Global Cyber Security: The Encrypted Podcast

About Global Cyber Security: The Encrypted Podcast

Welcome to the front lines of digital conflict, where the stakes are global and the battleground is code. Global Cyber Security: The Encrypted Podcast is your essential guide through the complex world of modern defense, strategic warfare, and digital privacy. Over 100 deep-dive episodes, we dissect the foundational texts that define our secure—and insecure—digital reality. We go beyond the headlines to explore applied cryptography, threat modeling, and secure cloud architecture, explaining the core mathematics and engineering practices that protect your data at scale. From the anatomy of nation-state attacks like Sandworm and Stuxnet to the dark economics of the zero-day market, we trace the full contours of the global cyber-arms race. You will learn about the critical intersection of technology and policy, including the psychological principles behind social engineering and the necessary shift to Zero Trust models. Our mission is to transform passive fear into actionable knowledge, preparing executives, developers, and practitioners for the next generation of threats. Each two-part episode offers a comprehensive breakdown of a single seminal work, guiding you from historical context to future-proof defensive strategies. Join us as we unlock the secrets of network defense and explore the technical solutions required to build a truly encrypted and resilient digital future. This is the technical deep-dive and strategic analysis you need to navigate global cybersecurity with confidence.

Publisher

Maitt Saiwyer

Category

education · news

Language

en

Explicit

No

First episode

12 Oct 2025

Latest episode

15 Oct 2025

Latest episodes

21 episodes in the feed.

1. 

   15 Oct 2025

   Episode 20 - ECC, Smart Grids, and Physical Sabotage

   This episode is a deep dive into the mathematics, implementation, and vulnerabilities of modern digital security, focusing on the powerful role of Elliptic Curve Cryptography (ECC). ECC has largely superseded older algorithms like RSA because of its superior efficiency, providing equivalent security strength with significantly shorter keys, a crucial advantage for resource-constrained devices like smartphones and IoT sensors. The security of ECC is rooted in the mathematical difficulty of solving the Elliptic Curve Discrete Logarithm Problem (ECDLP), which is exponentially harder to break than the integer factorization problem underlying RSA, allowing for shorter keys that are much faster to process. ECC keys are the fundamental building blocks of modern digital identity, used to authenticate transactions and establish ephemeral session secrets with protocols like X3DH, which also ensures forward secrecy for past conversations. The critical need to protect these keys highlights a massive vulnerability: the physical security of the hardware itself. ECC keys, which are meant to be mathematically unbreakable, can be compromised by physical attacks like side-channel attacks (measuring timing or power consumption) or fault-injection attacks (deliberately inducing voltage or clock-speed glitches). These physical attacks force the processor to make a computational error, allowing attackers to deduce the secret key through analyzing the resulting faulty output, a clear reminder that the security of pure math is limited by the physical hardware it runs on. To counter this, security best practices now demand moving key operations into tamper-resistant hardware like Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs), which protect the key material from these physical and electrical attacks. This deep security analysis is vital because critical national infrastructure, exemplified by the smart grid, is highly vulnerable to digital sabotage, with these low-power IoT devices forming an easily exploitable attack surface. Traditional security models are obsolete; successful defense now mandates a zero-trust and deny-by-default posture against all network traffic, especially from field devices. This is critical because successful attacks on industrial control systems can lead to physical damage, such as digital commands forcing circuit breakers open or manipulating phase measurement unit (PMU) data to cause grid instability. The ultimate challenge is the philosophical one: minimizing data exposure by exploring radical solutions like Zero-Knowledge Proofs (ZKPs) to prove knowledge without ever transmitting the secret.

2. 

   15 Oct 2025

   Episode 19 - Systemic Security Failures and the Cyber-Physical War

   This episode explores the core mechanisms, failures, and threats related to modern digital security, moving from mathematical foundations to real-world cyber warfare. The foundation of secure communication relies on cryptography, which is broadly split into symmetric ciphers (like AES) for high-speed confidentiality, and asymmetric ciphers (like RSA and ECC) which use public/private key pairs for secure key exchange, digital signatures, and authentication. Elliptic Curve Cryptography (ECC) is rapidly replacing RSA due to its efficiency, providing equivalent security with significantly smaller keys that reduce computational overhead, making it ideal for mobile devices and servers. However, a fundamental weakness in all crypto systems is the random number generator, as a compromised or predictable seed instantly invalidates the entire security framework, regardless of the algorithm's strength. A major theme is how easily mathematically sound algorithms can be broken by implementation flaws, such as the persistent buffer overflow vulnerability (e.g., from functions like gets()) and the covert format string vulnerability (e.g., using the %n parameter), which attackers use to gain arbitrary code execution. Once an attacker gains a foothold, they use sophisticated techniques like process injection to hide malicious code within trusted processes (like explorer.exe) to evade detection, often employing a NOP sled (a sequence of no-operation instructions) to increase the reliability of their code execution. Defense against these tactics requires adherence to principles like least privilege, ensuring systems only have the minimum necessary access, and rigorous, multi-faceted testing, including checking for interoperability between independently developed security components. The biggest threats are systemic, with the smart grid being a prime example of critical infrastructure now vulnerable to digital-to-physical sabotage. Industrial protocols (Modbus, DNP3, etc.) were designed without modern security in mind, and their inherent weaknesses—like commands for mass device control—can be leveraged for network-based denial-of-service (DoS) attacks. Nation-state actors exploit this, with malware like Black Energy and KillDisk being used in Ukraine to cause operational paralysis and physical damage to infrastructure. This escalates to the point of pure, destructive sabotage, exemplified by the Wiper attack against the Iranian Oil Ministry and the NotPetya attack, which was a devastating wiper disguised as ransomware. The lesson from this escalation, where the Stuxnet worm crossed a red line into physical sabotage, is that the need for offensive cyber capabilities (CNE) fundamentally undermines the collective defensive security the world is attempting to build.

3. 

   15 Oct 2025

   Episode 18 - Code Flaws, Metadata Wars, and Nation-State Cyber Warfare

   This episode dives into the true state of digital security by examining the fundamental building blocks of cryptography, their inherent vulnerabilities, and the systemic threats that compromise them. The foundation of secure communication relies on ciphers like the symmetric Triple DES (3DES), which bought time by increasing the effective key size to 112 bits, and modern elliptic-curve cryptography (ECC), which achieves high security with significantly smaller, more efficient keys. Crucially, the security of these systems is only as strong as their source of randomness, the seed value, which needs high entropy and must be cryptographically secure to prevent total compromise. However, even perfect math is undermined by simple software flaws like the notorious buffer overflow (e.g., using the vulnerable gets() function) or the format string vulnerability (e.g., using the %n parameter), which attackers use to gain memory access or execute malicious code. Once a vulnerability is exploited, attackers use sophisticated techniques like process injection to hide malicious shellcode inside trusted processes (like explorer.exe) to bypass security monitoring and launch their payloads covertly. However, the most critical area of vulnerability is often not the encrypted content, but the metadata (e.g., call data records), which is easily analyzed at scale and often provides more actionable intelligence than wiretaps. Moreover, seemingly unrelated data, such as smart grid electricity consumption records, can be used through inference to uncover illegal or sensitive activities, a potent illustration of how hard it is to hide anomalous behavior in the modern world. This is all compounded by the difficulty of avoiding tracking even with "burner phones," as the IMEI (unique to the physical handset) and the IMSI (unique to the SIM) are both recorded, allowing investigators to correlate activities over time. The ultimate systemic threat comes from nation-state actors who have demonstrated a willingness and capability to conduct cyber warfare. The Stuxnet worm, which physically destroyed Iranian centrifuges, marked a watershed moment, crossing the red line into digital warfare and proving that a new, fundamentally destructive weapon had been unleashed. Today, sophisticated state-sponsored actors, including those attributed to Russia (Sandworm) and China (PLA Unit 61398), constantly target critical national infrastructure with high-level malware, with some Chinese intrusions remaining undetected for nearly five years. The biggest paradox is that the drive for offensive power, including the necessary development of Computer Network Exploitation (CNE) tools by nations, fundamentally undermines the collective defensive security posture the entire digital world is trying to build.

Contact Global Cyber Security: The Encrypted Podcast

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.