Videos

This is one of the first videos I point new security professionals toward, not because it's flashy, but because it fundamentally changes how you think about the people you're protecting. In his DEFCON 19 talk, "Steal Everything, Kill Everyone, Cause Total Financial Ruin!" Jayson E. Street shares real stories from his engagements to make one core point: basic physical security gaps and unquestioning employees are usually all it takes. He's candid that he isn't a master social engineer or elite hacker, the weaknesses he exploits are that ordinary. But the part that sticks with me most is his take on the phrase "stupid user." His argument: if you hand someone the keys to a car they've never been trained to drive and they crash it, the problem isn't that they're stupid, it's that you handed over something they were never taught to use. The same goes for technology. If your employees weren't properly trained, that's on security, not on them. His closing point follows from there: stop treating your workforce as the weak link and start treating them as your largest intrusion detection system, and thank people for flagging something suspicious even when they're wrong, because the one time they're right is the one that matters. If you're new to this field, this talk will change how you think about the human side of security before you ever touch a firewall.

The Black Hills Information Security (BHIS) YouTube channel is a well-respected cybersecurity resource offering high-quality, practical content for security professionals of all levels. Their videos cover many topics, including penetration testing, threat hunting, red/blue team tactics, incident response, and open-source security tools. Known for its educational webinars, tool walkthroughs, and real-world demos, BHIS combines deep technical knowledge with an approachable, community-driven style. Led by experts like John Strand, the channel is especially popular for its clear explanations, hands-on training, and commitment to making security knowledge accessible and actionable.

The IppSec YouTube channel is a go-to resource for cybersecurity professionals and enthusiasts looking to sharpen their penetration testing and hacking skills. Best known for in-depth walkthroughs of Hack The Box (HTB) machines, IppSec breaks down each challenge step-by-step, explaining the tools, techniques, and thought processes behind successful exploitation. His calm, clear narration, and methodical approach make complex topics like privilege escalation, enumeration, and buffer overflows easy to follow. Whether you're studying for certifications like OSCP or want to improve your hands-on skills, IppSec's channel is an invaluable, real-world learning tool.