TWiET 567: Lost in Translation - Boosting security hygiene, DNS security with Infoblox

TWiET 573: DNS Deep Dive Part 3: Exploring Internal DNS and AD - KV-Botnet, Internal DNS Security, and Farewell Episode

The TWiET crew delves into botnets, securing hybrid work environments, the future of DNS architecture, and more.

News Blips:

• Researchers uncover sophisticated IoT botnet named "K- Botnet" targeting US entities; linked to Chinese state-aligned hackers
• AI startup Vanta (a TWiT.tv Sponsor) launches AI suite to automate repetitive security and compliance tasks
• DARPA funds revolutionary laser-based aerial energy delivery system for military operations
• Networking company Cradlepoint acquires SASE vendor ERA to provide a potential combined 5G and zero-trust networking solution

DNS Deep Drive Part 3 with DNS Expert Josh Kuo and Principal Solutions Architect of Infoblox Ross Gibson

• Internal vs external DNS; differences in intended audience and integration
• Decoupling DNS services from domain controllers for stability
• Namespace planning tips; use owned domains, avoid random internal TLDs
• Encrypted DNS tradeoffs; privacy vs. visibility for security teams
• DNS security options like RPZ for control over internal resolution
• Future DNS role predictions like firewall integration and threat intel protections

The episode concludes with the announcement that the long-running show will be coming to an end after 12 years of enterprise content.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guests: Josh Kuo, Ross Gibson, and Leo Laporte

Help support TWiT by joining Club TWiT at https://twit.tv/clubtwit

Sponsors:

• GO.ACILEARNING.COM/TWIT
• vanta.com/ENTERPRISE
• Miro.com/podcast

TWiET 572: DNS Deep Dive Part 2: External Authoritative DNS - Journey into the Heart of the Domain Name System

• Proxy trojan targets macOS users for traffic redirection
• Indoor navigation has had a slow start
• Krasue RAT uses cross-kernel Linux rootkit to attack telecoms
• U.S. approves first gene-editing treatment, Casgevy, for sickle cell disease
• The DNS Deep-Drive continues with guests Josh Kuo, DNS expert, and Ross Gibson, Principal Solutions Architect of Infoblox, to talk about external authoritative DNS - whether enterprises should fully manage their own external DNS or use managed services, threats like domain hijacking, using load balancers, and more.

Hosts: Curtis Franklin and Brian Chee

Guests: Josh Kuo and Ross Gibson

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• canary.tools/twit - use code: TWIT
• lookout.com
• vanta.com/ENTERPRISE

TWiET 571: DNS Deep Dive Part 1: Demystifying DNS - Enterprise DNS basics

• Hackers Can Easily Extract ChatGPT Training Data
• Cheebert's prediction about VDI just came true
• Big Tech jobs are not as immune to layoffs as we thought
• Siemens PLCs are Still Vulnerable to Stuxnet-like Cyberattacks
• Josh Kuo, DNS Expert and Ross Gibson, Principal Solutions Architect of Infoblox join Brian Chee and Curt Franklin for part 1 of a 3 part in-depth primer on enterprise DNS, from the basics of DNS lookup, key considerations like security and encryption, and why run your own DNS versus other free alternatives?

Hosts: Brian Chee and Curtis Franklin

Guests: Josh Kuo and Ross Gibson

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• kolide.com/twiet
• bitwarden.com/twit
• GO.ACILEARNING.COM/TWIT

TWiET 570: Well-Placed Friction - EU's NIS2 Directive, better UX for DevOps w/ LaunchDarkly

• Ransomware group reports a victim company to the SEC for failing to promptly disclose a breach.
• Shadowy hack-for-hire group behind sprawling web of global cyberattacks
• Electrical arc detection devices that can prevent dangerous home fires caused by faulty wiring.
• The worst passwords of 2023
• The NIS2 Directive: The first piece of EU-wide legislation on cybersecurity
• Jenna Bilotta of LaunchDarkly joins to discuss transforming DevOps tools with better user experiences.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Jenna Bilotta

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• Miro.com/podcast
• lookout.com
• nureva.com/twit

TWiET 569: Are Your Patches trackd? - Bridging the cybersecurity skills gap, vulnerability and patch management with TrackD

• CISA Alerts: High-Severity SLP Vulnerability currently being exploited.
• ChatGPT outages attributed to DDoS activity.
• Gen Z and Millennial employees are a bigger cybersecurity risk than older employees.
• Security firm finds highly invasive malware hidden in software developer tools.
• Strategies for bridging the cybersecurity skills gap.
• Mike Star, CEO and founder of trackd talks about managing patches and how the community can help preventing disruption from bad updates.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Mike Star

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• GO.ACILEARNING.COM/TWIT
• paloaltonetworks.com/ot-security-tco
• canary.tools/twit - use code: TWIT