Episodes

  • Finding Misconfigurations Before Attackers Do

    Finding Misconfigurations Before Attackers Do
    Jul 17 2026
    Misconfigurations are one of the quietest but most common ways attackers get a foothold, especially in cloud, identity, and hybrid environments. In this narrated Insight, we walk through security misconfiguration detection in clear, practical language: what it is, where it sits in your stack, and why it matters so much for real-world defense. You will hear how configuration data, baselines, and workflows come together to turn vague concern into specific, fixable issues instead of endless dashboard noise. The narration is based on my Tuesday “Insights” feature in Bare Metal Cyber Magazine, developed by Bare Metal Cyber.
    Show More Show Less
    11 mins
  • Secure Coding Foundations and the Bugs Attackers Love

    Secure Coding Foundations and the Bugs Attackers Love
    Jul 17 2026
    Most security incidents do not start with sophisticated zero-day exploits; they begin with very normal bugs in very normal code. In this episode, we walk through Secure Coding Foundations as a practical way to stop the everyday mistakes attackers quietly rely on. You will hear how small choices around input handling, database access, error messages, and logging add up to big differences in risk. The language stays vendor-neutral and beginner-friendly, so whether you write code, review it, or support the systems it runs on, you can follow along and connect these foundations to your own environment.
    Show More Show Less
    14 mins
  • Making Sense of Cloud IAM Accounts and Roles

    Making Sense of Cloud IAM Accounts and Roles
    Jul 17 2026
    Cloud permissions should not feel like a guessing game. In this narrated Insight, we walk through the essentials of Cloud Identity and Access Management (Cloud IAM) in a way that makes sense for working security and IT professionals. You will hear how accounts, roles, and policies fit together, where Cloud IAM actually lives in your cloud stack, and what it means to apply least privilege when multiple teams, projects, and environments are all moving at once. The goal is to give you a mental model you can reuse, not just another checklist.
    Show More Show Less
    14 mins
  • Getting Accounts, Roles, and Least Privilege Right in the Cloud

    Getting Accounts, Roles, and Least Privilege Right in the Cloud
    Jul 17 2026
    Cloud Identity and Access Management (IAM) can feel like a maze of accounts, roles, and policies, especially once your cloud footprint starts to grow. In this audio version of my Tuesday “Insights” feature from Bare Metal Cyber Magazine, we walk through Cloud IAM from the ground up, focusing on how it really works in the major platforms rather than vendor marketing language. You will hear how IAM fits alongside things like single sign-on and multi-factor authentication, and why it sits at the heart of “who can do what” in your environment.
    Show More Show Less
    12 mins
  • SaaS Security Essentials for Cloud-First Teams

    SaaS Security Essentials for Cloud-First Teams
    Jul 17 2026
    Software as a Service (SaaS) has become the default way many teams get work done, but that convenience comes with a messy tangle of accounts, data flows, and vendor relationships. In this narrated edition of our Tuesday “Insights” feature from Bare Metal Cyber Magazine, we walk through what SaaS security really is, where it fits in your environment, and why it matters for anyone trying to keep risk under control while the business keeps adopting new tools. You will hear how SaaS security shifts the focus from servers and networks to visibility, access, and vendor posture, and why the line between “their responsibility” and “our responsibility” is still critical to understand.
    Show More Show Less
    13 mins
  • From Endpoints to Ecosystem – API Security for Microservices

    From Endpoints to Ecosystem – API Security for Microservices
    Jul 17 2026
    When your organization embraces microservices, every new service usually brings another application programming interface (API) to protect. This narrated Tuesday “Insights” episode from Bare Metal Cyber Magazine walks through API security for microservices architectures in plain language, focusing on how all those small pieces change your attack surface. You will hear where API security really lives in the stack, how it connects to gateways, identity, and service-to-service trust, and why internal APIs often matter just as much as public ones. The goal is to give you a clear mental picture you can carry into your own environment.
    Show More Show Less
    14 mins
  • SPF, DKIM, DMARC and the Battle Against Email Spoofing

    SPF, DKIM, DMARC and the Battle Against Email Spoofing
    Jul 17 2026
    Email spoofing sits at the center of so many phishing campaigns, and SPF, DKIM, and DMARC email authentication give you a way to push back with clear, technical signals instead of wishful filtering. In this audio Insight, we walk through what SPF, DKIM, and DMARC email authentication actually are, why they matter to anyone responsible for mail flow, and where they sit in your stack. You will hear a vendor-neutral tour of the moving parts, from DNS records and keys to alignment and policy, so the acronyms start to map cleanly to what you see in real email headers and logs.
    Show More Show Less
    12 mins
  • Security Metrics That Actually Matter to the Business

    Security Metrics That Actually Matter to the Business
    Jul 17 2026
    Many security teams are flooded with data but still struggle to explain to leaders what is actually getting safer, what remains exposed, and where new investment will change the story. This narrated audio Insight explores security metrics that matter by focusing on a small, well-chosen set of measures that translate technical work into clear business language. You will hear how to move from raw counts and tool-specific dashboards to metrics that align with how your organization already talks about risk, resilience, and value. The narration is based on my Tuesday “Insights” feature from Bare Metal Cyber Magazine, adapted for a calm, spoken walkthrough.
    Show More Show Less
    11 mins