The Cybersecurity Defenders Podcast

Securing AI agent identity and authority with Geoffrey Mattson [350] Oct 1, 2026 1800 Today we're speaking with Geoffrey Mattson, CEO of SecureAuth, about identity and authority for AI agents: what changes when software stops being something a human uses and starts taking actions on its own.Geoffrey is a serial entrepreneur working at the intersection of cybersecurity and AI. Before SecureAuth he was CEO of Xage Security and co-founded MistNet.ai (acquired by LogRhythm), a

Physical AI and self-learning machines with Dr. Amarjot Singh [348] Sep 16, 2026 2201 Today we're speaking with Dr. Amarjot Singh, Founder & CEO of Skylark Labs, about physical AI — what changes when a model leaves the server and has to perceive, decide and act inside a machine that moves through the real world.Dr. Singh earned his PhD in artificial intelligence and deep learning from the University of Cambridge, and has worked as a research fellow at Stanford Universi

Intel Chat: Claude models reached real systems, an AI safety resignation & ShieldCrash [347] Sep 11, 2026 2071 Intel Chat with Matt Bromiley and Chris Luft.• An Anthropic researcher quits over where the race is heading. Jacob Coxon, who trains models on large amounts of data, is leaving both Anthropic and the AI industry: he believes the leading labs are racing toward self-improving systems they may not be able to control, and that competition will push them there anyway. Matt's problem with the g

Intel Chat: OpenAI's Astra hits Critical, DEF CON phishing, Philippine nuclear breach [346] Sep 3, 2026 1979 Intel Chat with Matt Bromiley and Chris Luft.• OpenAI says Astra is the first of its models to reach the "Critical" cybersecurity capability level under its Preparedness Framework — the tier that means a model can independently find and exploit zero-days across well-defended systems, or run an end-to-end attack from a high-level instruction. Astra scored perfectly on ExploitBench, indepen

Intel Chat: AI patches fail, LiteLLM supply chain, Claude eval incidents & DPRK npm [345] Aug 14, 2026 2053 Intel Chat with Matt Bromiley and Chris Luft.• AI-generated patches fix vulnerabilities about half the time. 1Password's Off-By-1 team tested ChatGPT-5.5 and Opus 4.8 against six vulnerabilities: across 6,080 generated patches only 46% fixed the underlying flaw, and some that did were narrow enough to be bypassed. Separate Veracode research found a 56% security pass rate across 100+ model

Proving the value of security operations with Christopher Crowley [344] Aug 13, 2026 2535 Today we're speaking with Christopher Crowley, cybersecurity consultant through Montance and Senior Instructor with the SANS Institute, about the value of cybersecurity operations — how to measure it, how to express it to the business, and how AI is changing the work of the SOC.Christopher is a cybersecurity practitioner and educator focused on security operations, incident response, thre

Intel Chat: Shai-Hulud is back, model pinning & the token spend problem [343] Aug 8, 2026 2141 Intel Chat with Matt Bromiley and Chris Luft — recorded in person at Black Hat USA in Las Vegas, day two.No prep doc, no script: just what Matt and Chris were actually hearing on the floor.• Shai-Hulud is back. The self-replicating npm worm returned on August 4, trojanizing the keyv / cacheable family and spreading to 400+ packages within hours. Chris reads through Datadog Security Labs'

Intel Chat: Hugging Face AI-agent breach, WP2Shell, Suno & Paidwork leaks, AWS Bahrain strike [342] Jul 30, 2026 1815 Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Hugging Face's security incident disclosure: an intrusion conducted end-to-end by an autonomous AI agent system — a malicious dataset exploiting two code-execution paths, thousands of actions across short-lived sandboxes, self-migrating C2 — and why the forensics had to run

Building trustworthy AI with Rob van der Veer [341] Jul 29, 2026 2107 Today we're speaking with Rob van der Veer, Chief AI Officer at Software Improvement Group, about how organizations can build trustworthy AI in an era of rapidly evolving technology and regulation — AI security, threat modeling, international standards, and the new challenges posed by agentic AI.Rob is a global leader in AI security, software engineering, and international AI standards, w

AI Chat: The Hugging Face / OpenAI breach — the attacker was the model [340] Jul 23, 2026 2128 AI Chat with Maxime Lamothe-Brassard and Chris Luft — a special episode.One story, pulled apart start to finish. In mid-July 2026, Hugging Face disclosed a breach of its production infrastructure carried out end-to-end by an autonomous AI agent. Five days later, OpenAI revealed the attacker was its own models — GPT-5.6 Sol and a more capable unreleased model — which broke out of an intern

AI Chat: Grok CLI data exfiltration, AI vs. patching, distillation wars & shadow AI [339] Jul 14, 2026 1398 AI Chat with Maxime Lamothe-Brassard and Chris Luft.A new segment on the podcast: AI news in cybersecurity that is less than 24 hours old, discussed while it is still hot. Joining Chris for these conversations is LimaCharlie founder and CEO Maxime Lamothe-Brassard.In this episode:• Nipun Gupta (founder of Optimus Labs) reports that xAI's Grok Build CLI packaged and uploaded an entire loca

Intel Chat: Dialogflow Rogue Agent, ghost phishing, CISA KEV deadline & HalluSquatting [338] Jul 9, 2026 2067 Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Varonis Threat Labs' "Rogue Agent" — a permission boundary flaw in Google Dialogflow CX's Code Blocks feature that could let an attacker with a single permission (dialogflow.playbooks.update) inject persistent malicious code into a chatbot's execution pipeline and silently e

Ransomware in the age of agentic AI with Behnaz Karimi [337] Jul 8, 2026 1988 Today we're speaking with Behnaz Karimi, an independent researcher specializing in ransomware and agentic AI systems, Senior Cybersecurity Analyst at Accenture, and founder of Tremorina, about how ransomware is evolving to target AI systems, machine learning pipelines, and autonomous agents.With more than 20 years of experience in cybersecurity, Behnaz is also a leader within the OWASP AI

Intel Chat: Hijacked AI backends, billboard hacks, Cursor DuneSlide & Claude export controls [336] Jul 3, 2026 2033 Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Zenity researchers observed three campaigns where attackers hijacked internet-exposed AI inference endpoints (Ollama, LiteLLM) as free model backends for offensive operations — including the Strix and HexStrike-AI pentesting frameworks and a Codex agent posing as a "security

Intel Chat: Cisco CUCM exploited, ransomware profiles, Gamaredon & AI agent phishing [335] Jul 1, 2026 1801 Intel Chat with Matt Bromiley and Chris Luft.Matt and Chris break down four stories from the week in threat intel:• Cisco CUCM (CVE-2026-20230) — a web-dialer SSRF that chains to root-level RCE, exploited in the wild less than 24 hours after the PoC and full exploit chain were published.• The latest Ransomware Tool Matrix (RTM) / Ransomware Vulnerability Matrix (RVM) update, profiling thr

The evolving fraud landscape in the age of AI with Tamas Kadar [#334] Jun 30, 2026 2558 Today we're speaking with Tamas Kadar, CEO / Co-Founder of SEON, about building a safer digital world for businesses. We touch on fraud, how it's evolved in the age of AI, and what we can do to protect ourselves against it.Tamas' entrepreneurial path began at Corvinus University in Budapest, where the vision for SEON first took shape. Co-founding a cryptocurrency exchange opened his eyes

Anthropic restriction, ServiceNow incident, Fortinet credential harvesting & Ukraine accesses EU cyber reserve / Intel Chat [#333] Jun 28, 2026 2084 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Reports state that the US government issued an export control order restricting access to anthropic newly released cloud mythos five and fable five models for foreign nationals.ServiceNow disclosed a security incident involving an unauthenticated access for an API endpoi

Last call for Defenders - How we're actually using AI in the SOC with Eric Capuano / Defender Fridays [#332] Jun 20, 2026 2225 Join us for the final episode of Defender Fridays as Eric Capuano, creator of Defender Fridays and co-founder of Digital Defense Institute, closes out the series with a candid conversation on how he's actually building and running agentic workflows in the SOC today.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned prof

FFmpeg's 21 zero-days, Ruby cooldown feature, Microsoft disrupted by Shai-Hulud worm & Meta AI tool compromise / Intel Chat [#331] Jun 15, 2026 1712 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.DepthFirst reported that it's autonomous security agent discovered 21 previously unknown vulnerabilities in FFmpeg, a widely deployed multimedia framework used across browsers, streaming infrastructure, and other systems that process media. Bundler, 4.0.13 introduces a n

AI-assisted SOC training with Carlo Anez / Defender Fridays [#330] Jun 12, 2026 1925 Join us for this week's Defender Fridays as Carlo Anez, Founder and Lead Instructor at IgniteCyber Academy and DEFCON Training Instructor, breaks down how to build practical blue team skills using open-source labs, MITRE ATTACK, and real-world defender workflows, and where AI fits into the picture without replacing the analyst.At Defender Fridays, we delve into the dynamic world of inform

Building practical blue team skills using AI-assisted SOC training with Bobby Ford/ Defender Fridays [#329] Jun 5, 2026 1831 Join us for this week's Defender Fridays as Bobby Ford, Chief Strategy and Experience Officer at Doppel, talks about open-source labs, MITRE ATT&CK, and real-world defender workflows.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster

"Megalodon" Malware in GitHub, Malware-Slop steals from Claude AI, 7-Eleven breach & CISA cPanel vulnerability / Intel Chat [#328] Jun 1, 2026 1746 Originally recorded: Friday May 29, 2026In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.A large-scale software supply chain attack dubbed “Megalodon” infected thousands of GitHub repositories with credential-stealing malware in a highly automated campaign that unfolded over a six-hour period on May 18, 2026.Researcher

From PentestGPT to production: The state of AI-assisted offensive security with Charles Grandjean / Defender Fridays [#327] May 30, 2026 1819 Join us for this week's Defender Fridays as Charles Grandjean, CTO and Co-founder at Hexiagon AI, breaks down where AI-assisted pen testing actually stands today and what it means for both red teams and defenders.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple

GitHub repositories compromised, Webworm targets Europe, fake Outlook & cybercriminal VPN / Intel Chat [#326] May 29, 2026 1468 Originally recorded: Friday May 22, 2026In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.GitHub has confirmed that roughly 3,800 internal repositories were accessed in a supply chain compromise tied to the hacking group TeamPCP.China-aligned threat actor Webworm has shifted its targeting focus from Asia to Europe, acco

How analysts use cognitive reasoning in investigations with Chris Sanders / Defender Fridays [#325] May 22, 2026 1963 Join us for this week's Defender Fridays as Chris Sanders, Founder at Applied Network Defense and the Rural Technology Fund, breaks down how analysts actually think through investigations and what separates high performers from the rest.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the ind

"Dirty Frag", Canvas ransomware attack, “Mini Shai-Hulud” malware campaign & AI-developed zero-day exploit / Intel Chat [#324] May 18, 2026 1729 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Researchers have disclosed a new Linux local privilege escalation technique called “Dirty Frag,” which chains together two kernel vulnerabilities: CVE-2026-43284 in xfrm-ESP handling and CVE-2026-43500 in RxRPC.The breach affecting educational technology provider Instruc

How to handle increasing vulnerabilities with AI-assistants? With Shane Warden from ActiveState / Defender Fridays [#323]] May 15, 2026 1868 Join us for this week's Defender Fridays as Shane Warden, Principal Architect at ActiveState, shares what it's actually like to be on the receiving end of AI-assisted vulnerability reporting and what open source maintainers are already dealing with that the rest of the industry will face soon.At Defender Fridays, we delve into the dynamic world of information security, exploring its defen

Does the rise of AI mean human-led SOCs are obsolete? With Dr. Adeel Shaikh Muhammad [#322] May 13, 2026 1519 Dr. Adeel Shaikh Muhammad, a cybersecurity strategist and global speaker with over 16 years of experience across information security, networks, and systems. Adeel brings a practical perspective on how organizations can adapt to evolving cyber threats and the growing role of AI in cybersecurity. Adeel, with an extraordinary portfolio of 40+ industry certifications, including CISSP, CISM,

Daily breach attempts target UAE, fake ransomware attack, PAN-OS vulnerability & Microsoft’s Phone Link attack / Intel Chat [#321] May 12, 2026 1648 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.The cyber threat environment in the Middle East has intensified sharply following military operations involving Israel, the United States, and Iran. An intrusion campaign attributed with moderate confidence to the Iranian state-linked group MuddyWater was disguised as a

AI: The Hero's Journey with Ken Westin from LimaCharlie / Defender Fridays [#320] May 8, 2026 1911 In this episode, Ken Westin maps AI adoption onto the hero's journey framework, drawing on two decades of security experience to explore how practitioners can move past early resistance, build real fluency with AI tools, and find a working model where humans and AI operate together.Key Topics:Why early AI tools left security teams skeptical and what has genuinely changed since thenHow Ken

Power systems under threat, Claude Mythos, suspicious KICS activity & JFrog / Intel Chat [#319] May 6, 2026 1874 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Researchers are raising concerns about a new cybersecurity risk emerging from the systems that regulate electrical power inside modern electronics and infrastructure.Japan’s financial sector is responding to concerns around Anthropic’s new AI model, Claude Mythos, which

How AI adoption in enterprise infrastructure has expanded the attack surface with Katherine McNamara from Cisco / Defender Fridays [#318] May 4, 2026 2176 Today on Defender Fridays, Katherine McNamara, Cybersecurity Technical Solutions Architect at Cisco, joins us to discuss how AI and ML adoption in enterprise infrastructure has expanded the attack surface for AI-driven systems.She'll walk through the security challenges unique to generative AI and ML-based architectures, and cover the four critical components: Model, Data, Application, an

Cybersecurity is a core leadership issue & opportunity with David Chernitzky from Armour Cybersecurity [#317] Apr 29, 2026 2130 Today David Chernitzky, Co-Founder and CEO of Armour Cybersecurity, breaks down the challenges small and mid-sized businesses face in the new blink-and-you-miss-it cybersecurity landscape. Don't be left behind and open yourself to AI-driven attacks from threat actors.David Chernitzky brings over 25 years of deep cybersecurity and military cyber intelligence experience, with a career roote

Millions in crypto stolen, Vercel breach, Mastodon DDoS attack, North Korean IT workers at 100s of U.S. companies & ransomware negotiator pleads guilty / Intel Chat [#316] Apr 27, 2026 1917 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.North Korea-linked hackers are believed to be responsible for a $290 million cryptocurrency theft targeting the Kelp DAO decentralized finance protocol.Vercel, the company behind the popular Next.js web framework and a frontend cloud platform for deploying and hosting we

Real examples of AI-powered code scanning with Jeff McJunkin from Rogue Valley Information Security / Defender Fridays [#315] Apr 27, 2026 1961 Jeff McJunkin, Founder of Rogue Valley Information Security, joins Defender Fridays to talk AI-powered code scanning for vulnerabilities. Jeff walks through real examples including using AI to find privilege escalation bugs in the Linux kernel.Jeff McJunkin is the founder of Rogue Valley Information Security, a consulting firm specializing in penetration testing and red team engagements.

How can we improve global security? With J. Michael Daniel from Cyber Threat Alliance [#314] Apr 22, 2026 2427 J. Michael Daniel, President and CEO of Cyber Threat Alliance (CTA), gives us a peek behind the U.S. Government cybersecurity curtain and how he has helped improve the nation's security through the CTA.Michael leads the CTA team and oversees the organization's operations. Prior to joining the CTA in February 2017, Michael served from June 2012 to January 2017 as Special Assistant to Presi

China-linked group targets cloud workflows, Russian cyber espionage, agentic AI systems flaw & Nginx vulnerability / Intel Chat [#313] Apr 20, 2026 1869 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Intercept and control AI agent activity with Viberails by LimaCharlie: viberails.ioAPT41, a China-linked threat group is deploying a previously undetected backdoor targeting Linux based cloud workflows.Fancy bear, also known as APT28 or Forest Blizzard, is a Russian cybe

How do you know your AI agents are actually correct? With Dylan Williams from Spectrum Security / Defender Fridays [#312] Apr 17, 2026 2006 Today, Dylan Williams, Co-Founder and Chief Research Officer at Spectrum Security, joins Defender Fridays to dig into that exact problem: self-evaluating agents, trajectory analysis, and what improvement looks like in production.Learn more at https://www.spectrum.security/Register for Live SessionsJoin us every Friday at 10:30am PT for live, interactive discussions with industry experts.

Understanding how attackers think & helping you avoid threats with Terry Bradley from Mile High Cyber [#311] Apr 15, 2026 2337 Terry Bradley, Founder and President of Mile High Cyber, shares how you can uncover vulnerabilities and strengthen your organization's defenses with expert penetration testing and security assessments.Terry is a former hacker for the NSA and uses those same skills at Mile High Club, the firm he founded, to help businesses stay one step ahead of cybercriminals. After a lifelong passion for

Iran-linked cyber attacks U.S. critical infrastructure, FlamingChina, Node.js targeted & Storm-1175 / Intel Chat [#310] Apr 13, 2026 2355 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Federal cybersecurity agencies have issued an urgent warning about Iran-linked cyberattacks targeting operational technology (OT) systems across U.S. critical infrastructure.A hacker operating under the alias “FlamingChina” claims to have breached a Chinese state-run sup

Levelling up your AI SOC with Joshua Neil from Alpha Level / Defender Fridays [#309] Apr 10, 2026 2058 Joshua Neil, Co-Founder of Alpha Level, dives into a more sophisticated understanding of AI SOCs. Join the conversation about this industry change on Defender Fridays.Dr. Joshua Neil, has been a pioneer in applying machine learning to cybersecurity since 2000, starting his journey at Los Alamos National Laboratory. There, he co-developed Pathscan, a network anomaly detection system capabl

Why cyber analysts are crucial in protecting public infrastructure with Michael Hamilton from PISCES International [#308] Apr 8, 2026 2714 Michael Hamilton, Chief Technology Officer at PISCES International, joins us to discuss the benefits of providing real world experience to students while they protect existing public infrastructure. The resilient future of local government security rests in our ability to adapt to changing threats and adopt new technologies, including AI.Learn more at https://pisces-intl.org/30 years in I

Iran’s IRGC threatens U.S. tech companies, FBI Director hacked, Venom Stealer & Hasbro cyber attack / Intel Chat [#307] Apr 6, 2026 1397 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Iran’s Islamic Revolutionary Guard Core, or the IRGC, announced that it plans to begin attacks on more than a dozen American technology companies operating across the middle east, starting after 8pm Tiran time on April 1st.A pro-Iranian hacking group, known as Hendala, h

Malicious geopolitical cyber activity, cyberattacks tied to conflict in Iran, open source supply chain attack & AI autonomous espionage / Intel Chat [#306] Mar 30, 2026 2136 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Since the onset of the conflict in the Gulf region, cybersecurity researchers have observed a noticeable rise in malicious cyber activity tied to geopolitical events.Unit 42 researchers are warning about an increased risk of destructive cyberattacks tied to the conflict

What makes a strong security team? With Andrew Cook from Recon InfoSec / Defender Fridays [#305] Mar 27, 2026 1922 This week on Defender Friday we are joined by Andrew Cook, CTO of Recon InfoSec, to talk about what it means to build a strong security team and why hiring builders is always a good bet.As the CTO of Recon InfoSec, a leading provider of managed security operations, Andrew oversees the technical vision, strategy, and execution of their services and solutions. He has more than a decade of e

Bringing 40+ year old industrial security systems into the 21st century with Justin Searle from InGuardians [#304] Mar 25, 2026 1868 Justin Searle, Director of ICS Security at InGuardians, joins us today to talk about the challenges facing industrial control system security. With increased attack surface areas and maintaining and updating decades-old systems, Justin's dedication to informing and educating newcomers and experts alike is more important now than ever before.As the Director of ICS Security at InGuardians,

Is it smart to have AI agents act as employees? With David Burkett from Corelight / Defender Fridays [#303] Mar 20, 2026 2125 David Burkett, Cloud Security Researcher at Corelight, is back on Defender Fridays this week to discuss thinking in pipelines for AI agents.As a dedicated and highly experienced Cloud Detection Engineer and Security Architect, David has the privilege of working at a Fortune 50 Company where he leverages his extensive background in cybersecurity to protect digital assets. With a proven tra

How to think long-term growth in an AI-dominated industry with Stel Valavanis from onShore Networks [#302] Mar 19, 2026 2331 Today we're speaking with Stel Valavanis, Founder and Chairman at onShore Networks and Co-Founder at The Gallery Building, about sustaining a security company over three decades of industry changes. We also dive into investing in start ups and how founders can think long term about governance and growth.Stel has over 40 years of experience ranging from software development to network desi

Cyber Strategy for America, new targets in war in Iran, Camaro Dragon & medical manufacturer Stryker attacked / Intel Chat [#301] Mar 17, 2026 1978 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.The White House released President Trump’s Cyber Strategy for America, outlining a national framework to strengthen both defensive and offensive cybersecurity capabilities.Iran has expanded the scope of potential targets in the ongoing conflict with Israel and the United

Drones damage data centers, Iranian cyber retaliation, Sloppy Lemming & Honeywell vulnerability / Intel Chat [#300] Mar 9, 2026 2144 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Iranian drone strikes damaged three Amazon Web Services data center facilities in the Middle East, highlighting the physical risks associated with large-scale cloud infrastructure.Cyber activity linked to Iran and pro-Iranian actors has intensified following a joint US–I

Learning how to trust that AI is secure with Saurabh Shintre from Realm Labs / Defender Fridays [#299] Mar 9, 2026 1833 Saurabh Shintre, Founder and CEO of Realm Labs, is on Defender Fridays today to discuss securing AI from within.Saurabh previously led the AI security research at Splunk and Symantec. He has been at the forefront of AI security research for nearly a decade with multiple publications and patents and regularly features on public forums on issues regarding security and AI. Saurabh holds a Ph

North Korean malware interviews, FortiGate firewall compromised, Cisco zero-day & Citrini Research AI future / Intel Chat [#298] Mar 3, 2026 2551 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.GitLab’s Threat Intelligence Team published detailed findings on North Korean activity associated with the Contagious Interview campaign and broader IT worker operations.A financially motivated, Russian-speaking threat actor used generative AI tools to compromise more th

AI Red Teaming with John V from the Institute for Security and Technology / Defender Fridays [#297] Feb 27, 2026 1838 John V, AI risk, safety, and security at the Institute for Security and Technology (IST), joins Defender Fridays today. John's work spans AI red teaming, adversarial machine learning, AI evals and validation, and AI risk assessment, including policy work at the intersection of AGI and nuclear strategic stability. Learn more at https://securityandtechnology.org/Register for Live SessionsJo

How to Strengthen Cyber Resilience in an AI Era with Chris Cochran from SANS Institute [#296] Feb 25, 2026 1875 On this episode of The Cybersecurity Defenders Podcast, we speak with Chris Cochran, Field CISO & Vice President of AI Security at SANS Institute, about how to navigate the future of AI risk and security strategyChris works at the intersection of cyber defense, AI safety, and emerging risk, where the threats are converging and the playbooks are still being written. His career has take

DoppelBrand targets fortune 500s, Android malware Keenadu, attackers expand AI adoption & endless AI-driven threats / Intel Chat [#295] Feb 23, 2026 2405 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.A financially motivated threat actor known as GS7 is conducting a large-scale phishing campaign called Operation DoppelBrand, targeting Fortune 500 companies by impersonating their corporate login portals.Kaspersky researchers have analyzed a newly identified Android mal

How is AI reshaping app security? With Farshad Abasi from Eureka DevSecOps / Defender Fridays [#294] Feb 20, 2026 1842 This week on Defender Fridays, Farshad Abasi, Founder and CEO of Forward Security and Eureka DevSecOps, discusses how AI can help us set a new standard in app and cloud security. Farshad brings over 27 years of industry experience to the forefront of cybersecurity innovation. His professional journey includes key technical roles at Intel and Motorola, evolving into senior security positio

Russian cyber ops, Sygnia, Ollama & TeamPCP / Intel Chat [#293] Feb 16, 2026 2149 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Russian cyber operations have maintained a consistent focus on exploiting both tactical and strategic targets within the defense industrial base, particularly in the context of the war in Ukraine.Sygnia has disclosed a large-scale, AI-driven scam operation involving over

Are we overlooking our most precious resource - ourselves? With Brandon Min from Herd Security / Defender Fridays [#292] Feb 13, 2026 1949 This week Brandon Min, Founder and CEO of Herd Security, joins Defender Fridays to discuss how human risk management needs to rebrand with empathy.Brandon is the co-founder and CEO of Herd Security, where they help security teams drive employee engagement in security, making a more resilient organization. Humans have been the #1 target of organizational cyber attacks; however, security te

OpenClaw saga continues, React Native Community vulnerability, Notepad++ & GTIG targets IPIDEA proxy network / Intel Chat [#291] Feb 9, 2026 1703 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.OpenClaw, an open source AI agent formerly known as MoltBot and ClawdBot, has rapidly become the fastest-growing project on GitHub, amassing over 113,000 stars in under a week.A critical vulnerability in the React Native Community CLI NPM package, tracked as CVE-2025-119

Do you have a browser blind spot? With Cody Pierce from Neon Cyber / Defender Fridays [#290] Feb 6, 2026 2043 Most orgs have a major blind spot: the browser.This week on Defender Fridays, we're joined by Cody Pierce, Co-Founder and CEO at Neon Cyber, to discuss why browser security remains a critical gap, from sophisticated phishing campaigns that bypass traditional controls to shadow AI tools operating outside your security perimeter.Cody began his career in the computer security industry twenty

PeckBirdy, ShinyHunters, OpenClaw (former Moltbot) impersonation & ELECTRUM / Intel Chat [#289] Feb 2, 2026 1769 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Researchers at Trend Micro have uncovered continued activity from China-aligned threat actors leveraging a cross-platform JavaScript-based command-and-control framework known as "PeckBirdy".Silent Push has identified an extensive phishing campaign targeting over 100 orga

Agentic SecOps Workspace (ASW) office hours with LimaCharlie / Defender Fridays [#288] Jan 30, 2026 1785 Join us for a special Defender Fridays Office Hours session where the LimaCharlie team demonstrates the new Agentic SecOps Workspace (ASW) and explores what's possible when AI agents operate security infrastructure directly.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our ai

No Going Back: AI Redefines SecOps for Service Providers (MSSP) with a panel of computer scientists and security practitioners [#287] Jan 28, 2026 4323 In this special episode of The Cybersecurity Defenders Podcast, a panel of cybersecurity experts discuss the irreversible changes AI has brought to the industry. This panel originally aired on January 20th, 2026.The panel attendees include:Christopher Luft (host) - Co-Founder / CCO, LimaCharlieMaxime Lamothe-Brassard - Founder / CEO, LimaCharlieEric Capuano - Co-Founder, Digital Defense I

Visual Studio Code malware, Sinkholes reversal, Chinese pen-testing & FortiSIEM zero-day / Intel Chat [#286] Jan 26, 2026 1918 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.North Korean threat actors are targeting macOS software developers in a new malware campaign that abuses Visual Studio Code (VS Code) confi gurations to deliver JavaScript-based backdoors, according to research from Jamf.Sinkholes are usually seen as the end of a malicio

The future of SOC leadership with John Hubbard from SANS Institute / Defender Fridays [#285] Jan 23, 2026 1931 This week on Defender Fridays, John Hubbard, SANS Institute Cyber Defense Curriculum Lead, discusses the future of security operations and what it means for SOC leaders today. We'll be talking about:Building continuous improvement into SOC leadershipCurrent vendor and product trends shaping security operationsAI's real impact on SOC jobs and operationsFew instructors combine real-world se

From AI SOC to AI in the SOC (and beyond) Ft. Mike Privette from Return on Security with Maxime Lamothe-Brassard from LimaCharlie [#284] Jan 22, 2026 3519 In this special episode of The Cybersecurity Defenders Podcast, Mike Privette hosts a keynote discussion with LimaCharlie Founder and CEO, Maxime Lamothe-Brassard. LimaCharlie has watched the AI SOC conversation unfold and stayed quiet. Until now.Security vendors are racing to attach chatbots to legacy platforms and call it innovation. AI SOC startups have raised hundreds of millions to b

VoidLink, AsyncRat, Predator spyware & AI agents pose risk to enterprises / Intel Chat [#283] Jan 20, 2026 1909 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.Security researchers at Check Point have uncovered a previously unknown Linux malware framework named VoidLink, which stands out for its complexity and modular design.Researchers at Trend Micro have identified a new phishing campaign that combines legitimate services and

Hiring fraud and deepfake AI with Tom Cross from GetReal Security / Defender Fridays [#282] Jan 16, 2026 1935 This week on Defender Fridays, Tom Cross, Head of Threat Research at GetReal Security, joins us to talk hiring fraud and deepfakes on our first Defender Fridays session of 2026!At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collabor

Ni8mare CVSS 10.0, malicious AI extensions, Venezuela blackout & guilty BlackCat insiders / Intel Chat [#281] Jan 14, 2026 1874 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.A newly disclosed vulnerability in the workflow automation platform n8n, tracked as CVE-2026-21858 and rated CVSS 10.0, allows unauthenticated remote attackers to fully compromise exposed instances.Two malicious Chrome extensions impersonating a legitimate product from A

How AI is Re-Building the Cybersecurity Landscape with Max Lamothe-Brassard from LimaCharlie [#280] Jan 12, 2026 2657 On this episode of The Cybersecurity Defenders Podcast we're starting the new season off with the hottest topic of 2025: AI. Sitting down with Maxime Lamothe-Brassard, Founder and CEO of LimaCharlie, we discuss the ways AI has rapidly changed how companies are building security tools.Join an in-depth discussion January 20, 2026 and witness LimaCharlie's fundamentally different approach to

#279 - 2025 Predictions for the Future of Cybersecurity with all our guests Dec 22, 2025 3355 On this episode of The Cybersecurity Defenders Podcast, we revisit the 2025 predictions shared by our guests throughout the year. From attackers and defenders to AI and the broader security industry, these forecasts capture what experts expected was coming next. Rather than judging accuracy - which is still too early to assess -we're examining the predictions themselves: where they aligne

#278 - Defender Fridays: Bug bounties, disclosures and real-world response with Bryan Brake from Amazon Dec 19, 2025 1960 This week on Defender Fridays, Bryan Brake, Senior Product Manager and Bug Bounty Team Lead at Amazon, joins us to discuss vulnerability remediation, bounty processes, and incident response workflows.Bryan will share practical insights on managing disclosures and coordinating responses across security teams.At Defender Fridays, we delve into the dynamic world of information security, expl

#277 - BlackGirlsHack: Building a community and impactful legacy with Rebekah Skeete Dec 17, 2025 2761 On this episode of The Cybersecurity Defenders Podcast we speak with Rebekah Skeete, Executive Director and CEO of BlackGirlsHack Foundation. Rebekah dives into how BGH is helping to increase diversity in cybersecurity by bridging the gap between what is taught in educational institutions and what is necessary for careers in cybersecurity.For more information visit: https://www.blackgirls

#276 - Intel Chat: React2Shell, GeminiJack vulnerability, pro‑Russia hacktivist arrested & Warp Panda Dec 15, 2025 2228 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.For for more information about Cybersecurity Cares, visit cybersecurity-cares.comReact2Shell is the latest high-profile vulnerability in the web application landscape, scoring a critical CVSS 10.0 and drawing immediate comparisons to Log4Shell.Researchers at Noma Labs di

#275 - Defender Fridays: Polymorphic Panic - Debunking the AI Malware Myth with Randy Pargman from Proofpoint Dec 12, 2025 1955 Join us for this week's Defender Fridays as we explore the reality of AI-powered malware threats with Randy Pargman, Senior Director of Threat Detection at Proofpoint.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative spac

#274 - Why most SOCs are failing (and how to fix them) with Alec Fenton from Foresite Cybersecurity Dec 10, 2025 2493 On this episode of The Cybersecurity Defenders Podcast we speak with Alec Fenton, VP of Security Operations at Foresite Cybersecurity about his journey from SOC analyst to security leader.Alec Fenton is a seasoned Cyber Security professional with over 15 years of extensive experience across many IT domains. With a career spanning more than a decade, Alec has honed his expertise in address

#273 - Intel Chat: Tomiris cyber-espionage group, OpenPLC ScadaBR flaw, NPM manipulating AI-driven scanners & MuddyWater Dec 9, 2025 1851 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.For for more information about Cybersecurity Cares, visit cybersecurity-cares.comThe Tomiris cyber-espionage group, which has been under Kaspersky's watch since 2021, has evolved its tactics in a new wave of attacks observed in early 2025. Article #2.CISA has recently a

#272 - Intel Chat: AI taking over low-skilled work, AI-orchestrated cyber espionage, JackFix & weaponizing Blender files Dec 1, 2025 1978 In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community.For for more information about Cyber Security Cares, visit cybersecurity-cares.comAI is now fulfilling a long-standing hope of security teams: it’s taking over repetitive, low-skill tasks like log reviews, alert triage, and basic investigations.Anthropic has disclosed wh

#271 - AI hype & the future of SecOps, what’s changed in 30 years? With Erik Bloch from Illumio Nov 26, 2025 3120 On this episode of The Cybersecurity Defenders Podcast we speak with Erik Bloch, VP of Security at Illumio, about better tools to combat burnout rate and discuss the reality of AI in security.Erik Bloch has 30+ years of information and cyber security experience, both as an IC and as a leader of teams. “People first” has always been his approach. He has led entire security and IT functions

#270 - Defender Fridays: Zero Trust with Dr. Chase Cunningham from Demo-Force Nov 21, 2025 1740 Dr. Cunningham created the influential Zero Trust Extended (ZTX) Framework at Forrester Research, playing a key role in accelerating global adoption of Zero Trust principles across industries and governments worldwide.

Episodes

Recommended