Socializing Security
A podcast that socializes security, compliance, and related topics to make them more approachable and understandable. Each week we’ll discuss a topic, usually with an expert in the area, with the goal of learning along with you. We’re here to socialize security!
Episodes
In this episode, Brian and Milou speak with Mark Kreitzman, a cybersecurity veteran and evangelist at Efani, about how a SIM swap attack took over his phone number and led him to build a mobile-security business. They unpack warning signs, the risks of SMS-based account recovery, practical ways to reduce exposure, and why Mark believes security now matters more than the increasingly elusive promise of privacy. Mark on LinkedIn: ht...
Cybersecurity Awareness Month is here, and this episode is your ultimate guide to transforming bland security training into engaging and effective programs. Join hosts Brian and Milou as they unravel the secrets behind building a culture of security awareness that goes beyond the checkbox mentality.
They dive deep into the current landscape of cybersecurity training, exploring why traditional methods often fail. Brian shares person...
In this episode, Brian and Milou delve into the complexities of global privacy regulations, discussing GDPR, US state laws, and best practices for building a comprehensive privacy program. They explore how companies can operationalize privacy, manage cross-border data transfers, and ensure compliance across different jurisdictions. Chapters 00:00 Introduction and episode overview 02:27 Deep dive into GDPR and its global influen...
In this episode, Brian and Milou explore the complexities of managing personal and work devices in a security-conscious environment. They discuss the pros and cons of using separate phones, the implications of mobile device management, and strategies for balancing security with privacy and convenience. Chapters 00:00 Introduction to the topic of device management and security 01:47 Brian discusses his current device setup and se...
In this episode, Brian and Milou discuss the critical aspects of crisis communication during security incidents, emphasizing legal considerations, internal and external communication strategies, and the importance of preparation and transparency.
Chapters
00:00 Introduction to Crisis Communication in Security Incidents 01:15 People, Process, and Technology in Crisis Response 02:33 Media Training and Handling Public Questions 04:05 ...
In this episode, Brian and Milou explore the evolving landscape of patch management in cybersecurity, especially in the context of AI's impact on vulnerability detection and patch deployment. They discuss historical practices, current challenges, and future considerations for organizations aiming to stay secure amidst rapid technological changes.
Chapters 0:38 — Introduction to patching in the AI era 2:19 — Historical p...
In this episode, cybersecurity expert Robert Siciliano shares insights on why traditional security awareness training often fails and how a human-centric approach can significantly improve security practices. He discusses the human blind spot, the Trinity of Vulnerability, and practical strategies to engage individuals in recognizing and managing risks effectively. Get more from Robert: https://www.linkedin.com/in/robertsiciliano ...
In this episode of Socializing Security, Brian and Milou delve into the critical topic of third-party vendor management, focusing on the importance of vendor reviews, risk assessments, and the processes involved in onboarding and managing vendors. They discuss the need for a coordinated approach among various departments, the significance of standardized evaluation processes, and the unique challenges posed by smaller vendors and A...
In this episode, Brian and Milou explore the concept of shadow IT, its implications for organizations, and practical strategies to manage and mitigate its risks. They discuss how shadow IT arises, the security and compliance challenges it presents, and how to establish effective policies and controls. Chapters 00:00 Introduction to Shadow IT and Episode Overview 01:56 What is Shadow IT and Why Is It a Problem? 03:14 Emerging Sh...
In this conversation, Craig Taylor discusses the intersection of psychology and cybersecurity, emphasizing the importance of positive reinforcement in training programs. He critiques traditional punitive approaches to cyber awareness, advocating for innovative methods that engage employees and foster a culture of security. The discussion also touches on the ongoing debate between privacy and security, highlighting the need for cont...
In this episode, Brian and Milou discuss the intersection of AI and security, exploring the innovations AI brings to the security space, the importance of defining permissions and guardrails, and the implications of AI in security tools. They also delve into the challenges of remediation and recovery processes with AI, the evolving threat landscape where attackers use AI, and the critical aspects of privacy and data minimization in...
In this episode, Brian and Milou discuss their daily routines for staying updated on cybersecurity and compliance, sharing their favorite podcasts, newsletters, social media sources, and in-person events. They explore a wide range of resources to help security professionals stay informed about the latest threats, trends, and industry developments. Links https://cisoseries.com/category/podcast/cyber-security-headlines/ https://dark...
In this episode, Brian and Milou discuss the essentials of Managed Security Service Providers (MSSPs), including their role, selection criteria, contractual considerations, and ongoing management. They explore how MSSPs can enhance security maturity, ensure compliance, and the importance of clear communication and trust in these partnerships.
Chapters
00:00 Introduction and Weather Chat 01:09 Defining MSSPs and MSPs 02:21 The impor...
In this episode, Brian and Milou delve into the intricacies of conducting effective tabletop exercises for cybersecurity preparedness. They discuss how to structure these simulations, the purpose behind them, who should be involved, and how to ensure continuous improvement. The conversation offers practical insights for organizations aiming to enhance their incident response capabilities. Chapters 00:00 Introduction and episode ...
In this episode, Brian and Milou explore the complexities of choosing the right domain name for your business or project. They discuss the importance of strategic selection, the impact of top-level domains, security considerations like typosquatting, and the legal and practical implications of domain management.
Chapters
00:00 Introduction to Domain Selection
03:08 Consequences of Choosing the Wrong Domain
06:04 Understanding T...
In this episode, Brian and Milou explore the pervasive influence of AI on privacy, data security, and personal choice. They discuss how public information is used to train AI models, the importance of understanding data practices, and the legal and ethical considerations of AI in everyday life. Chapters 00:00 Introduction to AI in 2026 02:16 Public Information and AI Training 06:30 The Challenge of Privacy in Social Media 10:3...
In this episode of Socializing Security, Brian and Milou reflect on their recent experiences, including the HERS and RSA conferences, and celebrate their 100th episode. They discuss the positive feedback from the HERS conference, the challenges faced at the RSA conference, and their plans for future content. The conversation emphasizes the importance of community, networking, and the joy of creating content together.
00:00 Welcome ...
In this next episode in our occasional Security Foundations series, fractional CISO Steve Sims returns to discuss the importance of logging, monitoring, and effective detection strategies to enhance security posture and compliance. Learn how to tune logs, leverage AI, and build a mature security program. Previous Security Foundations series episodes: - Asset Management: 📹https://youtu.be/GdiVzP2mby0 🎧https://www.socializingsecur...
This week, Brian explores cybersecurity through the analogy of a submarine, highlighting parallels in defense, compartmentalization, threat detection, and team coordination. This episode offers a unique perspective on cybersecurity strategies and the importance of teamwork and adaptability that most people should be able to understand. Chapters 00:00 Introduction to Cybersecurity and Submarines 04:29 The Importance of a Strong E...
Recorded live at RSAC 2026, this episode explores the importance of risk management, tabletop exercises, and incident response planning. Learn how to prepare your team for real-world scenarios and improve your organization's resilience through structured communication events.
Project Zero Trust: https://www.amazon.com/Project-Zero-Trust-Strategy-Aligning/dp/1119884845/ref=asc_df_1119884845
Chapters 00:00 Looking Ahead: Insigh...
Popular Podcasts
If you've ever wanted to know about champagne, satanism, the Stonewall Uprising, chaos theory, LSD, El Nino, true crime and Rosa Parks, then look no further. Josh and Chuck have you covered.
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com
The Clay Travis and Buck Sexton Show. Clay Travis and Buck Sexton tackle the biggest stories in news, politics and current events with intelligence and humor. From the border crisis, to the madness of cancel culture and far-left missteps, Clay and Buck guide listeners through the latest headlines and hot topics with fun and entertaining conversations and opinions.
Does hearing about a true crime case always leave you scouring the internet for the truth behind the story? Dive into your next mystery with Crime Junkie. Every Monday, join your host Ashley Flowers as she unravels all the details of infamous and underreported true crime cases with her best friend Brit Prawat. From cold cases to missing persons and heroes in our community who seek justice, Crime Junkie is your destination for theories and stories you won’t hear anywhere else. Whether you're a seasoned true crime enthusiast or new to the genre, you'll find yourself on the edge of your seat awaiting a new episode every Monday. If you can never get enough true crime... Congratulations, you’ve found your people. Follow to join a community of Crime Junkies! Crime Junkie is presented by Audiochuck Media Company.
DISGRACELAND is an award-winning music and true crime podcast about musicians getting away with murder and behaving very badly. Jerry Lee Lewis's 5th wife? Dead. Sid and Nancy? Both dead. Why? Because musicians are insane, and insane things happen to them. Why did we lose Amy Winehouse at 27? Was Debbie Harry really abducted by Ted Bundy as she claims? Is Patti Smith not just the "Godmother of Punk", but also the "Original True Crime Girl"? What really happened the night of the Jay Z nightclub stabbing? What do the Diddy indictments truly reveal? All these stories and more, on artists from every genre and their true crimes, in our massive 260-plus story archive. The Dead, the Stones, Johnny, Willie, Frank, Kurt, Courtney, Gaga, Lana, Taylor, and too many to name. DISGRACELAND is music history come to life through audio storytelling as you've never heard it before, with revealing facts: yes, assassins are the real reason the Beatles quit touring—reclaimed myths: no, Mama Cass didn't die from choking on a ham sandwich––and constant reckoning between art and artist––all told through the lens of true crime. This is the podcast for the self-proclaimed "Disgos", the musically obsessed and the true crime heads; the outsiders, the independent thinkers who know that the best history is the history that gets buried. DISGRACELAND is where host Jake Brennan tells the stories they didn't want told. The kind you'll end up telling someone else. Get ready to uncover hidden truths and buckle up for truly edge-of-your-seat storytelling. New, fully scripted, sound-designed episodes are released every Tuesday. Bonus chat-style episodes where Jake responds to voicemails, texts, and emails from Disgos hit on Thursdays, and "Rewind" episodes from our archive drop on Sundays. DISGRACELAND is not a journalistic podcast. It's an entertainment podcast inspired by true events. Certain dialogue and scenes are dramatized, as is common in scripted entertainment based on real stories. Sources and credits for each episode are available at www.disgracelandpod.com. To unlock ad-free listening, exclusive content, and connect with your fellow Disgos, go to www.disgracelandpod.com to become an All Access member. Rocka Rolla.