All Episodes
Displaying 261 - 280 of 340 in total
Malware Indicators: Ransomware, Trojans, Worms, Spyware, and Fileless Malware (2.5)
This episode covers common malware indicators and what they may reveal during detection or investigation. Ransomware may produce encryption notices, renamed files, ina...
Physical and Network Attack Indicators (2.5)
This episode explains indicators associated with physical and network attacks and how evidence may appear across different sources. Physical attack indicators include ...
Social Engineering Indicators: Smishing, Vishing, Whaling, Quishing, and Deepfakes (2.5)
This episode explains social engineering indicators across message, voice, executive-targeted, QR-code, impersonation, and synthetic media attacks. Students should und...
Indicators of Compromise: Hashes, Domains, Timestamps, Log Manipulation, and Impossible Travel (2.5)
This episode covers indicators of compromise as clues that help analysts connect events to malicious activity. Students should understand how hashes can identify known...
Application Attacks: Injection, Buffer Overflow, Replay, Privilege Escalation, Forgery, and Traversal (2.5)
This episode explains common application attack indicators and what attackers are trying to accomplish when they exploit application weaknesses. Injection attacks atte...
Credential Attacks: Password Spraying, Brute Force, User Enumeration, and MFA Bypass (2.5)
This episode covers credential attack patterns and how they differ in visibility, speed, and detection. Password spraying uses a small number of common passwords acros...
AI Threats: Model Manipulation, Poisoning, and Prompt Injection (2.6)
This episode introduces AI security threats at a Security+ level, focusing on how attackers may manipulate models, poison data, or use prompt injection to influence ou...
AI Failure Risks: Data Loss, Bias, Explainability, Hallucinations, and Ethics (2.6)
This episode explains AI risks that can occur even when there is no traditional attacker. Data loss may happen when sensitive information is entered into tools, retain...
AI Abuse: Jailbreaking, Evasion, Privacy, Session Hijacking, and Code Execution (2.6)
This episode covers ways AI-enabled systems can be abused when boundaries, permissions, or integrations are weak. Jailbreaking attempts to bypass safety or policy rest...
Architecture Models: Cloud, On-Premises, Hybrid, Private, Public, and Community Cloud (3.1)
This episode compares major architecture and deployment models and the security responsibilities each creates. On-premises environments usually give the organization m...
Serverless, Multicloud, and Infrastructure as Code (3.1)
This episode explains serverless computing, multicloud environments, and infrastructure as code as modern architecture concepts with important security implications. S...
OT, Air-Gapped Networks, Microservices, and Segmentation (3.1)
This episode covers operational technology, air-gapped networks, microservices, and segmentation as architecture choices that affect isolation, monitoring, and risk. O...
Technical Architecture Tradeoffs: Availability, Resilience, Open Source, and Usability (3.1)
This episode explains how technical architecture decisions create tradeoffs across availability, resilience, responsibility, compute, power, recovery, and usability. F...
Business Architecture Tradeoffs: Data Sovereignty, Classification, Cost, and Ownership (3.1)
This episode covers business architecture tradeoffs that influence secure design beyond purely technical preferences. Students should understand how data sovereignty a...
Scalability, Environmental Requirements, Risk, and Recovery Decisions (3.1)
This episode explains how scalability, environmental needs, risk, and recovery expectations influence secure architecture. Scalability means a system can grow to meet ...
Infrastructure Protection: Device Placement, Security Zones, Attack Surface, and Diversity (3.2)
This episode introduces infrastructure protection by focusing on where controls are placed and how environments are divided. Students should understand that device pla...
Zero Trust Architecture: User, Device, and Application Decisions (3.2)
This episode explains Zero Trust architecture as a practical design approach where access decisions are based on identity, device health, application sensitivity, cont...
Secure Access: VPNs, Remote Access, Tunneling, and Encrypted Messaging (3.2)
This episode covers secure access technologies used to protect communication and allow users to reach systems from different locations. VPNs create encrypted connectio...
Out-of-Band Management, File Transfer, and Security Service Edge (3.2)
This episode explains out-of-band management, secure file transfer, and Security Service Edge as architecture concepts tied to secure operations and access. Out-of-ban...
Identity Architecture: gMSAs, Least Privilege Accounts, Privilege Creep, and Failure Modes (3.2)
This episode covers identity architecture as a core part of secure system design, especially where service accounts and administrative access are involved. Group manag...