed security into platform workflows, infrastructure as code and CI/CD, using guardrails, automation and AI safeguards to reduce friction while securing pipelines, models and data.
A sponsored ANY.RUN walkthrough investigates phishing domains impersonating Microsoft SharePoint, showing how domain-pattern searches and sandbox analysis reveal credential harvesting and support threat hunting.
Hahna Kane Latonick demonstrates Ghidra integrations with local and online language models to analyze binaries, find vulnerabilities and decode obfuscated strings, while emphasizing the need to verify AI-generated results.
The hosts discuss pro-Russia hackers who mistook a For Scout honeypot for a Dutch water facility, F5 Networks’ report of persistent access and exfiltrated source code and undisclosed-vulnerability information, and the risks of forced patching.
A sponsored tutorial deploys Passbolt on AWS and demonstrates a GitLab pipeline retrieving encrypted secrets, while identifying decryption and other requirements for production use.
A cybersecurity analyst reflects on moving beyond executing others’ work to critically investigate problems, ask broader questions, collaborate with stakeholders, and take ownership of detection and process improvements.
A hands-on tutorial builds and deploys a Bedrock AgentCore agent to analyze AWS WAF logs in CloudWatch Logs, summarize suspicious requests, and provide security insights. It also demonstrates correcting the agent role’s log-read permissions.
A sponsored HashiConf 2025 recap covers Packer SBOM visibility, Vault Radar secret scanning, hybrid-cloud identity challenges and approaches to securing shared GPU infrastructure.
The hosts discuss active exploitation of an Oracle E-Business Suite vulnerability, an extortion attack on UK nursery chain Kido that led to two arrests, and the benefits and implementation challenges of passkeys.
Suricata team members explain security fixes in versions 8.0.1 and 7.0.12, including a TCP reassembly bypass and several crash conditions, and recommend upgrading sensors.
A walkthrough configures Amazon Q Developer with an MCP server and AWS credentials to query CloudTrail. An initial search returns no events; a later query finds activity characterized as legitimate administrative tasks.
Loi Liang Yang argues that AI agents could automate security-log triage, identity-permission reviews and other workflows, urging cybersecurity professionals to retain core skills while learning to operationalize agents.
The hosts discuss a DDoS record reported by Cloudflare and cyber incidents affecting Jaguar Land Rover, Circle K stores in China, and Collins Aerospace, alongside a Secret Service claim about a seized communications network.
A tutorial demonstrates using Amazon Q Developer to query AWS WAF logs for SQL injection and cross-site scripting requests, then create an IP set and add a blocking rule. The presenter shows commands for review and execution.
