The cyber weekly

Welcome back to The Cyber Weekly! In this episode, Deo sits down with Kago Ezekiel Setshogo, a SOC Analyst at Augmenta Cybersecurity. Kago brings a rare and fascinating perspective to the table: combining Lean Six Sigma process engineering with hands-on SOC analysis to eliminate operational noise and streamline triaging. Whether you're a seasoned security professional looking to optimize your team's workflow, or an aspiring analyst trying to break into the industry, Kago shares actionable insights on building virtual labs, mastering frameworks like NIST and ISO, and understanding your own strengths through psychometric testing. Make sure to like, subscribe, and hit the notification bell so you never miss an episode! ⏳ Timestamps: 00:00 Intro: Meet Kago Ezekiel Setshogo 02:22 Transitioning from System Administrator to SOC Analyst 05:38 The hardest barrier when moving to a SOC role 10:31 What is Lean Six Sigma and how does it apply to cybersecurity? 15:32 Process Engineering in a SOC context explained 20:02 Integrating NIST, ISO, and other frameworks into daily operations 24:29 Advice for breaking into the cyber industry: Homelabs & Portfolios 29:48 Future projects, mentorship, and final advice 🔗 Links & Resources Mentioned: Watch the full episode: https://youtu.be/T0wHoyta1xk Connect with Kago Ezekiel: https://www.linkedin.com/in/kago-ezekiel-setshogo/ NIST Cybersecurity Framework: https://www.nist.gov/cyberframework ISO/IEC 27001: https://www.iso.org/isoiec-27001-information-security.html Lean Six Sigma Resources: https://asq.org/quality-resources/six-sigma Microsoft Azure Training: https://learn.microsoft.com/training/azure/ AWS Training and Certification: https://aws.amazon.com/training/ SANS Institute Training: https://www.sans.org GIAC Cybersecurity Certifications: https://www.giac.org ISC2 Entry-Level Certification: https://www.isc2.org/certifications/cc Hashtags: #TheCyberWeekly #CyberSecurity #SOCAnalyst #ProcessEngineering #LeanSixSigma #InfoSec #TechCareer 💼 LinkedIn Title: Why do most security breakdowns stem from process failures, rather than technology? 🤔 Body: Installing a firewall doesn't automatically make you secure. In our latest episode of The Cyber Weekly, we explore how the real secret to a robust defense lies in process engineering. I had a fantastic conversation with Kago Ezekiel Setshogo, who transitioned from a System Administrator to a SOC Analyst. He brought an incredible framework with him: Lean Six Sigma. We discussed: 🔹 How to eliminate operational noise in a SOC. 🔹 Mapping daily workflows to NIST and ISO frameworks. 🔹 Why building virtual labs is the best way to land your first cyber role. If your security operations feel chaotic, you need to hear Kago’s breakdown of how to automate and optimize your incident response from step A to Z. 📺 Watch the full interview here: https://youtu.be/T0wHoyta1xk What processes in your daily workflow do you think could benefit from a "Lean" overhaul? Let me know below! 👇 #CyberSecurity #InformationSecurity #SOC #LeanSixSigma #ProcessEngineering #TheCyberWeekly #TechCareers

Can you trust a digital forensics tool simply because it displays results on a dashboard? Not according to digital forensics professional Julian Derry. In this episode of The Cyber Weekly, Julian joins Deo Okello to explain why investigators must go beyond graphical interfaces and independently validate digital evidence. 🔍 In this episode, you'll discover: ✅ Why digital forensics tools can produce misleading results. ✅ How to validate evidence using raw data and multiple tools. ✅ How to investigate timestamp manipulation and anti-forensics. ✅ Why hands-on virtual labs are essential for learning. ✅ How to build a cybersecurity portfolio without expensive certifications. ✅ Why AI assistants and cloud platforms matter in future investigations. ✅ The practical tools, habits, and communities that help digital forensics professionals grow. Chapters 00:00 Welcome and guest introduction 02:02 Why digital forensics? The missing left shoe story 👟 04:23 From bank hardware support to security 06:45 Breaking into forensics beyond the textbooks 11:16 Why you can't trust the GUI 13:23 Case study: when the MFT tool misbehaved 17:17 Detecting time stomping (anti-forensics) 19:53 Android, iOS, macOS and Linux: same principles 21:08 Why forensics is reactive 21:42 Standing out without expensive certifications 25:59 Emerging evidence: AI assistants and the cloud ☁️ 28:08 Quick fire: 5 tools every analyst needs 33:07 Where to follow Julian's work (X, GitHub, Hive Consult) 38:02 Closing 💡 Julian's advice to aspiring professionals: Build your skills, document your findings, and show your work publicly. 🎙️ Whether you're a cybersecurity student, SOC analyst, digital forensics enthusiast, or experienced investigator, this conversation will challenge how you think about digital evidence. 👍 Like, comment, and subscribe to The Cyber Weekly for conversations that make cybersecurity careers and expertise easier to understand. 💬 QUESTION:Have you ever encountered a tool that produced unexpected results? What did you do? #TheCyberWeekly #DigitalForensics #CyberSecurity #DFIR #DigitalEvidence #CyberSecurityCareers

🎙️ Welcome to The Cyber Weekly Podcast! In this episode, Deo Okello sits down with Venuste Niyodusenga, Senior Network Engineer at the National Bank of Rwanda. He holds CISSP, CCSP, CCNP, PMP and AWS Solutions Architect Professional credentials and has a Master's from Carnegie Mellon University Africa. He has 10+ years across IT, SCADA and industrial systems, and cybersecurity consulting. 🔥 In this episode you'll learn: ✅ Why perimeter-only security fails against stolen credentials and session cookies ✅ What identity-driven defense in depth looks like: MFA, least privilege, just-in-time access, device posture and AAA ✅ How to handle unpatched critical systems in a bank without causing an outage ✅ The biggest architectural shift African financial institutions must prepare for (hint: fighting AI with AI) ✅ How to break the "experience trap" and get into cybersecurity without waiting for permission

Ever feel stuck in a help desk role, wondering if cybersecurity is even reachable without a degree or years of "experience"? Grant Hughes was exactly there — until he sent one cold email that changed his career forever. In this episode of The Cyber Weekly Podcast, Grant Hughes (CISO at The Nascent Group, Founding President of the ISC2 Cape Town Chapter) breaks down: How he went from desktop support to CISO with zero security certs The exact conversation that got him his first break in security Why most security awareness training fails — and what actually works The real reason you don't need 5 years of experience to break in The one skill every newcomer needs right now 🔗 Connect with Grant Hughes: Portfolio: https://granthughes.co.za/ LinkedIn: https://www.linkedin.com/in/grant-hughes-52196569/ YouTube: https://www.youtube.com/@granthughes4989 🌍 African Tech Talent Support Project: https://isc2capetownchapter.com/africa-tech-talent-support-project/ 🏢 ISC2 Cape Town Chapter: https://www.linkedin.com/company/isc2-cape-town-chapter/ 💼 The Nascent Group: https://nascent.group/ LinkedIn: https://www.linkedin.com/company/nascent-group-global/ Chapters 00:53 Meet Grant Hughes: From help desk to CISO 02:05 The one takeaway Grant wants you to leave with 03:12 What pulled him from IT support into cybersecurity 04:56 The cold email that changed his life 08:39 What 6 years on the front lines taught him 10:40 Why the basics keep evolving 11:26 What security culture really means 16:44 Handling employee pushback and busy schedules 19:34 Why explaining "why" makes training stick (the password story) 20:15 No certs, no experience? Here's your path in 24:11 The power of networking (and why it beats applying blind) 26:14 AI, soft skills, and what's next for cybersecurity 30:00 Where to find Grant + the African Tech Talent Support Project

🚨 Most CISOs can explain every control on their stack but ask them what the business actually sells, and they go quiet. In this episode of The Cyber Weekly, Deo sits down with Jake Bernardes CISO at Gambit Security, ex-pen tester, chartered accountant, and a guy who learned Chinese and German before ever touching cybersecurity. We get into: 💰 The "Minimum Viable Business" framework for justifying security spend 🧩 Why GRC is broken (and how to fix the forgotten "R") 🤖 Which security roles AI will kill and which ones it can't touch 📜 Why Jake thinks certifications are mostly pointless 🌐 Why your network matters more than your CISSP 🎙️ Building leadership on transparency, vulnerability, and authenticity Here the links Random Access Memories: https://randomaccessmemories.io Jake Bernardes on LinkedIn: https://www.linkedin.com/in/jakeleobernardes/ Random Access Memories on YouTube: https://www.youtube.com/@RandomAccessMemoriesPod If you're in GRC, trying to break into cybersecurity, or leading a security team through the AI shift this conversation will change how you think about your career. 00:00 Intro: The Intersection of Chinese & Cybersecurity 01:19 Who is Jake Bernardes? 03:18 How Accounting Creates Better CISOs 04:14 The "Minimum Viable Business" & Proving ROI 08:26 Why GRC is Broken (And How to Fix It) 13:02 The Future of GRC Engineering & Automation 17:32 Why Cyber Certifications Are "Pointless" 19:24 AI is Killing Tier 1 SOC Jobs: What to do next 22:43 The 3 Pillars of True Leadership #TheCyberWeekly #CISO #Cybersecurity #GRC #RiskManagement #CyberCareers #InfoSec #CyberLeadership 🔐🎙️📈

In this episode of The Cyber Weekly Podcast, hosts Deogratius Okello and Angella Nabbanja sit down with Mădălin Bratu — General Manager and Founder of Sectio Aurea (operating under the brand Phi). Mădălin brings 20 years of experience across cybersecurity, governance, risk, and enterprise technology, sharing insights from his career at IBM, CA Technologies, and Eviden/Atos. He breaks down the realities of implementing frameworks like NIS2 and ISO 27001 in complex operational environments, why compliance must move beyond "paperwork security," and how he utilizes the expert-network model to deliver real-world security solutions. Whether you're starting out in GRC or looking to build your own consultancy, this conversation is packed with hard-earned lessons on compliance, operational friction, and building a resilient security program. 🎧 Connect with our guest: Personal LinkedIn: https://www.linkedin.com/in/madalin-bratu/ Company LinkedIn: https://www.linkedin.com/company/1-61803 Website: https://www.phi.ro #CyberSecurity 🔐 #SalesStrategy 💼 #Entrepreneurship 🚀 #TheCyberWeeklyPodcast 🎙️ #CareerAdvice 📈 #B2BSales 🤝 #CyberSecuritySales 🛡️ #Podcast 🎧

Only 40% of her company completed the annual security awareness training. Human error was the #1 risk on the register. So she stopped writing policies and started recruiting people. 👥 In this episode of The Cyber Weekly Podcast, Deo Okello sits down with Heather Reed — cybersecurity leader, Cyber Security Woman of the Year finalist, competitive cookie designer 🍪 and former Cookie Wars contestant on the Food Network. Heather came into security from marketing, people leadership and compliance, and she says that non-traditional path became her biggest advantage. She never carried the "Department of No" reputation, because she'd spent years on the other side of it. We get into: 🔹 How she built a cybersecurity ambassador network from 5 departments to 75 ambassadors — and hit 100% training completion 🔹 Why she chose the friendliest people in the business, not the most technical 🔹 The 4 years it took to bring 23 factories and 8,000 employees into the ISMS — and how they scored their best audit ever 🔹 What a real "yes, if" conversation sounds like when the business wants speed 🔹 Tabletop exercises that actually work (hint: ask your execs what keeps them up at night) 🔹 Handling DLP and insider risk without turning security into the police 🚔 🔹 AI agents, guardrails, and why security leaders should be talking to startups 🔹 Her honest answer to "did you ever feel you didn't belong?" — and why that question is only ever asked of women 🔹 Three things any security leader can do in the next 90 days to shift culture

⚠️ One overlooked technical issue could become a major financial, operational or reputational crisis. But what exactly is IT risk, and why do organizations invest so much in managing it? In this episode of The Cyber Weekly Podcast, Deo Okello sits down with IT risk and security professional Peter Muhumuza to break down IT risk in practical, easy-to-understand language. You will learn: 🔍 How technical weaknesses become business risks 📊 How organizations classify and track risks ⚖️ Which risks can be accepted and which require immediate action 🚀 How risk professionals support innovation without becoming “Mr. No” 🤝 Why third-party and vendor risk assessments matter ☁️ The risks created by cloud concentration and AI adoption ✅ Why passing an audit does not mean risk management is complete 📈 How technical professionals can begin transitioning into IT risk within 90 days Peter also explains why effective IT risk management is about more than fixing technical problems. It requires understanding business priorities, regulatory obligations, operational downtime and financial exposure. If you work in cybersecurity, IT, banking, fintech, audit, governance or risk management, this conversation is for you. 👍 Like this episode 💬 Share your biggest IT risk lesson in the comments 🔔 Subscribe to The Cyber Weekly Podcast for more practical cybersecurity conversations 📤 Share this episode with someone interested in IT risk #TheCyberWeekly #ITRisk #RiskManagement #Cybersecurity #InformationSecurity #GRC #ThirdPartyRisk #CloudSecurity #CyberRisk #ITGovernance

Think your company is too small for cybercriminals to care about? Think again. 🚨 On this episode of The Cyber Weekly, cybersecurity leader and vCISO Brandon Krieger breaks down what businesses need to understand about cybersecurity right now. We discuss: 🔐 What a fractional vCISO actually does 🤖 Why AI adoption needs security guardrails 🏢 Why small businesses are attractive targets 🛡️ The cybersecurity basics companies often overlook 🔎 Why every organization should consider a security gap assessment 📈 How cybersecurity professionals can work toward becoming a vCISO 💼 Why understanding business is just as important as understanding security Follow Brandon Krieger: https://www.linkedin.com/in/brandonkrieger/ Follow KNSS Consulting Group: https://www.knssconsulting.com Like and Follow our LinkedIn page: https://www.linkedin.com/company/thecyberweekly Like and Follow our X page: https://twitter.com/thecyberweekly Brandon makes an important point: cybersecurity professionals must understand the business they are protecting—not just the technology

Cybersecurity in the Cloud: The Hidden Threats and Future of Digital Defense If you’re managing cloud infrastructure or responsible for cybersecurity in a hybrid environment, overlooking emerging threats can leave your organization exposed before you even notice the gap. In this episode, Muhiire Bill, a seasoned IT security professional with nearly a decade in financial institutions, reveals the cloud security blind spots most teams miss. From misconfigured cloud resources and weak access controls to API vulnerabilities and social media reconnaissance, this conversation uncovers the real risks hiding behind “secure” systems. Bill also breaks down how organizations can balance usability, compliance, and protection without slowing the business down. You’ll learn: Why misconfigured cloud settings create massive breach risks How multi-factor authentication and role-based access can strengthen defenses Why API security is becoming one of the biggest threats in cloud environments How continuous compliance helps teams stay ahead of attackers Practical ways to align security with real-world operations If you work in IT, security, cloud operations, or leadership, this episode gives you the insight you need to avoid common mistakes and build a stronger security culture. Bill’s experience across financial and manufacturing sectors brings a practical, real-world perspective to one of today’s most important tech conversations. Stay ahead of the curve hit play now.

🎙️ Cyber Weekly | Episode with Brett (@infosecbret) What turns a kid whose family PC got wrecked by a boot sector virus into a security professional with 15+ years in IT and a Master's in Information Assurance? In this episode, host Deo Okello sits down with Brett to trace that path — and to talk honestly about what the job actually looks like once the "unicorns and rainbows" phase wears off. We get into why information assurance is really just cybersecurity with the spotlight on data, why AI is now the threat he worries about most, and what "doing the basics well" looks like in practice. 🔐 ⏱️ In this episode: - The Windows 95 floppy virus that started it all 💾 - IT → SOC analyst: how the transition actually happened - Information assurance explained (and why the CIA triad still matters) - Why phishing is still the risk that never goes away 🎣 - AI in the hands of ransomware gangs — and the well-meaning employee pasting production code into an LLM 🤖 - What Patch Tuesday teaches us about vulnerability management - Defenders have to be right 100% of the time. Attackers only need once. ⚔️ - Brett's top 3: go back to basics, patch all the things, invest in your people 📈 - The one takeaway: never stop learning 🧠 💬 Favourite line from the episode? Drop it in the comments. 👍 Like, subscribe, and hit the bell for weekly conversations on security, threats, and the people defending against them. 🔗 CONNECT WITH BRET X (Twitter): https://x.com/infosec_bret YouTube: https://www.youtube.com/c/BretWitt 📌 REFERENCED IN THIS EPISODE The "Mythos" story Bret mentions at ~10:00 — Anthropic's Claude Mythos 5 and Fable 5 launched June 9, 2026. On June 12 the US Commerce Department imposed export controls after researchers found a way to prompt the model into identifying software vulnerabilities and, in one case, producing working exploit code. Anthropic pulled both models globally. Controls were lifted June 30 and access restored July 1. - Anthropic's statement (June 12): https://www.anthropic.com/news/fable-mythos-access - Anthropic on restoring access: https://www.anthropic.com/news/redeploying-fable-5 - Forbes breakdown: https://www.forbes.com/sites/anishasircar/2026/06/16/anthropic-disabled-fable-5-and-mythos-5-after-a-us-export-control-order-heres-what-happened/ - CNBC on controls being lifted: https://www.cnbc.com/2026/06/30/anthropic-says-trump-admin-has-lifted-export-controls-on-claude-fable-5-and-mythos-5.html #CyberSecurity 🔐 #InfoSec 🛡️ #InformationAssurance 📊 #CyberWeekly 🎙️ #SecurityPodcast 🎧 #SOCAnalyst 👨‍💻 #Ransomware 🚨 #Phishing 🎣 #AISecurity 🤖 #PatchTuesday 🩹 #VulnerabilityManagement ⚠️ #ThreatIntelligence 🕵️ #ITCareers 📈 #CyberCareers 🚀 #BlueTeam 🔵 #SupplyChainAttack ⛓️ #TechPodcast 🎬 #NeverStopLearning 🧠 #CyberAwareness 👁️

Ever felt like your compliance checks are just a checkbox exercise? 📝 It's time to rethink the way we approach governance! Tag someone who needs to hear this! 👇 Today, I sat down with Pierre Paul, a GRC expert who believes governance should live *inside the code*, not just above it. He's challenging the status quo, building AI compliance tools that could revolutionize how we manage risk. Why does this matter? Because relying solely on templates and frameworks can lead to missed opportunities for real improvement. Let's break free from the cycle of checkbox compliance! Still figuring this out myself, but it’s a conversation we all need to have. Show Notes Follow Pierre-Paul Ferland https://www.linkedin.com/in/ppferland Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

Show Notes Follow Jared Gore https://www.linkedin.com/in/jared-gore-92585052/ Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

Welcome to The Cyber Weekly! In this episode, we sit down with Lisa Ventura MBE FCIIS MBCS, a trailblazer in cybersecurity awareness, cyberpsychology, and neurodiversity advocacy. Lisa’s unconventional journey from broadcasting into cybersecurity has shaped her unique perspective on the human side of security. She explains how attackers exploit psychology, why AI is both a blessing and a curse, and how neurodiversity can transform SOC teams into powerhouses of resilience and innovation. We discuss: How attackers exploit urgency and fear in social engineering Why cyber psychology is critical in today’s AI-driven threat landscape The role of AI in both enabling attackers and empowering defenders How neurodiversity can be leveraged as a competitive advantage Building communities and associations that strengthen cybersecurity culture Her message is clear: “Security is a human problem before it’s a technical one.” 📑 Show Notes & Links 🔗 Follow Lisa Ventura LinkedIn: https://www.linkedin.com/in/lisasventura/ Unity Group Solutions: https://unitysolutions.org.uk/ AI and Cyber Security Association: https://aisec.org.uk/ 📢 Follow The Cyber Weekly LinkedIn: https://www.linkedin.com/company/thecyberweekly X (Twitter): https://twitter.com/thecyberweekly 👥 Connect with the Hosts & Team Deogratius Okello LinkedIn: https://www.linkedin.com/in/deo-okello/ X: https://twitter.com/deookello51 Josephine Olok LinkedIn: https://www.linkedin.com/in/josephine-olok/ X: https://twitter.com/josephine_olok Angella Nabbanja LinkedIn: https://www.linkedin.com/in/angella-nabbanja-4b6361178/ X: https://x.com/angellamukasa_ Magala (Social Media Content Writer) LinkedIn: https://www.linkedin.com/in/magala-rogers/ Aine (Graphics Designer) LinkedIn: https://www.linkedin.com/in/aine-allan-60987916a

You think deleting a message means it's GONE. It's not. But here's what nobody's telling you—law enforcement doesn't have access to everything either. And that gap? It's where justice lives or dies. In this episode of The Cyber Weekly, I sit down with Kenneth Hartman—digital forensics expert, CISO, SANS instructor, and the guy defense attorneys call when they need the truth about digital evidence. Here's what hit me hardest: 🔹 Deleted texts might still be sitting in a database on your phone. 🔹 AI agents are walking around with YOUR credentials right now—and you don't even know it. 🔹 License plate readers are building a map of your life without a warrant. 🔹 The law is NOT keeping up with technology—and that affects ALL of us. Kenneth has worked inside Google, SAP, and Illumina. He's taught cybersecurity on five continents. And now, he's breaking it ALL down in plain language. This isn't just for tech people. This is for anyone who owns a phone, uses the cloud, or believes in the right to a fair trial. #DigitalForensics #CyberSecurity #TechTruths #PrivacyMatters #TheCyberWeekly #DataPrivacy #FutureOfTech #SmartPhoneHacks #tcw Show Notes Follow Kenneth G. Hartman https://www.linkedin.com/in/kennethghartman/ https://x.com/KennethGHartman Check out Ken’s whitepaper https://www.sans.org/white-papers/when-security-scanner-became-weapon Check out the Algorithm Gavel paper https://lucidtruthtechnologies.com/images/pages/The-Algorithmic-Gavel.pdf Check out the Team PCP webcast https://www.sans.org/webcasts/when-security-scanner-became-weapon Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello our Producer and Editor https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

What does it really take to break into cybersecurity—especially on the defensive side? In this episode of The Cyber Weekly, we sit down with Tijan Hydara, a selfbuilt cybersecurity analyst who turned handson IT experience into a thriving blue team career. From supporting over 30,000 users at Alaska Airlines to building advanced SOAR playbooks in his home lab, Tijan’s journey is a masterclass in consistency, practical learning, and discipline. Now the creator behind the growing TopCyberDawg YouTube channel, he’s helping the next generation of SOC analysts understand how to actually get started—without the confusion. 🔍 What You’ll Learn in This Episode: What a SOC Analyst really does (no jargon, just clarity) How Tijan transitioned from IT support into cybersecurity The right way to approach certifications like A+, Network+, Security+, and CySA+ What happens when a security alert fires—and how analysts respond Why detection engineering is one of the most important skills today How to build your own cybersecurity home lab (even as a beginner) The mindset required to stay consistent and break into the industry 🚀 Whether You’re: Trying to land your first cybersecurity role Curious about blue team / SOC careers Overwhelmed by certifications and where to start 👉 This episode gives you a clear, realworld blueprint. 🎥 Connect with Tijan Hydara 🔗 LinkedIn: https://www.linkedin.com/in/tijanhydara 📺 YouTube (TopCyberDawg):https://www.youtube.com/@topcyberdawg 🌐 Follow The Cyber Weekly 🔗 LinkedIn: https://www.linkedin.com/company/thecyberweekly 🐦 X (Twitter): https://twitter.com/thecyberweekly 🎙️ Meet the Team 👤 Producer & Editor – Deogratius Okello 🔗 https://www.linkedin.com/in/deo-okello/ 🐦 https://twitter.com/deookello51 👤 Josephine Olok 🔗 https://www.linkedin.com/in/josephine-olok/ 🐦 https://twitter.com/josephine_olok 👤 Angella Nabbanja 🔗 https://www.linkedin.com/in/angella-nabbanja-4b6361178/ 🐦https://x.com/angellamukasa_ 👤 Rogers Magala (Social Media Content Writer) 🔗 https://www.linkedin.com/in/magala-rogers/ 👤 Allan Aine (Graphics Designer) 🔗 https://www.linkedin.com/in/aine-allan-60987916a 💬 Join the Conversation What’s been your biggest challenge breaking into cybersecurity? Drop it in the comments 👇 #TCW #Cybersecurity #BlueTeam #SOCAnalyst #CyberSecurityCareer #Splunk #Elastic #DetectionEngineering #CompTIA #SecurityPlus #CySAPlus #BTL1 #TopCyberDawg #TheCyberWeekly #Homelab #SOAR #ThreatDetection #BreakIntoTech

Michael Rack went from decades in enterprise strategy to ranking in the top 0.3% of TryHackMe users worldwide. In this episode he explains why “learning by doing” beats book‑only knowledge, how he built an OpenCTI repository with millions of IOCs, and how he uses local LLMs and Kali to automate research and offensive tooling. Show Notes Follow Michael Rack https://www.linkedin.com/in/michaelrack Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello our Producer and Editor https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

In this episode of Cyber Weekly, we sit down with Richard Kabanda, a cybersecurity specialist with experience spanning Uganda and the United States, to explore his journey and latest innovation — Safe Browse. From managing large-scale IT infrastructure to tackling modern cyber threats, Richard shares how real-world challenges inspired him to build a lightweight browser extension designed to protect everyday internet users from phishing attacks and malicious websites. We dive into: Richard’s journey into cybersecurity The difference between cyber threats in Uganda vs the US How Safe Browse works in real time The role of cloud infrastructure like Cloudflare Workers Why simplicity is key in cybersecurity tools Advice for aspiring cybersecurity professionals Safe Browse is built to make online security accessible, fast, and easy for everyone — especially those most vulnerable online. If you're interested in cybersecurity, tech innovation, or building real-world solutions, this episode is packed with insights you don’t want to miss. 👉 Don’t forget to like, comment, and subscribe for more conversations like this. #CyberSecurity #SafeBrowse #TechInAfrica #CyberWeekly #PhishingProtection #CloudSecurity #Innovation Show Notes Follow Richard Kabanda https://www.linkedin.com/in/richard-kabanda-a1838b52/ Download on Chrome https://chromewebstore.google.com/detail/safebrowse/dhcggikjhdflbndcjaamalikknndbdfl?pli=1 Download on Firefox https://addons.mozilla.org/addon/safebrowse/ Check out the documentation of Safebrowse https://rkabanda.github.io/safebrowse-docs Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello our Producer and Editor https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

In this episode of The Cyber Weekly, I sit down with Jen, a Senior Cyber Threat Intelligence Analyst who went from troubleshooting iPads at the Apple Store to hunting advanced cloud threats at Zendesk. Jen reveals the devastating customer experience that triggered her pivot into cybersecurity and why she has stayed at the same company for nearly a decade—defying the industry's job-hopping norm. We dive deep into the terrifying ways AI is weaponizing social engineering, the real dangers of AI hallucinations in threat intelligence, and the absolute biggest lie people believe about breaking into the cybersecurity industry. Whether you are a seasoned analyst or just trying to get your foot in the door, Jen’s unconventional journey and raw honesty about overcoming imposter syndrome and burnout will change how you view your career. 🎙️ In this episode, we discuss: The human cost of data loss and the moment Jen chose to become a defender. Why social engineering—not complex coding—is the biggest threat in the cloud. The exact foundational skills you actually need (and what you don't). How transparency and saying "I don't know" builds boardroom trust. Show Notes Follow Jen Kwas https://www.linkedin.com/in/jen-k-3920b2b4 Check out CTIJEN https://ctijen.com/ Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello our Producer and Editor https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a

What happens when a children's doll becomes a spy? When your smart kettle leaks your Wi-Fi password? When a hacker takes control of a real cargo ship? In this episode, we sit down with Ken Munro — ethical hacker, IoT security researcher, and founder of Pentest Partners — to explore the wild world of consumer device hacking. From banning a doll in Germany to exposing flaws in planes, ships, and smart locks, Ken pulls back the curtain on just how vulnerable our connected world really is. Show Notes Follow Ken Munro https://www.linkedin.com/in/ken-munro-17899b1/ Check out Pentest Partners https://www.pentestpartners.com/ Like and Follow our LinkedIn page https://www.linkedin.com/company/thecyberweekly Like and Follow our X page https://twitter.com/thecyberweekly Follow Deogratius Okello our Producer and Editor https://www.linkedin.com/in/deo-okello/ https://twitter.com/deookello51 Follow Josephine Olok https://www.linkedin.com/in/josephine-olok/ https://twitter.com/josephine_olok Follow Angella Nabbanja https://www.linkedin.com/in/angella-nabbanja-4b6361178/ https://x.com/angellamukasa_ Follow Magala our Social Media Content Writer https://www.linkedin.com/in/magala-rogers/ Follow Aine our Graphics Designers https://www.linkedin.com/in/aine-allan-60987916a Chapters 00:00 Intro: Hacking Everything 00:36 How Ken Munro Started in Cybersecurity 01:20 "My Friend Cayla": The Spy Doll Banned in Germany 03:59 Reprogramming the Doll: Swearing and Laws 04:48 The Truth About Smart Wi-Fi Kettles 07:25 Is Cybersecurity a Revenue Generator? 10:33 Hacking a Mitsubishi Outlander PHEV 12:10 Can You Really Hack a Plane from Your Seat? (Hollywood vs. Reality) 15:32 Maritime Security: Hacking Cargo Ships 18:03 The Most Ridiculous Security "Feature" 19:34 Ken’s Personal Privacy Rules (What he won't install) 20:50 One Piece of Advice for IoT Manufacturers 22:52 Outro & Where to Find Pentest Partners