Podcasts by Cyber Security Sauna

085| NIST Cyber Security Framework V.2 – Help or Hindrance? from 2023-11-22T09:37

The NIST Cyber Security Framework has helped secure organizations for nearly a decade and while ...

084| Let's Talk About Threats Baby from 2023-11-01T11:21

A successful cyber defense sh...

083| Security by design for CISOs from 2023-10-09T08:00

The term Shifting Left has not been traditionally associated with cyber security. In this episode, WithSec...

082| Hyped and Hacked - AI in Cyber Security from 2023-09-20T09:57

As Mikko Hyppönen said recently, we are indeed in the midst of the hottest AI summer ever, and the hype level is off the charts. Yes, AI pre...

081| Mudge - the man, the myth, the mythbusting from 2023-08-28T08:55

We have the pleasure of being joined by the one and only Peiter "Mudge" Zatko, network security expert, open-source programmer, writer, and ...

080| The Power Of Putting Security Outcomes First from 2023-08-07T07:33

As se...

079|(Mind the) Detection and Response Gap from 2023-07-17T10:53

The time Listen

078| John Grant on the relationship between sustainability and cyber security from 2023-06-26T08:21

The development of new sustainable technologies undoubtedly benefits society, but it also opeListen

077| Jessica Berlin and Stephen Robinson on the cyber front from 2023-06-06T13:55

Russia's in...

076| What we get wrong (and right) about APTs from 2023-05-08T08:17

Adv...

075| Winning with outcome-based security from 2023-04-04T10:54

Security protects organizations from cyber attacks. However, studies show tha...

074| Do you even patch bro? from 2023-03-07T10:54

Vulnerabilities and security gaps are increasingly being identified in software and applications d...

073| 2023 - Looking Forward from 2023-02-01T09:18

In our last episode...

072| 2022 Wrap-Up from 2023-01-01T11:00

As the year draws to a close, it’s time for us to review and reflect on notable infosec events and trends from 2022, Listen

071| Deepfakin it: AI content in cyber attacks from 2022-12-05T13:14

Until recently, AI-generated synthetic content has been more commonly used for gaming and art creation, where the tech is still relatively new, and pixel perfection is unnecessary. However, with...

Cyber Security Sauna: Breaking Views – The Vastaamo case from 2022-11-09T11:14

In this Cyber Security Sauna special edition podcast, we cover new developments in the data breach of Finnish Psychotherapy provider Vastaamo in 2020.

This case has recently hit the news ...

070| Crowdsourcing Security with Bug Bounties from 2022-11-02T07:49

Bug bounties (also known as vulnerability reward programs) crowdsource security expertise to address vulnerabilities in products or services before attackers exploit them. Many companies have ad...

069| Cyber conflicts, Corporations and Collateral damage from 2022-10-03T10:30

Geo-political conflicts are increasingly being played out in cyberspace, and organizations, whether they are aware or not, are often caught in the crossfire. Janne Taalas and Johannes Laaksonen ...

SPHERE SESSION | Johanna Småros on winning the algorithmic retail from 2022-09-26T08:07:13

Co-founder & CMO at RELEX Solutions, Johanna Småros, joined us in our cyber sauna recording booth at SPHERE22, the world's first co-security uncon...

SPHERE SESSION | Matthew Rosenquist on why value is the cybersecurity blindspot from 2022-09-13T06:44:23

CISO and cybersecurity Strategist, Matthew Rosenquist, joined us in our cyber sauna recording booth at SPHERE22, the world's first co-security unc...

068|The other TTPs: Tools, technologies, and people from 2022-09-07T07:20

In this episode, we’re joined by Frank Fransen, Senior Scientist in Cyber Security at TNO, and Technical Coordinator of the EU’s SOCCRATES project, which is developing a new cybersecurity-orient...

SPHERE SESSION | Sari Stenfors on AI, humanness and positive futures from 2022-08-19T08:33:19

Serial entrepreneur, scientist and futurist, Sari Stenfors, joined us in our cyber sauna recording booth at SPHERE22 Listen

SPHERE SESSION | Risto Siilasmaa on trust as the building block for businesses from 2022-08-09T08:09:27

Chairman and Founder of F-Secure & WithSecure, Risto Siilasmaa, joined us in our cyber sauna recording booth at SPHERE...

SPHERE SESSION | Christine Bejerasco on the development of ransomware from 2022-07-29T08:42:25

WithSecure CTO, Christine Bejerasco, joined us in our cyber sauna recording booth at SPHERE22, the world's first co-...

067| How Mikko Hypponen learned to stop worrying and love the internet from 2022-07-14T18:10:06

Mikko Hyppönen is one of the world's most renowned cyber security experts and has investigated cybercrime for over 25 years. From the days of naughty, nuisance, but ultimately harmless viruses t...

SPHERE SESSION | Simone Giertz on building useless things from 2022-07-11T08:24:38

Swedish inventor and world-famous YouTuber, Simone Giertz joined us in our cyber sauna recording booth at SPHERE22...

SPHERE SESSION | Carole Cadwalladr on threats to democracy from 2022-06-30T10:56:23

TED speaker and Pulitzer-nominated journalist Carole Cadwalladr joined us in our cyber sauna recording booth at SPHERE...

SPHERE SESSION | Philip Ingram on nation-state threats from 2022-06-13T18:24:40

Spymaster-turned-journalist Philip Ingram joined us in our cyber sauna recording booth at SPHERE22, the world's firs...

066| Co-security: collaboration, cooperation and cyber security from 2022-04-05T10:41:34

There’s many different ways to collaborate on infosec problems. There’s no shortage of associations, conferences, and other frameworks that organizations can use to find others to work with. And...

065| Security for non-profit organizations from 2022-02-28T13:12:56

Non-profit organizations play a crucial role in our well-being. In many parts of the world, they’re a major source of education, health care, social services, and more. And while they’re not in ...

064| 2021, 2022 and beyond - Part 2 from 2022-01-24T13:28:56

With 2021 now behind us, it’s time to revisit the highs and lows of the past 12 months, and look ahead to what we can expect in the months ahead. To mark the year’s end, we recorded a special tw...

063| 2021, 2022 and beyond - Part 1 from 2021-12-29T12:40:20

2021 is drawing to a close, and it’s time to look back on the events of the past year. At the same time we look ahead to the brand new year to come. Welcome to part one of a special two-part epi...

062| Log4j Zero Day: What It Means for Your Org from 2021-12-14T16:41:30

The remotely exploitable Log4j zero day vulnerability disclosed just a few days ago has been called one of the most serious vulnerabilities to date. So what is it all about, and what does it mea...

061| AppSec, According to Two Guys Named Antti from 2021-11-24T18:35:19

The topic of application security has never been more important. So how are companies approaching appsec? What should companies do to ensure appsec gets the attention it needs? Listen

060| Biometrics: Privacy, Problems and Possibilities from 2021-11-02T19:55:06

Biometrics have gotten a lot of attention in recent years. Biometric authentication systems have the potential to take the place of passwords, streamlining the user login experience. But there a...

059| Keeping Your Latest Tech from Becoming the Latest Threat from 2021-10-11T19:15:04

Cyber crime is a constantly evolving game. As soon as new technology is introduced, attackers start figuring out how to exploit it for malicious purposes. No one understands this better than F-S...

058| Paths to Infosec: From ER to IR from 2021-09-20T19:38:24

Data breaches and other security incidents have become a frequent, severe problem for organizations. But with incident responders in short supply, there are fewer professionals available to help...

057| Dark Web: The Good, the Bad, and the Ugly from 2021-08-17T15:17:05

After data breaches and ransomware attacks, we often hear that customer information was leaked to the dark web. This obviously can have serious implications for both companies and individuals, b...

056| To Ban or Not to Ban? Ransomware Payment Regulation from 2021-07-15T19:28

Ransomware payment amounts have skyrocketed over the past year. As threat actors keep getting richer, they have more resources to fuel their operations. Many people argue that the way to discour...

055| When AI Goes Awry from 2021-06-23T18:21:17

AI and machine learning are shaping our online experience, from product recommendations, to customer support chatbots, to virtual assistants like Siri and Alexa. These are powerful tools for ena...

054| Ransomware Incident Response and the Role of Readiness from 2021-05-27T18:48:35

The fallout from a ransomware attack is every organization's worst nightmare. But it doesn't necessarily have to be, if you can respond to an attack effectively. As our guests explain, there are...

053| How to Secure Networks and Influence People from 2021-04-28T18:02:53

The role of a chief information security officer demands technical knowledge, but it also requires soft skills of leading and influencing - especially over the past year as cybersecurity has gro...

052| Challenges in Cloud Security from 2021-04-06T19:10:19

Cloud computing was one of the last decade's most transformative technologies. It helped organizations launch exciting new applications and services, as well as innovate the way they operate. Ho...

051| Looking at Phishing Through the Intrusion Kill Chain from 2021-03-11T17:12:08

Phishing is the number one vector leading to data breaches. It's an easy, effective way for attackers to trick users into giving up credentials or running malicious code. While organizations can...

050| Getting the Most out of Infosec Conferences from 2021-02-18T15:56:58

Infosec conferences give cybersecurity professionals a chance to network, hear the latest research, exchange ideas, and demo hacks and new tools. But with so many conferences, how do you decide ...

049| Ransomware 2.0, with Mikko Hypponen from 2021-01-19T20:31:07

We thought locking up data and demanding a ransom to decrypt it was bad. But ransomware criminals have stooped even lower and now, threats of public data exposure on top of multimillion-dollar r...

048| The Year in Cyber: 2020 from 2020-12-30T08:44:51

2020 has been a year no one predicted. COVID-19 made remote work the norm and shook up the attack landscape. Through it all, breaches and ransomware attacks continued to plague organizations. In...

047| The Tangled Web of ID Theft from 2020-12-09T20:36:25

With the holiday season upon us, the already accelerated pace of online shopping is picking up even more. And more online transactions means more reasons to be careful about protecting your data...

046| 10 Burning Mobile Security Questions, Answered from 2020-11-12T20:32:38

Is iOS really more secure than Android, and why? What are the pros and cons of biometric authentication? How can you know which apps are safe to use, anyway? In this episode we dive into a range...

045| The Most Frightening Thing About Stalkerware, with Eva Galperin from 2020-10-05T16:17:52

You know about malware, ransomware, spyware. But there's an increasing concern about stalkerware, a creepy breed of apps that allow someone else to digitally monitor you. What is stalkerware all...

044| 2020 in Cyber Threats, So Far: COVID-19's Effects, Ransomware's Latest Tricks from 2020-09-17T17:52:42

It's a year like none we've ever experienced. COVID-19's effects have reverberated around the world, and around cyberspace. What's been happening in the threat landscape while we were all preocc...

043| Paths to Infosec: Military Vs. Psychology from 2020-08-24T18:29:15

There is no one set path to a cybersecurity career, and today's guests have arrived in the field in very different ways. Logan Whitmi...

042| The Encryption Debate Rages On from 2020-07-30T12:28:55

Encryption plays a critical role in protecting our data from hackers and theft. But at the same time, it presents a challenge for law enforcement when it comes to their work catching dangerous c...

041| The Ethics of Red Teaming from 2020-06-29T18:58:18

Red team testing is somewhat intrusive by nature, as it involves breaking into companies - albeit at their request - to help them improve their security. Red teamers must bluff their way past re...

040| Can Contact Tracing Apps Preserve Your Privacy? from 2020-05-27T16:56:46

Contact tracing is a key strategy for preventing the spread of COVID-19, and smartphone-assisted contract tracing automates a laborious process. But contact tracing technologies face criticism f...

039| Deconstructing the Dukes: A Researcher's Retrospective of APT29 from 2020-05-06T18:50:54

APT29, aka Cozy Bear or the Dukes, is a cyber espionage group whose misdeeds include famously hacking into the DNC servers in the run-up to the 2016 US election. Now, as the subject of MITRE's l...

038| Mikko Hypponen on Zoom, COVID-19 Threats, and Working During a Pandemic from 2020-04-16T16:53:24

It's the topic on everyone's minds: The new state of our world amid and after a global pandemic. Mikko Hypponen, F-Secure...

037| COVID-19 and Your Company's Security: The CISO Speaks from 2020-03-24T19:04:13

In infosec we're used to news about digital virus infections and outbreaks. But the new coronavirus is turning the real world upside down. In many countries, it's changing the way of life for th...

036| From Stuxnet to WannaCry to Coinhive, The Past Decade Was All Over The Place from 2020-03-16T16:56:48

2020 marks the start of a new decade. But it's also worth taking a look back at where we've come from and what has changed in infosec. F-Secure's Listen

035| Threat Hunting&Why It's All About People from 2020-02-19T16:51:25

Threat hunting has become a buzzword in the industry ...

034| Balancing AI: Privacy, Misuse, Ethics and the Future from 2020-01-29T18:06:30

While AI and machine learning are enabling definite advances in the digital world, these technologies are also raising privacy and ethical concerns. What does AI mean for personal privacy, and i...

033| Cyber Security Education from Student and Teacher Perspectives from 2020-01-08T21:10:40

Cyber security has never been a hotter field to get into, but how do you gain the skills needed for landing a job? There are various paths to a cyber security career, from a formal university ed...

032| How California's New Privacy Law Strikes Where the Pain Is from 2019-12-04T19:13:08

Following in the footsteps of GDPR, the US is seeing more progressive data privacy laws coming down, with the new California Consumer Privacy Act leading the charge. What does the CCPA mean for ...

031| Filtered&Fragmented: Is True Internet Freedom a Thing of the Past? from 2019-11-12T22:31:08

The internet seems to be changing from being a relatively unrestricted space into something more regulated. More countries are implementing policies that restrict or filter the way their citizen...

030| Talking Infosec to Non-Infosec Folks from 2019-10-22T15:31:17

Cyber security is relevant for everyone. Not everyone realizes it though, and not everyone understands what those in the infosec industry take for granted. How should security-minded individuals...

029| Ask a Hacker: Red Teamer Answers Listener Questions from 2019-09-25T19:15:03

In this episode, veteran hacker and red teamer Tom Van de Wiele answers questions from our listeners. Tom covers the ethi...

028| When the Well is Poisoned: The Devastation of Supply Chain Attacks from 2019-08-29T16:35:02

Supply chain attacks are on the increase, with attackers abusing the trust we place in vendors and software. Why are these attacks growing, and what can companies do about them? Listen

027| The Connected Home Meets the IoT Tire Fire from 2019-08-03T14:06:34

The modern home is continually getting more connected. But as much as we love our virtual assistants, smart thermostats and cloud-enabled security cameras, are we really aware of the risks they ...

026| Safe Browsing&Secure Web Development from 2019-07-04T14:36:29

"Don't go to shady websites" was the advice people were given back in the day. But now it's not always possible to tell when you're in danger, as even reputable websites can be compromised. So h...

025| The Psychology of Phishing from 2019-06-12T06:47:21

Phishing is one of today's biggest cyber security issues, a go-to tactic for threat actors. It's simple and effective, and perhaps that's why it has become such a source of frustration for compa...

024| GDPR, One Year Later from 2019-05-15T14:01:43

One year ago, the EU General Data Protection Regulation (GDPR) came into effect, fundamentally changing the way businesses handle data. The GDPR forced companies to scramble to comply or face pe...

023| Electronic Voting&Why it's So Hard to Get Right from 2019-04-23T19:40:02

Cyber security is always a hot topic during election seasons, and various elections are being held in Europe and around the world this spring. As digitally enabled as the world is, shouldn't we ...

022| Pro-Brexit Twitter Views Amplified by the Global Far Right from 2019-04-02T17:45:40

The pro-leave side of the Brexit debate is getting support from far-right Twitter users based outside the UK. After investigating 24 million Brexit-related tweets, that's the conclusion Listen

021| The Cloud: Security Benefits, Risks&Why You Should Use It from 2019-03-14T20:36:28

The cloud has changed the way we do business and the way we develop and deploy software and infrastructure. What are the security benefits of moving to the cloud, and what are the special concer...

020| Defining Cyber Warfare, with Mikko Hypponen from 2019-02-11T17:22:29

Cyber war is a term we often hear tossed about, but is it just science fiction, or is it ...

019| The Best Defense is Good Offensive Security from 2019-01-23T04:14:12

They say that the best defense is a good offense, as football fans or anyone that’s played a game of Risk might agree. But how does this idea look when you apply it to cyber security? F-Secure P...

018| Online Dating and Trading Data for Love (It's Complicated) from 2018-12-26T19:01:54

If you're looking for love nowadays, you'll likely turn to an online dating app. But what do these apps mean for your security? What privacy concessions are you making when you swipe? How does y...

017| Year in Cyber: Forecasting 2019, Recapping 2018 from 2018-12-10T16:06:47

2018 is winding to a close and the new year is just around the corner. What's in store for 2019 in cyber security? In this episode, five experts talk about exactly that, and discuss notable tren...

016| Endpoint Protection&Beyond from 2018-11-19T21:10:46

Endpoint protection has been the trusted backbone of many companies' security. But with...

015| Election Security, US Midterm Edition: The Big Picture from 2018-10-29T06:04:03

Democracy in the digital age is a wonderful yet wild beast. When it comes to electing our leaders nowadays, we're faced with questions about how to escape the influence of malicious actors. With...

014| Reinventing the Cold Boot Attack: Modern Laptop Version from 2018-10-08T19:38:51

Should your laptop ever get stolen and fall into the wrong hands, you would probably be comfortable in the knowledge that the data on it is protected by full disk encryption. But what if a malic...

013| Passwords: A Hacker's Take on Cracking&Protecting Your Creds from 2018-09-14T17:33:01

Passwords. You plug them into your accounts and the services you use at work, you try little tricks to make them more unique, but have you ever wondered what a hacker thinks of your passwords? F...

012| Adventures in Red Teaming from 2018-08-23T18:08:48

How can companies know if their security investments are actually working? Getting atta...

011| The Rise of AI and Deliberate Deception from 2018-08-02T16:29:12

Disinformation. Fake news. Social media manipulation. Lately another dark side of the internet has come into focus - its use as a tool for deception. Technologies like machine learning and artif...

010| Ransomware Out, Cryptojacking In? Latest Cybercrime Trends from 2018-07-09T22:52:18

Over the past few years, ransomware stole headlines as the biggest malware threat to worry about. Consumers and businesses alike were being hit and forced to shell out money to retrieve their fi...

009| Top OpSec Tips for Vacation Travel from 2018-06-21T16:48:35

The summer holiday season is upon us, and people are looking forward to trading their daily workplace grind for a new adventure. Traveling is always exciting, but it takes you out of your comfor...

008| GDPR is Live. What Now? from 2018-05-31T16:38:13

After months and months of anticipation, the May 25 deadline has passed and the GDPR is finally in effect. Companies around the world are being held to strict new standards for protecting the da...

007| Popping Hotel Locks: The Hard Truth About Hacking from 2018-05-09T16:15:48

When people look for logos or symbols that emanate security, they often choose a lock. Sure, we know locks can be picked. But what would the world look like if attackers could just walk in witho...

006| Spring Cleaning for Opsec from 2018-04-26T22:33:17

Operational security is about turning the tables, looking at things from an attacker's point of view, and identifying how your own actions are making you vulnerable. Listen as Listen

005| Demystifying Hardware Security, with Andrea Barisani from 2018-03-29T14:30:39

With the disclosure of Meltdown and Spectre early this year, hardware security has come into focus. What are the special challenges of securing hardware versus software? What about securing high...

004| Security, Privacy and the IoT, with Steve Lord from 2018-03-08T22:07:31

The Internet of Things promises futuristic smart homes, energy savings and efficiencies, and improvements to health and well-being. But the IoT still has a long way to go before we can safely en...

003| Data Breaches: Bridging the Gap from 2018-02-13T22:39:29

Data breaches. They're every organization's worst fear. Why are companies so ill-prepared, and what are companies missing in their approach to data breaches? Host Janne Kauhanen is joined by Listen

002| Breaking Into Infosec: Advice from an Ethical Hacker from 2017-12-21T22:16:23

Between zero day news flashes and stunt hacking reports, there are a lot of false conceptions about what it's like to be an infosec professional. So what should you...

001| Antivirus in the Hot Seat, with Mikko Hypponen from 2017-11-30T07:22:15

The recent allegations against Russian antivirus vendor Kaspersky have prompted wider questions about antivirus in general - how it operates and what sort of data it collects from customer machi...