#250 - Understanding Vulnerabilities, Exploits, and Cybersecurity

Join host G Mark Hardy on CISO Tradecraft as he welcomes Patrick Garrity from VulnCheck and Tod Beardsley from Run Zero to discuss the latest in cybersecurity vulnerabilities, exploits, and defense strategies. Learn about their backgrounds, the complexities of security research, and strategies for effective communication within enterprises. The discussion delves into vulnerabilities, the significant risks posed by ransomware, and actionable steps for CISOs and security executives to protect their organizations. Stay tuned for invaluable insights on cybersecurity leadership and management.

Chapters

• 00:00 Introduction and Guest Welcome
• 00:57 Meet Patrick Garrity: Security Researcher and Skateboard Enthusiast
• 02:12 Meet Todd Beardsley: From Hacker to Security Research VP
• 03:58 The Evolution of Vulnerabilities and Patching
• 07:06 Understanding CVE Numbering and Exploitation
• 14:01 The Role of Attribution in Cybersecurity
• 16:48 Cyber Warfare and Global Threat Landscape
• 20:18 The Rise of International Hacking
• 22:01 Delegation of Duties in Offensive Warfare
• 22:25 The Role of Companies in Cyber Defense
• 23:00 Attack Vectors and Exploits
• 24:25 Real-World Scenarios and Threats
• 28:46 The Importance of Communication Skills for CISOs
• 31:42 Ransomware: A Divisive Topic
• 38:39 Actionable Steps for Security Executives