Prabh Nair

In this practical masterclass, Prabh and Piyush Goyal discuss how cyber deception can complement controls such as EDR and SIEM by deploying fake assets, credentials, services, files, and tokens that should never be accessed during normal operations.If someone interacts with them, the signal can be extremely valuable.In this episode, we discuss:- What cyber deception really means- Historical deception concepts and the Trojan Horse analogy- How deception evolved into modern cybersecurity- Honeypots vs honeytokens- Fake assets and decoy services- Deceptive credentials- Fake AWS credentials- Canary tokens- Decoy files and services- How attacker interaction triggers alerts- Why deception can produce high-confidence signals- Where EDR may have limitations- Why response speed matters- How deception complements SIEM and EDR- Practical deployment considerations- Automation vs manual token deployment- Operational overhead- Deception across cloud and infrastructure environments- Practical demonstrations of deception platformsThe central idea is simple:Real users should never need to touch a deceptive asset.So when a fake credential, document, server, token, or service is accessed, the security team gets a strong indicator that something abnormal may be happening.Honeypot vs HoneytokenHoneypot:A larger fake system, server, service, or environment designed to attract attacker interaction.Honeytoken:A smaller deceptive artifact—such as a credential, file, token, API key, or record—placed inside the environment.The session also demonstrates practical deception concepts using platforms and tools discussed during the podcast, including Tracebit, Canary Tokens, and deception platforms for automated decoy deployment.#CyberDeception #Honeypot #Honeytoken #ThreatDetection #ThreatHunting #SOC #BlueTeam #CyberSecurity #DetectionEngineering #IncidentResponse #SecurityArchitecture #CyberDefense #CoffeeWithPrabh

Automotive cybersecurity is becoming a critical priority as modern vehicles integrate more complex technology into their design.We examine how the rapid rise in automation and widespread electrification are shifting the security landscape for the automotive industry. This discussion clarifies the fundamental aspects of protecting networked systems against emerging risks, providing security professionals with a clear view of why this sector is currently trending.By understanding these core architectural changes, engineers can better prepare for the unique vulnerabilities present in today's connected transportation infrastructure.Subscribe for weekly cybersecurity breakdowns, and let us know in the comments which automotive security topics we should cover next.

Automotive cybersecurity is becoming critical as cars integrate advanced automation and electrification. Learn why this shift matters.As vehicles evolve into complex computing platforms, the attack surface expands significantly. This discussion examines the intersection of modern transport and digital security, providing context on why industry attention is shifting toward protecting these connected systems.We break down the core challenges facing vehicle safety in an era of rapid technological adoption. By analyzing the risks inherent in car automation and the vulnerabilities within critical cybersecurity infrastructure, we can better understand the defensive measures required for the next generation of transport.Subscribe for weekly cybersecurity breakdowns, and let us know in the comments which automotive security topics you want us to cover next.#automativecybersecurity #infosec #carhacking

Master container security by understanding how attackers move from web application vulnerabilities to container compromise and breakout scenarios.In this practical masterclass, Divyanshu and Prabh Nair break down the offensive-security methodology behind attacking and defending modern containerized environments.Rather than looking at vulnerabilities in isolation, the session focuses on attack chaining — understanding how application weaknesses, Docker configurations, permissions, exposed services, and infrastructure misconfigurations can combine to create a larger security risk.Offensive Container Security Documentation: https://containersecurity.peachycloudsecurity.com - Youtube: youtube.com/@peachycloudsecurity - Insta: instagram.com/peachycloudsecurity - Website: peachycloudsecurity.comSubscribe for weekly cybersecurity breakdowns, and let us know which infrastructure topics you want to see covered next.Master container security by analyzing how attackers move from web app exploitation to full system compromise. This session provides the offensive methodology needed to secure modern infrastructure.Divyanshu and Prabh Nair demonstrate the step-by-step process of attacking and defending, focusing on how a compromised service can lead to a container breakout. By observing the attacker's perspective, you gain clarity on why specific configurations matter.The session moves beyond isolated vulnerabilities, examining attack chaining, Docker security configurations, and permission issues. By understanding these common misconfigurations, professionals can better identify potential entry points and strengthen their defensive posture against real-world threats.Subscribe for weekly cybersecurity breakdowns, and let us know in the comments which infrastructure topics you want us to cover next.#ContainerSecurity #DockerSecurity #CloudSecurity #DevSecOps #OffensiveSecurity #PenetrationTesting #RedTeam #CyberSecurity #AppSec #ContainerBreakout

Learn cryptography in simple term