Johannes Ullrich

Johannes Ullrich, Dean of Research at the SANS Technology Institute and host of the SANS ISC Stormcast podcast, dives into the evolving landscape of cybersecurity. He discusses the alarming staffing cuts at CISA amid rising threats like Russian hackers targeting military missions. The episode highlights the challenges of AI in security, specifically the concept of 'Vibe Security.' Ullrich emphasizes the necessity for human oversight in tech-driven security measures and explores significant breaches, including a notable incident involving a Planned Parenthood lab.

Johannes Ullrich, Dean of Research at SANS Technology Institute, shares insights on the evolving landscape of cybersecurity. He dives into the Fast Flux technique, now recognized as a national security threat, and discusses a critical authentication flaw in Crush FTP. Ullrich highlights vulnerabilities in Next.js applications, such as authentication loops and security flaws stemming from design choices. The conversation also touches on the rebranding of ransomware groups and the importance of robust application security measures in combating cyber threats.

Cybersecurity expert Johannes Ullrich talks defending against API attacks and new ransomware threats like Volcano Demon. They discuss a new OpenSSH vulnerability, Chinese hackers exploiting a Cisco zero-day, and unauthorized access at HubSpot. Google launches a KVM bug bounty program while addressing dangerous attack techniques and the impact of AI on cybersecurity.

Johannes Ullrich, a security analyst from SANS, talks about the Internet Storm Center and their research. They discuss the history of SANS, the evolution of cybersecurity analysis, and the early days of the internet. They also explore the transformation of the cybersecurity industry and the importance of curiosity and experimentation in research.

Johannes Ullrich, a cybersecurity expert and Dean of Research, shares his journey from studying hard sciences to his career shift. He discusses the importance of basic principles, superhero origin stories, and physics labs in cybersecurity. Teaching for lasting impact in a changing industry is also highlighted.