Show Notes
Cybersecurity in Healthcare: Patient Safety, Ransomware & 90-Day SOC StrategyIn this episode, we dive deep into cybersecurity in healthcare with Abhinav, who shares practical, real-world strategies for protecting hospitals and healthcare organizations from cyber threats.Unlike theoretical discussions, this conversation focuses on what actually works in healthcare environments — where patient safety always comes first.Why Simple Security Controls Prevent 80% of AttacksAbhinav explains that most cyber threats in healthcare can be mitigated through basic, disciplined controls:Blocking malicious IP addresses and high-risk geographiesStrict patch managementIdentity and access management hygieneFirewall rule cleanupBackup validation and testingInstead of overcomplicating security architecture, he emphasizes keeping controls simple and effective. In healthcare, simplicity often saves lives.Risk Assessment in Healthcare: It’s Not About MoneyTraditional cybersecurity risk models focus heavily on financial impact.Healthcare is different.Risk prioritization in hospitals is based on:Patient impactRegulatory compliance requirementsIT downtime affecting clinical operationsFinancial lossAbhinav highlights how explaining cybersecurity risks in terms of patient safety and regulatory penalties, rather than CVSS scores or technical jargon, is critical for getting leadership support.90-Day Plan for Security VisibilityAbhinav shared his 90-day roadmap for building comprehensive security visibility inside any organization.Key focus areas include:Full asset inventory and visibilityEndpoint monitoringNetwork traffic analysisRisk exposure mappingReducing attack failure rate (AFR) significantlyImplementing a functional SOC in as little as 20 daysThe core idea:You cannot protect what you cannot see.Security visibility is the foundation of healthcare cyber defense.Ransomware Readiness in HealthcareHealthcare environments face unique challenges, including:USB-based threatsClinical staff exposure to phishingLegacy medical systemsThird-party integrationsRansomware preparedness requires:Technical controlsClinical staff awareness trainingIncident response playbooksBackup restoration drillsLeadership communication planningCybersecurity in healthcare is not just technical — it is operational and cultural.Cybersecurity Insurance & Cultural ShiftThe discussion also touched on the increasing role of cybersecurity insurance in healthcare.However, Abhinav stresses that insurance is not a substitute for strong controls. Organizations must build internal resilience before relying on financial mitigation strategies.CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#HealthcareCybersecurity #HospitalSecurity#RansomwareProtection #SOCImplementation #CyberRiskManagement#HealthcareIT
More from Prabh Nair
Cybersecurity tools can identify vulnerabilities.But offensive-security professionals need to understand something deeper:How can multiple weaknesses be connected into one meaningful attack path?https://www.linkedin.com/in/saurabh-kumar-pandey-1303b4126/In this practical podcast, Prabh speaks with Saurabh Kumar Pandey, an offensive-security practitioner, about how penetration testers approach a target from initial reconnaissance through enumeration, validation, exploitation and privilege escalation.Using a controlled lab scenario, the discussion explores the thinking behind each stage of a penetration test, rather than simply running automated tools.Topics coveredOffensive-security methodologyReconnaissance and attack-surface discoveryUnderstanding Nmap scan resultsService and version identificationSMB and NetBIOS security assessmentIdentifying configuration weaknessesFalse positives vs validated findingsWhy manual validation still mattersHow attackers chain vulnerabilitiesInitial-access thinkingOne of the strongest lessons from the session:A vulnerability by itself may not represent the complete risk. The real risk often appears when several weaknesses are chained together.That is why penetration testing requires more than scanners and exploit tools.The tester must continually ask:What did I learn? What can I validate? What does this give me access to next?The discussion also provides an important defensive lesson.A collection of seemingly manageable issues—unnecessary services, configuration weaknesses, exposed credentials or weak access controls can collectively create a much larger attack path
Let's learn the thin line difference between masquerad vs eavesdropping Attack#cybersecurity #infosec #pentesting #comptia#isaca #cybersecurity #infosec #isc2 #ccsp #cism
Prepare for the Offsec OSAI+ certification with insights on interview strategies for 2026 cybersecurity roles.Ankit Bharathan joins Prabh Nair to discuss the path to mastering the Offsec OSAI+ (AI-300) certification. This conversation focuses on the practical skills required for professionals aiming to enter the specialized field of AI Security.Beyond the technical curriculum, we analyze effective interview strategies and the specific criteria used for candidate selection in 2026. Whether you are looking to pivot your career or sharpen your expertise, this session provides a roadmap to navigating the hiring landscape for off-sec positions.A practical learning path discussed in the episode:Web Security → AI Fundamentals → Build an LLM App → RAG → Embeddings → Agents → Threat Modeling → AI Security Labs → AI Red TeamingThis episode will be useful for:Pentesters • Red Teamers • AppSec Engineers • AI Security Professionals • OSCP holders • Security Researchers • AI Engineers • Cybersecurity StudentsSubscribe for weekly technology infrastructure breakdowns and comment below on what certification topics you want covered next.Prepare for the Offsec OSAI+ certification with insights on interview strategies for 2026 cybersecurity roles.Ankit Bharathan joins Prabh Nair to discuss the path to mastering the Offsec OSAI+ (AI-300) certification. This conversation focuses on the practical skills required for professionals aiming to enter the specialized field of AI Security.Linkedin Profilehttps://www.linkedin.com/in/ankitbharathan/https://github.com/microsoft/AI-Red-Teaming-Playground-Labshttps://owasp.org/projects/top-10-for-large-language-model-applicationshttps://atlas.mitre.org/AI red teaming is becoming a serious extension of offensive security.But preparing for AI security assessments requires more than learning prompt injection.You need to understand how modern AI applications are actually built — LLMs, RAG pipelines, vector databases, embeddings, agents, APIs, web applications and the traditional infrastructure underneath them. Beyond the technical curriculum, we analyze effective interview strategies and the specific criteria used for candidate selection in 2026. Whether you are looking to pivot your career or sharpen your expertise, this session provides a roadmap to navigating the hiring landscape for off-sec positions.Subscribe for weekly technology infrastructure breakdowns and comment below on what certification topics you want covered next.
Welcome to our deep dive into the world of ransomware. In this video, we'll unravel the intricacies of ransomware investigation , exploring their mechanisms, common vectors, and the tools used for analysis. From understanding the initial infection point to decrypting locked files, our comprehensive analysis will equip you with the knowledge to stay one step ahead of cyber threats.In this video, we'll be breaking down ransomware: what it is, how it works, and some tips on how to investigate ransomware . We'll also be discussing the different types of ransomware analysis, including static and dynamic analysis.If you're investigating ransomware symptoms or trying to determine if a system is infected, this is the video for you! We'll discuss the different types of ransomware, how to investigate them, and how to determine if a system is infected. After watching this video, you'll be able to break down ransomware and investigate it in a way that will help you protect your data!Ransomware Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYy0PZMz9DejEZ2iDKBC-RTGSOC Interview Questionshttps://www.youtube.com/watch?v=UF_oLGoRL_c&list=PL0hT6hgexlYxd24Jb8OE7vZoas-iTcHAcPlaylist Network Securityhttps://www.youtube.com/playlist?list=PL0hT6hgexlYzX6AWwcyDbAZQUKYJL2MdtGRC Interview Questionshttps://youtu.be/4TyfNtFGAC4Internal Auditor Playlist https://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvHow to make career progression post #isc2 and #isaca https://www.youtube.com/watch?v=PT0fnCWzAFA&pp=ygUJZ3JjIHByYWJoHow to make career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=102s&pp=ygUJZ3JjIHByYWJoHow to Build PIMShttps://www.youtube.com/watch?v=IwAseU4ZmuQHow to Implement 27001 in an organization https://www.youtube.com/watch?v=sQqJH2naU6IHow to conduct PIAhttps://www.youtube.com/watch?v=z1BD7exH2Ow&t=774sHow to Make a career in GRChttps://www.youtube.com/watch?v=_S4t9S5N4Ts&t=7sTelegram Grouphttps://t.me/InfoseclearningStart your career in cybersecurity with free resources https://lnkd.in/g89gxkzc. Cybersecurity Career: How to Make a Career in Cybersecurity 2022 https://lnkd.in/gCGBnRM7Pentesting Career https://lnkd.in/gQYenKYdTelegram Group Linkhttps://t.me/InfoseclearningCybersecurity Guidehttps://www.youtube.com/playlist?list=PL0hT6hgexlYwdYBW6yqUQMuRqvABiQPXkFollow me on Instagramhttps://www.instagram.com/prabhnair/?...#soc #cybersecurity #infosec #ransomware , #Cybersecurity #malware Analysis, #RansomwareDecryption, Cyber Threats, #ransomwareattack #DigitalSecurity.
Welcome to our channel! In this video, we dive deep into realistic ITGC interview questions frequently asked in Big 4 firms. If you're preparing for an ITGC (IT General Controls) interview with top consulting firms like Deloitte, PwC, EY, and KPMG, this video is a must-watch!What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Essential knowledge for ITGC consulting and audit roles.Why Watch This Video?Securing a job in ITGC consulting or ITGC audit at a Big 4 firm can be challenging. This video equips you with the insights and confidence you need to ace your interview. Whether you're a fresh graduate or an experienced professional, understanding these interview questions is crucial for your success.What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Scenario-based questions to help you prepare for real-life interview situations.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Techniques to handle questions with confidence and make a great impression.Essential knowledge for ITGC consulting and audit roles.Internal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvGRChttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylAudit Serieshttps://www.youtube.com/watch?v=an15rFruIvo&list=PL0hT6hgexlYzvKY3AcOX2M7bkLRFVpQv4&pp=gAQBiAQB#ITGCInterviewPreparation#itaudit #audition #audition #itsecurity #itgc #sox