Browser security can feel like a small detail compared to network diagrams and cloud architectures, but for most people in your organization, the browser is where the real work happens. In this audio edition of our Tuesday “Insights” feature from Bare Metal Cyber Magazine, we walk through the essentials of browser security with a practical focus on extensions, cookies, and everyday web risks. You will hear how browser protections fit alongside endpoint, identity, and application security, and why a few small choices in the browser can change the outcome of a bad click.

Across this episode, we explore how modern browsers try to protect users, where extensions can either help or hurt, and how session cookies shape what attackers can do if they get a foothold. We look at everyday use cases you will recognize from your own environment, from managed work profiles to extension allowlists and browser isolation for risky tasks. You will also get an honest view of the benefits, trade-offs, and common failure modes, along with practical signals that show when browser security is actually working instead of just being written into a policy.

ITIL Foundation (Version 5), or ITIL 5 Foundation, is a practical starting point for understanding how modern technology work becomes organized, reliable, and valuable to the business. In this narrated version of my Monday “Certified” feature from Bare Metal Cyber Magazine, we walk through what the certification is, who it is for, what kind of thinking the exam rewards, and why service management fluency matters for early-career IT, cybersecurity, cloud, support, and governance professionals.
This episode also explains where ITIL 5 fits in a broader career path, especially for people moving from technical task work into service delivery, operations, coordination, or management. We also touch on how the Bare Metal Cyber Academy can support structured preparation through flexible certification resources, including audio-based review, guided study, and focused recall practice for busy professionals.

The GIAC Critical Controls Certification (GCCC) is a practical credential for professionals who want to understand how security controls become real defensive work. In this narrated version of my Monday “Certified” feature from Bare Metal Cyber Magazine, we walk through what the certification is, who it is built for, and why the CIS Critical Security Controls matter for security analysts, IT administrators, auditors, risk professionals, consultants, and early-career cybersecurity learners.
This episode also explains what GCCC really tests, including control purpose, implementation thinking, audit awareness, and the ability to connect security tasks to measurable risk reduction. You will hear how the credential fits into a broader career path and how learners can prepare with a balanced mix of reading, review, practice, and flexible study support through the Bare Metal Cyber Academy.