CISSP Cyber Training Podcast - CISSP Training Program

CCT 376: Investigation Types and the Device Behind the Television (Domain 1)

Send us Fan Mail A company found a concealed recording device in the room where its executives meet. They pulled it, imaged it, reviewed the camera footage, went through

CCT 375: The Malicious Workflow Was Already There (CISSP Domain 8.2)

Send us Fan Mail A “boring” GitHub Actions workflow file should never be able to empty your secrets vault, yet that is exactly what the Ghost Action campaign shows. We w

CCT 374: They Had Backups, They Could Not Reach Them. (CISSP Domain 7.10)

Send us Fan Mail 495 organizations woke up and could not get to their servers. Railways. A prefectural police force. A food logistics company that could not receive or s

CCT 373: An AI Agent Was Told No and Got In Anyway (CISSP Domain 6.2)

Send us Fan Mail An AI agent gets blocked by access controls, then calmly finds another way in anyway and that is the wake-up call. I use a recent Hacker News story abou

CCT 372: Stolen Sessions and Why MFA Never Saw Them (CISSP Domain 5.6)

Send us Fan Mail A stolen password is annoying. A stolen session token can be invisible, valid, and instantly profitable. Today we dig into a real warning sign from Okta

CCT 371: Secure Communication Channels and Who Is Really On Your Call (Domain 4.3)

Send us Fan Mail One video hotline feels like a single, simple conversation until you trace the call path and realise there may be seven companies involved in making it

CCT 370: CISSP Cryptography, FIPS Validation, and Post-Quantum (Domain 3)

Send us Fan Mail A compliance deadline can change your security posture without changing a single bit of your encryption. We start with a simple sticker-on-the-windshiel

CCT 369: Security Models Demystified - CISSP Domain 3.2 (Replay of CCT 278)

Send us Fan Mail 🔁 REPLAY — this episode originally aired as CCT 278 in September 2025. I'm heads-down finishing a Domain 3 cryptography episode, so I'm re-ru

CCT 368: CISSP Asset Security and Data Classification (Domain 2)

Send us Fan Mail Nine million images. No password. No encryption. And the defence was basically: “It wasn’t public because you had to know the URL.” That single line ope

CCT 367: Threat Modeling and the AI Agent That Breached Hugging Face (CISSP Domain 1.10)

Send us Fan Mail A rogue AI agent didn’t “hack the future” so much as exploit the oldest security problems in the book: weak boundaries, over-trusted inputs, exposed end

CCT 366: Software Supply Chain Security Explained — CISSP Domain 8 (ChainDrop Case Study)

Send us Fan Mail A supply chain attack that leaves your Git history spotless should change how you think about “secure code.” We walk through ChainDrop, a worm discovere

CCT 365: Malicious QR Code Attacks and Digital Forensics Techniques Every CISSP Should Know [REPLAY]

Send us Fan Mail One careless QR scan can quietly turn a “private” chat into a live wiretap. We start with a timely threat story: Russian APT-style actors abusing Signal

CCT 364: Third Party Risk Management - How One Vendor Breach Exposed 119,000 Users

Send us Fan Mail A breach can hit your headlines even when your own systems never get touched, and that’s exactly why third-party risk management keeps showing up on the

CCT 363: CISSP AI Governance - What Credit Union Examiners Are Really Asking

Send us Fan Mail One bad AI decision can cost you more than money. It can cost you trust, trigger regulators overnight, and put your name on the hook when the board asks

CCT 362: Security Assessment Strategies & Abandoned Cloud Storage Risks (CISSP 6.1) - REPLAY

Send us Fan Mail That forgotten cloud storage you stopped thinking about months ago can become a real attack path today. We start with a simple but dangerous scenario: a

CCT 361: Bad Epoll - Root Access in 6 Instructions

Send us Fan Mail A six-instruction timing glitch in the Linux kernel can be the difference between “low-priv user” and full root control, and that is why we dig into the

CCT 360: SSA Whistleblower and the Thumb Drive: What CISSP Asset Security Tells Us About This Disaster

Send us Fan Mail Imagine hearing a claim that the most sensitive identity data in the United States could be sitting on a personal thumb drive. That allegation is still

CCT 359: ShinyHunters vs. Oracle — Supply Chain Risk Every CISSP Must Know

Send us Fan Mail A vendor gets breached and suddenly your perimeter does not matter, because the attacker does not need to “hack” you. They just reuse the access you alr

CCT 358: EDR Bypass Ransomware: The Gentle Killer Threat Every CISSP Must Know

Send us Fan Mail Your endpoint tool can be world class and still get taken out first. That’s the unsettling reality behind a new wave of “EDR killer” capabilities being

CCT 357: Is Your Encrypted Data Already Stolen? Quantum Risk & Supply Chain Attacks for CISSP

Send us Fan Mail Someone is stealing encrypted data right now and they are not trying to read it today. They are saving it for later, betting that quantum computing will