The Audit - Cybersecurity Podcast
The Audit - Cybersecurity Podcast from IT Audit Labs features trusted security experts, industry leaders, and practitioners who unpack the threats, tactics, and trends shaping today’s risk landscape.
With 90+ episodes and a top 10% global ranking on Listen Notes, The Audit goes beyond surface-level security talk. Each episode explores real-world threats, attacker techniques, compliance challenges, cyber risk, and the decisions security teams face before, during, and after an incident.
IT Audit Labs helps organizations identify risk before attackers exploit it. Through threat assessments, security control reviews, compliance expertise, and a trusted network of partners and specialists, we help teams find their soft spots, strengthen their defenses, and make smarter security decisions.
Listen in for sharp conversations, practical insight, and a clearer view of what’s coming next in cybersecurity.
The Audit - Cybersecurity Podcast
The Audit Turns 100: Cyber Trivia, Zero-Days and Red Teams
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
How well do cybersecurity pros really know their own acronyms, hacker movies, and tech history? For the 100th episode of The Audit, Joshua Schmidt turns the St. Paul studio into a live game show with Eric Brown, Jen Lotze, and Kelly Venzke, while Nick Mellem buzzes in from Texas. Thirty questions across five rounds put everything from MFA and zero-day vulnerabilities to HAL 9000 and Dennis Nedry to the test.
Between buzzer disputes and point deductions, the crew digs into the security concepts that matter most. Jen explains why living off the land attacks are so hard to spot, Eric breaks down how watering hole attacks work, and the group revisits how AI is giving a new generation of script kiddies more power than ever. Along the way, Eric and Kelly share stories from their trip through Europe, Nick learns why you shouldn't trust AI with your trivia answers, and the team celebrates 100 episodes and a spot in the top 10% of podcasts globally.
In this episode:
- The crew defines MFA, phishing, ransomware and zero-days.
- IT Audit Labs explains its proactive PHP patch alerts to clients.
- Jen breaks down how honeypots attract attackers.
- Nick explains why living off the land attacks are so hard to detect.
- How a watering hole attack works.
- Least privilege and zero trust go head to head.
- Hacker movies get their due, from WarGames to The Net.
- The final question asks who the biggest non-state hacking group is.
Thanks for being part of 100 episodes of The Audit. Drop your trivia score in the comments, share this with your security team, and subscribe for more conversations shaping the future of cybersecurity and IT.
Cold Open And Cast Banter
Joshua SchmidtNick.
SPEAKER_03She googled it. That's allowed.
Joshua SchmidtNick. What said we could have to do that? Nick identity theft. Incorrect. What? It says it right here. See it. It's an identity theft movie. That AI that AI boy. The answer is the net. You guys don't remember that movie?
Kelly VenzkeNever heard of that one.
Joshua SchmidtYou are listening to the audit presented by IT Audit Labs. I'm your co-host and producer, Joshua Schmidt, coming to you live from the studio in St. Paul at IT Audit Labs headquarters. To my left is Miss Jen Lotsey. She's joining us today, Sip Cyber Girl. And uh over on the other side of the table, we have Eric Brown, managing director, and Kelly Vensky. How are you all doing today?
SPEAKER_03Director of everything else.
Joshua SchmidtDirector of everything. Most of us would call her Cocaine Kelly. Mostly H.
SPEAKER_03Stop it. We don't. Just to clarify him, look right at the camera. We do not do that. Just to be clear. To nobody. Just on Friday. Never.
Joshua SchmidtOkay. And then we don't want to forget about Mr. Nick Mellum down in Texas. I bet you're happy you're there right now. It's good to be a thousand miles away. Cyber Nick.
SPEAKER_01Cyber Nick. Cyber Nick and I had an incident later today. Earlier today.
Joshua SchmidtOh yeah? We did. We did.
SPEAKER_01We were supposed to get these new iPhones, but that did not happen, did it, Nick? Oh, you didn't get the order? Um no. The order was all um it got it got the order was corrupted. Uh-oh. January 25th. Oh.
Kelly VenzkeNick said that to you earlier this week.
Joshua SchmidtHe thought it was cooked. Are the duos new we're cooked? Are the duos postponed or something? If you didn't have one pre-ordered within two seconds of them going live last Friday, you're not getting one until February.
SPEAKER_01But the Apple business rep when Nick and I ordered it, he was like, Yeah, I got you guys. Don't worry, it'll go in right away on the 16th or whatever it was.
SPEAKER_03You know, Android has had this technology for like I think four years.
SPEAKER_01You're saying words. Yeah, we gotta mute you. Out of the yeah, Jen, I'm sorry.
Kelly VenzkeI love you to pieces, but I just can't.
SPEAKER_01And she has an iPhone right there.
SPEAKER_03So we just is because of peer pressure, because of you.
Joshua SchmidtSo I love the user user interface way better on any Apple device. Uh it's a pain going over to anything else.
SPEAKER_03We're not here to product support or buzz button.
SPEAKER_01Well, we're just here to product support Apple. This is our hundredth episode.
SPEAKER_03This episode is not Apple nor Android or just Sip Cyber.
Joshua SchmidtWe're getting squirrely in here today because it's our hundredth episode. Eric and Kelly are back from vacation and rare and go. Yeah. We uh we had a good time over there. Great time. Yeah, anything you want to share in particular?
Kelly VenzkeDo you want to talk about it? Where did you go? We started in London, went to Munich, Paris, and ended in Amsterdam.
Joshua SchmidtNice. It was awesome. I love Amsterdam. It's one of my favorite cities.
Kelly VenzkeMe too.
Joshua SchmidtWell, that space cake.
Kelly VenzkeEric was sick in Amsterdam.
Joshua SchmidtDid you do you take too many mushrooms and go to the Van Gogh Museum or something?
SPEAKER_01I got sick in Paris right before we went to the sick for 24 hours. We were in Paris for what, five days, something like that. I got sick on like day four. Kelly did too. Kelly was fine by day five. And in Paris, there they don't have any cold medicine. There's no acid. No day quill, no serotonin. Right. I mean, so you're all stuffed up and they try to send you to like a witch doctor to get some echinacea. It's like, no, come on. Right. So when we get to Amsterdam, fortunately, they had their equivalent of affron, but no um no day quill, no Sudafed. We're in the pharmacy and they're like, no, we don't have this even with a prescription. It's like, well, you can buy, you can go two doors down and get marijuana, mushrooms, or whatever, but you can't get Pseudafed.
Joshua SchmidtAnd they say it was I think I see a solution here.
SPEAKER_01They say it was formed by like three free men, and it was this whole like Amsterdam is supposed to be this free city, but just don't get sick in Amsterdam.
Kelly VenzkeNo, you don't you mean Paris. For sure.
Joshua SchmidtFor sure. Yeah. Been there, done that. It's it's they don't like that Sudafed and stuff. They think it's poison, which it probably is, right? Probably not the best for you, but I'm glad you made
Vacation Stories And Getting Sick Abroad
Joshua Schmidtit through. Are you guys ready for some trivia? We're doing a we're doing a cybersecurity trivia episode today. I'm sure this will stimulate plenty of conversation. Um, so we'll see how this goes. This is the kind of a test run. So I was kind of describing the rules of the game, and uh, we all have our buzz in live. We're using this this fun website. I'm gonna ask a question, and then whoever buzzes first gets a chance to answer. They'll have 10 seconds to answer. If you take more than 10 seconds, you're gonna lose a point. If you answer incorrectly, you're going to lose a point.
Kelly VenzkeAnd if you're Eric, you lose five. Okay. Do we say do we want to predict in advance who's gonna win and lose?
SPEAKER_01I already know I'm gonna win. Well, I think that's Jen. We got this. Jen, who's gonna win this weekend with uh with football? No, that's fantasy football.
Kelly VenzkeWhy do you define something?
Joshua SchmidtIt might be far m more fun just to listen and watch this go down.
SPEAKER_01Well Who's number one in the fantasy football? Let's just get it on the table.
Joshua SchmidtWho's number one in the Us AI? But you can't use AI for this. Okay. Well, I guess you could if if you wanted to get 10 seconds in.
Kelly VenzkeI'm gonna say Jen's gonna win because she's got the cyber and she's got all of it. I'm just here to collaborate.
Joshua SchmidtWe got 30 questions here. Let's see what we got. All right, Nick. Well, thank you, Nick.
SPEAKER_03All right, I'm kind of.
Joshua SchmidtAll right, are we ready for question number one? Stay focused, people. It is a little hot in here.
unknownOh, okay.
Joshua SchmidtAnd uh there's gonna be 30 questions. There's gonna be five rounds, okay? Each round has six questions. Are we ready for question number one? I didn't take my adderall. Excuse me.
SPEAKER_03Stop with the drug.
Joshua SchmidtOkay. Well, what are we in? France? Okay, okay, okay. Question number one. Are we all ready? Yeah. Okay. What does MFA stand for? No, you no, Eric, disqualified. Why am I disqualified? Wait till the question's over. Why do I have to wait? Let's You didn't say that. You didn't say I had to wait. You have to wait till the timer starts. Let's try that again. What does MFA stand for? Kelly, no multifactors.
SPEAKER_03Okay, stop. No, no, because we're gonna get blocked off the internet. No swearing.
Joshua SchmidtOkay. We're not you can swear if you want.
SPEAKER_03Oh dang it.
Joshua SchmidtJust because Kelly's so nice. Okay, don't worry, don't worry. This is just a warm-up round, Eric. Don't get oh,
Trivia Rules And Round One
Joshua Schmidtdon't get old, don't spin out on me now. Okay. Wait until the question's over. All right, until the timer starts.
SPEAKER_01I think you should just start the timer as soon as you start asking the question.
Joshua SchmidtNo, because that will eat into the okay. Don't worry. We'll get a we'll get a flow here. Okay. Okay, don't worry. We got plenty of questions. Okay, question number two. What attack tricks people through fraudulent emails? Phishing. Thank you. Eric, got the point on phishing. All right. These are pretty easy. There's gonna be some other other ones that are gonna be a little tricky, okay? There's one coming up. Uh question number three. Um, we'll see who can get this one. Don't slack now. You ready? Question number three. What is a zero day vulnerability? SIP Cybergirl.
SPEAKER_03It is a vulnerability that does not have um has been uh seen and does not currently have a patch to patch that vulnerability at this point in time.
Joshua SchmidtEric, are we accepting that answer? We're gonna accept it.
unknownOkay.
Joshua SchmidtOne point for Jen.
SPEAKER_03Isn't that what it is?
Joshua SchmidtYeah.
SPEAKER_03Okay.
Joshua SchmidtZero day is a vulnerability with no available patch, right? Is that what you guys are dealing with today? Oh, with the iPhone kerfuffle? Yeah.
SPEAKER_03Zero day is on the PHP, the PHP situation. If you've been following that, there is a patch. So if you have a website of any shape or kind, you should be patching it.
Joshua SchmidtYeah, actually, Tabitha just told me she sent that out to some of our customers, even though that's how we do things here, right? Yeah. We we don't even deal with that on their websites, but we wanted to keep everybody in the loop of what's going on.
SPEAKER_03So and it lets them communicate with their people and then they reach back out to us if they need support. It's been awesome.
Joshua SchmidtThought that was cool. Yeah. It's because when even when they were away. We just did that on our own, right? That's great.
SPEAKER_04That's right.
Joshua SchmidtYeah, it's how we roll. All right. This one's for Kelly. All right. So get ready. Who is Baby Jessica?
Kelly VenzkeOh. She fell down a well back in the 80s.
SPEAKER_01And I want to say, yeah, Nick, you're baby Jessica because you're not buzzing in here.
Joshua SchmidtSomething's wrong with my buzzer. I've buzzed for every single one of these. Baby Jessica is an American woman who became internationally famous in 1987 after falling into abandoned water well as a thing.
SPEAKER_03That's because Nick wasn't born yet.
Joshua SchmidtNick was born. Weren't she born? She was not born yet.
SPEAKER_03See. Okay.
Joshua SchmidtKelly's in the lead. 88. Nick has yet to get on the board. Uh we got six cyber girls. And Eric are tied.
SPEAKER_03Why would you tell him?
Joshua SchmidtOkay. Question number five. What malware encrypts files and demands payment?
SPEAKER_03Ransomware.
unknownYes.
Joshua SchmidtNo.
SPEAKER_03Did you get the What do you mean, no?
Joshua SchmidtBecause I thought I buzzed it. I think something over road. I think she was just a little quicker.
SPEAKER_03It said me. It does say it was wild.
Joshua SchmidtThe buzzin' doesn't lie. We revert to the uh what the buzzin' does it says it's Jen. I think I'm done.
Kelly VenzkeWell, maybe you got a decision.
Joshua SchmidtWhy don't you give us a buzz, Nick? Make sure your stuff's working there. Okay, it is working. You're just slow. Okay, I'm just I guess I'm just slow.
SPEAKER_01That's just slowing them down. It could be the latency of the 200 milliseconds. Sure. We'll say that.
Kelly VenzkeOkay. Good.
Joshua SchmidtOne more easy one. Now we're getting into it here. All right.
Kelly VenzkeFor the folks on the phone are listening. I'm the easy one person. Not gonna get any of the others. This is going so many wrong ways.
Joshua SchmidtNumber six. What does uh the CIA triad stand for?
SPEAKER_03Oh, I knew that.
SPEAKER_01Eric. Confidentiality, integrity, availability.
Joshua SchmidtNice. Nailed it. Nailed it. Hey, Nick, what's going on there, buddy?
SPEAKER_03Who cares?
Joshua SchmidtKeep going. My fingers aren't quick enough. No. Okay, that's round one. We have a dead heat tie between Sip Cybergirl Eric and Kelly for round one. Okay. I'm just a nice guy, is what it is. Question number
Rounds Two And Three With Pop Culture
Joshua Schmidtseven. This is round two. What was the name of the first Apple product?
SPEAKER_03Oh, oh. Go ahead, Nick.
Joshua SchmidtiMac?
unknownNo.
Joshua SchmidtNo.
SPEAKER_03What? I can guess. You go first, Kelly. I was gonna say the iPod.
Joshua SchmidtIncorrect.
SPEAKER_03Apple IIE.
Joshua SchmidtIncorrect.
SPEAKER_03Dreambox?
Joshua SchmidtApple I. Incorrect. Apple I apple one.
SPEAKER_03What is it? Oh.
Joshua SchmidtThat does not count, Nick. But uh there was a lot of things.
SPEAKER_03I got the earliest of all the guesses. The two E.
Joshua SchmidtIt was the Apple One, um, also written as Apple-1, released in 1976. Steve Wozniak designed and hand built it and sold it for $666.66 as a bare circuit.
SPEAKER_03An almighty wads.
Joshua SchmidtWithout a case, keyboard, or monitor, about 200 were made. Did you know that, Eric? So this is the first Apple product? I did not know that. Okay, good. Um that was a good one for you to get a Kleenex then. So I'm negative one, actually. I don't even have a negative.
Kelly VenzkeYou gotta climb out of the hole now, but one that I did know is why don't we-still obviously have two points.
SPEAKER_01Why don't we have proper tissues in this facility?
SPEAKER_03You did all the ordering when all that stuff came in, and I'm going to fix it when I order for game night for turkey bingo game night.
Joshua SchmidtTurkey bingo game night coming up.
SPEAKER_03First of all, is there gonna be a tofu rookie? Um the only people that eat that are you two, and you're not going to be here.
Joshua SchmidtOh yes.
SPEAKER_03So you're gonna come? Why wasn't I gonna be here? Well, Eric told me he was not coming.
Joshua SchmidtNick and I were wondering why the vegans and vegetarians always eat things that are supposed to taste like meat. Because we're posers.
Kelly VenzkeWell, I don't eat meat.
SPEAKER_01Well then I get it so the plan is So they're gonna get a gift card for the turkey.
SPEAKER_03Well, unless I'm feeling boisterous and I bring a turkey as well. We'll see. I would say let's do a gift card. That matters.
SPEAKER_01That's what I'm thinking too. Then we can get a turf turkey. Well, you're not gonna be here. No, but you are.
Joshua SchmidtHow about a turduckin? You know about that?
SPEAKER_04It's so good.
SPEAKER_01The the duck inside of the turkey. The chicken inside of the duck inside of the turkey turkey. What about a pigeon in there?
SPEAKER_03That's not right. Can we carry on?
SPEAKER_01Yeah, we sure can. Stick a pigeon in there.
SPEAKER_03Why is it?
Joshua SchmidtOkay, here we go. Nick's trying to pull up. Question number eight, round two.
SPEAKER_01What is a red team? The red team is the team that can conducts offensive assessments for an organization.
Joshua SchmidtCorrect, Eric. All right.
SPEAKER_03Why does he get a block? Who cares?
Joshua SchmidtI forgot. I'm gonna start using these now.
SPEAKER_03No.
Joshua SchmidtHey, here we go. Question number nine. What does D D O S stand for? Oh dang it, Sib Cybergirl.
SPEAKER_03Denial of service. Yes.
Joshua SchmidtNope.
Kelly VenzkeWell, it's how come that didn't get played for Nick?
Joshua SchmidtIt will be from now on. Thank you. Um Eric, you've made a first comment.
Kelly VenzkeGo ahead.
Joshua SchmidtThat was I didn't put the first D. Yes.
SPEAKER_01Denial of service. Yes.
Joshua SchmidtOkay. I thought I was going to get the next one. Give me a burn. I didn't even guess. Eric, or Nick hasn't even gotten a buzz in.
SPEAKER_03He did. He just got it wrong. He got a negative one in the end.
Joshua SchmidtThat's right. Okay. We'll make sure we keep the uh trombone for Nick's next wrong answer. All right. We got another one in the same similar vein now, so get ready. Uh question number 10. What does SOC stand for?
SPEAKER_03Security Operations Center.
Joshua SchmidtCorrect. And we've been to a Security Operations Center, haven't we?
SPEAKER_03We have. We've been to actually the State of Minnesota EOC, the emergency operations center.
Joshua SchmidtGotta give you your flowers here.
SPEAKER_03Okay, thanks.
Joshua SchmidtSip Cybergirl. I'm not a trivia guy we're finding.
SPEAKER_03I'm not either.
Joshua SchmidtOh, I'm terrible at that point. Don't they do the snaps? Who are we supposed to do?
SPEAKER_03How come I only have one point? I should have like three.
Joshua SchmidtYou lost one point.
SPEAKER_03Oh, these aren't any claps. So now I should be at two.
Joshua SchmidtYeah. Okay, so we got a we got a pop culture one here now. So what's the language? I don't know if if we will get this one. Pop culture? I'm not even going to get it. Pop culture movie. This is a movie theme one, okay? So Nick, you're kind of a movie buff, so I have high hopes for you here, all right? Everybody's ready to go on the book.
Kelly VenzkeEric will only know if it's full metal jacket.
Joshua SchmidtFull metal jacket. Question number 11. Well, this is actually another Kubrick movie, so you don't have a chance. What is the name of the AI computer aboard the ship in 2001 Space Odyssey? Oh, that's not happening. Hal had no idea. Hal what?
SPEAKER_03If I didn't get it for DDoS, then you don't get it for D.
Joshua SchmidtI don't give it for HAL? No. Hal hell's an accepted answer. What? It is technically Hal 9000.
SPEAKER_03That is uh uh. No, because if I didn't get it for D DDoS, I'm giving it to us.
Joshua SchmidtI'm the host, I'm the Trebek. I'm Josh Trebek here. I'm gonna give that one to Eric. I'm getting messages like it is. He is referred to as Hal. He's referred to as Hal. So I'm gonna give that one to you. It is technically Hal 9000. You would have got an extra point for that. Oh, nice. Um, Hal 9000. Nice. But I'm glad you knew that. That's one of my favorite Kubic movies. Have you read the book, Eric? I have not. Just based on a book. I didn't I just found that out.
SPEAKER_03I should have two.
Joshua SchmidtWe already talked about this. We lost a point.
SPEAKER_03Uh yeah, but I'd go to your faster, Jim.
Joshua SchmidtI'm putting my money on Eric. He's got a few.
SPEAKER_03That was one point. You lost it for the iPhone. We have another movie one.
Joshua SchmidtAnother movie one. Go, go, go. Here we go. Question number 12. Silence in the studio. Number 12. What 1995 thriller stars Sandra Bullock as a systems analyst whose identity gets erased?
SPEAKER_03Oh no.
Joshua SchmidtI don't know. You don't remember the number one?
SPEAKER_03I'm not even clicking because I would say speed, but that's the number nine. That's the only one I know.
Joshua SchmidtClick the buzzer.
SPEAKER_03He googled it. That's allowed.
Joshua SchmidtNick said we could identity theft. Incorrect. What? It says it right here. See, it's an identity theft movie. That AI, but that AI movie. The answer is the net. You guys don't remember that movie? Never heard of that one. Nick City. That movie Nicklace. It does say it right here.
SPEAKER_01Yeah, but AI could be wrong.
Kelly VenzkeYou know what, Nick? You cheated. AI can be wrong. You can use Google.
SPEAKER_01This is an example of where AI is wrong.
Kelly VenzkeYou cheated?
SPEAKER_03Why does Billy get? I tell people AI is wrong all the time.
Joshua SchmidtNick just got burnt. I didn't. It says it right here. It says identity theft, the net.
Kelly VenzkeWhy is it Nick Negative 2 he is now?
SPEAKER_01Oh no. He's saying the movie was called identity theft-thenet. No, it wasn't. No, it's not called that. It wasn't the net.
Joshua SchmidtYou remember the movie, though, yeah? I remember the movie. It was a good flick.
SPEAKER_01Everybody Nick, you have to eat one veggie burger.
Joshua SchmidtNot happening. I'm going to see how negative I can go. That's my new goal. We've been really hard on Jocelyn for not watching Top Gun, and we actually made her watch it like a week ago.
Kelly VenzkeHe hasn't seen Top Gun.
Joshua SchmidtSo now you guys are kind of making me look bad, but you don't know the net. I thought Nick would at least know that one. That's too obscure for you.
Kelly VenzkeHas she seen Top Gun? No. Yes. She watched it in a weekend.
SPEAKER_01We have to add that to the interview questions, apparently, huh?
Kelly VenzkeOh my goodness.
SPEAKER_01Yeah, that's gonna have to be a filter for any of the new hires. Yeah. And full metal jacket.
Kelly VenzkeNo, that one is a little bit more than a little bit. Full metal jacket. There's nothing, you know.
Joshua SchmidtOkay.
SPEAKER_01What is your major malfunction?
Joshua SchmidtThis is why I wanted Kelly here. This is good dynamic. It does give me a little trauma though from my childhood.
SPEAKER_01Jen is look at Jen. Jen's having a hard time with this. Jen's doing great.
Kelly VenzkeI'm on Jen's side.
SPEAKER_03I'm just trying to keep it up.
Joshua SchmidtNext time we're gonna do teams, okay? Yes. Okay. We're on to round C already. I'm glad you're not getting bored. So uh this is a board game topic, so you know we'll see. Question number 13. What three things must you identify in the game? Clue. Zip Cybergirl.
SPEAKER_03Uh who?
Joshua SchmidtGo naked. Go naked.
SPEAKER_03The weapon and the place.
Joshua SchmidtWhat does ATC stand for in aviation?
SPEAKER_03If Eric doesn't have a lot of people, why are we giving questions just to Eric?
SPEAKER_01I was giving everybody a chance to ding in there. Nick, Warware, you know this. Air traffic control. That is correct.
Joshua SchmidtEric is at five points ahead of the pack. Nick's at negative two, Sip Cybergirls two, and Kelly at one. I think you need to start taking some stabs here, Nick. You know, you can't. I'm not more negative, Nugget.
SPEAKER_03I'm Googling.
Joshua SchmidtOkay. What did you say, Kelly? I said, come on, take one for the team. I already have to do that.
SPEAKER_01Question number 15. Question number four. Do we have any cat questions for Nick? Because he's got all those hairless cats. No, no, we don't.
Kelly VenzkeSpeaking of that, we had to stop at which museum was it that you were pouting? And then I called him and said, Hey, there's a cat down here. He came running. He practically knocked old people down. Yeah, that was at Notre Dame, right? Notre Dame. He comes running, almost gave an old lady an elbow to get to this cat that wouldn't even talk to him.
SPEAKER_01Now, when we were supposed to go to um Budapest and then Vienna, right? And was it Vienna that had the Budapest. Budapest has a cat uh I don't know what I'll say it's a cat museum, but you can go in and interact with the cats for like you know an hour or whatever.
SPEAKER_03There's a cafe here in town. Is there? It's a cat cafe. Yeah, it's really cool. We have coffee shops. Three at home? I'll take it. Why would we want to be on sub cyber?
SPEAKER_01Yeah, let's do a sub cyber at the cat cafe.
Kelly VenzkeWe've got three at home. Why would you pay to interact with more? Well, they have coffee there. Well, I get the coffee, but I don't understand. We've got a zoo. I think it's called the cat cafe.
SPEAKER_01What's better than one cat?
Kelly VenzkeNone.
SPEAKER_01New cat. Zero.
unknownZero.
Joshua SchmidtI'm not a cat guy. I'm not a cat guy.
Kelly VenzkeI'm a little zero animals in the house. Less hair. The cat zen coffee. It's in the case.
Joshua SchmidtZero. Thanks to our uh live viewers out there getting some laughs and some stuff chat. Yeah, we do. This is a bit of an Eric one, I think. Okay. But get ready. Put your movie hats on. Question number 15. What 1983 movie features a hacker nearly starting a nuclear war?
SPEAKER_03I don't know.
Joshua SchmidtWar games. That is correct. Dang. How much do you collect pass and go in the game Monopoly? Sip Cybergirl. Oh no, I had that one. What did he do? Answer. I five landscape.
SPEAKER_03No, it's $200. You get $200 for that. Nick just got it.
Joshua SchmidtI'm giving it to Nick.
SPEAKER_03I'm giving it to Nick because it's out of the goodness of my heart.
Joshua SchmidtDo not pass and go. Do not collect it. $200.
SPEAKER_03Cost $500 to get out of jail.
Joshua SchmidtI appreciate your boldness for just going in right. Unlike Nick, who's sitting there on the fence, you just got in there and gave it a your all. I like that.
SPEAKER_03Listen, I'm a committed.
Joshua SchmidtDoes he get a point back?
SPEAKER_03He did. Now he's at zero. Oh, he's at negative one. Negative two. What? You were. Yeah, sorry.
Joshua SchmidtSon of a You were first, but you were wrong, and it went to Nick. We are going on to question number 17. Eric's still in the lead. We'd love to see some competition creep up here. So technically I was this is another aviation one, so I feel like we probably should have this but this but hands down. This goes for other things too. So it's who's going to be the quickest at the buzzer from question number 17. What does Mayday mean in A travel aviation? Kelly.
Kelly VenzkeThat means that you're having an aviation problem and you need some help.
Joshua SchmidtCorrect.
SPEAKER_01Follow-up question. What is the new term? So Mayday was the old term. I can still use it, but what is the new term?
SPEAKER_03You don't get to make up questions here. Something's happening. Oh, the language.
SPEAKER_01It's pan. So pan, pan, pan. Why is that?
Kelly VenzkeWell um you tell me what would you say, Jen? I would. You're right. Am I right? Yeah. I think I'm right. I think you're right.
Joshua SchmidtI didn't swear at all yet today. And I also didn't swear when Eric brought me up in the in the plane. That was fun. I I'm ready to go in.
SPEAKER_03I don't swear in the storm. Let's go.
Joshua SchmidtI must go at night. Let's go in a storm. We gotta we gotta get our mileage in.
SPEAKER_01So I was technically wrong, but so the difference between Mayday and Pan Pan comes down to the level of danger and how fast you need help. Both are the international voice call used um in aviation maritime settings. So but who got that one?
Joshua SchmidtKelly did, yeah. Question number 18, down three. Which pill does Neo take in the movie The Matrix? Oh no. Kelly, I don't can't remember which one.
Kelly VenzkeThe white pill. Is it the blue pill? I think it's a I don't even know what color the pills are.
Joshua SchmidtI figure I it's it's either red or blue.
Kelly VenzkeI think it's blue. I thought it was I don't even know.
Joshua SchmidtNick. I guess it was Nick, what is your guess? Well, now I can't remember the color. I'm all screwed up. I think it's the more negative. Okay, blue, blue pill. No, it's not blue. It was a blue damn red pill. Red pill. Thank you. I'm not giving you a point for that one, though. It was the red pill. You got red pilled. Yeah.
Kelly VenzkeI guess I just guessed because it was a color. I think you're right. Fair enough. Fair enough.
Joshua SchmidtWell, I know to never play trivia again in my life.
Kelly VenzkeSuck it up.
Joshua SchmidtUntil next episode. Uh we had another uh kind of cybersecurity one here. So question 19, we're on to round four. Uh what is a script kitty?
SPEAKER_01Sounds inappropriate. My buzzer's gone. I'm on a buzz.
SPEAKER_03Um He's looking it up.
SPEAKER_01You can look it up.
SPEAKER_03Oh, right.
SPEAKER_01So a script kitty. A script kitty is two, a person that is a timeout. I'm gonna answer it anyway. So it is a um it is like a hacker light. It's somebody that doesn't really know coding and they rely on um scripts that other people have written.
Kelly VenzkeWe don't have long-winded answers. We just want something quick.
unknownOkay.
SPEAKER_03It's a less than technical hacker. Fuck it. They rely on stuff that other people have created.
Joshua SchmidtAn inexperienced hacker attacker using existing tools. We had a podcast episode of, I don't know, about 10 episodes back. We were talking about script kitties and because of AI proliferation, how easy it is for in the first hackers, right? Yep. And uh, you know, I think it comes from probably kids using it and doing nefarious things.
SPEAKER_03And you know, Tabitha also says it's a newer young person learning to hack. See, she should be on this because she's like, Tabitha, you should be on this.
Joshua SchmidtTabitha, maybe can rein us in next time. Next time. We're gonna keep going on the 200th episode. Okay, what does living off the land mean?
SPEAKER_03It's an Nick. Oh, what the heck?
Joshua SchmidtGo. Oh, go and it's when an attacker gets into an environment and they use tools that are only installed, they don't install any other tools. Nick is on the back to zero. Nice. Okay, but tonight finally, nobody needs a long-winded
Round Four Gets More Technical
Joshua Schmidtthird.
SPEAKER_03No, no, no. But this is important because your tracking tools won't see this because all the attacking that they do looks like normal behavior. So like PowerShell scripts and all this stuff. Like these are the scariest types of attacks, and we're seeing them mostly coming from international players like China.
Joshua SchmidtSo yeah. Thanks for adding the color to that. We're gonna go on to the next question. You're you still got time, Nick. There's plenty of questions left. All right. Here we go, Nick. I I'm rooting for you, buddy. Question number 21, round four. What is a honeypot? Sip Cyber Girl.
SPEAKER_03It is a part of your oops, it is a part of your network that you set intentionally to attract hackers to it.
Joshua SchmidtYes, that is correct. Jen, I thought I got the buzz on that one too. Dang it. Sorry, Nick. Jen, you're correct. And we had a honeypot set up here for a little while in the conference room just to see the amount of volume coming through is quite staggering.
SPEAKER_03So I should have two points, right?
Joshua SchmidtI don't know about that.
SPEAKER_03But uh, she goes up to I go up to two.
Joshua SchmidtNo, you said, well, yeah, you two, but you don't get two points for that.
SPEAKER_03Yeah, but I that's what I meant.
Joshua SchmidtYeah, should go to a second point. Yeah, she got a second point. Don't worry, everybody.
SPEAKER_03Now it's because it's hot in really hot in here.
Joshua SchmidtI don't know what who turned up. The coffee drink out me was delicious, but I am hungry.
SPEAKER_01What happened with the lunch order today?
SPEAKER_03Not important and not on the agenda.
SPEAKER_01It did not get delivered. Why not?
Kelly VenzkeThe DoorDash guy, he kept it. He kept it.
SPEAKER_01Shout out to Brad for getting on that grill and cooking up some burgers. Yeah, no vegetarian burgers, but it's okay.
Kelly VenzkeWe didn't have any here.
SPEAKER_01But he showed a picture of the door. Like the guy was.
Kelly VenzkeBut nobody answered the door, so he did not come in and drop it off at the door in the vestibule.
SPEAKER_01But there's a bell.
Kelly VenzkeHe didn't ring it. It also said leave it in the vestibule.
SPEAKER_01Somebody gotta ring the bell. What's that song? Ring my bell. No, I'm thinking of the one from the 70s.
SPEAKER_04Yes.
SPEAKER_01Umbody's knocking at the door. What is that one? No, Josh, you know this one.
Kelly VenzkeOkay, let's move on. It's like Can you please stop singing? Stop.
Joshua SchmidtWhat are you doing? We're gonna do karaoke next time. Eric, you're wild today, bud. A lot of shit.
SPEAKER_03Because he's rested.
Joshua SchmidtHe's well rested. I'm well rested. He's been waiting for this. He's been thinking in Europe, how am I gonna get really brandy on the next episode? The audio in those episode, man.
SPEAKER_01This is a big deal. We've been doing this for a little while. Yeah. We got we're in the top 10% of podcasts globally. So kudos to everybody that's been a part of this thing.
Kelly VenzkeI'm gonna say frankly, kudos to Josh and mostly Josh and secondary Nick for all the work that you guys have done, especially on that.
SPEAKER_01You why don't I get kudos?
Kelly VenzkeBecause you don't do any of the background work. That's f up. You show up. Oh god, you show up. Josh does the bulk of the work.
Joshua SchmidtThat's true. That's true. I thank you. You're welcome. It's my pleasure. And we have some really big guests coming for next year. Yeah, we do. We got plans. Yeah. I haven't even been able to tell you, but I got I got some I got some big plans.
Kelly VenzkeI got one that's really I'm excited about.
Joshua SchmidtYeah. Yeah. We can even talk about it if you want. We're having Bozo, the guy who the in story from Top Gun was inspired by. He is a pilot. I think he's dead. Who?
SPEAKER_03Bozo the Clown is who. I'm from Chicago, so Bozo's kind of a big deal.
Joshua SchmidtNo, Bozo, he was he was called Bozo after Bozo the Clown because he he buzzed the tower.
Kelly VenzkeYeah, so he was the actually the guy that was flying the plane that buzzed the tower on the top on the original Top Gun.
Joshua SchmidtHe worked with Paramount on the film and got to fly Tom Cruise around. He took all the actors up. Yeah.
Kelly VenzkeExcept for Val Kilmer.
Joshua SchmidtWho was having contract negotiations.
Kelly VenzkeAnd so his manager would not allow him to be up in the plane.
Joshua SchmidtHe said Val Kilmer was very hard to work with.
Kelly VenzkeOh, that's too bad.
Joshua SchmidtHe's notoriously. He was notoriously. He was one of my favorite though, uh, Val Kilmer, Iceman. Iceman. Pretty cool.
SPEAKER_01Yeah. We're going to run to bench 260 pounds.
Joshua SchmidtNo, really?
SPEAKER_01No. What a stud. Okay, let's keep going. How much could Val Kilmer bench in 1996?
Joshua SchmidtOkay, question number 22. I'm ready. What does OSINT stand for? Cyber Girl.
SPEAKER_03Open source intelligence.
Joshua SchmidtThat is correct. This little space bar is going to piss me off. Open source intelligence. Me.
SPEAKER_03You can do that. Investigate. Is that the problem? Is that a good thing?
Joshua SchmidtYeah. Okay, number 23. What is a watering hole attack?
SPEAKER_01Watering hole attack is where you compromise a website that people tend to visit like a restaurant website. So if you know that FBI agents are going to a particular website to order lunch, you'll poison that website to That's correct.
unknownThank you.
Joshua SchmidtDid you mute? No, I didn't. I just we didn't need any more.
Kelly VenzkeI just want to point out that you got it. I was going to say what a watering hole was. And living off the grid, I was going to say what that was.
Joshua SchmidtLiving off the grid is like whatever. Off the grid is what like I would prefer to be doing. You were going to give the real water.
Kelly VenzkeI'm going to give the a non-nerd answer.
Joshua SchmidtOkay. I'll I'll tell I will accept you all the time. Only from from from Kelly.
Kelly VenzkeCome on.
Joshua SchmidtOkay, ready? Ready. Number 24. We're heading in the last question of round four. What year was the first iPhone released? Nick? 2 2007. Nick is on the board. Yeah. All right. That is correct. Steve Jobs unveiled it at Macworld on January 9th, 2007, and it went on sale in the US on June 29th, 2007. I remember the first time I got my iPhone. I don't think it was the iPhone 2 or whatever it was. I think it was an iPhone 3 when it went 3G. And I remember just staring at that thing, going like, this is awesome. Like I'd, you know, I mean, it was like having a computer that you could take anywhere. It was a real, it was a real wow moment. I don't know if you I was like immediately addicted to it, I think. Did they have computers in all of your classrooms when you were we had the Mac well we had like Orgon Trail on like a Mac with the full phone?
Kelly VenzkeDid they have to roll it into your classroom?
Joshua SchmidtNo, we actually had one. Um we had like number munchers. Remember that game? And a word. You remember that? Does that bring you? We had computer rooms, Kelly, is like what she's getting at. Yeah. We didn't have a computer room. We had one computer for the whole school. I was homeschooled, so we didn't have anything. Were you? There was only 12 kids in my class. We don't like to be able to do that.
SPEAKER_01It's pretty much like little house on the prairie. Jen, I might have been I might I was well educated, Jen.
SPEAKER_03That I know. That's why I was saying we aren't letting you speak on education.
SPEAKER_01What's wrong with homeschooling? Nothing. Nothing. Okay. We're gonna make it. I wouldn't want my mom to homeschool me though, I'll tell you that.
Kelly VenzkeYeah, I mean if you got we could go on. If your family is qualified to turn to teach you, correct? No problem.
SPEAKER_01My mom used to wake me up with to go to high to get out of bed for high school by spraying water in my base.
Kelly VenzkeOh, can you do that? This is a good tactic.
SPEAKER_01That explains a lot.
Kelly VenzkeTomorrow morning.
Joshua SchmidtWe did not get along. Oh no.
Kelly VenzkeI'm gonna have that water bottle.
Joshua SchmidtYou still got a chance, Nick, to come into second place, or Eric might lose a few. We got five more questions, six more questions. Um, what principle limits users to necessary permissions? Zero trust. That is wrong. Well, let's let's let's see if anyone else can get it better. I mean, then we'll review your answer, holding on that. Anyone else? Uh clearing the buzzer.
Kelly VenzkeNick already said that was gonna be his answer too. So Nick doesn't get to say.
Joshua SchmidtWhat's the question again? What principle limits users to necessary permission? Go ahead.
SPEAKER_03No, it's okay.
Joshua SchmidtNo, please go ahead.
SPEAKER_03Go ahead, Eric.
Joshua SchmidtDo it. Jen, do it.
SPEAKER_03No, because I think I'm wrong and now I'm sweating. I don't have it. Go ahead. Least privilege, yeah.
SPEAKER_01Yeah. What did you say, Jen?
SPEAKER_03Zero trust.
SPEAKER_01That's you can you can yeah, that counts. Does that count?
SPEAKER_03But least privilege also. Yeah, that tracks. Okay, we're gonna try to. Because it's like a privileged account, and you give them the least amount of privilege that they need to do their job.
Joshua SchmidtShe's gonna say the same thing, so you gotta give it to her. Okay. Okay. Well, you're you're doing really well with the comedic relief today. Are you gonna get on the board, Kyle?
Kelly VenzkeI am on the board. She is on the board. I've got one.
100th Episode Milestone And Future Guests
Joshua SchmidtAll right, here's a nerdy one. We only have a few more minutes. Round five.
SPEAKER_01He's having trouble with his buzzer.
Joshua SchmidtWhatever. I'm just not a trivia guy. I get scared getting put on the put on the spot, I guess.
SPEAKER_01Are you sweating?
Joshua SchmidtI'm sweating like Jen. Is your deodorant acting? It's like 150 degrees. At least Lolly's not in here dropping bombs. Um okay. Question number 26. What planet is Luke Skywalker from?
unknownOh God.
SPEAKER_03I've never seen Star Wars. What?
Kelly VenzkeOkay, I'm gonna theater.
Joshua SchmidtCome on. When it first came out. No one knows? Really? Come on, let's let's go. Let's lock in here.
Kelly VenzkeI have no idea. I would play Earth, so I have no idea. I don't even know how to say it. I want to say it, but I'm not gonna say it. That's not right. Nick cheating.
SPEAKER_01Antony? Yeah, he's really. Was he saying Tatooine?
SPEAKER_03I got no idea. Take away his point.
Joshua SchmidtOh my god, you got Tantoine, y'all.
SPEAKER_03Come on. Yeah, no, take away Nick's point.
Joshua SchmidtYou can't take away my point.
SPEAKER_03Because you buzzed in and you said the wrong answer.
Joshua SchmidtYou read the wrong answer. I said it right. I just didn't pronounce it right. I said it wrong. I'm severely disappointed. You read it wrong.
SPEAKER_01I was thinking Tatooine, but I didn't, I wasn't sure because I knew they blew that point.
Kelly VenzkeWhatever. You're gonna say that you thought it now no matter what, because I'm very disappointed in all of you. I saw it in the theater then.
unknownOkay.
Kelly VenzkeI was like seven.
SPEAKER_01So who's gonna see the movie who didn't Nick lose a point?
Kelly VenzkeNick should be at zero. What is that one?
SPEAKER_01That is the Sasha Barron Cohen movie.
Kelly VenzkeOh Nick should be at zero.
Joshua SchmidtI just incorrectly. I had it wrong.
Kelly VenzkeI was asked if I wanted to go see a movie tonight, and I said sure. And then he said it was him that's Sasha Baron Cohen and I did a hard pass.
SPEAKER_03You gotta take my Nick's point. Because you answered it wrong.
Joshua SchmidtYou read it wrong. I didn't answer it wrong. You read it wrong. How do I say it? Sorry, Nick. Tatooine. I'm not gonna be for any of these women again. I'm anti. Have you ever been that works out? Question number 27. What is an aircraft? It will work out well. Trust me.
SPEAKER_04Oh, aircraft. What was the question?
SPEAKER_01You were talking.
Joshua SchmidtYou guys attacked.
SPEAKER_01The black box is the device that records the activity
Final Round Chaos And Wrap-Up
SPEAKER_01that's occurring on the airplane. Why are you speaking so close? Because it's my late night VJ voice.
SPEAKER_03He was doing Darth Vader.
SPEAKER_01Luke. I am your father. One ring to rule them all. Oh, or we're getting one. One ring to find them. That's enough. Do you have a Schmeagle voice? Do you have a Gollum voice? To bring them all. And in the darkness, bind them.
Kelly VenzkeWhy do you know this? Why?
Joshua SchmidtAre you really an a Lord of the Rings nerd? No, then no sky. Okay.
Kelly VenzkeNo, I want to know why you know them.
Joshua SchmidtDo you guys remember Jurassic Park? Yes.
Kelly VenzkeYes. Okay. I know that one.
Joshua SchmidtQuestion 28. Who disables security in Jurassic Park?
SPEAKER_03I don't even know what's going on.
Joshua SchmidtWhat character in the movie Jurassic Park disables the security? I can see him.
SPEAKER_01It's the Elbo's name.
Joshua SchmidtWhat's his name? Yes. It's um got a buzz in if you want to ask.
SPEAKER_01I don't know what his name is.
Kelly VenzkeNewman.
SPEAKER_01Newman. Newman. Don't lose a point.
Kelly VenzkeOh, the language. But it is Newman. It is Newman.
SPEAKER_01It is the Newman character in the movie.
Kelly VenzkeBut if nobody else can get it right, I have to give it away.
Joshua SchmidtHe's Newman from Seinfeld. Yeah. Yes, that's true.
Kelly VenzkeUh-uh.
SPEAKER_03Well, no, but I mean, I none of the rest of us have the name. Do you have the name? Yeah, but Nick just got it wrong for saying it wrong.
Joshua SchmidtEric, I'll take the point away. Nick got it wrong. I'm docking him a point. Okay. Who else wants to answer? Go.
SPEAKER_03It's his name. Nick, I was in your corner. Did you hear that?
Joshua SchmidtAnd the video game that we have even says his name. Yes, we have a literally.
Kelly VenzkeNo, I know I can't remember his name. I can't see the exact video and the things going on. It's laughing. I can I know the movie.
Joshua SchmidtThe character's name was Dennis Nedry. Nedry. God, you guys really disappointed me on the Star Wars and Jurassic Park. We literally have a Star Wars and the Jurassic Park pinball game in the building.
SPEAKER_03They are things I don't care anything about.
SPEAKER_01Well, what type of video game would you like to have?
SPEAKER_03We've been through this. I would like a skee ball machine. Oh, I would like to.
SPEAKER_01I would kick some butt.
Joshua SchmidtI would like that.
SPEAKER_03Eric can't beat me on that. They have one at Costco right now.
Joshua SchmidtOkay. But we mean the official.
SPEAKER_03I know. I found one on the internet.
Joshua SchmidtNick, let's get you a point here, bud.
SPEAKER_03Good luck.
Joshua SchmidtQuestion number. You don't know what a finding. You don't got it. What does EDR stand for? Damn it. Cybergirl.
SPEAKER_03Endpoint detection and response.
Joshua SchmidtI thought I got it.
SPEAKER_03And for a fun fact, MDR is managed detection and response, and you can buy that from IT Autolabs.
Kelly VenzkeThat probably was his next question, and he just blew it.
Joshua SchmidtIt's looking no. It's looking like there could be a tie here, or possibly I was betting on Jen to win. It's really down to Eric and Jen here today.
Kelly VenzkeIt's so hot.
Joshua SchmidtWe have one more question. We're almost done. Oh boy, this could be for all the marbles. I turned up the heat in here about five degrees, so we had a real nice, spicy episode. Sure. This is the last question unless we need a tiebreaker. All right? Are we ready? Make sure to get the buzzers cleared. Okay. What is the biggest hacking group with no nation state structure? What is the name of the biggest hacking group with no nation state structure? Anybody.
Kelly VenzkeNick, if you get it, you can tie me for losing. You can be the first we can be anonymous anonymous. Did you just cheat?
SPEAKER_01Nope. That is correct.
Joshua SchmidtThat is correct. It is anonymous. It started in the 2000s on a 4chan and went after things like PayPal.
SPEAKER_03Yeah.
Joshua SchmidtUm, and it is now um synonymous with the guy Fox mask.
SPEAKER_03Yes.
Joshua SchmidtWith the uh the hacker mask. And um that was our game show. That was really fun. Eric came in with six total points with Jen Lotsi. Seven trailing. No, you didn't. No, guys, you didn't give me the last point. Oh, yeah. You're right. Sorry, bud. Uh Eric went with seven points. Sip Cybergirl, Jen at a close second. Do you want to five? I kind of want to rematch Kelly. I'll let you buy me dinner. Kelly's in third. Nick. We gotta do this again. Nick, I don't know what happened. Come on, Nick. What happened out there in the day?
Kelly VenzkeI'm disappointed in Nick. I had like three points.
Joshua SchmidtCan we do it with the audience? Can the audience play with us? Probably, but then we'll have we won't be able to time answers and the answers in.
SPEAKER_03Like what I did at that webinar the other day. We could use that tool, that customer. Yeah. Because it has a quiz show built-in.
Joshua SchmidtOh, nice. We can certainly do that. Yeah. We can give it a try, or I can just set the timer a little longer so people will have to type their answer in.
SPEAKER_03Oh, I I'll show you.
Joshua SchmidtOh, you got a tool.
SPEAKER_03The vet is calling. Oh, geez. All right.
Joshua SchmidtLet's wrap this one up. I wanted to give everyone here a round of supplace. Thank you for trusting me with your podcast over the last 70, 80 episodes. And uh it's been a pleasure. I think we have some big things coming. It's been an honor to uh to do all of these with you and uh work with you all over the last four years, almost four years for me now. So um thank you, is what I'm trying to say. And uh I'm I'm excited to see what the future holds, and I'm happy I can call this our 100th show. So you've been listening to the audit presented by IT Audit Labs. I'm your co-host and producer, Joshua Schmidt, joined by Jen Lotsi, Kelly Vinsky, Eric Brown in the studio, and Nick Mellon coming from Texas. You can like, subscribe, please share us with your friends, and please find us wherever you stream your podcasts.
SPEAKER_03Including SipCyber.
Joshua SchmidtAnd don't forget SipCyber. Jen Lotsi's episodes come out every Wednesday, or come out every other Monday. Um I think the social media is right, Jen's on X.
SPEAKER_03No, no, Instagram.
SPEAKER_01Oh, Instagram.
SPEAKER_03Sip CyberGirl and Instagram.
SPEAKER_01And Nick is on Blue Sky.
Joshua SchmidtAnd Eric's on TikTok. You can find the flying CISO. Um we'll see you in the next one. Instagram. And uh stay tuned. Thanks all for watching.
SPEAKER_01Have a great day. You have been listening to the audit presented by IT Audit Labs. We are experts at assessing risk and compliance while providing administrative and technical controls to improve our clients' data security. Our threat assessments find the soft spots before the bad guys do, identifying likelihood and impact, or all our security control assessments rank the level of maturity relative to the size of your organization. Thanks to our devoted listeners and followers, as well as our producer, Joshua J. Schmidt, and our audio video editor, Cameron Hill. You can stay up to date on the latest cybersecurity topics by giving us a like and a follow on our socials, and subscribing to this podcast on Apple, Spotify, or wherever you source your security content.