Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security operations are evolving—and they have a lot to gain from the principles of modern software engineering. GitOps, a development-centric approach that leverages version control and automation, is now reshaping how security teams operate: with speed, consistency, and transparency.

Philip Martin, CSO at Coinbase, discussed the unique security challenges faced in the crypto exchange landscape and shared proven strategies developed while safeguarding billions in digital assets at Coinbase.

This week on the podcast, we discuss a recent threat intelligence report on the Chinese Phishing-as-a-Service platform Lucid. Before that, we cover the alleged Oracle Cloud breach before reviewing the Singapore Shared Responsibility Framework, designed to combat financial scams.

This week on, Corey and Marc discuss a recent cascading supply chain attack involving multiple Github actions workflows that nearly succeeded in compromising a popular Coinbase application. Before that, they discuss a novel way to download malware onto an endpoint by abusing a web browser's caching feature. Additionally, they cover an FBI alert on file converter malware scams.

On this episode of the Cybersecurity Defenders Podcast we dive into the AI Threat Landscape report with Eoin Wickens, Director of Threat Intelligence at HiddenLayer. Eoin specializes in AI security, threat research, and malware reverse engineering. Eoin has authored numerous articles on AI security, co-authored a book on cyber threat intelligence focusing on Cobalt Strike, and has spoken at conferences such as DEF CON AI Village, BSides San Francisco, LABScon, and 44CON. He also delivered the 2024 SCORED opening keynote.

Jacob Salassi, Former Director of Product Security at Snowflake, joined Defender Fridays to share approaches to eliminating direct interactive access to production systems.

It takes a team to be The Last Stop of Defense. We all play a part and need to be ready whether we're on the ice or with the IT Security team.

In today’s rapidly evolving digital landscape, traditional security models fall short in protecting remote workers and Cloud-based applications.