-
Listen Now
EPISODE 217
Broadcast Date:
April 14, 202224 minutes
Podcast Apr 14, 2022Root Causes 217: What's the Deal with the Recent Okta Security Breach?
A hacking group recently announced a breach of Okta systems, potentially compromising Okta customers. We walk through the attack and its significance.
-
Listen Now
EPISODE 216
Broadcast Date:
April 11, 202211 minutes
Podcast Apr 11, 2022Root Causes 216: What Is crt.sh?
A foundational tool for monitoring public SSL certificates is crt.sh. We explain what crt.sh does and why it is so popular with SSL industry watchers.
-
Listen Now
EPISODE 215
Broadcast Date:
April 8, 202224 minutes
Podcast Apr 08, 2022Root Causes 215: Passwordless Authentication and Legacy Systems
Those using passwordless authentication frequently employ legacy systems that cannot support this scheme. We detail steps to mitigate this problem.
-
Listen Now
EPISODE 214
Broadcast Date:
April 5, 202211 minutes
Podcast Apr 05, 2022Root Causes 214: New DUO MFA Flaw Explained
A recent FBI warning cautions organizations about exploits based on misconfigured DUO MFA. We explain this exploit and why it is noteworthy.
-
Listen Now
EPISODE 213
Broadcast Date:
March 31, 20228 minutes
Podcast Mar 31, 2022Root Causes 213: 600-domain Phishing Attack
A recent phishing campaign encompassed 600 unique domains. We discuss the implications of a campaign of this scale and high level of organization.
-
Listen Now
EPISODE 212
Broadcast Date:
March 28, 202211 minutes
Podcast Mar 28, 2022Root Causes 212: S/MIME Limited to Three Years
On April 1 new root program requirements from Apple for S/MIME certificates go into effect, including a limitation of the allowable term to three years.
-
Listen Now
EPISODE 211
Broadcast Date:
March 14, 202214 minutes
Podcast Mar 14, 2022Root Causes 211: Does CLM Make Wildcard and MDC Irrelevant?
We weigh the degree to which Certificate Lifecycle Management (CLM) renders the benefits of wildcard and multi-domain certificates obsolete.
-
Listen Now
EPISODE 210
Broadcast Date:
March 8, 20227 minutes
Podcast Mar 08, 2022Root Causes 210: Living off the Land
Microsoft has deprecated support for the popular sysadmin tool WMIC. Join our hosts as they explain why and the broader lessons we can learn.
-
Listen Now
EPISODE 209
Broadcast Date:
March 1, 202221 minutes
Podcast Mar 01, 2022Root Causes 209: One-Day Deployment of CLM
For any Certificate Lifecycle Management platform to succeed, effective deployment is essential. We describe the optimal onboarding process, step by step.
-
Listen Now
EPISODE 208
Broadcast Date:
February 24, 202210 minutes
Podcast Feb 24, 2022Root Causes 208: HD Radio Error Bricks Automotive Information Systems
Recently automobile infotainment systems were permanently "bricked" by a HD radio flaw. Our hosts describe what happened and the lessons we can learn.
-
Listen Now
EPISODE 207
Broadcast Date:
February 21, 202219 minutes
Podcast Feb 21, 2022Root Causes 207: Former Gartner Analyst Jumps on the Playing Field
Gartner analyst David Mahdi explains the reasons for his optimism about digital trust, including NFTs, Web3, blockchain, PKI, and Zero Trust.
-
Listen Now
EPISODE 206
Broadcast Date:
February 14, 202233 minutes
Podcast Feb 14, 2022Root Causes 206: What Is Web3?
Web3 refers to the concept that online content can be attributed to specific known publishers, regardless of web site or online channel.