CyberHub Podcast

CyberHub Podcast is a morning cybersecurity news show hosted by a working security leader. James Azar introduces himself as a full-time chief information security officer at a large construction company in Atlanta, and he makes a point of saying he is a practitioner, not someone selling a product. That distinction is the show's whole reason for being. He opens with a greeting to the 'security gang' and a list of the stories to come, then takes them one at a time. The headlines will be familiar from the trade press, and Azar credits outlets such as Security Week and research from Palo Alto's Unit 42 as he goes. His contribution is the second half of each story: the risk it carries and the specific control that would blunt it. On a Booking.com breach, he argues that direct compromise of core infrastructure has become rare and that attackers now target the people and third-party access around a platform. His advice for affected users is short: turn on MFA. On the Stryker incident, the takeaway is behavioral detection that catches abnormal activity, not just known malware. A supply chain compromise tied to Trivy leads to advice on rotating build credentials after any pipeline anomaly and separating customer code repositories from shared development infrastructure. Geopolitics is a steady thread. Recent rundowns cover a pro-Russian group Sweden blames for hitting its energy infrastructure, malware aimed at Ukrainian government and hospital systems, and Iran-linked threats to U.S. infrastructure. They also cover North Korean operators who, in one story, built relationships face to face at industry conferences. Supply chain attacks come up just as often: Team PCP, the Axios npm package and trojanized CPUID downloads all appear across recent titles and rundowns. Patch Tuesday gets the same treatment, including a warning Azar attributes to Jason Clinton and Kevin Mandia that the next two to three years will batter practitioners as AI tools like Mythos increase the scale of attacks. Azar treats security as a business function. On air, he has explained that he talks in quarters because defenders who don't understand how their company operates don't belong in the role. The register is conversational and direct, with plenty of y'all, shout-outs to people watching and invitations to debate in the chat. The candor sometimes turns into an off-color aside. Titles read as stacked headlines, such as 'Pro-Iran Hackers Claim Lockheed Martin Breach, HackerOne Data Stolen, FCC Bans Chinese Routers', which makes it easy to spot the stories that matter to a particular environment. It suits a listener who wants the day's security news already turned into action items.