The BLUF Podcast

Quantum Risk Is No Longer Theoretical – What Delinea QuantumLock Means for Federal Security Teams

7 min · 25 de jun de 2026
Portada del episodio Quantum Risk Is No Longer Theoretical – What Delinea QuantumLock Means for Federal Security Teams

Descripción

This episode distills Delinea’s walkthrough on quantum computing risk, post-quantum cryptography, and the Quantum Lock feature in Secret Server. It explains how quantum computers and Shor’s algorithm threaten public-key cryptography like RSA and ECC, enabling “harvest now, decrypt later” against data requiring 20–50 years of confidentiality, while symmetric encryption like AES-256 is more resilient. It highlights NIST-aligned post-quantum approaches such as lattice-based CRYSTALIS-Kyber (Kyber 1024) for key encapsulation. Quantum Lock adds an extra layer: secrets are encrypted with AES-256, the AES key is wrapped with RSA 2048 or Kyber 1024, and decryption requires a human password even if Secret Server is compromised; it is intended for tier-zero, static, long-term high-impact secrets and disables rotation/heartbeat features. 00:00 Introduction 00:38 Why Quantum Risk Matters 01:25 Quantum Basics Explained 02:27 What Quantum Breaks 03:08 Post Quantum Crypto (PQC) Kyber 03:41 Quantum Lock How It Works 04:36 Operational Constraints Use Cases 05:14 Why Act Now Timeline 05:44 Bottom Line Takeaways 06:20 Next Steps & Closing This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

Comentarios

0

Sé la primera persona en comentar

¡Regístrate ahora y únete a la comunidad de The BLUF Podcast!

Empezar

2 meses por 1 €

Después 4,99 € / mes · Cancela cuando quieras.

  • Podcasts exclusivos
  • 20 horas de audiolibros / mes
  • Podcast gratuitos

Todos los episodios

27 episodios

Portada del episodio Quantum Risk Is No Longer Theoretical – What Delinea QuantumLock Means for Federal Security Teams

Quantum Risk Is No Longer Theoretical – What Delinea QuantumLock Means for Federal Security Teams

This episode distills Delinea’s walkthrough on quantum computing risk, post-quantum cryptography, and the Quantum Lock feature in Secret Server. It explains how quantum computers and Shor’s algorithm threaten public-key cryptography like RSA and ECC, enabling “harvest now, decrypt later” against data requiring 20–50 years of confidentiality, while symmetric encryption like AES-256 is more resilient. It highlights NIST-aligned post-quantum approaches such as lattice-based CRYSTALIS-Kyber (Kyber 1024) for key encapsulation. Quantum Lock adds an extra layer: secrets are encrypted with AES-256, the AES key is wrapped with RSA 2048 or Kyber 1024, and decryption requires a human password even if Secret Server is compromised; it is intended for tier-zero, static, long-term high-impact secrets and disables rotation/heartbeat features. 00:00 Introduction 00:38 Why Quantum Risk Matters 01:25 Quantum Basics Explained 02:27 What Quantum Breaks 03:08 Post Quantum Crypto (PQC) Kyber 03:41 Quantum Lock How It Works 04:36 Operational Constraints Use Cases 05:14 Why Act Now Timeline 05:44 Bottom Line Takeaways 06:20 Next Steps & Closing This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

25 de jun de 20267 min
Portada del episodio Networking in the AI Era: What Federal Teams Need from the WAN Edge—Visibility, Zero Trust, and Mission Speed

Networking in the AI Era: What Federal Teams Need from the WAN Edge—Visibility, Zero Trust, and Mission Speed

This episode translates an Arista vendor talk into mission-ready guidance for securing AI-driven traffic at the network edge (bases, field sites, clinics, depots, embassies). We explain how edge AI creates bursty, latency-sensitive, mostly encrypted flows that increase attack surface and require symmetrical bandwidth, QoS, and latency-aware pathing. It contrasts “AI for networking” (GenAI/NLP-assisted troubleshooting) with “networking for AI” (designing WAN/SD-WAN so AI apps perform), emphasizing metadata/behavior-based traffic identification and category policies when payloads can’t be inspected, with selective decryption per compliance. It outlines zero trust at the SD-WAN edge using documented ZTNA, IDS/IPS, microsegmentation, continuous monitoring, and CSA maturity model mapping, plus guardrails for agentic AI/MCP risks via agent telemetry, API inspection, and audit controls aligned to federal requirements. 00:00 AI Moves to the Edge 01:22 Edge Data and Latency Realities 02:22 AI for Networking vs AI Networks 03:27 Encrypted Traffic and Policy Control 04:26 Zero Trust at the WAN Edge 05:29 Agentic AI and MCP Risks 06:09 Integrator Blueprint for Secure Edge AI 07:30 Bottom Line Key Takeaways & Call to Action This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

18 de jun de 20269 min
Portada del episodio Elastic 9.4 — Where AI, Observability, and Security Converge

Elastic 9.4 — Where AI, Observability, and Security Converge

On this episode, we cover all the latest updates to Elastic 9.4 as a shift from search to an AI-driven operational data platform for mission systems, cyber operations, and data-driven decision-making. It highlights Elastic’s role as a secure context/retrieval layer for AI agents through agent builder enhancements, connectors, semantic metadata, and improved long-interaction context handling. It emphasizes observability at scale with native Prometheus/PromQL support, time series ES|QL, TSDB improvements, and unified logs/metrics/traces, plus agentic Kubernetes observability with AI-driven root cause analysis. Security advances target an autonomous SOC via Elastic Workflows automation and an entity-centric model for identity resolution and proactive threat hunting. Backend updates include GPU-accelerated vector indexing, vector search and ES|QL improvements, and full-stack FIPS 140-3 compliance, with ATPGov offering integration and implementation support. 00:00 Introduction 00:38 Elastic v9.4 Overview 01:00 AI Context Layer 02:01 Observability at Scale 02:57 Agentic K8s Insights 03:22 Autonomous SOC Shift 03:32 Automation and Identity 04:35 Performance and Compliance 05:21 Federal Deployment Watchouts 05:37 Bottom Line Takeaways 06:55 ATPGov Next Steps 07:15 Closing and Subscribe This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

11 de jun de 20267 min
Portada del episodio Mission Readiness Without Rebuilds: Why Your Linux Choice Matters Now

Mission Readiness Without Rebuilds: Why Your Linux Choice Matters Now

This episode of Bottom Line Up Front compares Red Hat Enterprise Linux, Ubuntu, and SUSE with a focus on minimizing mission risk in regulated environments. It argues that migrations impact ATO packages, RMF controls, STIG baselines, interoperability testing, and downtime, and presents SUSE Multi-Linux Support as a “zero migration, zero retraining, zero disruption” way to keep existing Red Hat and CentOS workloads supported with predictable CVE patching. SUSE emphasizes ABI-level compatibility, backported fixes to preserve application behavior, and centralized management via SUSE Multi-Linux Manager for over 16 distributions, plus SUSE Global Services for consulting and training. We outline a SWOT-style comparison between "the big 3" and recommend assessing Linux estates against mission and sustainment constraints, integrating unified management and patching aligned to continuous monitoring, and building a roadmap to migrate later on the program’s timeline. 00:00 Why Migrations Hurt 01:00 SUSE Zero Migration Pitch 02:10 Government Ready Support 03:13 SWOT Comparison: Red Hat vs Ubuntu vs SUSE 05:45 Execution and Next Steps 07:18 Bottom Line 08:21 Additional Resources & Help This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

4 de jun de 20269 min
Portada del episodio AI vs. CMMC: Can Zifino's Automation Solve the Compliance Bottleneck?

AI vs. CMMC: Can Zifino's Automation Solve the Compliance Bottleneck?

On this episode we focus on CMMC Level 2 as an immediate operational bottleneck for DoD contract eligibility involving CUI, affecting over 300,000 defense industrial base organizations while fewer than 1% are certified due to limited auditors, ~$60K assessments, and manual workflows that can take 6–8 months. It highlights Zifino’s new AI-native compliance platform, built to automate document ingestion, control mapping to CMMC/NIST 800-171, gap analysis, remediation paths, and audit-ready outputs (including SSPs) with deterministic, traceable evidence mapping and human-in-the-loop judgment. Zifino claims readiness in weeks, up to 3x auditor throughput, continuous verification, and integrations (Microsoft 365, AWS, Azure, ServiceNow, CrowdStrike), using a hybrid SaaS readiness model plus deployment in customer-controlled enclaves to respect CUI and secure environments, and notes ATPGov can help implement and operationalize these solutions. 00:00 Introduction 00:38 CMMC Crisis Now 01:17 Why Certification Stalls 02:48 AI Native Zifino Shift 04:22 Deterministic Evidence Mapping 04:42 Auditor Workflow Breakthrough 05:37 Connect Map Verify Attest 06:28 Continuous Compliance Model 07:08 Beyond CMMC Frameworks 07:36 Hybrid SaaS Enclave Architecture 08:13 Bottom Line Key Takeaways 10:12 Wrap Up and Contact This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com [http://www.atpgov.com] or follow us on LinkedIn.

28 de may de 202610 min