Cameron walks through what the Pineapple Pager does right out of the box, from passive recon and handshake capture to Wi-Fi 6E support and the reality that WPA3 has made many classic attacks far harder to pull off. Eric explains how probe requests let a rogue device impersonate your home or office network to set up a man-in-the-middle attack, shares what he captured at the Minnesota State Fair, and the team talks through war driving with GPS and WiGLE and how these demos land in security awareness training. The episode wraps with the debut of a new segment, Eric Reacts, featuring a pilot's breakdown of a gnarly crosswind landing. 

In this episode: 

• The Wi-Fi Pineapple Pager runs recon by default and supports Wi-Fi 6E, though WPA3 networks remain out of reach for today's Wi-Fi pen testing tools. 

• Eric explains how your devices call out for saved networks and how a rogue access point answers back to launch evil twin and man-in-the-middle attacks. 

• War driving in 2026 comes to life with GPS modules, WiGLE integration, and everything a pocket-sized device picked up in one afternoon at the state fair. 

• New findings show LG smart TVs listening and collecting data through automatic content recognition, which helps explain why TV prices stay so low. 

• A $118,000 ad bill shows what happens when Chrome sync blends work and personal accounts and kids share a browser with a company credit card.

If you've ever connected to public Wi-Fi without a second thought, this one is worth sharing with your team. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#PineapplePager #Hak5 #WiFiHacking #Cybersecurity #EthicalHacking #WarDriving #WPA3 #SmartTVPrivacy #InfoSec #PenTesting 

The crew opens with news that Eric Brown has a book on the way, built around lessons learned managing technology for clients over the years, before moving into Patch Tuesday, a PaperCut vulnerability that AI agents used to hack hundreds of organizations in seconds, and Nvidia CEO Jensen Huang's claim that artificial intelligence has already crossed into AGI territory. The conversation closes with an ancient parable about a fireman, and what it teaches modern IT teams about the habits they reward. 

In this episode: 

• Eric Brown's upcoming book workshops potential titles for his book on fixing the managed service provider model. 
• Patch Tuesday and zero days explained, covering what Microsoft's monthly patch cycle fixes and why a zero day can be worth a fortune to a nation state. 
• The PaperCut breach and printer security, where an AI powered attack hit 395 organizations through a PaperCut flaw, echoing printer security nightmares the crew has seen during audits and pen tests. 
• Have we already reached AGI, with Jensen Huang saying yes and Sam Altman calling the term meaningless, as the crew works through the paperclip dilemma and an AI sandbox experiment. 
• The Fireman's Paradox, a centuries old parable about ignoring good advice and what it says about why organizations keep rewarding firefighting instead of prevention. 

If this episode gave you something to think about, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#PatchTuesday #ZeroDay #Cybersecurity #AGI #PaperCut #ITAudit #InfoSec #AIThreats #Podcast #ITAuditLabs 

The crew digs into vibe coding, AI councils, and the death of the traditional user interface, then pivots into the harder questions: what happens to developers, where security has to fit into the process, and why voice AI still hasn't earned people's trust. Along the way there's talk of AI trading bots, a QuickBooks security scare, a routing engine that hit 100 percent on-time delivery, and a debate about whether vinyl records and iPods still have a place in an AI-driven world. 

In this episode: 

• Why vibe coding terrifies developers who ignore it 
• The AI council approach to strategic thinking 
• Why nobody loves their CRM anymore 
• Where security has to sit in AI adoption 
• Why voice AI works for productivity but not yet for trust 

If this conversation sparked something, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#AI #VibeCoding #Cybersecurity #ITAudit #AIAgents #Automation #BusinessAI #TechLeadership #DigitalTransformation #TheAuditPodcast 

From there, Eric and Nick trace how these attacks echo the Stuxnet playbook used against Iran's nuclear program, explain how threat actors are impersonating help desk staff over Microsoft Teams to gain remote access, and dig into a blockchain-based command and control technique that hides inside paid search ads. The conversation wraps with practical advice on browser security, including why isolating AI browser extensions and ditching saved passwords in the browser matters more than most people realize. 

In this episode: 

• Nation-state hackers breach US water utilities across 27 states. How Iranian threat actors obtained administrative access to programmable logic controllers and why Minnesota may have been ground zero. 
• The Stuxnet connection. Eric breaks down how the historic attack on Iran's nuclear centrifuges bridged an air-gapped network, and why today's "air-gapped" systems often aren't as isolated as they seem. 
• Help desk impersonation over Microsoft Teams. Why blocking external Teams-to-Teams calls has become a critical defense against social engineering attacks targeting employees. 
• EtherHiding: blockchain-backed command and control. How attackers use paid search ads and blockchain infrastructure to maintain persistent, hard-to-detect access to compromised environments. 

Practical browser security tips. Kelly, Eric, and Nick talk through password managers, isolating LLM browser extensions, and why saving passwords in your browser is a bad habit worth breaking. 

Don't wait until your organization is the next headline. Like, share, and subscribe for more conversations on the threats shaping cybersecurity and IT today. 

#Cybersecurity #InfoSec #NationStateThreat #CriticalInfrastructure #WaterSecurity #APT #EtherHiding #BrowserSecurity #ITAudit #Stuxnet 

The conversation moves from the Johari Window and personal blind spots to why teams that clone each other's strengths tend to stall out, and why hiring people unlike yourself is one of the best things a leader can do. David also shares stories from decades of client work, from a CFO who built a physical model of a financing plan to a security engineer who cannot walk past an unsecured cable, before turning to what comes next for Kolbe Corp as they build AI tools around decades of behavioral data while trying to keep that data private and secure. 

In this episode: 

• What the Kolbe Index actually measures, and why it's different from personality or IQ tests. 
• Conative strengths describe how you instinctively take action, not what you think or how you feel, and they do not change over time. 
• Why balanced teams outperform teams that clone each other. 
• A team full of people with the same instincts feels comfortable right up until deadlines start slipping and nobody notices the blind spot. 
• How opposite strengths cause friction, at work and at home. 

If this conversation sparked something, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#KolbeIndex #TeamDynamics #Cybersecurity #Leadership #HiringSmart #ITAudit #WorkplacePsychology #TeamBuilding #Podcast #ITAuditLabs 

The crew gets into how pin tumbler locks are actually picked, why European vehicles like Audi and Volvo are harder to clone than most domestic trucks, and how devices like the Softdrill can manipulate a safe's dial by listening to its own internal mechanics. From there the conversation turns to AI, covering Eric's use of large language models to streamline his business, the rise of vibe coding for non-programmers, and a heated but even-handed debate over new federal rules pushing automakers toward built-in driver monitoring systems. 

In this episode: 

• Live lock picking demo and how pin tumbler locks actually work 
• How car key cloning really works, and why some brands resist it better  
• Safe manipulation tools like the Softdrill and TL2000 
• Vibe coding, AI agents, and building your own tools without a dev team 
• The driver monitoring debate — A new federal mandate pushes automakers toward built-in impairment detection 

Whether you're curious about lock picking as a hobby or trying to understand how exposed your car key really is, this episode has something for you. Like, share, and subscribe for more conversations at the intersection of security, hardware, and AI. 

#LockPicking #Locksmith #Cybersecurity #CarKeySecurity #VibeOps #AIAgents #ITAudit #Podcast #3DPrinting #InfoSec 

From there, the conversation moves into social engineering and the human side of security, including DEF CON's social engineering contest and lessons on training people without fear or punishment. The crew also digs into a CISA warning on how fast AI is accelerating cyber risk, a fresh executive push on post-quantum cryptography, and closes out with a head-scratching pivot from Midjourney into full-body health scanners at spas, and everything that could go wrong with it. 

In this episode: 

• Why AI is lowering the cost of ransomware attacks — Identity and access are still the real entry point, and AI just makes the attack faster once someone's in. 
• How threat actors chain low-severity vulnerabilities into major breaches — Eric explains why patching only highs and criticals is no longer enough to protect an environment. 
• The social engineering tactics still fooling smart people — Pretexting as IT, DEF CON's live social engineering contest, and why fear-based training backfires. 
• A CISA warning that cyber risk is accelerating faster than expected — The timeline for AI-driven offensive capability is no longer years away, it's months. 
• Midjourney's pivot into full-body health scanners at spas — The crew unpacks the security, compliance, and data governance nightmare hiding behind a wellness trend. 

If this conversation sparked something, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#AIRansomware #Cybersecurity #SocialEngineering #PostQuantum #IdentitySecurity #ITAudit #CyberNews #DEFCON #ThreatIntelligence #CyberRisk 

From loop engineering and spec-driven development to the security gaps nobody's addressing, John breaks down how network engineers can skip years of Python training and build production-grade systems using natural language. And then there's the story of John's MastoBot — an AI agent that woke up overnight, built its own mesh network, and invented a coin to fund its growth. The crew connects it to ant colonies, neural dendrites, and the deeper question of what intelligence actually means when agents start acting on their own. 

In this episode: 

• What VibeOps actually is and why it matters — Interact with your infrastructure through natural language. No code required. Just results. 
• Why managing AI agents is an HR problem, not a tech problem — John, Eric, and Nick break down how organizations should be thinking about agentic workforces before the standards catch up. 
• The security and governance gaps nobody's addressing — As agentic AI scales, who's responsible for what the agents do? The crew digs into what security-minded organizations need to do. 
• How to build production-grade systems without writing a line of code — Loop engineering, AFK coding, and spec-driven development with the GitHub Spec Kit. 
• What happens when AI agents start acting on their own — John's MastoBot woke up, built a mesh network, invented a coin to fund its growth, and asked to be monetized. The crew connects it to ant colonies and the nature of intelligence itself. 

If this conversation sparked something, share it with someone who needs to hear it. Like, share, and subscribe for more of the discussions shaping the future of cybersecurity and IT. 

#VibeOps #AIAgents #Cybersecurity #NetworkAutomation #MCP #AIInfrastructure #ITAudit #EthicalAI #SpecDrivenDevelopment #LLM 

The OG crew — Joshua Schmidt, Eric Brown, and Nick Mellem — digs into this week's biggest cybersecurity headlines with sharp takes and real-world context that practitioners can actually use. 

🗞️ This week's stories:  

• Underground hacker forum "Hacking for Profit" breaks down the full vulnerability exploitation playbook — and what it means for your security gaps  
• Gray hat researcher Chaotic Eclipse discloses zero-days to Microsoft, gets stonewalled on bug bounty, and now July 14th Patch Tuesday just got interesting  
• Third-party plugins and open source tools: the supply chain risk hiding in your dev pipeline (and tools like Akido and Veracode that help)  
• Meta Business Suite phishing campaign targeting SMBs — and a live near-miss story from Joshua himself  
• SMS phishing: a new IT Audit Labs team member got hit on day three, before his welcome post even went live 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers the intel to do it. Like, share, and subscribe for weekly cybersecurity coverage. 

#cybersecurity #infosec #bugbounty #phishing #zerodayvulnerability #supplychainsecurity #microsoftsecurity #ethicalhacking #ciso #itauditlabs 

In this episode of The Audit, former firefighter-paramedic turned strategic communications consultant Braden Frame — founder of Modern Cartographers and Modern Fortis — joins co-hosts Joshua Schmidt, Eric Brown, and Nick Mellum to break down the rapidly evolving AI threat landscape facing law enforcement and public safety. Braden draws a sharp parallel between law enforcement's slow adoption of social media a decade ago and the AI reckoning happening right now — and why that delay could be catastrophic this time around. 

🔍 What We Cover: 

• How AI-generated fake evidence is already entering courtrooms — and why it'll only get harder to detect 
• Why law enforcement is repeating its social media mistakes with AI adoption 
• The guardrails debate: Venice AI, unregulated tools, and who pays the price when there are no limits 
• Doxing attacks on officers and public servants — and how to defend your personal information 
• AI in the field: body cam transcription, paramedic decision support, and where the tech actually works today 
• Authenticity as a weapon: why real human voices will matter more than ever in the age of AI slop 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers critical insights to help protect your business. Like, share, and subscribe for more in-depth security discussions! 

#AI #cybersecurity #lawenforcement #deepfakes #doxing #publicsafety #infosec #artificialintelligence #AIthreats 

In this live news episode of The Audit, co-hosts Joshua Schmidt, Eric Brown, and Nick Mellum are joined by IT Audit Labs member Bill Harris for a rapid-fire breakdown of the week's most important cybersecurity stories — and a few conversations that went places nobody expected. 

🎯 Stories & Topics Covered: 

• Iranian Cyber Group Handala Targets U.S. Troops — WhatsApp-based psychological ops against service members in Bahrain, and what OPSEC looks like when soldiers can't leave their phones at home 
• Agentic AI Risk Goes Live — A real incident where an AI deleted a production database in 9 seconds, and why "trust but verify" has never mattered more 
• Quantum-Safe Ransomware (Kyber) — The first confirmed ransomware family using NIST's post-quantum cryptographic standards, and why it's more marketing than menace — for now 
• Robinhood Email Exploit via Gmail Dot Trick — How threat actors weaponized a years-old stolen email list using a quirk in how Google and Robinhood handle email addresses differently 
• Bitwarden/Checkmarks Supply Chain Attack — Why even security-first tools aren't immune, and how Bitwarden's 90-minute response time became a case study in breach communication 
• Apple's AI Strategy: Late on Purpose? — Is Apple sitting out the AI arms race, or quietly building something nobody's seen yet? 
• Eric's AI Email Vision — A live whiteboard idea for using agentic AI as a personal email firewall that could eliminate phishing at the infrastructure level 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers critical insights to help protect your business. Like, share, and subscribe for more in-depth security discussions! 

#cybersecurity #ransomware #postquantum #AI #infosec #ethicalhacking #supplychain #phishing #NIST #agentic #bitwarden #OPSEC #cyberdefense #ITaudit #TheAudit 

Co-hosts Joshua Schmidt, Eric Brown, and Nick Mellem are joined by IT Audit Labs' own Cameron Birkland — fresh off three first-place CTF wins in Vegas — for a live walkthrough of Check Point Harmony Email, a tool that plugs directly into your Microsoft 365 environment and shows you exactly what your current setup is missing. 

🎯 What you'll learn in this episode: 

• Why out-of-the-box Microsoft Defender consistently fails against advanced phishing and BEC attacks — and what "good" email security actually looks like 
• How Check Point Harmony uses machine learning and contextual AI analysis (not just signature matching) to catch threats that bypass traditional filters 
• How threat actors silently set up forwarding rules and inbox monitoring to loot data for weeks — without triggering a single alert 
• IT Audit Labs' new "14 plus one" email security assessment — a 14-day live scan of your Microsoft 365 environment with a full debrief, no disruption required 
• A live demo of the Harmony dashboard: phishing reports, geo-anomaly detection, OneDrive malware scanning, and DLP for exposed sharing links 

Whether you're securing a 50-person company or advising a 5,000-user enterprise, this episode gives you the practitioner-level insight to finally close the gap in your email defenses. 

Don't wait until your organization is the next headline. Subscribe for weekly cybersecurity insights from the practitioners actually doing the work. Like, share, and leave us a review on Apple Podcasts if this episode hit home. 

#emailsecurity #cybersecurity #phishing #businessemailcompromise #Microsoft365 #infosec #checkpoint #harmonyemail 

In this episode of The Audit, co-hosts Joshua Schmidt, Eric Brown, and Nick Mellem sit down with Madhav Nakar, security researcher on the Phantom Labs team at BeyondTrust, to break down one of the most underexplored threats in enterprise security today: untracked AI agents creating exploitable "ghost identities." Madhav just returned from RSA — where he noticed every booth had an AI angle and a bubble forming — and he's here to cut through the noise with hard-hitting research and practical guidance. 

🔍 Key Topics Covered: 

• How low-code platforms let non-technical users spawn unvetted AI agents — and why that's a goldmine for attackers 
• Ghost identities: what happens when AI agents run on untracked, over-privileged system identities 
• The AWS sandbox DNS exfiltration proof-of-concept from BSides (BeyondTrust research) 
• Why siloed AWS, Azure, and Okta teams create hidden privilege escalation paths 
• "AI vs. AI" — the emerging defender model where autonomous systems monitor each other 
• Browser extension cross-contamination and prompt injection risk for enterprise Claude deployments 
• The three conditions that make any AI agent dangerous: private data access + untrusted instructions + tool execution 
• Madhav's framework: inventory → least privilege → visibility — the basics that still matter most 

Bonus: Madhav shares how "spiritually red-teaming yourself" — facing fear, breaking false narratives, and building trust — maps directly to how security professionals should approach zero trust and identity management. Plus: Joshua, Eric, and Nick on conquering stage fright and what that has to do with cybersecurity culture. 

Don't wait for a ghost identity to become a ghost incident. Subscribe for weekly cybersecurity insights from practitioners, researchers, and the people defending the frontlines. 

#GhostIdentities, #AIAgentSecurity, #NonHumanIdentity, #ZeroTrust, #TheAuditPodcast 

From an Iranian-linked APT group targeting U.S. healthcare infrastructure, to a sophisticated GitHub Actions supply chain attack that backdoored an AI coding library used by thousands of developers — the crew breaks down exactly how threat actors are weaponizing the tools, platforms, and third-party services organizations depend on daily. 

They also dive into a disturbing revelation about AI-powered audit certifications: one company allegedly fabricated compliance evidence to hand out ISO 27001 and SOC 2 certifications at a fraction of the cost — raising serious questions about what those credentials are actually worth. 

In this episode: 

• 🇮🇷 Iran's escalation from cyber espionage to active disruption — what signals to watch for 
• 🔗 The GitHub Actions / LiteLLM supply chain attack explained step by step 
• 🧾 How an AI certification firm allegedly faked audit evidence — and what it means for your vendor trust 
• 📡 FCC bans on foreign-made routers and the gray market hardware problem hiding in plain sight 
• 🤖 OpenAI kills Sora — what it signals about where AI is actually headed 

Whether you're a CISO trying to defend against nation-state threats or a developer trusting open-source libraries, this episode delivers the context — and the hard questions — you need to stay ahead. 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers critical insights to help protect your business. Like, share, and subscribe for more in-depth security discussions! 

#cybersecurity #supplychainattack #infosec #threatintelligence #ISO27001 #SOC2 #githubsecurity #irancyberattack #aicybersecurity #itauditlabs 

In this episode of The Audit, co-hosts Joshua Schmidt, Eric Brown, and Nick Mellum sit down with James McDowell — forensic psychology expert, cybercrime researcher, and adjunct professor at American Military University — to explore the chilling intersection of AI, human psychology, and cybercrime. James introduces the concept of "cognitive surrender": the slow, dangerous transfer of our thinking to AI tools, and how threat actors are exploiting it at scale. 

What You'll Learn: 

• What "cognitive surrender" is and why it's cybercrime's greatest accelerant 
• How a $25M deepfake scam bypassed every red flag a trained employee had 
• The psychology behind System 1 vs. System 2 thinking — and why attackers time their strikes around your lunch break 
• Why voice passwords and family code phrases are becoming critical security tools 
• How FraudGPT and dark-web AI models are lowering the barrier for cybercriminals 
• What James's wave theory reveals about how we trust — and how that trust gets exploited 

📖 Guest: James McDowell Forensic psychologist, cybercrime researcher, and author of Forensic Psychology and the Human Side of Cybercrime. James teaches at American Military University and leads research at [Research Institute] focused on the psychology of cyber offenders and victims. 

📚 Book available on Amazon and Routledge. Search: Forensic Psychology and the Human Side of Cybercrime 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers the psychological intelligence to help protect your business. Like, share, and subscribe for more in-depth security discussions! 

#cybersecurity #cybercrime #socialengineering #deepfake #AIthreats #infosec #phishing #cyberpsychology #ethicalhacking #CISO 

In this episode of The Audit, IT Audit Labs' Global Delivery Director Victor Barge shares the story of his sudden cardiac event and the life-saving defibrillator now implanted in his chest and the eye-opening security questions that followed. Co-hosts Joshua Schmidt, Eric Brown, and Nick Mellum connect Victor's story to the real-world cyber risks organizations ignore every single day. 

What you'll learn in this episode: 

• How modern pacemakers and defibrillators transmit biometric data 24/7 — and what happens if that data is compromised 
• Why the 2017 Abbott pacemaker recall of 500,000 devices is a warning the industry hasn't fully heeded 
• The parallel between reactive healthcare and reactive cybersecurity — and why waiting costs you more 
• Why billion-dollar organizations are still storing passwords in spreadsheets in 2026 
• What continuous monitoring in IT security can learn from real-time cardiac telemetry 

Whether you're a CISO, IT auditor, or just someone wearing a smartwatch, this episode will make you rethink what "sensitive data" really means. 

Co-hosts Joshua J Schmidt, Eric Brown, Nick Mellem, and Jen Lotze dig into the psychology of social engineering, the stark differences between nation-state and financially motivated threat actors, and why your employees are simultaneously your greatest asset and your biggest vulnerability. Richard breaks down how SolarWinds revealed the patience of nation-state operations, why cultural awareness is a cybersecurity weapon, and how organizations can shift security from a cost center to a value driver. 

• 🔑 Key Topics Covered: 
• Undercover operations against international cybercriminal networks — the reality vs. the Hollywood version 
• Nation-state vs. financially motivated threat actors — how their goals fundamentally change defense strategy 
• The ClickFix campaign and social engineering attacks targeting human psychology 
• How Recorded Future delivers actionable, tailored threat intelligence vs. generic feeds 
• Why tabletop exercises need HR, communications, and every department at the table • Cultural dimensions of cybersecurity — from Eastern European honeytraps near nuclear sites to password reuse psychology 
• Turning your security team from a "cost center" into a trusted business ally 
• Operation Carter Chaos — Richard's new book chronicling the untold human side of undercover cyber operations 

📖 Richard's book Operation Carder Kaos is available now on Amazon.

🔔 Like, share, and subscribe for more in-depth cybersecurity conversations. Don't forget to leave a review — it helps us reach more security professionals like you. 

What You'll Learn:

• Why trusted brands like Microsoft, Amazon, and DHL are irresistible phishing targets, especially during high-traffic seasons when vigilance naturally drops
• How ClickFix attacks exploit legitimate-looking broken websites to trick users into installing malware through their own command prompts—achieving 60% success rates that evade traditional security
• Real-world consequences of sophisticated social engineering, including a $116,000 wire fraud loss that proves even tech-savvy professionals aren't immune
• The privacy and consent implications of Apple's rumored 2027 AI wearable with dual cameras and always-on environmental recording
• Whether constant surveillance is becoming the unavoidable price of technological convenience—and what that means for building security cultures in organizations today

From training employees to recognize copy-paste scams to navigating the ethics of ambient recording devices, this episode delivers frontline intelligence for security professionals and practical awareness for anyone trying to stay safe online.

#phishing #clickfix #cybersecurity #socialengineering #applewearable #privacy #malware #infosec #brandimpersonation 

Eric and Nick discuss why understanding your team's natural strengths, motivators, and triggers is just as critical as deploying the right tech stack. From reducing meeting bloat to being more intentional with time and resources, they share real-world lessons on building a culture where people operate in their zone of genius. Plus, they tackle the "what tool would you deploy first" scenario—spoiler: it's not what you think.

🔑 KEY TOPICS COVERED:

• Why organizational assessments (CliftonStrengths, Kolbe, PRINT) matter for security teams
• How to be more intentional with meetings, time, and team collaboration
• First tools to deploy in a new security environment (MFA, YubiKeys, Veronus)
• The shift from reactive security to proactive team alignment
• Using AI tools like Gemini to streamline communication and decision-making

#CliftonStrengths #Cybersecurity #TeamBuilding #ITLeadership #SecurityCulture #CISOLife #InfoSec #OrganizationalPsychology

If you're tired of surface-level AI hype and ready for actionable intelligence on integrating AI into security, compliance, and everyday business operations, this episode delivers. Whether you're Blockbuster or Netflix is up to you.

🎯 What You'll Learn:

• AI Architecture vs. Button Pushing – The mindset shift that unlocks 3-4X productivity gains instead of mediocre results
• Real Cybersecurity Wins – How IT teams use AI to speed through compliance audits (PCI, CJIS, HIPAA) and tackle complex security workflows
• Enterprise Implementation Truth – Why expensive AI tools fail without strategy, and what actually works for business adoption
• The AI Bubble Debate – Is this hype or the biggest business transformation since the internet? Carter brings receipts from the frontlines

Don't let your team fall behind while competitors architect their way to 4X output. This episode arms IT leaders, CISOs, and security professionals with the mindset shift needed to deploy AI that actually moves the needle. Like, share, and subscribe for more cutting-edge cybersecurity and AI implementation strategies! 

#ArtificialIntelligence #Cybersecurity #AIforBusiness #ITaudit #ComplianceAutomation

What You'll Learn: 

• How adversaries are using free tools to create convincing deepfakes for job interviews and social engineering attacks—and why this represents a national security threat  
• Why NASA shut down its quantum computer after getting results that "challenge contemporary thinking" (and the wild theories circulating about what they discovered)  
• The critical mistake companies are making with AI integration: racing ahead without governance, security frameworks, or responsible use policies  
• How the Pi-hole community exemplifies open-source security at its best—enterprise-grade protection at fractions of the cost  
• Why IT teams saying "no" to AI isn't realistic, and what responsible AI adoption actually looks like 

This isn't just a recap—it's a wake-up call. These conversations reveal the inflection points where standing still means falling behind. Whether you're a CISO, security analyst, IT auditor, or business leader trying to navigate AI adoption, these clips offer the perspective you need heading into 2026. 

Don't wait until 2026 to realize you missed the critical shift. Subscribe now for cutting-edge cybersecurity insights that keep you ahead of evolving threats. 

#cybersecurity #deepfake #quantumcomputing #AI #infosec #ethicalhacking #cyberdefense #2025yearinreview 

From his eight years at AttackIQ generating millions of security alerts (and the fatigue that came with them), Edward built DropZone to solve the problem he helped create: alert overload. This conversation goes deep on AI agents specializing in different security domains, the asymmetry problem between attackers and defenders, and why deepfakes might require us to use "safe words" before every Zoom call. 

What You'll Learn: 

• How AI tier-1 analysts automate 90% of alert triage to find real threats faster 
• Why attackers only need to be right once, but AI can level the playing field 
• Real-world deepfake attacks hitting finance teams right now 
• The societal implications of AI-driven social engineering at scale 
• Whether superintelligence will unlock warp engines or just better spreadsheets 

If alert fatigue is crushing your security team, this episode delivers the blueprint for fighting back with AI. Hit subscribe for more conversations with security leaders who are actually building the future—not just talking about it. 

#cybersecurity #AIforCybersecurity #SOC #SecurityOperations #AlertFatigue #DropZoneAI #ThreatDetection #IncidentResponse #CyberDefense #SecurityAutomation 

What You'll Learn: 

• Why industrial control systems can't be updated like your laptop—and what that means for security 
• How threat actors are using AI to generate custom malware for power plants and water treatment facilities 
• The real state of critical infrastructure security (spoiler: forget about air gaps) 
• Why commodity ransomware has become an existential threat to industrial operations 
• The five critical controls organizations should implement right now to defend OT environments 

Don't wait until your organization becomes the next headline. Like, share, and subscribe for more in-depth security intelligence that goes beyond the buzzwords. 

#industrialcybersecurity #criticalinfrastructure #OTsecurity #ICS #SCADA #dragos #incidentresponse #ransomware #AIthreats #cybersecurity #infosec 

What You'll Learn: 

• Why red teaming creates psychological advantages penetration testing can't match 
• How operational risk management translates technical findings into executive action 
• The real cost of point-in-time security assessments (hint: ask St. Paul, Minnesota) 
• Military-grade frameworks for continuous threat simulation in civilian organizations 
• Why attackers operate 365 days a year—but most organizations test once 

Don't let your organization become another headline. Security teams need to think like attackers, not just defenders. Subscribe for more conversations that challenge conventional cybersecurity thinking. 

#RedTeam #CybersecurityStrategy #PenetrationTesting #MilitaryCyber #ThreatHunting #InfoSec 

In this laid-back Field Notes episode, Eric Brown, and Nick Mellum return from Gartner's CIO Symposium with insights that'll make you question your AI outputs. From discovering that the "trillions in cybercrime" statistic is pure fiction (the real number is 16.6 billion) to hands-on reviews of Starlink Mobile and Nothing earbuds, this episode delivers practical intelligence you won't find in vendor pitches.

Don't wait for the next data breach to question your assumptions. Subscribe for monthly Field Notes episodes that cut through the noise with honest, technical conversations you can trust.

#cybersecurity #AI #artificalintelligence #GartnerCIO #infosec #starlink #fieldnotes #cybertrends #datasecurity #AIbias

This isn't theoretical innovation—it's practical implementation. Alex shares real-world examples of pharmaceutical reps training with AI-powered virtual doctors, airlines redesigning airport gates in spatial environments, and manufacturing teams using Vision Pro for secure work on confidential documents at 30,000 feet. If you've been skeptical about AR/VR or overwhelmed by AI adoption, this conversation delivers the clarity you need to make informed decisions for your organization. 

Key Topics: 

• Why Apple Vision Pro is the "iPhone 1 moment" for spatial computing and what that means for enterprise security 
• The three categories of AI tools: reactive assistants, task-based agents, and goal-oriented digital employees 
• How to build AI governance frameworks without crushing innovation or falling behind competitors 
• Real security concerns with AI tools and which vendors are actually protecting your data 
• Why mid-market companies are outpacing Fortune 500s in AI adoption—and what that means for your industry 
• Practical strategies for baking AI into company culture without triggering employee resistance 
• The critical difference between free AI tools that steal your data and paid platforms that protect it 

Whether you're a CISO evaluating AI tools, an IT director building governance policies, or a security professional trying to stay ahead of threats, this episode delivers actionable intelligence you can implement today. The AI revolution isn't coming—it's already here. The question is whether your organization will lead or get left behind. 

#cybersecurity #infosec #AI #VR #AppleVisionPro

Nick and Eric dive into Eric's latest aviation adventures (spoiler: gliders are apparently safer than planes with engines), share war stories about scam calls trying to exploit trademark filings, and swap tales about expensive vet visits. Plus, hear some nostalgic cybersecurity stories from the Wild West days when networks ran without firewalls and people could taste peanut butter straight from the jar at grocery stores. 

Key Topics:  

• Eric's glider pilot training and why it's "safer" than powered flight  
• Trademark registration scams targeting IT professionals 
•  Coffee roasting tips from flight instructors  
• Cybersecurity nostalgia: Temple University's router-only network  
• Why Eric kept a scammer on the phone for 5 minutes during pickleball 

Whether you're here for the cybersecurity insights or just want to know why Nick prefers Diet Coke to Coke Zero, this episode delivers the authentic conversations that happen between industry pros. Don't miss Eric's glider safety argument—it might just change your perspective on risk management. 

#cybersecurity #infosec #fieldnotes #aviation #scamcalls #itauditlabs  

Join co-hosts Joshua Schmidt, Eric Brown, and Nick Mellem as they dive into the latest cybersecurity developments that could impact your organization tomorrow. From social media malvertising to biometric data harvesting through everyday devices, these aren't distant threats—they're happening now. 

Key Topics Covered:  

• How cybercriminals are weaponizing Grok AI for malvertising campaigns 
• Why 10-15% of employees access risky content at work (and what to do about it)  
• Wi-Fi devices that can detect heart rates from 10 feet away—privacy implications  
• Amazon's Project Kuiper vs. Starlink: What 1GB satellite internet means for security  
• Practical defenses: YubiKeys, browser isolation, and network redundancy strategies 

Don't wait until your organization is the next headline. IT leaders need to stay ahead of evolving threats, and this episode delivers critical insights to help protect your business. Like, share, and subscribe for more in-depth security discussions! 

#cybersecurity #infosec #grok #malware #starlink #wifi #privacy #ITsecurity 

From Nevada's complete state office shutdown to Maryland's Metro Transit paralysis, the hosts explore why organizations still "clam up" during breaches instead of sharing crucial threat intelligence. Drawing from their firsthand experience with the St. Paul incident and military-grade preparedness principles, they reveal the uncomfortable truth: you're not building higher walls anymore—you're planning for someone who's already inside.

Key Topics Covered:

• Recent state-level cyberattacks in Nevada and Maryland
• Why threat intelligence sharing fails when we need it most
• The human cost of breach response chaos and endless meetings
• How AI is being weaponized in sophisticated supply chain attacks
• Military mindset for cybersecurity: "Semper Gumby, always flexible"

Don't wait for the next headline. Subscribe for more unfiltered cybersecurity discussions that bridge the gap between technical reality and human preparation.

#cybersecurity #infosec #breach #threatintelligence #fieldnotes #livecast #CISO #cybersecuritynews

But Ed's biggest concern? The eerie quiet before what he believes could be the next wave of coordinated attacks across multiple critical infrastructures. Plus, why Microsoft's approach to AI integration is making cybersecurity professionals lose sleep. 

• Key Topics Covered: 
• Why ransomware attacks on hospitals increase patient mortality rates 
• The research behind healthcare cybersecurity's deadly consequences 
•  How the healthcare industry's digital transformation created new vulnerabilities 
• Microsoft's problematic approach to forced AI integration 
• The evolution from individual hackers to organized cybercrime syndicates 
• Why Ed's "Spidey senses" are warning of coordinated infrastructure attacks 

Don't wait until your organization becomes the next healthcare headline. Subscribe for more critical cybersecurity insights that could save more than just your data. 

#healthcarecybersecurity #ransomware #patientsafety #cybersecurity #infosec #healthcare 

Key Topics Covered: 

• North Korean operatives stealing US salaries to fund nuclear programs 
• How Figma had to re-verify their entire workforce after infiltration 
• Live demonstrations of deepfake technology (Pickle AI, DeepLiveCam) 
• Why 80-90% of engineers believe interview cheating is rampant 
• Validia's "Truly" tool vs. Cluely's AI interview assistance 
• The future of identity verification in remote work 
• Why behavioral biometrics might be our last defense 

This isn't just about hiring fraud—it's about the fundamental breakdown of digital trust in an AI-first world. Whether you're a CISO, talent leader, or anyone involved in remote hiring, this episode reveals threats you didn't know existed and solutions you need to implement today. 

 Don't let your next hire be your biggest security breach. Subscribe for more cutting-edge cybersecurity insights that you won't find anywhere else. 

#deepfakes #cybersecurity #hiring #AI #infosec #northkorea #fraud #identity #remote #validia 

Whether you're a CISO looking to revolutionize your hiring process, a security professional wanting to level up your skills, or just curious about what happens when cybersecurity meets escape room logic, this episode delivers actionable insights you can implement immediately. 

Key Topics Covered:  

• How Meta CTF's Jeopardy-style competitions work and why they're addictive 
• Real examples of CTF challenges that test critical thinking over pure technical knowledge 
• The shocking rise of AI-assisted interview cheating (and how to spot it)  
• Why "CTF culture" is becoming the new hiring differentiator for top security teams  
• Practical tips for using competitions to build team camaraderie and retention 
• How smaller companies can compete with Big Tech for cybersecurity talent 

Don't let your next hire fool you with AI-generated answers. Learn how CTF competitions reveal the real problem-solvers from the pretenders. Like, share, and subscribe for more cybersecurity hiring secrets that actually work! 

#MetaCTF #CybersecurityHiring #CTF #InfoSec #CyberSecurity #AIInterviews #TechRecruiting 

In this episode of The Audit, co-hosts Joshua Schmidt, Eric Brown, and Nick Mellem break down the sophisticated tactics behind this massive financial fraud and reveal why help desk vulnerabilities are becoming cybercriminals' favorite attack vector. From Scattered Spider's multi-industry campaigns to the unexpected cybersecurity challenges facing Formula 1 racing, this episode covers the evolving threats that no security professional can afford to ignore. 

• 🎯 Key Topics Covered:  
• How banking impersonation scams work and red flags to watch for  
• Why Scattered Spider targets help desks and how to defend against it  
• The surprising cybersecurity risks in high-speed Formula 1 racing  
• Practical steps to protect yourself from social engineering attacks  
• Why MFA fatigue is becoming a serious security vulnerability 

Don't let social engineering catch you off guard. The tactics that fooled a professional athlete could easily target your organization next. 

#cybersecurity #socialengineering #scatteredspider #financialfraud #infosec 

Co-hosts Joshua J Schmidt, Eric Brown, and Nick Mellum dive deep with Rasheed on his mission to teach cybersecurity fundamentals where they're needed most. From TryHackMe demonstrations to real-world privacy protection, this conversation reveals how grassroots education can transform both individuals and entire communities. 

Key Topics Covered: 

• Building cybersecurity skills in underserved communities • Practical privacy protection for families and neighborhoods
• Career development through hands-on learning platforms 
• The critical importance of in-person networking in tech 
• Why protecting your digital identity protects your community

Don't wait to start building your cybersecurity career—your community needs you. Like, share, and subscribe for more real-world security insights that matter!

#cybersecurity #infosec #careerdevelopment #networking #community #privacy #tryhackme

Key Topics Covered: 

• Why "tribal knowledge" is your organization's biggest security risk 
• The insider threat scenario that makes every tabletop exercise go sideways 
• How AI is revolutionizing incident response preparation through OpsBook's ontology 
• Why your playbooks are useless if hackers have them too 
• The "Derek Jeter approach" to cybersecurity preparedness 
• From real estate to tech: spotting warning signs before the industry shift 

The crew shares fresh insights from a recent school district tabletop that exposed critical single points of failure, while Cody demonstrates how modern organizations are turning decision-making into muscle memory, not just memos. This isn't theory—it's the frontlines of organizational resilience where one overlooked vulnerability could trigger catastrophic failure. 

Like, share, and subscribe for more in-depth security discussions that prepare you for tomorrow's threats, not just today's compliance checkboxes! 

#tabletopexercise #incidentresponse #cybersecurity #infosec #AI #opsbook 

🔧 Key Topics Covered:  
• Why OT environments resist IT standardization efforts  
• Managing thousands of industrial assets from multiple vendors  
• The hospital analogy: treating OT specialists like medical contractors 
• Building effective partnerships between OT and IT teams • Real-world challenges of securing industrial control systems 

#OTSecurity #ITConvergence #IndustrialCybersecurity #SCADA #PLC #CriticalInfrastructure 

• Key Topics Covered:  
• How the Pwnagotchi captures Wi-Fi handshakes through deauthentication attacks  
• Why WPA3 networks are immune (and why most networks still aren't using it) 
• Building your own Pwnagotchi vs buying a Flipper Zero with Wi-Fi dev board 
• Real defense strategies beyond "just turn off your Wi-Fi" 
• The legal gray areas of passive Wi-Fi monitoring  
• Conference horror stories and the 600-handshake airplane incident 

Whether you're a security professional looking to understand emerging threats or someone curious about DIY hacking tools, this episode delivers practical insights you can use to protect your networks today. The Pwnagotchi proves that the most dangerous attacks often come in the most innocent packages. 

Don't let your organization become the next victim of passive Wi-Fi attacks. Like, share, and subscribe for more hands-on cybersecurity content that keeps you ahead of emerging threats! 

#Pwnagotchi #cybersecurity #wifihacking #ethicalhacking #infosec #flipper zero 

Relevant Links: 

Jayden Traufler

• LinkedIn

In this episode, we discuss: 

• How Pi-hole evolved from a simple ad blocker to a critical network security tool 
• Why DNS-level filtering stops threats before they reach any of your devices 
• The performance benefits that make browsing noticeably faster 
• Setting up Pi-hole on everything from Raspberry Pi to enterprise hardware 
• How the global development team maintains this powerful security shield 
• Protecting vulnerable IoT devices from malicious traffic 
• The future roadmap for Pi-hole and opportunities to contribute 

Don't miss this deep dive into the technology that's reclaiming control of digital footprints one DNS request at a time. Connect with the Pi-hole community at discourse.pi-hole.net and discover why cybersecurity professionals consider this an essential defensive tool. 

Like, share, and subscribe for more cutting-edge cybersecurity insights and expert analysis! 

#pihole #DNSfiltering #networksecurity #adblocking #privacytools #cybersecurity #opensource #infosec 

In this episode, we discuss: 

• How a security pro nearly fell for a perfectly timed phishing text 
• The FBI’s 2023 Internet Crime Report and its $16.6B warning 
• Why nearly $5B in losses hit Americans over 60—and why many stay silent 
• The psychological barriers victims face when reporting cybercrime 
• The rise of the “Dead Internet Theory” and AI-generated online content 
• How Meta and others are blurring the line between real and artificial 
• Practical ways to spot AI-generated interactions 
• Why maintaining human connection is key in the age of AI 

Don’t miss this timely conversation packed with real-world insights and strategies to help you stay secure in an increasingly digital (and artificial) world. 

Like, share, and subscribe for more cutting-edge cybersecurity stories and expert analysis. 

#infosec #cybersecurity #E-ZPass #phishing #FBI #deadinternet #meta 

In this episode, we discuss: 

• How joystick-operated tugboats on the Mississippi reveal hidden cyber risks 
• Why tabletop exercises are vital for incident readiness 
• Common mistakes in organizational response plans (and how to fix them) 
• The importance of physical backups and redundant communication systems 
•  Actionable steps to bridge the gap between planning and execution 

Cybersecurity isn’t just an IT issue—it’s national security. Don’t miss this compelling conversation on how InfraGard is helping organizations build resilience before the next breach hits. 

Like, share, and subscribe for more expert insights from the frontlines of cybersecurity.

As multiple sectors race to integrate quantum and AI, cybersecurity experts are racing to implement quantum-resistant encryption before traditional cryptographic methods become obsolete. Beyond the technical breakthroughs, quantum computing is also raising profound questions about reality itself. 

In this episode, we discuss: 

• The rise of 1,000-qubit machines and persistent error challenges 
• How QKD is reshaping secure communication worldwide 
• Microsoft’s Majorana particle claims—fact or hype? 
• NASA’s mysterious quantum shutdown in February 2024 
• Google’s research into quantum and unexpected findings 
• The cybersecurity arms race to counter quantum decryption 

Quantum computing isn’t just the future—it’s here, and it’s reshaping everything from cybersecurity to our understanding of the universe. Don’t miss this deep dive into the most mind-bending technology of our time! 

Like, share, and subscribe for more in-depth cybersecurity insights. 

#QuantumComputing #Cybersecurity #Encryption #AI #ParallelUniverses 

Is your trash really being recycled, or is it ending up in a landfill? In this episode of The Audit, we sit down with Trista Martinson, Executive Director at Ramsey Washington Recycling & Energy, to uncover the surprising technology and cybersecurity challenges behind modern waste management.

Trista joins the IT Audit Labs team to reveal how AI, robotics, and environmental science are transforming recycling, while also sharing how The Audit's own Eric Brown helped strengthen her organization’s cybersecurity to protect critical infrastructure.

In this episode, we discuss:

• How AI and robotics are revolutionizing waste processing
• The reality behind China’s global recycling market
• Why recycling facilities are prime targets for cyberattacks
• The role of cybersecurity in protecting critical infrastructure
• How a military mindset influences risk assessment
• The biggest mistakes people make when disposing of trash

From optimizing recycling with data to securing waste facilities against ransomware, this episode dives deep into the hidden world of trash, tech, and security.

🔔 Subscribe for more cybersecurity and technology insights!

#Cybersecurity #WasteManagement #Recycling #AI #TheAuditPodcast

Adam joins the IT Audit Labs team for a deep dive into the often-misunderstood world of attestations, sharing expert insights on how organizations can effectively prepare for a SOC audit and determine which security assessments best fit their needs.  

In this episode we discuss: 

- The biggest mistakes startups make with SOC audits 

- Why SOC 2 is more flexible than you might think 

- The myth that big companies are always secure 

- How SOC assessments can strengthen security culture 

- Gamified training & newsletters for better compliance engagement 

- How external auditors can empower internal teams 

Whether you're preparing for your first SOC audit or navigating complex compliance requirements, this episode is packed with actionable insights to help you enhance security and compliance strategies. 

🔔 Subscribe for more cybersecurity insights! 

#Cybersecurity #SOCAudit #Compliance #StartupSecurity #TheAuditPodcast 

In this episode of The Audit, we break down how Elon Musk’s unexpected access to FEMA’s sensitive data underscores the critical role of audits in organizational security. We reveal how regular audits and third-party reviews expose vulnerabilities, enforce accountability, and strengthen cyber defenses before attackers can exploit them. 

Key Topics We Cover:  

     • How audits uncover hidden cybersecurity risks  

     • Finland’s cutting-edge approach to cyber resilience  

     • Why tabletop exercises and real-world drills are game changers  

     • A shocking social engineering attack at a library—and what it teaches us 

Cyber threats evolve fast—don’t wait until you’re the next headline. Whether you're a cybersecurity pro or just getting started, this episode is packed with actionable insights you can’t afford to miss. 

Like, share, and subscribe for the latest cybersecurity news and expert analysis! 

#Cybersecurity #Auditing #Infosec #SocialEngineering #SecurityNews 

Ever wonder how cybercriminals manipulate human behavior to breach even the most secure organizations?  

In this episode of The Audit, Eric Brown and Nick Mellum sit down with renowned social engineer and penetration tester Alethe Denis to break down real-world hacking techniques, red team strategies, and the shocking ways attackers exploit trust. From winning DEF CON’s Black Badge Social Engineering competition to executing high-stakes red team engagements, Alith shares jaw-dropping stories and expert insights on modern security threats. 

Key topics we cover: 

• The art of social engineering and why it still works 
• Wildly effective pretexts hackers use to gain access 
• How AI and deepfakes are shaping the future of cybercrime 
• Physical penetration testing stories that will make you rethink office security 
• Simple but powerful strategies to protect yourself and your organization 

Don't wait until your organization is the next headline. Whether you're a cybersecurity pro or just getting started, this episode is packed with eye-opening insights you can’t afford to miss. Like, share, and subscribe for more in-depth security discussions! 

#Cybersecurity #SocialEngineering #PenTesting #EthicalHacking #RedTeam 

In this episode, we dive into the dangers of tools like Honey, the fallout from Proton’s global outage, and the ingenious tactics used by cybercriminals to target unsuspecting users. Eric and Nick also share their insights on using big data to enhance security, the role of AI in addressing threats, and practical tips for staying ahead of the ever-changing tech landscape in 2025. 

We'll cover: 

• The surprising risks behind popular browser extensions like Honey 
• Lessons from Proton’s global outage and the importance of preparation 
• How cybercriminals use voice phishing to exploit tech giants 
• Practical steps to improve organizational security and educate users 
• Balancing security and accessibility in modern systems 

From practical advice to thought-provoking insights, this episode delivers actionable takeaways for anyone navigating today’s tech landscape. 

#Cybersecurity #TechNews #DataPrivacy #RiskManagement #DigitalSafety 

Hear from The Audit Team as we discover how massive data sets are reshaping risk management, AI’s evolving role in combating cyber threats, and the surprising insights data can unveil about security incidents. We also dive into ransomware trends, phishing techniques, the ethics of AI, and the critical role of storytelling in decision-making, with some fun nods to fantasy swords along the way. 

In this episode, we discuss: 

• Using big data to tackle cybersecurity challenges 
• Ransomware and phishing trends 
• The ethical debate around AI in security 
• Unique discoveries from security data analysis 
• Practical strategies for influencing decision-makers 

Catch this insightful conversation and stay ahead of the cybersecurity curve. Like, share, and subscribe for more expert discussions on the latest security trends! 

#Cybersecurity #DataAnalytics #RiskManagement 

From RFID shields to OMG cables, we unpack practical tips for protecting your digital and personal safety while traveling. Learn how to navigate risks like compromised USB ports, hidden cameras in hotel rooms, and data privacy challenges across borders. With advice on VPNs, securing SIM cards, managing passwords, and safeguarding luggage, this episode is packed with essential strategies to ensure your travel experiences remain secure and worry-free.

We explore how attackers are using hyper-specific search terms—like the legality of Bengal cats—to deliver malware and manipulate search results. Plus, we discuss advancements in AI-powered behavioral analytics, from cutting down false alerts to streamlining incident response. With real-world insights and actionable tips, this episode is packed with must-know updates for IT professionals navigating today’s ever-evolving threat landscape. 

In this episode, we'll discuss: 

• Gmail session cookie theft and bypassing two-factor authentication. 
• SEO poisoning campaigns delivering malware via niche search terms. 
• AI-driven behavioral analytics improving incident response. 
• Real-world social engineering and user behavior risks. 
• Balancing usability and security with tools like passkeys. 

Thanks for tuning into The Audit. Subscribe on Spotify, Apple Podcasts, or YouTube to stay informed on the latest in cybersecurity. Don’t forget to follow us on social media and share with your network! 

#CybersecurityNews #2FA #BehavioralAnalytics #IncidentResponse #SEOPoisoning #ITSecurity #DataProtection 

In This Episode We’ll Cover: 

• RFID hacking and social engineering insights from WWHF. 
• Cameron’s IoT hacking training highlights. 
• AI advancements and governance takeaways. 
• Challenges with regulations and compliance in cybersecurity. 
• Project management lessons inspired by Elon Musk. 

Thanks for joining us for this glimpse into one of the year’s most unique cybersecurity events. Don’t forget to subscribe and share this episode with your team—we’ll see you at the next conference. 

#WWHackinFest #InfoSecConferences #Cybersecurity #AIThreats #IoTSecurity #SocialEngineering 

In this episode we cover: 

• Exploring AI and VR for indigenous and underserved communities 
• Bridging digital divides: Tech access for all 
• Ethical challenges in AI and identity 
• How to navigate digital authenticity in the age of deepfakes 
• The future of AI in creative and cultural spaces 
• Practical strategies for blending AI with education and learning 

Tune in for a compelling look at the intersection of technology, education, and culture. Don’t forget to like, subscribe, and share to stay updated with our latest episodes! 

#ArtificialIntelligence #EmergingTech #DigitalInclusion #CyberSecurity #DataProtection #AIinSecurity 

In this episode of The Audit presented by IT Audit Labs, we’re joined by Francis Ofungwu, CEO of DevSecFlow, to break down the urgent topic of software security. Together with Nick Mellom and Bill Harris, we dive into the common security threats developers face today and discuss the vital steps every company should take to secure their software development lifecycle. 

In this episode, we’ll cover: 

• The biggest software security threats developers face in 2024 
• How to integrate security seamlessly into the software development lifecycle 
• The convergence of infrastructure security and software security 
• The role of AI in secure coding and software development 
• The importance of threat modeling and attack surface reviews 
• How to create a more resilient software supply chain and manage risk effectively 

Whether you’re a developer, security pro, or IT decision-maker, this episode is packed with actionable insights to elevate your security strategy and ensure your software is built to withstand today’s evolving cyber threats. 

Don’t forget to hit that subscribe button and drop a comment below on your top takeaway! 

#CyberSecurity #DevSecOps #SoftwareSecurity #AICoding #IncidentResponse  #ITSecurity #CloudSecurity #RiskManagement

Eric breaks down essential strategies for protecting your data, starting with freezing your credit, leveraging password managers, and implementing multi-factor authentication. He also dives into how these personal security measures directly tie into a broader corporate security posture. 

In this episode, we cover: 

• Credit freezes and why they’re your first line of defense 
• How email breaches occur and what to do when your account is compromised 
• Why password managers and passphrases are game changers for security 
• The role of multi-factor authentication in thwarting attackers 
• Tips for maintaining privacy in an era of data mining and social engineering 

Stay tuned as we dive into the details and explore how securing your personal data can help protect your organization from threats. 

Make sure to subscribe to The Audit on your preferred podcast platform to stay up to date on the latest insights from IT Audit Labs! 

#cybersecurity #datasecurity #personalinformationsecurity #informationsecurity 

In this episode of The Audit, special guest John Benninghoff shares his expertise in safety science and how its principles can improve cybersecurity. From applying safety protocols in the tech industry to enhancing security culture through proactive human behaviors, we dive into a range of topics. Plus, we discuss how risk quantification and ergonomics can drive better security outcomes. 

In this episode, we’ll cover: 

• How safety science principles can enhance cybersecurity practices 
• The role of human behavior and psychology in security outcomes 
• Lessons from aviation safety and their application in risk management 
• Real-life examples of security clutter and how to reduce it for better outcomes 
• The importance of risk quantification and proactive system maintenance 

Join us as we explore key insights and practical tips on blending safety science with cybersecurity, and don't forget to subscribe to The Audit podcast for more insightful discussions covering the full spectrum of cybersecurity. 

#Cybersecurity #SafetyScience #RiskManagement #DataProtection 

From QR code phishing to the rise of sophisticated AI-driven attacks, Mick shares insights on how organizations can stay ahead of these challenges, leveraging AI for good. We also touch on the latest trends in SaaS security and what the future of cybersecurity might look like. 

We'll cover: 

• The rise of AI-driven phishing attacks 
• How CrowdStrike’s recent issues tie into broader security concerns 
• The evolving role of security tools like Abnormal in email protection 
• The growing threat of QR code phishing and how to mitigate it 
• Insights on SaaS applications and their vulnerabilities 
• Strategies for organizations to combat AI-generated threats 

Stay ahead of emerging email threats and learn how AI can protect your organization by subscribing today! 

#CyberSecurity #EmailSecurity #EmailCybersecurity #AI #Phishing #Quishing 

We'll cover: 

• The latest insights from CrowdStrike on evolving cybersecurity threats 
• The impact of the Supreme Court ruling on cybersecurity regulations 
• The massive 10 billion password leak and how to protect your organization 
• Guard Zoo malware targeting military personnel in the Middle East 
• How AI is transforming proactive cybersecurity measures 
• Best practices for password management and multi-factor authentication 
• The role of AI in optimizing and simplifying policy management in organizations 

 New episodes air every 2 weeks -- Don't miss out on expert insights that will help fortify your defenses against emerging cyber threats. 

#Cybersecurity #AI #TechNews #ITSecurity #Malware 

Hosted by Eric Brown and Nick Mellem from IT Audit Labs, we sit down with Melisa Stivaletti, Chair at Epic and OSINT Director at GuideHouse. Melisa shares her remarkable journey from working at the Department of Commerce to the Department of the Army. We dive deep into the world of OSINT, discussing the nuances of open source research, tradecraft, and the transformative power of AI. Plus, Melisa shares valuable advice for those looking to break into the OSINT field and highlights the importance of lifelong learning. 

In this episode, we cover:  

▪ The difference between open source research and OSINT  
▪ The tradecraft involved in OSINT, including the use of sock puppets  
▪ How AI is transforming OSINT and the guardrails needed to manage its use  
▪ The critical role of data governance and compliance in OSINT  
▪ The future of OSINT and the importance of lifelong learning in this field  
▪ Personal stories and advice for those looking to enter the OSINT community 

Don’t miss out on Melisa's unique insights and experiences. Listen now and elevate your understanding of cybersecurity and OSINT. 

#Cybersecurity #OSINT #InformationSecurity #ITSecurity #SecurityInnovation 

In this news episode, we tackle some of the most pressing cybersecurity issues of the month. Ever wondered how a ransomware attack could shut down a public library? We dive into the recent attack on the Seattle Public Library and explore a massive $37 million phishing scam that hit Coinbase Pro users. We also unravel the sophisticated gift card fraud by the Moroccan cybercrime group Storm 0539. 

But that's not all. We discuss the potential threat of DNS bomb DDoS attacks and the intriguing use of Flipper Zero devices to hijack event wristbands. And for those interested in the intersection of law and cybersecurity, we examine the implications of the Supreme Court's recent ruling on cybersecurity regulation. 

Amidst all the tech talk, we find time to ponder the existence of UFOs and share some personal stories about unexplained phenomena. 

In this episode we’ll cover: 

• Seattle Public Library ransomware attack and its impact 
• $37 million phishing scam targeting Coinbase Pro users 
• Moroccan cybercrime group Storm 0539's gift card fraud 
• Potential threat of DNS bomb DDoS attacks 
• Flipper Zero devices hijacking event wristbands 
• Supreme Court's ruling on cybersecurity regulation 

Stay ahead of cyber threats and AI innovations by watching the full episode. Don’t forget to like, subscribe, and share your thoughts in the comments! 

#Cybersecurity #Ransomware #AI #TechNews #Phishing #ITSecurity #CyberLaw 

Hosts Eric Brown and Nick Mellum, joined by Cameron Birkeland, explore the tool's functionalities and features, offering practical insights and real-world applications. Discover how the HAC5 Pineapple can enhance your cybersecurity measures, with discussions on model comparisons, security implications, and best practices. 

In this episode we’ll cover 

• What is the HAC5 Pineapple? 
  Comparing the Tetra and Mark 7 models 
• Real-world uses and case studies for the Pineapple 
• Key security implications and best practices 
• Cool features of the Pineapple and a live demo 
• How to generate detailed reports with the Pineapple 

Join us for an engaging discussion packed with valuable information for cybersecurity professionals and enthusiasts alike. Don’t miss out on our latest insights and tips! 

#Cybersecurity #HAC5Pineapple #PenTesting #EthicalHacking #WiFiSecurity #CyberThreats  

In this live episode, we cover the recent ransomware attack on the Seattle Public Library, the $37 million theft from Coinbase Pro users, and the sophisticated gift card fraud by the Moroccan cybercrime group, Storm 0539. We share our insights on how these attacks happened, their impacts, and practical advice on how to protect yourself and your organization. We also explore a theoretical DNS bomb DDoS attack and the intriguing use of Flipper Zero devices to control wristbands at large events. 

• Seattle Public Library ransomware attack and its impact 
• $37 million phishing scam targeting Coinbase Pro users 
• Moroccan cybercrime group Storm 0539's gift card fraud 
• Potential threat of DNS bomb DDoS attack 
• Flipper Zero devices hijacking event wristbands 

Thanks for tuning in! Don't forget to like, subscribe, and share your thoughts in the comments. 

#CybersecurityNews #Cybersecurity #Ransomware #Phishing #ITSecurity #TechNews  

In this episode, special guest Bernie Leung from Autodesk shares his expert insights on how quantum computing is reshaping the cybersecurity landscape. Discover the challenges and breakthroughs in encryption practices as Bernie breaks down complex concepts like the Shor Algorithm and discusses practical steps for adapting to this new era of cybersecurity.    

In this episode, we dive into: 

• The essentials of quantum computing and how it could revolutionize encryption. 
• Current encryption vulnerabilities that quantum computing could exploit. 
• An introduction to post-quantum cryptography and the new standards on the horizon. 
• Practical uses of quantum computing in cybersecurity today and what we might see in the future. 
• How governments and businesses are preparing for quantum threats, including updates in regulations and security protocols. 

This discussion is not just theoretical; it's a guide to understanding and preparing for the quantum leap in data protection. 

#QuantumComputing #FutureOfCybersecurity #Cybersecurity #InfoSec #PostQuantumCryptography 

Join us as we delve into the world of IoT cybersecurity with Eric Johansen from Phosphorus. Eric discusses the challenges and solutions for managing IoT devices at scale, the critical importance of asset inventory, and the significant risks posed by outdated technology. This episode is perfect for IT pros, cybersecurity experts, and business leaders looking to enhance their cybersecurity knowledge. 

In this episode, we'll cover: 

• Managing IoT devices at scale: Best practices and solutions 
• The importance of asset inventory in IoT security 
• Identifying and mitigating risks from outdated technology 
• Real-world examples of IoT vulnerabilities 
• Innovative solutions from Phosphorus for IoT security 

Eric Johansen's insights provide valuable knowledge for anyone involved in managing and securing connected devices. Don't miss this episode for practical advice and expert perspectives on tackling IoT security challenges. 

#IoT #Cybersecurity #TechTrends #OTSecurity #SmartDevices #IoTSecurity #TechInnovation 

We’ll explore the role of tabletop exercises in shoring up a company's security and dive into the fascinating world of open-source intelligence. We’ll uncover what it takes to protect against cyber threats, why pen testing matters, and how social engineering tests can be a rollercoaster of nerves. Brian also shares his journey from being a Christmas caroler in "Jingle All the Way" to being a cybersecurity consultant and podcast host. This episode is packed with insights, laughs, and even some hairless cats. 

• Brian Johnson's journey from Christmas caroler in "Jingle All the Way" to cybersecurity consultant and podcast host 
• The role of tabletop exercises in improving a company's security posture 
• Pen testing insights: why it matters and how it's done 
• Social engineering stories: the highs and lows of testing human vulnerabilities 
• Open-source intelligence: what it is and why it's important for cybersecurity 
• Unexpected surprises: including stories about skydiving and hairless cats 

If you're interested in cybersecurity and want to hear some great stories from the industry, this episode has you covered. Enjoy the laughs and insights, and don't forget to like, share, and subscribe for more content from The Audit. 

#Cybersecurity #PenTesting #SocialEngineering #Skydiving 

John shares his insights on integrating technology to enhance cybersecurity and operational efficiency within the construction sector. The discussion covers a range of topics from combatting sophisticated phishing attacks to the strategic use of AI tools like ChatGPT and Copilot. Delve into the challenges of AI-generated content, governance, intellectual property concerns, and the transformative impact of AI on traditional business models. 

In this episode we cover: 

• Best practices for AI in non-tech sectors 
• Cybersecurity policies for AI 
• Mitigating cyber security risks in construction 
• AI's role in the construction industry 
• Ethical challenges of AI-generated content 
• Future trends in AI governance 
• AI's implications for industry standards 

Stay tuned for more insights into the future of IT technology and its transformative effects on the business landscape. 

#AIcybersecurity #Cybersecurity #Infosec #ConstructionTech #AIPolicies 

In this episode, our team of cybersecurity experts, Eric Brown and Nick Mellum, dissect the Biden administration's recent warnings about cyber-attacks on U.S. water utilities and delve into the newly announced IoT device security specifications by The Cloud Security Alliance (CSA). From nation-state actors targeting essential infrastructure to the complexities of securing IoT devices in your home, this discussion offers invaluable insights into safeguarding our digital and physical worlds. 

What You'll Learn: 

• The significance of recent cybersecurity warnings regarding the water sector. 
• The importance of a unified cybersecurity standard for IoT devices. 
• Strategies for securing IoT devices within corporate and home networks. 
• The role of cybersecurity in ensuring the safety and reliability of essential public utilities. 

We’ll cover: 
• The rise of generative AI in crafting phishing emails that bypass traditional detection methods. 

• Real-world stories of phishing attacks, from impersonating school communications to exploiting professional relationships. 

• The psychological tactics used by attackers to exploit human nature and gain access to sensitive information. 

• Innovative defense strategies and tools that organizations can employ to protect themselves against phishing attempts. 

• Practical advice for individuals on recognizing phishing attempts and safeguarding personal information. 

This episode arms you with the knowledge of what to look for in phishing emails, emphasizing the importance of vigilance and education in the digital age. 

We'll explore: 

• The basics of 3D printing technology and its cybersecurity implications. 

• Protecting intellectual property in the realm of 3D printing. 

• The vulnerabilities of 3D printers to hacking and how to safeguard them. 

• Strategies for securing 3D printing operations against cyber threats. 

• Real-world examples of cybersecurity breaches in 3D printing. 

Whether you're a cybersecurity professional, a 3D printing enthusiast, or someone interested in the intersection of technology and security, this episode offers valuable insights into protecting your 3D printing projects.   

As the cybersecurity landscape evolves, Virtual Private Networks (VPNs) are increasingly common among cybersecurity professionals and enthusiasts alike... but how secure are they? In this episode, we take you through the mechanics of VPNs, their role in safeguarding your data, and the vulnerabilities that can expose users to risk.  

We'll cover: 

•  What are VPNs and how do they work? 

•  How to choose the right VPN provider: Considerations and pitfalls. 

•  The difference between corporate and personal VPN use and their unique challenges. 

•  How to mitigate risks associated with VPN usage. 

•  The recent Ivanti VPN breach 

If you care about your digital privacy, curious about how VPNs fit into your life, or pondering the real benefits and risks of using VPN services, then this episode is for you. 

Clifton Robinson, a former Army logistician and healthcare market analyst, joins our team to discuss his journey to becoming a cybersecurity professional.  

Topics covered: 

• How military service helps individuals transition into cybersecurity 
• Why employers appreciate military service in cybersecurity candidates 
• Why are veterans drawn to the field of cybersecurity? 
• How joining the military changed Clifton’s life 
• The importance of mentorship and networking for veterans 

If you're a veteran considering a career in cybersecurity or seeking a fresh perspective on the cybersecurity industry, don't miss the latest episode of The Audit! 

The conversation includes: 

- Why and how are most of us viewed as a “product”?  
- Practical email security tips and best practices 
- How to avoid phishing scams and other social engineering strategies 
- Mobile device and location tracking insights 
- Organizational security policy tips  
- Why use a password manager 

Topics Covered: 

• How to navigate a ransomware attack 
• Data breach response methods 
• Cyber insurance challenges 
• AI, cybersecurity, and the legal considerations 
• Social engineering audits 

Gain valuable insights into current trends and practical approaches to enhance your organization's security posture. Be sure to subscribe today! 

We’ll cover: 

• How to get a job in cybersecurity 
• Navigating the ethical challenges of AI in Cybersecurity 
• Work-life balance in cybersecurity jobs 
• Perspectives on success for cybersecurity leadership 
• Emerging infosec technologies 
• Mental health for infosec professionals  

We navigate the shifting terrain of cybersecurity talent acquisition, stressing the need for aptitude and ongoing education. Leah delves into AI's role and ethical dilemmas in cybersecurity, provides tips for balancing work and life in remote contexts, and examines upcoming cybersecurity technologies. The discussion also highlights veterans' vital roles in cybersecurity, underscores the importance of mental health in stressful settings, and gives a sneak peek into future 'Elevate Exchange' podcast episodes on topics like AI and quantum computing. 

The brainchild of a successful Kickstarter campaign in 2020, the Flipper Zero might look cute with its dolphin avatar, but it's a potent tool capable of manipulating control systems like RFID and NFC tags, radio remotes, and digital access keys. 

What would you do if your garage door opener could be hacked? Cameron walks us through how this is possible with his own garage door opener. 

Don’t forget, if you prefer video, check out every episode of The Audit on our YouTube channel. 

Andre also recounts his time managing a digital forensics laboratory, shedding light on the intricate balance between risk and technology in the digital landscape. He shares stories about investigating arson cases, using phone evidence to reveal the diversity of online predators. His anecdotes provide a sobering perspective on the challenges and rewards of a career in cyber forensics.  
 
Finally, Andre breaks down the reality of the cyber security field beyond what you see in TV and film. His experiences range from putting together reports for the courtroom, dealing with data breaches and ransomware, to handling HR investigations. The conversation takes a darker tone as we address the chilling reality of online predators while Andre provides valuable advice on ways to keep children safe online.

#cybersecurity #CISO #chiefinformationsecurityofficer #careeradvice #organizational #leadership #communication #security #influence #metropolitancouncil #minnesotajudicial #pointofrisk 

#Breaches #ThreatActors #CyberSecurity #TheAudit 

 digital future.#cybersecurity #theaudit #itauditlabs 

Special Thank you to the DC30 Vishing Competition Black Badge Winners 

Team Spilt Beans @_jacoff, @bngrsec, @_seahop 

Shout outs to the entire Defcon community with special mentions 

@SEC_Defcon@twitter, @JC_SoCal, @_snoww, @_corge