PRESS PLAY
Information Security, InfoSec, CyberSec, Cyber, Security, whatever you call it, we talk about it! From mobiles and desktops to data centers and the cloud, Purple Squad Security is here to help and give back to our community of information security professionals. We cover security topics for the red team, blue team, purple team, whatever team! We are a community of professionals, and this is one man's attempt to give back. CISSP, CISM, CEH credits can be obtained here! Also happy to provide info for OSCP, OSCE, and other Offensive Security certified professionals.
A firewall roll blocks Twitch and Amazon; if you've worked security, you know which part hurts.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A candid launch for business leaders, centered on cybersecurity fundamentals and the CIS Controls.
EliteCast Episode 1 works as a public reset for John and Purple Slot Security, moving away from its tabletop D&D audience and toward a cybersecurity show for business managers, decision makers, and executives.
A candid conversation about turning cybersecurity teaching into courses, videos, and a wider online practice.
Heath Adams, known as the Cyber Mentor, joins Jon Svazic for an easygoing conversation about cybersecurity education, entrepreneurship, and the way his teaching work connects across Twitch, YouTube, and online courses.
A tea-fueled conversation turns security operations into a practical lesson in triage, attention, and routes into tech.
Episode 70, Multi-Factor with Kat Sweet, opens on a tea-fueled pun before settling into a practical conversation about incident response and security operations.
A candid, practical goodbye from a security podcast host choosing health, work, business, and family priorities.
Episode 69 closes Purple Squad Security with a plainspoken explanation rather than a staged farewell. John Svazic says the show is shutting down, or at least entering a long-term hiatus, because health issues, a business begun around mid-November, full-time work, and family…
A practical guide to turning a promising security talk idea into a conference proposal that can stand out.
Episode 68 takes a practical look at conference networking, with John Svazic and Circuit Swan using The Diana Initiative to unpack what makes a strong call-for-presentations submission.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
John launches EliteCast after ending Purple Slot Security, and he says the new show is tied to his cybersecurity consultancy, EliteSec.
Purple Squad Security Podcast episode 71, dated March 8, 2020, centers on Heath Adams, the Cyber Mentor, as Jon Svazic frames him as a teacher who shares practical cybersecurity knowledge.
Purple Squad Security episode 70, dated February 23, 2020, opens with Jon Svazic and Kat Sweet joking about the pun "Multi-Factor" over tea.
Purple Squad Security Podcast Episode 69, dated February 9, 2020, is John Svazic's solo announcement that the show is going on long-term hiatus.
Circuit Swan, the Deputy Chief Operating Officer of Diana Initiative and a GitLab application-security worker, traces her path from DEF CON 8 or 9, bulletin board systems, and IRC to writing AST suites.
Jon Svazic interviews Snow, a social engineer on IBM Security's X-Force Red team, about moving from makeup sales and special-effects work into information security after attending DEF CON.
Adrian Cheek tells Jon Svazic how a legitimate security report about an abandoned Amazon AWS Elastic Beanstalk record exposed a potential subdomain takeover.
John Svazic interviews the Gibson about hackers.town, the Fediverse, and changes in information-security culture since the 2017 migration from Twitter.
On November 3, 2019, Jon Svazic interviews Tanya Janca about Security Sidekick, the application-security company she founded with Aaron Natu.
On October 20, 2019, John Svazic interviews John Strand about Black Hills Information Security’s Backdoors & Breaches card game for incident-response tabletop exercises.
John Svazic interviews Tracy Mayleaf, the InfoSecSherpa, about her DerbyCon talk “Empathy as a Service” and applying library reference-interview practices to information security.
John Svazic marks Purple Squad Security's two-year anniversary, reporting a peak of 1,988 listeners and regular monthly listenership around 1,700 to 1,800.
Purple Squad Security episode 60 places Ken Johnson and Seth Law from the Absolute AppSec Podcast in a D&D-style incident-response exercise hosted by Jon Svazic.
Jon Svazic interviews Kyle Andrus about malware analysis, including how defenders can study malicious software without relying exclusively on assembly-language reverse engineering.
John Svazic interviews Tinker about physically removing a 4U Active Directory domain controller from an unsecured server closet and later examining compromised client networks.
John Svazic reads Tim Malcolm Vedder’s “Choose Your Own Red Team Adventure,” an interactive red-team scenario built around 22 possible endings.
On May 12, 2019, Jon Svazic interviews Matt Belland of Smooth Sailing Solutions about why privacy means control and consent rather than simply confidentiality.
Marcus J.
John Svazic and Tracy Malief discuss how to get practical value from InfoSec conferences beyond speaking, including talks, networking, vendor halls, hiring villages, and LobbyCon.
On March 31, 2019, John Svazic records a solo Purple Squad Security episode about identifying as an information-security generalist after years spanning development, management, defensive security, penetration testing, and physical security.
John Svazic interviews Chris Fulong about entering information security from IT, physical therapy, sales, research, and other backgrounds.
John Svazic leads Timothy DeBloch, Edward Silverfox-Rojas, Daniel Ebbett, and Kyle Andrus through a tabletop security exercise built from scenarios supplied by Ryan McGeehan’s Bad Things Daily account.
Curtis Brazell, manager of a penetration-testing team at Ponderance, describes how red teaming differs from penetration testing through simulated attacks, physical testing, stealth, and incident-response evaluation.
Purple Squad Security episode 48, dated January 20, 2019, examines Magecart with RiskIQ threat researcher Jonathan Klingsma.
Purple Squad Security host John Svazic explains why Episode 47 will continue on a two-week schedule instead of becoming a weekly show.
On December 16, 2018, John Svazic interviews Jason Street about security-awareness engagements that involve physically entering businesses and testing employees.
Purple Squad Security episode 45, released December 9, 2018, features John Svazic interviewing Tinker about red teaming, threat hunting, and real intrusions.
John Svazic interviews Ed Skotas, the SANS Institute instructor and founder of the SANS Holiday Hack Challenge, about the 2018 KringleCon edition.
Tanya Janka joins John Svazic on Purple Squad Security to examine why SQL injection or CSRF findings do not automatically represent meaningful vulnerabilities.
Patrick Kelley explains how his CyberZoology presentation uses Raspberry Pis, Suricata, and Bro to make network defense accessible for under $50.
Purple Squad Security episode 41, dated October 7, 2018, features Jon Svazic and Tracy Mayleaf discussing Cybersecurity Awareness Month and public-facing security education.
Purple Squad Security episode 40, dated September 23, 2017, republishes a live Rally Security Podcast recording as a Cyber D&D tabletop exercise.
John Svazic uses Purple Squad Security Podcast Episode 39 to document his OSCP preparation, including four months of lab time and 51 rooted machines.
John Svazic interviews Amanda Berlin about whether the seven-step cyber kill chain is a useful defensive framework or an overly rigid model.
Jon Svazic interviews Nate Kirk, a Mandiant consultant and author of the bring-your-own-land concept, about avoiding native binaries by loading custom .NET assemblies in memory.
Host John Svazic interviews Derek Rook about capture the flag competitions and offensive security skills.