Your Employee Got Hacked. Now What? | Ep 198

The Basics Still Win: What GreyNoise's PaperCut Report Shows | Ep 197

One Hacker, 42 Targets: Inside Anthropic's AI Threat Report | Ep 196

Every IT Team Has a Joe | Ep 195

Service Accounts: The Shortest Path to Domain Admin | Ep 194

Your IT Job Doubled. Nobody Told Your Boss. | Ep 193

Subtractive Security Stop Adding Tools and Start Deleting Attack Paths | Ep 192

The CrowdStrike Settings That Actually Stop Us | Ep 191

Episode 190 | OWASP Top 10 Part 4: Cryptographic Failures

OWASP Top 10 Part 3: Software Supply Chain Failures — From SolarWinds to Vibe Coding | Episode 189

Episode 188: Guaranteed Way to Catch Threat Actors

Episode 187: Avoid this cyber leadership trap

Episode 186: Real Life Active Directory Attack Paths

Ep. 185 | A Toddler with a Bazooka: The Real Risk of AI Agents

Episode 184 | Active Directory Isn't Dead. It's Just Undefended.

Episode 183 | OWASP Top 10 Part 2: Security Misconfigurations That Get You Hacked

Episode 182: Patching Crisis — Vulns Now #1 Attack Vector (2026 Verizon DBIR)

Episode 181: AI Zero Days (Google Threat Intelligence Report)

Episode 180: Cybersecurity Echo Chambers — How to Think Critically in a Hype-Driven Industry

Episode 179: OWASP Top 10 Part 1 — Broken Access Control, IDOR, and CORS Explained

Episode 178: Internal Security Controls That Actually Frustrate Attackers

Episode 177: Claude Mythos — What It Does, What It Doesn't, and What Your Organization Should Do Now

Episode 176: Cybersecurity Advice that Sounds Smart but Fails in Practice

Episode 175: NetTools - The Free Active Directory Swiss Army Knife for IT Admins & Pen Testers

Episode 174: Web Application Penetration Testing Tools & Techniques with Jordan

Episode 173: How to Find Insecure Active Directory Permissions with ADeleg

[Replay] Episode 172: The biggest security blind spots in Midsized companies

Episode 171: The future of pentesting with AI

Episode 170: The Evasive Adversary

Episode 169: Malicious Browser Extensions

Episode 168: Do you need a web app pen test?

Episode 167: TLS and SSL vulnerabilities - do they matter?

Episode 166: Why Your Pentest Didn’t Make You Safer

Episode 165: What to expect on your API Pentest

Episode 164: Offensive Security in the Age of AI - What Has Changed

Episode 163: The Vendor Security Trap - Are You Losing Control?

Episode 162 - Before the Breach: How Attackers Profile Your Organization

Episode 161: The Evolution of Pentesting Going Into 2026

Episode 160: Should You Alert Your SOC Before a Pentest?

[Replay] Episode 159: How to Break Into Cybersecurity in 2026

Episode 158: How to get kicked out of AWS by the FBI

Episode 157: AppSec Findings in 2025

Episode 156: Post-Exploitation Tactics That Still Work in 2025

Episode 155: How We Use AI Offensively

Episode 154: Pentesting on a Budget for IT Admins

Episode 153: How to Prove Your Security Works Before Attackers Do

Episode 152: What is Offensive Security

Episode 151: Tool Time PingCastle For Defenders

Episode 150: How to Use Pentest Findings to Justify Your Next Security Spend

Episode 149: Building a Security Stack That Works - A Practitioner’s Perspective

Securing Windows: Common Misconfigurations That Give Attackers The Advantage

Episode 147: When to Accept the Risk

Episode 146: What Are the Security Implications of AI?

Deceptively Defensive: What Kevin Mcallister Can Teach Us About Cyber Defense

Episode 145: What To Do Minute 1 When Incident Response Arrives

Episode 144: How Cyber Threat Actors Are Using AI

Episode 143: Stop Wasting Money on Pentests - Do This First

Episode 142: How Active Directory Certificates Become Active Threats

Episode 141: Are You Making These Windows Security Mistakes?

Episode 140: Financial Services Cybersecurity Challenges & How to Address Them - Part 2