Sec Guy
Real cybersecurity training for the real world. The podcast takes complex theories of CompTIA Security+ and SecAI+ and translates them into actionable skills. It covers topics like AI Security, Network Defense, and the future of cyber, helping listeners fight off Prompt Injection attacks or get their first IT job.
Episodes
SecAi+ Domain 4.1: AI CoE, Responsible AI, and AI RIsk
From the server room to the boardroom: Mastering AI GRC for the SecAI+ Exam.This episode covers Domain 4: AI Governance, Risk, and Compliance. We explore the AI Center of Excellence (CoE), identify the Builders, Defenders, and Watchers on an AI team, and deep-dive into the dangers of Shadow AI. Learn the essential Responsible AI Principles—Fairness, Transparency, and Accountability—needed to pass
SecAI+ Domain 3.3: The AI Analyst (Blue Team Tools, MCP & Co-Pilot)
We have seen the weapons (Video 10). Now, let’s look at the shields. Welcome to Domain 3: AI-Assisted Security. In this video (Objective 3.3), we switch to the Blue Team.We are breaking down the "AI Co-Pilot" stack, the new hardware you need to know for the exam, and the critical standard that connects AI to your internal data without causing a leak.In this video, we cover:The AI Co-Pilot: IDE vs.
SecAI+ Domain 3.1: The AI Analyst (Blue Team Tools, MCP & Co-Pilot)
🛡️ Domain 3: AI-Assisted Security (Objective 3.1)We’ve analyzed the weapons in Domain 2—now it’s time to deploy the shields. Welcome to the Blue Team.In this video, we break down the "AI Co-Pilot" stack and the defensive tools you need to master for the SecAI+ exam. From the hardware powering Edge AI to the critical protocols that secure internal data, this is your crash course in AI-assisted d
Domain 3.2: The AI Offensive (Red Team, Deepfakes & Malware)
We have talked about how to hack an AI. Now, let’s talk about when the AI becomes the hacker. Welcome to Domain 3: AI-Assisted Security. In this video (Objective 3.2), we switch to the Red Team.We are breaking down exactly how attackers weaponize LLMs to scale social engineering, clone voices for "Vishing," and generate polymorphic malware that evades traditional antivirus.In this video, we cover:
CompTIA SecAI+ Domain 2.5: Blue Team Defense & AI Guardrails
Port 443 is always open, traffic is encrypted, and the attack looks like valid English. You cannot fix AI security with a traditional firewall.In this episode of the SecAI+ Course, we enter Domain 3: Blue Team Operations. We are building the "AI Shield"—the new defense stack required to protect Large Language Models from injection, sponge attacks, and data leakage.🔥 Topics Covered:* Input Validati
CompTIA SecAi+ Domain 2.4: Model Theft, Model DOS, Excessive Agency, Insecure Output Handling
Master Prompt Injection & Jailbreaking for the CompTIA SecAI+ (Domain 2). In this lesson, we break down the most dangerous (and fun) part of AI Security: Input Attacks.Your firewall stops traffic. It does not stop words. 🛡️🚫OWASP LLM 1, 3, 5, 10 are covered previous video link here: https://youtu.be/d4zx2amlnvU In Part 2 of our Domain 2 Deep Dive, we cover the "Context Mixing" flaw that makes
CompTIA SecAI+ Domain 2.3: Model Inversion, Inference & Poisoning
I don't need to break into your server to steal your AI. I just need to ask it the right questions. In Part 3 of our Domain 2 Deep Dive, we leave the "Prompt Injection" attacks behind and enter the world of Privacy Attacks and Model Theft.We explain how attackers can use Model Inversion to reconstruct private training data (like faces) just by analyzing confidence scores. We break down the differe
CompTIA SecAI+ Domain 2.2: Direct vs. Indirect Prompt Injection
Your firewall stops traffic. It does not stop words. In Part 2 of our Domain 2 Deep Dive, we cover the most dangerous (and fun) part of AI Security: Input Attacks.We explain how attackers use "Prompt Injection" to turn helpful chatbots into "Confused Deputies" that attack their own users. We break down the difference between Jailbreaking (Roleplaying/DAN) and the mathematical magic of Universal Ad
CompTIA SecAI+ Domain 2.1: MITRE ATLAS & OWASP LLM
SQL Injection won't save you when the database is a Vector Store. Welcome to Domain 2 of the CompTIA SecAI+ course. This domain makes up 40% of the entire exam, making it the most critical section to master.In this video, we map the new battlefield. We explain why traditional frameworks like MITRE ATT&CK fail against AI, and introduce the new standard: MITRE ATLAS. We also break down the OWASP
CompTIA SecAI+ Domain 1.3: Fine-Tuning, RLHF & Model Drift Explained
AI models aren't born smart. We teach them. And that is where the security risk begins.In the Finale of Domain 1 for the CompTIA SecAI+, we cover the entire AI Lifecycle. Most organizations do not build models from scratch—they download them and "Fine-Tune" them. This video breaks down the massive Supply Chain risks involved in Transfer Learning and how attackers can poison the process before you
CompTIA SecAI+ Domain 1.2: Tokens, Embeddings & Vector Databases Explained
Computers don't speak English. They speak Math. In Part 2 of our CompTIA SecAI+ Deep Dive, we break down the "Data Pipeline." If you want to secure an AI model, you first need to understand how it translates chaotic human language into structured mathematical vectors.This video covers the most abstract (and critical) technical concepts in Domain 1. We explain exactly how Tokenization works, the ma
CompTIA SecAI+ Domain 1: AI Fundamentals & Neural Networks Explained
Master AI Fundamentals for the CompTIA SecAI+, Security+, CISSP, and CEH. In this lesson, we break down the "Artificial Brain"—from Neural Networks and Weights to the Transformer architecture that powers ChatGPT. Welcome back to the Sec Guy Channel and the next step on your journey to becoming a cybersecurity professional! 🛡️ While this is the absolute foundation for the CompTIA SecAI+ (Domain 1),
Ep 01: The SecAI+ Blueprint – AI Security, Exam Specs, & The Future of Defense
The rules of cybersecurity have changed. Attackers are using generative AI to write polymorphic malware and craft uncatchable phishing emails. Defenders must learn to fight back at machine speed.In this inaugural episode of the Sec Guy Podcast, we kick off our full audio course for the CompTIA Security AI+ (SecAI+) certification. We break down exactly what this new exam covers, why it’s critical f
SecAI+ Domain 4.2: Compliance & Law
The Final Objective: Mastering the Law and Frameworks for global AI compliance.In the finale of our SecAI+ course, we cover Objective 4.3: Compliance and Frameworks. We break down the EU AI Act's risk-based approach, the four core functions of the NIST AI RMF, and the critical ISO standards (42001, 23894, 22989) you need for the exam. Plus, learn about Data Sovereignty and how the OECD Principles
CompTIA 2026 Cert Refresh Deep Dive
Welcome back to the Sec Guy Channel – your go-to resource for IT and cybersecurity certifications! 🛡️ In this video, we’re doing a deep dive into the BIG changes CompTIA is rolling out in 2026, including: ✅ The brand-new Xpert Series certifications ✅ Crossover certs like SecAI+ for AI-driven security ✅ Updates to A+, Network+, and Security+ that reflect today’s tech trends If you’re planning to ge
Welcome to the Sec Guy Podcast: Your Cybersecurity Journey Starts Here
Welcome to the inaugural episode of the Sec Guy Podcast!In a world full of noise, complex jargon, and gatekeeping, finding a clear path into the cybersecurity industry can be tough. This podcast is here to change that. Hosted by "The Sec Guy," a seasoned IT professional and veteran, this show is dedicated to breaking down complex security concepts into actionable, real-world advice.In this episode
Recommended
1-2-3 Learn Spanish with Me!
128 Civics Questions for U.S. Citizenship Test
12 Hour Sound Machines for Sleep (no loops or fades)
#12minconvos
12 Minute Meditation
12 Rules for Life: An Antidote to Chaos by Jordan B. Peterson, Book Summary, Podcast, English
1440 Explores
1490 Doom - Lore Series Podcast
15 MINS OF FAME
15 Minute Mysteries: The Deep Dive
15 minutes de grâce et de vérité
15 Minutes of Infamy
