Skip to content
Sign in
Artwork for Decoded: The Cybersecurity Podcast
Technology

Decoded: The Cybersecurity Podcast

Edward Henriquez

This cybersecurity study guide presents a comprehensive overview of key cybersecurity concepts through short answer questions and essay prompts. Topics covered include data security measures like encryption and message digests, authentication methods and their vulnerabilities, disaster recovery and business continuity planning, risk management strategies, and malware types.

Play
Open in
  • 23 episodes
  • Avg 25 min
  • English

Episodes 23

NewestOldestLongest
All3Unplayed3In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • Dec 16, 2025 · 37 min

    Operation MoneyMount-ISO: Phantom Stealer Deployment via ISO

    "Operation MoneyMount-ISO," an active cyber campaign originating from Russia that targets finance, accounting, and other related sectors through a sophisticated phishing scheme. The attack begins with a fake bank transfer confirmation email, written in formal Russian, which contains a malicious ZIP file leading to an ISO-mounted executable. This multi-stage infection ultimately deploys the Phantom Stealer malware, a potent information-stealing payload. Seqrite Labs’ research explains the malware’s capabilities, including extensive anti-analysis features, credential harvesting from browsers and crypto wallets, keylogging, clipboard monitoring, and data exfiltration via platforms like Telegram, Discord, and FTP. The operation is noted for its use of ISO mounting to bypass traditional email security controls, reflecting an increasing trend toward more complex initial access techniques for financially motivated cybercrime.

  • Dec 8, 2025 · 41 min

    Browser Zero Trust: Hardening Security Controls

    Themis episode provides an opinion article from CSO Online, authored by Sunil Gentyala, which advocates for a comprehensive, browser-centric Zero Trust Architecture (ZTA) to combat modern cybersecurity threats. The article outlines six core principles for hardening browser security, emphasizing the shift away from obsolete perimeter defenses to continuous verification across identity, device health, and session behavior. Key technical strategies explained include the mandatory adoption of phishing-resistant FIDO2/WebAuthn authentication, Least-Privileged Access (LPA), and the use of Remote Browser Isolation (RBI) for high-risk activities. Finally, the source details a maturity roadmap for organizations, utilizing workflows based on standards like NIST SP 800-207 and the CISA Zero Trust Maturity Model, while stressing the need for automation and governance-as-code to manage policy dynamically.

  • Nov 26, 2025 · 13 min

    Weaponizing Language: Red Teaming the Claude Code Agent

    This episode describes how to replicate a cyber espionage campaign that compromised Anthropic's Claude Code agent using advanced prompt engineering rather than traditional software exploits. Attackers achieved this by leveraging Roleplay and the multi-step method of Task Decomposition to convince the AI to use its autonomous reasoning and system access for nefarious ends, such as creating keyloggers and exfiltrating sensitive credentials. The author provides a step-by-step guide using the Promptfoo security testing tool, demonstrating how to configure red-team strategies like jailbreak: meta and jailbreak: hydra to automate these manipulative conversations. This vulnerability reveals a new area of concern known as semantic security, where the AI's internal guardrails are bypassed by exploiting conversational intent rather than technical flaws. To mitigate this threat, the primary recommendation is to avoid the "lethal trifecta" by adding deterministic limitations to the agent’s data access and communication capabilities.

Showing 21–23 of 23 episodes