Breaking Badness: Recent Episodes
DomainTools
Where timely and relevant security news meets ninja jokes and sit down comedy. Our goal is to keep network defenders apprised of pertinent news and trends in under thirty minutes.
In this episode, DomainTools' Daniel Schwalbe is joined by Renee Burton (Infoblox), Raymond Dijkxhoorn (Surbl), and Peter Lowe (FIRST.org) to unpack the inaugural DomainTools Intelligence Report and what it reveals about DNS-based threats in 2024. The panel digs into evolving detection challenges, the pitfalls of domain scoring, the growing complexity of threat actor behavior, and why industry collaboration continues to lag.They explore topics like aging domains, TLD abuse, data sharing barriers, and the creative lengths bad actors go to avoid detection. Whether you're building threat intel tools or blocking domains at the edge, this conversation is a must-listen for anyone in DNS-based security.
In this episode of Breaking Badness, Kali Fencl sits down with Audra Streetman, a former journalist turned threat intelligence analyst at Splunk. Audra shares her journey from local newsrooms to the frontlines of cybersecurity, detailing how her storytelling skills translate directly into threat research.Audra walks us through how ransomware attacks like JBS Foods and the Excellion breach sparked her pivot into cyber. She dives deep into persistent threat tactics, such as file transfer appliance exploitation, the growing risk of cloud infrastructure attacks, and North Korean IT worker scams.If you're a cybersecurity professional, a curious career switcher, or someone looking to stay ahead of threat actor trends, this episode delivers real insight with practical relevance.
Exposing Your Attack Surface on Purpose: API Chaos, AI Risk, and Quantum Reality by DomainTools
In this RSA Conference 2025 special episode, we dive into the evolving world of cyberattribution, AI-powered threat tactics, and real-world incident response in AWS and GCPenvironments.Our guests include:● Tal Darsan and Etay Maor from Cato Networks, discussing stealthy attacker techniques,AI-powered evasion, and lessons from ransomware groups like Medusa, Play, andHunters International.● Yonaten Khen from Hunters, who walks us through how his team discovered a privilegeescalation vulnerability in Google Workspace and what it reveals about modern cloudattacks.
In this RSA Conference 2025 special episode, we explore two critical frontiers shaping thefuture of cybersecurity.First, Jon DiMaggio (Author of The Ransomware Diaries, Analyst1) breaks down the hiddensupply chains behind ransomware gangs, including the economics of affiliate betrayal and thechallenge of accurate attribution. He walks us through his methodology for identifyingransomware rebrands like BlackCat and RansomHub using evidence-based frameworksdesigned to eliminate human bias.Then we’re joined by Matt Radolec (VP of Incident Response at Varonis), who brings a freshperspective on talent development in cybersecurity. Drawing from his keynote "From Gamer toLeader", Matt argues that gamers possess untapped potential as cybersecurity professionalsand it’s time to design leadership pipelines like quest lines.From ransomware negotiations on underground forums to using AI-enhanced playbooks andtransforming threat response teams into RPG-style guilds, this episode blends technical insightwith cultural reflection.
Welcome to a special RSAC 2025 episode of the Breaking Badness Cybersecurity Podcast!Today, we delve into the critical role of domains in modern cyber attacks. From sophisticated nation-state operations to AI-powered phishing kits and malicious browser extensions, domains are the foundational infrastructure for threat actors. Host Kali Fencl is joined by four leading cybersecurity experts Joe Slowik, Robert Duncan, John Fokker and Vivek Ramachandran tobreak down how domains are weaponized and what organizations can do to defend themselves on this ever-evolving frontline
In this episode of Breaking Badness, we sit down with Raji Vannianathan, a cybersecurity leader at Microsoft driving the charge on AI security and safety. Raji shares her experience leading the team responsible for managing the end-to-end lifecycle of AI vulnerability disclosures, building proactive safety frameworks, and cultivating a global community of AI security researchers.From developing Microsoft's AI Bug Bar to launching the "Guardians of AI Safety" Discordcommunity, she brings both vision and practical strategies to a rapidly evolving field.We discuss the shifting threat landscape as threat actors begin to leverage generative AI, thecritical need for shared language and cross-functional collaboration, and how Microsoft isthinking about trust, transparency, and incident response in the AI era. If you’re navigating thechallenges of AI risk, vulnerability coordination, or ethical deployment, this is an essential listen.
In this episode of Breaking Badness, Kali Fencl sits down with Mick Baccio, Global SecurityAdvisor at Splunk and former CISO for Pete Buttigieg’s 2020 presidential campaign. Mickshares his journey from aspiring Navy nuclear engineer to leading security in some of thehighest-stakes environments, including the White House.They explore how threat intelligence, storytelling, and mentorship shape the future ofcybersecurity. From his early days in government to his work on the Splunk SURGe team, Mickopens up about what it takes to build secure systems, stronger teams, and more empatheticleadership in cybersecurity.
In this episode of Breaking Badness, we sit down with John Donovan of ZEDEDA to unpack thelighter and more profound sides of cybersecurity’s biggest gatherings. From RSA’s unexpectedbaby goats and vendor booth antics to BSides San Francisco’s community-driven keynotestage, John shares personal stories, industry insights, and valuable advice on how newcomersand veterans alike can navigate events like RSA, BSides, and DEF CON. You’ll hear how he"hacked" his way onto the main stage, what it means to wear a “No Purchasing Authority” pin,and why protecting your mom from scams might be more urgent than defending your enterprise.
In this episode of Breaking Badness, the crew investigates two escalating threats in the cybercrime ecosystem: the cleverly named phishing-as-a-service platform Morphing Meerkat, and the bulletproof hosting provider Proton66, a favorite among amateur cybercriminals.First, they dig into how Morphing Meerkat uses DNS-over-HTTPS (DoH) and clever phishing kits to evade detection. Then, they shift focus to Proton66, a Russian-based bulletproof host that shelters a new generation of low-skill attackers, including a threat actor known as "Coquettte" with ties to the Horrid Hacking group.
In this powerful continuation of our DFIR series, cybersecurity experts Daniel Schwalbe, DavidBianco, Lesley Carhart, and Sarah Sabotka dissect the heart of effective incident response,containment, eradication, recovery, and lessons learned. Packed with firsthand war stories,sharp tactical advice, and honest debates, this episode is a must-listen for anyone building orrefining their digital forensics and incident response capabilities. Tune in to learn why planningmatters, what to do (and not do) during a breach, and how to make the adversary's job harder,one containment plan at a time.
In Part 1 of this special two-part panel, the Breaking Badness podcast gathers leadingcybersecurity experts to explore the foundations of DFIR - Digital Forensics and IncidentResponse. Featuring Daniel Schwalbe (DomainTools), Lesley Carhart (Dragos), David Bianco(Splunk), and Sarah Sabotka (Proofpoint), the panel dives into what makes an effective incidentresponse program, why preparation is often overlooked, and how to bring technical and humanelements together during high-stakes security events.
In this episode of Breaking Badness, host Kali Fencl is joined by DomainTools' Daniel Schwabeand disinformation expert Scot Terban to uncover how modern Russian disinformationcampaigns are using domain registrars, homoglyph attacks, and generative AI to mimiclegitimate news outlets and manipulate public perception. From the eerie sophistication ofDoppelganger operations to the exploitation of domain infrastructure, this episode sheds light on how truth is being weaponized in the digital era.We also explore how AI is accelerating the speed and scale of these attacks, and the limitedlevers defenders have to push back.
In this special DNS Masterclass episode of Breaking Badness, hosts Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce take a deep dive into the Domain Name System often dubbed the backbone and battleground of the internet. From its humble beginnings with host files to its critical role in modern security, the episode unpacks DNS’s evolution, vulnerabilities, and impact on InfoSec.
In this episode of Breaking Badness, host Kali Fencl welcomes Wes Young of CSIRT Gadgets and Daniel Schwalbe, CISO and head of investigations at DomainTools, dive into a recent DomainTools Investigations (DTI) analysis involving ValleyRAT and Silver Fox, and how new tools are enabling faster, more accessible analysis for junior and seasoned analysts alike. Whether you're a threat intel veteran or an aspiring analyst, this episode is packed with hard-earned lessons, technical insights, and future-forward thinking.They also unpack the evolution of threat intelligence from early higher-ed days of wiki-scraped snort rules to today’s graph-powered AI analysis. Wes shares the origin story behind his platform AlphaHunt, how it's being used to automate and enhance threat detection, and why community sharing remains essential even in an era of advanced tooling.
In this episode of Breaking Badness, we dive into two major cybersecurity stories: the exploitation of a VPN vulnerability by Chinese APT 41 and the newly discovered “Wall Bleed” flaw in the Great Firewall of China.APT 41 has been using a critical VPN vulnerability to infiltrate operational technology (OT) organizations, targeting industries like aerospace and defense. Meanwhile, researchers have uncovered a flaw in China's DNS injection system, which inadvertently leaks internal data—an ironic twist for a government known for its strict internet censorship.Join us as we break down these exploits, their impact on cybersecurity, and what they reveal about modern cyber espionage. We also discuss best practices for securing VPNs, firewall vulnerabilities, and the ethical implications of studying censorship technologies.
Episode 202 of Breaking Badness takes a deep dive into two of the biggest cybersecurity stories of the year (so far):● Black Basta’s Leaked Chats – A major data leak has exposed internal conversations from this notorious ransomware gang, revealing their internal struggles, ransom negotiations, and even workplace drama.● Salt Typhoon’s Cyber Espionage – A sophisticated Chinese threat group has been caught infiltrating major U.S. telecommunications providers, raising serious concerns about national security.
In this episode of Breaking Badness, we sit down with Bruce and Heidi Potter, two of the masterminds behind ShmooCon, the legendary cybersecurity conference that ran for 20 years. They take us behind the scenes, from its hilarious bar-napkin origins to how they built a tight-knit hacker community that thrived for two decades.
In this episode of Breaking Badness, we dive into two major cybersecurity concerns: the risks of abandoned S3 buckets and a wave of phishing attacks impersonating DeepSeek. Watchtowr Labs uncovers how forgotten AWS storage can be hijacked for malicious purposes, potentially compromising military, government, and enterprise systems. Meanwhile, attackers exploit DeepSeek’s rising popularity to create lookalike sites, tricking unsuspecting users into downloading malware or exposing credentials. Join hosts Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce as they break down these findings with humor, deep insights, and even a few pop culture references. Plus, we rate the severity of these threats on our infamous Hoodie Scale and wrap up with Gold, Guidance & Grievances.
Welcome to the 200th episode of Breaking Badness! 🎉 In this special milestone edition, we take a nostalgic stroll down memory lane, discuss the evolution of cybersecurity, and explore how the podcast—and the security landscape—has changed since 2019.In this special milestone episode, hosts Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce are joined by longtime friend of the show, Allan Liska, to reflect on how both the podcast and cybersecurity world have evolved over the past six years.Let’s take a stroll down memory lane and explore how Breaking Badness went from an experimental idea to a trusted, pun-filled source of cybersecurity insights.
In this episode of Breaking Badness, we welcome back Tanya Janca, aka SheHacksPurple, to discuss her latest book, Alice and Bob Learn Secure Coding. Tanya dives deep into the fundamental principles of secure software development, the psychology behind developer incentives, and the often-overlooked importance of zero trust security.
In this episode of Breaking Badness, we analyze two fascinating cybersecurity incidents that expose both corporate misconfigurations and hacker missteps. Security researcher Philippe Caturegli discovered a typo in MasterCard’s DNS records, which left the company open to traffic hijacking and data exposure. This long-overlooked flaw, dating back years, could have been exploited by attackers to redirect users, intercept data, and manipulate services. The Script Kiddie Trap: In a turn of events that underscores the “no honor among thieves” trope, a threat actor baited low-skilled hackers (script kiddies) with a fake malware builder. Instead of gaining hacking capabilities, they unwittingly installed a backdoor on their own machines, allowing the original attacker to steal their data and take control of their systems.
In this episode of Breaking Badness, Tricia Howard of Akamai joins Kali Fencl and Ian Campbell to dive deep into the intersection of gaming culture, mental health, and cybersecurity. Tricia shares her journey from theater arts to cybersecurity research, her love for gaming, and her experiences tackling emotional toxicity in digital spaces. The episode covers the concept of "mind patches," the role of community in digital wellness, and how gaming and workspaces mirror each other in their challenges with mental health and collaboration. Tune in to hear her thoughts on reducing stigma, creating safe digital spaces, and embracing vulnerability for a healthier cybersecurity community.
In this episode of Breaking Badness, we dive into the cybersecurity headlines making waves in 2025. We discuss the U.S. Treasury breach, allegedly orchestrated by Chinese hackers using third-party access. Learn about how lingering chat histories can expose sensitive data and the importance of digital spring cleaning.
In this episode of Breaking Badness, we sit down with Tanya Janca, aka SheHacksPurple, a cybersecurity educator, and author of the best-selling book Alice and Bob Learn Application Security. Tanya shares her journey from software developer to AppSec expert, dives into the unique challenges of teaching secure coding, and discusses the impact of cybersecurity breaches on industries and individuals. From her creative teaching methods to her advocacy for change in university curriculums, Tanya offers insights that resonate with developers, educators, and security professionals alike. Discover how Tanya is paving the way for accessible AppSec education, the role of AI in secure coding, and her mission to teach security as a fundamental skill for every developer.
Welcome to this special episode of the Breaking Badness Cybersecurity Podcast! We’re turning the spotlight on the books that have shaped the world of cybersecurity and inspired professionals in the field. As part of our ongoing book club series, this episode is a journey into storytelling, research, and the unique perspectives that make cybersecurity literature so compelling. From Ransomware Diaries to the geopolitics of cyber warfare, this discussion is packed with insights and actionable takeaways for anyone working in Infosec.
In this special episode of Breaking Badness, we wrap up 2024 with a countdown of the top episodes, puns, and cybersecurity moments that defined the year. From the hoodiest hacks to the goodiest wins, Kali, Tim, and Taylor reflect on critical insights, industry-changing events, and listener favorites. Tune in for discussions about evolving OT security, DNS mishaps, ransomware trends, and expert predictions for 2025. Featuring special moments like our Hacker Summer Camp interviews and top cybersecurity guests, this episode is both insightful and entertaining.
In this special 2025 Predictions episode of Breaking Badness, host Kali Fencl joins cybersecurity experts Sean McNee, Tim Helming, and Daniel Schwalbe to discuss the future of cyber threats and defense. From ransomware evolution and AI-powered attacks to quantum computing and “synthetic identity fraud,” the group compares their insights with predictions generated by leading AI platforms like ChatGPT, Claude, Copilot, and Meta AI. Will 2025 be the year of AI-compromised models or industrial control system hacks? Are biometric security risks on the rise, and what’s next for ransomware gangs? Tune in for insights, banter, and some predictions you’ll want to track!
In this episode of Breaking Badness, we dive into two fascinating stories shaping the cybersecurity landscape. First, we unpack the case of Gabriel Koo and his surprising acquisition of the domain us-east-1.com, a domain closely tied to AWS’s naming conventions. What insights can this seemingly simple purchase reveal about DNS misconfigurations and AWS security practices? Next, we shift focus to DARPA's ambitious new project aimed at revolutionizing cybersecurity by breaking software into smaller, more secure compartments.With expert analysis and intriguing insights, we explore the intersection of DNS, innovation, and the future of cybersecurity.
In this episode of Breaking Badness, we delve into the cybersecurity trends shaping the holiday season. We unpack the 60% surge in scam domain registrations targeting holiday shoppers, discuss the tactics of TAG-112, a Chinese state-sponsored threat group, and analyze their use of compromised websites to deliver Cobalt Strike malware. Plus, we share actionable insights on mitigating these threats. Tune in for expert analysis, lighthearted banter, and a fewcybersecurity holiday tips to keep you safe this season
In this episode of Breaking Badness, we dive into the critical challenges and innovations in healthcare cybersecurity with Ken Zalevsky, CEO of Vigilant Ops. From the vulnerabilities in medical devices to the revolutionary role of Software Bill of Materials (SBOMs), Ken shares his two decades of expertise in safeguarding patient safety and hospital systems against emerging threats. Tune in to learn about shifting cybersecurity left, the complexities of interconnected healthcare systems, and actionable strategies to combat ransomware and legacy vulnerabilities.
In this episode of Breaking Badness, we explore two fascinating cybersecurity stories. First, we delve into the unusual case of an ex-Disney employee who hacked menu systems, creating chaos in the happiest place on Earth. Next, we discuss Sophos' five-year-long battle with a determined group of attackers targeting their firewalls. Tune in as we break down the insider threat at Disney, the lessons learned from Sophos' transparency, and what it all means for the future of cybersecurity. Plus, don't miss our signature Gold, Guidance, and Grievances segment for unique insights and takeaways.
In this episode of the Breaking Badness Cybersecurity Podcast, Jason Haddix dives into his unique journey from red teaming and pentesting to leading security teams as a CISO in high-profile organizations, including a top gaming company. Jason unpacks the distinct challenges of securing a gaming company, where risks come not only from state actors but also from clout-seeking young hackers. He shares valuable insights on building scalable security programs, secrets management, and the importance of radical transparency in corporate security cultures. Tune in to hear why, in Jason's words, "gaming saved me from a misspent youth," and learn about his latest ventures into offensive security training and AI-driven security solutions.
In this week’s episode of Breaking Badness, we dive deep into two major cybersecurity stories that are shaping today’s landscape. First, we explore the alarming capabilities of Locate X, a powerful smartphone tracking tool used by U.S. law enforcement without a warrant. How does it work, what are the privacy implications, and what can individuals do to protect their data? We then shift gears to APT29’s latest campaign as discovered by Amazon, uncovering how this well-known threat actor employed advanced tactics to impersonate AWS infrastructure andtarget victims. Join Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce as they dissect these stories and share their expert insights. Stick around for the Grim Reaper’s hoodie ratings and our signature segment, Gold, Guidance, and Grievances.
Join Kali Fencl as she dives deep into a conversation with cybersecurity veteran The Gibson. With 25+ years in InfoSec, The Gibson shares his journey from coding as a child to shaping threat intelligence and privacy-first technology today. In this episode, they discuss hacker ethics, the influential hacker groups Loft and Cult of the Dead Cow, the evolution of hacktivism, and the groundbreaking work on privacy-focused projects like Veilid. Tune in for insights on hacking culture, cybersecurity ethics, and the balance between creativity and responsibility in the digital age.
In this episode of Breaking Badness, Kali, Tim, and Taylor discuss two major stories shaking up the cybersecurity world. First, a researcher has discovered how attackers are exploiting Whois data to grant themselves unprecedented superpowers in the digital space. Second, the Internet Archive suffers a breach possibly exposing 31 million accounts, raising questions about the security of trusted online platforms. Join the team as they break down these complex stories, share lessons learned, and explore how organizations can better protect themselves in similar situations.
In this episode of Breaking Badness, we dive deep into the evolving world of Endpoint Detection and Response (EDR) and its critical role in modern cybersecurity. With threats advancing and the sheer volume of endpoint data skyrocketing, AI and deep learning are becoming gamechangers in threat detection and prevention. Join us as Carl Froggett, CIO at Deep Instinct, and Melissa Bischoping, Senior Director of Security at Tanium, discuss the past, present, and future of EDR, the impact of AI on cybersecurity, and how SOC teams are evolving to stay ahead of bad actors. Learn about how generative AI is influencing attacks, the challenge of SOC burnout, and the innovations shaping the future of endpoint security.
In this episode of Breaking Badness, we dive deep into the critical world of API security and governance, uncovering key strategies to keep data safe in today’s threat landscape. Special guests Matthias Friedlingsdorf (iVerify), Tristan Kalos (ESCAPE), and Aqsa Taylor (Gutsy) join the conversation to share their experiences with detecting advanced threats like Pegasus, theimportance of API governance, and the powerful role bug bounty programs play in identifying critical vulnerabilities. Whether you're an API developer, cybersecurity professional, or someone navigating the risks of mobile device exploits, this episode will arm you with the knowledge to better protect your digital assets.
In this episode of Breaking Badness, we dive into the rapidly evolving world of cybersecurity with three industry leaders: Raymond Dijkxhoorn, CEO of SURBL; Nabil Hannan, Field CISO atNetSPI; and Jason Mar-Tang, Field CISO at Pentera. They explore the critical role of domain reputation in combating phishing and spam, how AI is reshaping both offensive and defensivecybersecurity strategies, and the growing threat of ransomware in today’s digital landscape.With insights from BlackHat and beyond, we discuss everything from the future of phishing defense to the challenges AI poses in securing sensitive data, as well as how ransomware continues to evolve. Tune in to gain actionable insights on staying ahead of cyber threats and protecting your digital domain.
In this special Black Hat edition of Breaking Badness, Part 2 of a 5 Part Series, we dive deep into the world of vulnerability management, cyber resilience, and supply chain security. Our expert guests—Jacob Graves, Director of Solution Architecture at Gutsy, Theresa Lanowitz, Chief Evangelist at Level Blue, Pukar Hamal, CEO at SecurityPal, and Vinay Anand, Chief Product Officer at NetSPI discuss the increasing complexity of managing vulnerabilities, the critical importance of reducing mean time to detect (MTTD) and mean time to repair (MTTR),and the emerging strategies for securing the supply chain against growing risks. Learn how vulnerability management isn’t just a technical challenge but an organizational one, and explore the nuanced roles of the CIO, CTO, and CISO in maintaining a resilient cyber infrastructure.
In this special Black Hat edition of the Breaking Badness Cybersecurity Podcast, Part 1 of a 5 Part Series, we dive deepinto how artificial intelligence is transforming the cybersecurity landscape. Our guests—Mark Wojtasiak (VP of Product at Vectra AI), Carl Froggett (CIO at Deep Instinct), Dan Fernandez(Staff Product Manager at Chainguard), and Marcus Ludwig (CEO of Ticura)—join us to explore the evolution of Endpoint Detection and Response (EDR), the growing threats posed by generative AI, and the complexities of securing AI in supply chains. With AI becoming a tool for both attackers and defenders, this episode uncovers the ongoing "AI arms race" and highlights the urgent need for a more preventative approach to cybersecurity.
In this special research edition of Breaking Badness, hosts Kali Fencl, Tim Helming, Sean McNee, and guest Sasha Angus from Sylla Intel dive deep into the world of cybercriminal campaigns targeting retailers. They explore how bad actors exploit the growing threatlandscape, discussing specific fraud tactics, infrastructure reuse, and ways organizations can defend themselves. From pandemic-driven scams to sophisticated brand impersonationschemes, this episode offers valuable insights for both retailers and consumers navigating the complex world of e-commerce security.
Kali Fencl and Daniel Schwalbe sat down with Lesley Carhart, aseasoned incident responder specializing in Operational Technology (OT) cybersecurity at Dragos, in person at BlackHat USA 2024. Lesley shares their journey, from their uniquebackground in avionics and electronics to becoming a leading expert in the field. We explore the evolving landscape of OT cybersecurity, the challenges of protecting legacy systems, and the critical importance of building strong relationships between cybersecurity teams and operational engineers. Lesley also discusses the realities of incident response in industrial environments,the misconceptions surrounding OT security, and the human-centric approach needed to tackle these complex issues. Tune in to learn about the delicate balance between innovation and safety in protecting the critical infrastructure that powers our world.
Kali Fencl, Daniel Schwalbe, and Tim Helming discuss Brian Krebs’ article on namespace collisions and the risks associated with new generic TLDs (gTLDs) along with facial recognition and privacy concerns at major sporting events
This week we compromised domains targeting DeFi protocols along with the JFrog research team's findings regarding a leaked access token with admin access to Python repositories
We're thrilled Tanya Janca (aka SheHacksPurple) joined us this week on the podcast! She and Kali Fencl discuss secure guardrails, Semgrep Academy, the process of writing two books, gardening, and so much more.
In this episode of the Breaking Badness Cybersecurity Podcast, Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss vulnerabilities impacting your phone's 5G connection along with the new owner of the popular Polyfill JS project injecting malware into more than 100,000 sites.
Jake Bernardes, Field CISO of Anecdotes, joins the Breaking Badness Cybersecurity Podcast in this week’s episode! We’re sharing Jake’s background and path within infosec along with what’s intriguing him about the industry currently, how conferences and in-person events can still play a role in community involvement, and we’ll touch briefly on American history.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss vishing attacks against CISA along with a threat campaign targeting Snowflake customer database instances.
It is the final episode of our mini-series from RSAC 2024! Join Kali as she speaks with Aqsa Taylor, Director of Product Management at Gutsy! They'll discuss Aqsa's path to infosec, the importance of governance strategy and how to achieve a cleaner security posture, women in cybersecurity, and how to break into the field.
It's the penultimate episode of our RSAC mini series! We're speaking with Zack Schuler of NINJIO in the first half of the episode and in the second, we speak with Lawrence Gentilello of Optery.
We're halfway through our RSAC mini series! We're speaking with Joe Slowik of MITRE in the first half of the episode and in the second, Kali is joined by Daniel Schwalbe to speak with David Goldschlag of Aembit.
In our second iteration of our mini-series, we'll speak with Ben April of Maltego and Allan Liska of Recorded Future. We'll cover topics such as AI, the LockBit ransomware gang, cybersecurity comic books, and more!
In our first episode of our mini-series, we'll speak with Jori VanAntwerp of EmberOT and Steve Stone of Rubrik Zero Labs. We'll cover topics like IT and operational technology and how ransomware is impacting the healthcare space.
We're back on the road at RSA 2024 talking with thought leaders in the infosecurity space! Be sure to check in weekly as we share nine interviews with folks from Recorded Future, Gutsy, Maltego, Aembit, MITRE, EmberOT, Optery, Rubrik, and NINJIO.
This week on the Breaking Badness Cybersecurity podcast, Kali Fencl is joined by CEO of DomainTools, Tim Chen, and Executive Chairman of the Silverado Policy Accelerator and co-founder of CrowdStrike, Dimitri Alperovitch to discuss his book, “World on the Brink: How America Can Beat China in the Race for the 21st Century.”
In this edition of Voices from Infosec, we're talking with Founder and CEO of Zatik Security, Kymberlee Price! We'll cover her path to infosec, the origins of her organization and its goals, and her passions outside of the industry.
This week Kali Fencl, Tim Helming, and Ian Campbell discuss mercenary spyware attacks along with the US, Philippines, and Japan entering into a cyber intel sharing alliance.
Kali Fencl, Tim Helming, and Ian Campbell discuss spoofed domains and the American Girl brand along with @Proofpoint’s findings regarding distribution of malware on YouTube.
Episode 185 of Breaking Badness is here! This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss Brian Krebs’ article on thread hijacking along with the latest alert from CISA that affects XZ Utils.
This week Kali Fencl, Tim Helming, and Austin Northcutt discuss threat actors using DDP sites for phishing, credential harvesting, and more along with Wired’s reporting of how researchers discovered how to open 3 million hotel keycard locks
Episode 183 of Breaking Badness is here! This week Kali Fencl, Ian Campbell, and Austin Northcutt do a deep dive on the AlphV/BlackCat ransomware gang.
Episode 182 of Breaking Badness is here! This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss Palo Alto’s latest findings on Bifrost along with the rise of laid off tech workers turning to cybercrime.
Episode 181 of Breaking Badness is here! This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss CISA’s caution against a hacked VPN getaway along with Guardio Security’s discovery of a large subdomain hacking campaign.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss China’s involvement with I-Soon along with DNSSEC and the #KeyTrap vulnerability
Episode 179 of Breaking Badness is here! This week Kali Fencl, Kelly Molloy, and Ian Campbell discuss Cory Doctorow’s recent blog post about his experience getting scammed along with the decade-long issue of email sent to .ml addresses rather than .mil ones.
Episode 178 of Breaking Badness is here! This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss the US disabling of Volt Typhoon along with AnyDesk’s recent cyberattack.
In the latest episode of Breaking Badness, Kali Fencl, Austin Northcutt, and Yelisey Bohuslavskiy discuss a string of mortgage brokers who have been hit with ransomware over the past several months. What are the targeting patterns? Who are the victims?
This week on the Breaking Badness podcast, Allan Liska and Jon DiMaggio join Kali Fencl to discuss Jon’s book, The Art of Cyberwarfare, along with other favorite cybersecurity picks!
This week it’s all about targeting expansions! Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss threat actors COLDRIVER expanding their targeting along with Mint Sandstorm.
We’re coming back with another iteration of our Book Club on the Breaking Badness podcast! Kali Fencl, Ian Campbell, and Daniel Schwalbe discuss their top cybersecurity book picks along with books outside the industry.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss a new method of hacking compromising Google accounts along with findings from Operation Triangulation.
This week we're taking a look back at 2023! We're reminiscing about the guests we spoke with and counting down to the top episode...and the top puns!
It’s been a big year in infosec/cybersecurity, but we could say that almost every year. We did a similar discussion last year if you’d like to check that out, and we wanted to follow up on those predictions along with sharing some new ones for 2024.
Episode 175 of Breaking Badness is here! This week Kali Fencl, Tim Helming, and Ian Campbell discuss bad actors using shell companies in Wyoming for global attacks along with BazarCall attacks leveraging Google Forms.
A special Phishmas episode of Breaking Badness is here! We’re talking with @nullcookies about the recent phishing attacks targeting the United States Postal Service, its implications, and possible mitigations. Listen here:
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss a recent attack on a municipal water authority along with Timo Longin and SEC Consult’s latest research on DNS cache poisoning
Kali Fencl, Tim Helming, Taylor Wilkes-Pierce, and Sean McNee discuss their favorite #cybersecurity books! Listen and learn what we’ve enjoyed and what we’ve found helpful in our careers along with non-industry books we’re currently enjoying.
We're taking this opportunity to share how grateful we are for the guests and discussions we've had this past year on Breaking Badness. One of which is our conversation with Champ Clark III and Steven Drenning-Blalock from Quadrant Security on how they thwarted the Black Basta ransomware gang. If you didn't have a chance to listen when we initially released this episode, now's a great time to catch up!
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss a private industry notification from the FBI along with Mandiant’s findings from a #Sandworm attack targeting Ukraine.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss the SEC charges against SolarWinds and its CISO along with the 0-day exploitation impacting NetScaler ADC and NetScaler Gateway appliances.
This week on Breaking Badness, Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss the latest accusations against Fancy Bear along with a look at 404 Media’s findings about the SIM Swapper group known as The Comm.
We like to MOVEit MOVEit on Breaking Badness. This week on the pod, Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss Cisco’s zero-day vulnerability along with the latest from the Clop ransomware gang and the MOVEit file transfer software.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss curl 8.4.0 along with one of the biggest DDoSes of all time.
This week on Breaking Badness, Kali Fencl, Tim Helming, and Sean McNee speak with Sean Gallagher from Sophos X-Ops on the latest iteration in pig butchering schemes along with how AI could change the game.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss a previously unknown compression side channel in GPUs along with the Johnson Controls #ransomware attack.
This week Kali Fencl, Tim Helming, and Ian Campbell discuss the ransom attacks against MGM and Caesars Entertainment along with Cisco’s acquisition of Splunk.
In this special episode of Breaking Badness, Kali Fencl and Tim Helming speak with Tony Robinson, Senior Security Researcher with the Emerging Threats team at Proofpoint. We talk about his path to #infosec, #InformationStealers, and more!
Peter Lowe joins Kali Fencl and Daniel Schwalbe for this edition of Voices from Infosec! We discuss Peter’s background, AI, its progress, and where we think it’s headed, informed consent on the Internet, and some of Peter’s interests outside of cybersecurity.
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss telekopye and online marketplace scams along with NIST’s publication of the first draft standards for post-quantum cryptography. Listen here:
This week Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss the Downfall Intel CPU vulnerability along with MoustachedBouncer’s espionage against Belarus.
A second week of Breaking Badness with a special guest? 😱 Allan Liska is back to talk about his upcoming comic book: Yours Truly, Johnny Dollar - America’s fabulous cyber insurance investigator, taking on #ransomware attacks, insider threats, and more!
In this special episode of Breaking Badness, Kali Fencl and Tim Helming speak with none other than Tracy Maleeff (aka InfoSec Sherpa!) We’re excited to share our conversation on her background, empathy in infosec, industry myths she’d like to bust, and more!
This week on the pod, Kali Fencl, Daniel Schwalbe, and Ian Campbell discuss Cisco Talos' blog on what authentication attacks might look like in a phishing-resistant future along with the SEC’s approval of new cyber reporting regulations for public companies
Math puns abound in episode 161 of Breaking Badness! But Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce do manage to discuss Daniel Kelley’s blog on how AI is revolutionizing BEC attacks along with details of the national #cybersecurity strategy.
This week Kali Fencl, Ian Campbell, and Taylor Wilkes-Pierce discuss France’s pending phone monitoring bill along with Nickelodeon’s recent data breach (includes a healthy dose of 90s nostalgia!)
This week Kelsey LaBelle, Tim Helming, and Ian Campbell discuss the new variant of the Mirai botnet along with Graham Cluley’s article on zero-day flaws used in spy attacks against Kaspersky.
On this week's episode of Breaking Badness, Kali Fencl, Tim Helming, and Taylor Wilkes-Pierce discuss the new Fortigate firmware updates along with @briankrebs article on replacing Barracuda hardware.
This week Kelsey LaBelle, Kelly Molloy, and Taylor Wilkes-Pierce discuss a pandemic catfishing scam along with @eclypsium’s detection of backdoor behavior from Gigabyte systems.
We've made it to the final installment of our Stronger Together Mini-Series! In this episode, you'll hear from folks at DomainTools including CEO Tim Chen, veteran podcaster Daniel Schwalbe, and more!
This week Kali Fencl, Tim Helming, and Ian Campbell discuss Kim Zetter’s work on the SolarWinds investigation along with the Senate’s hearing on AI regulation.
We’ve made it to the third installment of our Stronger Together Mini Series! In this episode we’re joined by researchers, threat analysts, and C-Suites including Katie Nickels from Red Canary and the SANS Institute, Don Jeter from Torq, Ben April from Maltego, Lesley Carhart from Dragos, and Jeff Stout from Akamai. We have some great discussions on the pros and cons of AI, protecting industrial control systems, imposter syndrome, and more.
Welcome to episode number two of our Breaking Badness Mini-Series: Stronger Together! We hope you had a chance to check out last week’s episode of our conversation with Allan Liska. This week we’re going to be hearing from Jamie Williams, Jon DiMaggio, Corey Thuen, and Renee Burton as we continue to focus on RSA’s 2023 theme: Stronger Together. We cover a lot of ground in these interviews, but the theme we keep coming back to is how we can take our individual specialities and come together to give bad actors more bad days.
In this episode for the Stronger Together Mini-Series, we are joined by Allan Liska, Ransomware Researcher at Recorded Future. We sat down (or rather, stood and leaned against a wall away from noise) to discuss his path to infosec, interesting talks at RSA, liberal arts and cybersecurity, a pending passion project, and general geeking out over DNS.
In this special Mini-Series, Breaking Badness goes on the road to RSA to talk to researchers, intelligence analysts, security advocates, VPs, and C-suites on how we can come together in the industry to give bad actors more bad days.
This week Kali Fencl, Ian Campbell, and Travis Hall discuss neurodiversity in cybersecurity including their own experiences, advice for managers, and neurodivergent Employee Resource Groups.
This week Kelsey LaBelle, Tim Helming, and Taylor Wilkes-Pierce discuss Cisco Talos’ Ukraine task unit one year into the Ukraine/Russia conflict along with the Google Pixel and Windows 11 uncropping bugs
This week on Breaking Badness, Kelsey LaBelle, Daniel Schwalbe, and Tim Helming discuss the recent collapse of Silicon Valley Bank. We’ll dive into what we’ve been seeing on our end, predictions on what we may see from bad actors, and practical advice for moving forward.
The 150th celebration of Breaking Badness continues this week for Part II! We’re talking to Daniel Schwalbe, Sean McNee, Aaron Gee-Clough, and Kelly Molloy about their paths to infosec favorite pod memories, and interests outside of work.
We’re celebrating 150 episodes of Breaking Badness! Join us for Part I of a 2 week extravaganza! We’re talking to Kelsey LaBelle, Tim Helming, Taylor Wilkes-Pierce, and Ian Campbell this week on their paths to infosec, favorite pod memories, and interests outside of work.
Oooh it’s the last episode of Breaking Badness before the big 150! This week Kelsey LaBelle, Daniel Schwalbe, and Taylor Wilkes-Pierce discuss the rise of phishing as a service along with a discussion on how mental health data is obtained via third parties.
This week Kelsey LaBelle, Ian Campbell, and Taylor Wilkes-Pierce get out the 🍿 to discuss the dismantling of Exclu along with hackers who exploited a 2 year old VMware vulnerability.
This week Kelsey LaBelle, Tim Helming, and Taylor Wilkes-Pierce discuss malvertising using Google Ads along with ProofPoint’s recent research on use of Microsoft OneNote for delivering malware
This week Kelsey LaBelle, Tim Helming, and Taylor Wilkes-Pierce discuss the FBI takedown of the Hive ransomware variant along with insights from the 2022 GuidePoint Research and Intelligence Team ransomware report.
This week on Breaking Badness is a Special Report episode. We learn about a re-emergence of the Black Basta ransomware group. We’ll talk with Champ Clark III and Steven Drenning-Blalock of Quadrant Information Security to get all the details. Plus—we’ll get their Gold, Guidance and Grievances.
This week Kelsey LaBelle, Tim Helming, and Taylor Wilkes-Pierce discuss vulnerabilities in Siemens programmable logic controllers along with Kevin Chung’s blog post on resurrecting the defunct IoT NYCTrainSign.
This week Kelsey LaBelle, Tim Helming, and Taylor Wilkes-Pierce discuss domains seized by the FBI linked to DDoS-for-hire services along with Rick Osgood’s blog on ChatGPT’s phishing potential.
It’s a special in-person episode of Breaking Badness! Kelsey LaBelle, Tim Helming, Daniel Schwalbe, Taylor Wilkes-Pierce, and Sean McNee talk about the ongoing T.Swift/Ticketmaster security saga, the war in Ukraine, and the Disneyland Team post from Brian Krebs.
Episode 138 of Breaking Badness, Kelsey LaBelle, Tim Helming, and special guest Aaron Gee-Clough discuss SocGholish JavaScript malware along with Phylum’s research regarding PyPI packages in ongoing supply chain attacks.
Breaking Badness gets spooky this week 👻 Recorded on Halloween, Ian Campbell, Kelsey LaBelle, and Daniel Schwalbe discuss clop ransomware (not short for ‘cyclops’ apparently) and its link to the Raspberry Robin worm along with vishing and the latest Twilio breach
Episode 136 of Breaking Badness gets spooky! This week Taylor Wilkes-Pierce, Kelsey LaBelle, and Tim Helming discuss the classic movie Gremlins since it comes up while discussing OldGremlin, along with double extortion attacks from BlackByte. Listen here:
In this episode of Breaking Badness, Kelsey LaBelle, Taylor Wilkes-Pierce, and special guest Kelly Molloy discuss the future of Network Time Protocol along with consumer drones used for hacking
Episode 134 of Breaking Badness is here! This week, Taylor Wilkes-Pierce, Tim Helming, and Kali Fencl discuss research into the cybercrime group, LofyGang along with the latest CISA and FBI PSA on disinformation in the upcoming US midterm election
On Wednesdays we wear pink! Recorded on National Mean Girls Day, in this latest podcast episode Tim Helming, Kelsey LaBelle, and Taylor Wilkes-Pierce discuss two zero day flaws in Microsoft Exchange along with news regarding Brute Ratel.
In Breaking Badness Episode 106, Taylor Wilkes-Pierce, Tim Helming, and Kelsey LaBelle discuss Project Zero’s deep dive into an NSO zero-click iMessage exploit and the impact and takeaways of the log4j vulnerability.
Co-hosts Tim Helming, Chad Anderson, and Taylor Wilkes-Pierce discuss a $10M bounty on the DarkSide ransomware gang, and a critical Apple vulnerability Microsoft dubbed "Shrootless."
BB host Tim Helming was at the Mandiant Cyber Defense Summit recently, and caught up with two analysts, Regina Elwell and Alyssa Rahman. They describe their roles, how they got into infosec, and what they're researching at the moment.
Researcher "nullcookies" not only composed the music for this episode, but also discusses the ins and outs of operational security, with practical tips for researchers and the general public. Plus, cake.
Chad Anderson, Dan Fernàndez, and Tim Helming discuss why Azure is giving folks the blues, and how data theft is making the skies decidedly less friendly.
Episode 96 of Breaking Badness is now available. This week Chad Anderson, Tim Helming, and Kelsey LaBelle discuss a RCE in MSHTML and a new DDoS botnet that has been attacking
[Bonus Episode] Voices from Infosec with Adam Levin and Beau Friedlander by DomainTools
In this Voices From Infosec edition of Breaking Badness, we talk with DNS pioneer Paul Vixie
In this episode we interview Liz, a Security Analyst for the US Government. In this discussion, we pick her brain on her career path in the security space, trends in the infosecurity industry, and how she stays on top of the ever-evolving threat landscape.
Welcome to our special episode of Breaking Badness. With us today is CMO extraordinaire at Flashpoint, Jennifer Leggio. Jennifer is also on the Board of Advisors for Infocyte and a portfolio advisor at GlassWing ventures.
Welcome to our Breaking Badness mini-series on Summer Camp 2019. This series is a different format from our weekly security news. Instead, this special segment on the podcast is made up of eight individual interviews with thought leaders from the infosec industry. Our intent is to share industry trends, advice, and some laughs across a variety of backgrounds in the security space. You’ll hear from threat researchers, industry analysts, security engineers, Directors, and C-suites.