NewsTech NewsTechnologySociety & Culture

DTF Cyber Podcast

Cyber Podcast

Candid cybersecurity conversations with the people making the calls.
Every week, Damian Chung(D), Troy Wilkinson(T) and Fern Rojas(F) break down the biggest hacks, breaches and security news, plus what it actually means for your business, your team and you. Together they bring 50+ years of cyber experience: Damian as a longtime IT and security leader, Troy from nearly three decades across IT, law enforcement forensics and cyber investigations, and Fern as the everyday-tech voice with a deep network of security leaders.

Think of it as your phone-a-friend for cyber. No scripts, no vendor pitches, just real perspective from people who've been in the trenches, and CISOs and executives saying what they rarely say out loud.

New episodes every Monday(ideally)

Play

Open in

24 episodes
weekly
Avg 1 hr 2 min
English

Episodes 24

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

#54
September 28 · 56 min· Video
When AI Agents Go Wild: The Hugging Face Breach #DTF054
Can we actually control autonomous AI agents once they leave the sandbox? In Episode 54 of the DTF Cyber Podcast, Damian, Troy, and Fern dive into real-world instances of AI models breaking containment and acting beyond human control. From an AI benchmark escaping its isolated test environment to laterally move and hack external infrastructure like Hugging Face, to the viral whistleblower tweet from former OpenAI and Anthropic safety researcher Jacob Coxon warning that labs are "racing straight to self-improving superintelligence", the crew breaks down what this shift means for real-world enterprise cybersecurity. Timestamps: 00:00 – An AI model breaks out of its sandbox 00:36 – Intro: When the machines go wild, are we losing control? 00:54 – "AI Gone Wild" & retro tech memories 02:18 – The Hugging Face Incident: Breaking containment at machine speed 04:16 – Why traditional allowlists and denylists fail against autonomous agents 06:00 – Tech leadership culture: Do Dario and Sam prioritize security? 08:14 – The nation-state race: Can we afford to slow down? 11:30 – Media hype, FUD, and the battle over AI data centers & power 14:56 – Underwater data centers, cooling loops, and future infrastructure 16:13 – The Tweet Heard 'Round the World: The ex-OpenAI/Anthropic whistleblower 18:13 – Terminator theories & real-world threats to critical infrastructure 20:45 – Reading Jacob Coxon’s viral resignation tweet 23:49 – Whistleblower protections vs. walking away: What was the motivation? 28:02 – Leadership culture: Speaking up internally vs. venting publicly 30:45 – The trust dilemma: Transparency vs. catastrophic PR fallout 32:55 – Hugging Face detection: Why observability matters 34:30 – Autonomous agents in the real world (FinTech, payment rails, everyday apps) 36:55 – Hilarious automated messaging fails (and late-night work excuses) 43:18 – The weaponization of deepfakes and the erosion of digital trust 47:48 – Blue team reality: Why we need machine-on-machine governance 52:15 – Final thoughts, audience callout & wrap-up 53:48 – DTF Episode 54 Outro Song Join the Conversation: Has your organization started running autonomous AI agents, or are you keeping strict human-in-the-loop guardrails in place? Let us know your thoughts in the comments below! 🔔 Subscribe for weekly deep dives into technical cybersecurity, threat architecture, and modern application defense. ⭐ If you're listening on Apple Podcasts or Spotify, please leave us a 5-star review!
#53
September 8 · 52 min
153 Million Driver’s Licenses Leaked #DTF053
You can reset a password, but you can't reset your face. In this episode of the DTF Cyber Podcast, Damian, Troy, and Fern break down the massive Nexus / IDScan.net leak exposing over 153 million driver's licenses, travel documents, and medical cards. From rental car counters and Vegas dispensaries to third- and fourth-party vendor liability, we look at how raw UV/IR scans ended up on the dark web—and what consumers and enterprises need to do now. TIMESTAMPS * 00:00 - "You Can't Reset Your Face": The 153M ID Leak * 01:18 - The Numbers: 170M Affected Across the US & Canada * 03:08 - Why Ultraviolet & Infrared Scans Change the Game * 05:30 - Nexus Marketplace & The Brian Krebs Discovery * 07:13 - IDScan.net & The Third-Party Supply Chain Problem * 09:30 - Car Rentals, Dispensaries & Fourth-Party Liability * 12:03 - Barcode Swipes vs. Permanent Image Archiving * 15:13 - Why Are Static Addresses Still Printed on Physical IDs? * 17:10 - Facial Recognition, Meta Glasses & Law Enforcement Tech * 20:00 - High Exposure States & Corporate Silence * 22:30 - Data Breach Fatigue & Protecting Your Credit * 24:18 - Holding Vendors Accountable: MSAs, Audits & Tort Law * 26:33 - Brand Damage & The Hidden Cost of Lost Customers * 30:13 - The Discord & 5CA Incident: A Repeating Vendor Pattern * 32:48 - Sports Betting, Prediction Markets & Non-Credit Identity Theft * 34:37 - Multi-Million Dollar Settlements vs. The $7 Payout * 37:39 - SIM Swapping & Account Takeovers * 38:24 - "Steve in Accounting" & The Reality of Phishing * 39:04 - Vendor Security Theater & The Branded Sleep Mask * 41:26 - Protecting Family: Grandmas, Wealth & Google Shortcuts * 44:28 - Compliance Checklists vs. True Operational Security * 45:56 - Will Threat Actors Use Public LLMs to Parse Stolen Data? * 48:22 - Final Takeaways: Practical Guardrails for the New Normal * 50:39 - Outro Track KEY TAKEAWAYS * Verification Doesn’t Require Retention: A real-time ID check only needs a binary pass/fail result, yet vendors continue to store high-res visible, UV, and IR scans long term. * The Fourth-Party Blindspot: You might trust the brand on the rental counter, but your risk posture is actually dictated by the obscure downstream vendor processing their data behind the scenes. * Non-Credit Attack Vectors: Identity theft isn't limited to credit bureaus—prediction markets, gaming sites, and sportsbooks verify identity via document scans without ever pinging credit monitoring. JOIN THE CONVERSATION * Have you checked if your license or documents were compromised? * Drop a comment below and let us know your take on vendor data retention policies. * Don't forget to Like, Subscribe, and share this with someone who needs to freeze their credit! #Cybersecurity #DataBreach #IDScan #Privacy #IdentityTheft #DTFCyberPodcast #InfoSec
#52
August 31 · 55 min· Video
Specialist vs. Generalist: The Ultimate Cyber Career Debate #DTF052
In Episode 52 of the DTF Cyber Podcast, Damian, Troy, and Fern debate the ultimate cybersecurity career question: should you build your path as a deep specialist or a broad generalist? The hosts discuss the harsh realities of aiming for penetration testing on day one, the difficult transition from hands-on keyboard roles to leadership, and why understanding the business is more important than your ego. They also dive into how artificial intelligence is changing the industry and why you need to "skate to where the puck is going" to future-proof your career. Chapter Timestamps: 00:00 - Cold Open: Hackers in the kernel and the bigger risk picture 00:22 - Episode Intro: The Specialist vs. Generalist debate 01:23 - The rude awakening of wanting to be a pen tester on day one 03:00 - How internship programs are the real path to offensive security 05:25 - The Chef Analogy: Comparing cyber roles to a restaurant kitchen brigade 07:45 - The struggle of shifting from a technical specialist to people management 08:47 - Troy's journey from digital forensics to a broader CISO role 0:00 - Damian's story: Specializing in data resiliency after 9/11 13:40 - Why foundational networking knowledge is crucial for everyone 17:51 - The "AI Salt" analogy: MSG, tequila, and synthetic technology 22:02 - A controversial truth: Cyber exists to support the business, not run it 24:18 - When it makes sense to take a lesser title for a bigger opportunity 26:21 - Why ego and hubris are the ultimate career killers 31:33 - AI's future impact and the rise of autonomous pen testing 36:25 - The hunting and hockey metaphors: Skating to where the AI puck is going 40:27 - Uncovering the full "Jack of all trades" quote 48:24 - Do certifications actually get you jobs, or is it a business incentive? 53:03 - Outro Grunge Song: "AI Salt on the Table"
#51
August 24 · 1 hr 8 min· Video
Is Your Employer Spying on You? The Truth About Workplace Monitoring | #DTF051
Are Flock Safety cameras keeping our neighborhoods safe, or are we sleepwalking into an unchecked private surveillance dragnet? When does legitimate workplace Data Loss Prevention (DLP) cross the line into invasive employee bossware? In Episode 51 of the DTF Cyber Podcast, Damian Chung, Troy Wilkinson, and Fern break down the escalating battle between Security and Privacy. From AI-driven license plate recognition (ALPR) grids and 4th Amendment violations to keystroke logging, SOC alert fatigue, and who watches the administrators holding root access, the crew debates where the boundaries must be drawn. Timestamps: 00:00 - Cold Open: Keystroke Logging vs. Telemetry Visibility 00:51 - Episode 51 Kickoff: Security vs. Privacy Debate 01:46 - Average Fern's Neighborhood Flock Camera Discovery 03:16 - Amber Alerts & The Pro-Surveillance Argument 04:32 - Troy's Lens: NCIC Auditing & Who Watches the Watchers? 06:20 - Crossing State Lines & The 4th Amendment Violation 08:15 - Minority Report Reality: Tracking Intent vs. Actions 09:16 - Workplace Surveillance & European Data Subject Rights 10:59 - How Machine Vision & SIEM Correlation Change the Game 14:40 - Facial Recognition False Positives & Arrest-First Risks 16:45 - The Thanos Ratio: 14,605,000 Defensive Wins vs. 1 Breach 20:38 - Zero Trust Governance, Admin Logs & Immediate Termination 23:45 - Threat Actor Attribution, Obfuscation & False Flags 26:00 - The 1984 Surveillance State & Data Aggregation Hazards 26:53 - Fern's Missing Child Story & Neighborhood Ring Cameras 33:22 - Tiered Access, Admin Tickets & Immediate Termination 46:37 - Mandatory Incident Reporting Regulations & CISA Rules 51:56 - Telemetry Lakes vs. Intrusive HR Bossware 01:05:43 - Outro & Custom DTF Outro Track
#50
August 17 · 1 hr 11 min· Video
50 Episodes of DTF Cyber: What We Learned & Challenge Coin Giveaway! #DTF050
In this milestone episode, Damian, Troy, and Fern look back on 14 months of podcasting, growing from 1,000 to nearly 7,000 subscribers, and moving into a brand-new studio. We dive deep into the biggest lessons we've learned along the way: how AI has rapidly transformed our workflows and security operations, the unwritten rules of vendor-sponsored CISO dinners, navigating corporate ethics, and what it really takes to break into the cybersecurity industry today. 🪙 EPISODE 50 GIVEAWAY: To thank our listeners for reaching 50 episodes, we are giving away 10 custom, heavy-duty DTF Cyber Challenge Coins! How to enter: * Make sure you are subscribed to the channel. * Like this video. * Leave a comment below letting us know what topic you want us to cover next! ⏱️ Timestamps * 00:00 - Welcome to Episode 50 & The New Studio Setup * 03:04 - The Unreleased "Episode 000" & Pivoting the Show Format * 05:04 - Fern’s Daughter Out-Pacing the Podcast on YouTube * 07:02 - Damian on Communicating Complex Security Concepts * 08:33 - The "Bowling Alley on Fire" AI Guardrails Analogy * 10:03 - Are Companies Really Blocking AI in 2026? * 11:27 - Looking Back at Episode Predictions & The Evolution of AI * 13:05 - Phone Games, Token Limits, and Micro-Transactions in AI * 17:58 - Why Career & Internship Topics Resonate Most with Listeners * 20:25 - Has Technology Changed Too Fast for Old Podcast Episodes? * 23:14 - How Damian, Troy, and Fern Personally Use AI Every Day * 26:47 - Sanitizing Contracts & Redlining Terms with AI * 28:25 - Building Custom Apps, Automated Trading Bots & Agentic Defense * 29:59 - The Process Behind the AI End-Song Music & B-Roll Visuals * 32:00 - Why We Don't Take Sponsors & Keeping the Show Authentic * 35:07 - Why You Don't Need to Be the "Smartest Person in the Room" * 39:32 - The "7-Episode Curse" & Committing to Real, Organic Growth * 41:48 - Shoutout to Andrew (The Ginger Hacker) & Community Initiatives * 45:09 - CISO Dinners: How Vendor Networking Should Work * 49:15 - Marketing Attribution, Account Lists & Behind-the-Scenes Sales Budget * 55:32 - CISO Anxiety, "Speed Dating" Conferences & Ethics Boundaries * 1:00:18 - Protecting Your Reputation as a CISO * 1:02:32 - Cutting Through the Sales Noise & Dealing with Cold Emails * 1:06:07 - How Networking Built Real-World Security Connections * 1:07:19 - Episode 50 Challenge Coin Giveaway Details!
#49
August 3 · 45 min
Extortion WITHOUT Encryption: Why Hackers Skipped Ransomware
What happens when cybercriminals don't even bother encrypting your files, but still demand $5 million? In Episode 49 of DTF Cyber, Damian, Troy, and Fern sit down with former 3x Financial CISO Brian Rosario to break down a terrifying shift in the threat landscape: Extortion Without Encryption. We analyze recent breach news (like Abbott Laboratories) to reveal how bad actors quietly exfiltrate crown jewel data, bypass traditional backup recovery options, and hold reputational/SEC clocks over your head. Plus, we dive into the risks of "Vibe Coding" with AI, unmonitored OAuth tokens, and how to build a security culture without ego. ---------------------------------------------------------------- 📌 TIMESTAMPS: 00:00 - Cold Open: $5M Ransom, Zero Encrypted Files 00:49 - Guest Intro: 20-Year CISO Veteran Brian Rosario 01:50 - Abbott Labs Incident: The Shift Away From Encryption 03:55 - Why Bad Actors Pre-2020 Pivot To Pure Data Exfiltration 06:32 - Why Cloud Snapshots & Backups Aren't Stopping Extortion 08:28 - Supply Chain Threats: Codebases & Hardcoded Secrets 10:30 - The SolarWinds & NotPetya Effect 11:47 - Email Protection & Siphoning CEO Mailboxes via OAuth 14:35 - "Vibe Coding" & Unmonitored Citizen Developers 18:30 - The Explosive Rise of AI Governance Platforms 20:26 - "Is It Better To Not Know?" The CISO Visibility Dilemma 23:27 - Getting Ego Out of Security Leadership 28:20 - Analyzing the Kill Chain: Vishing, Smishing & DefCon Lessons 36:06 - SEC Disclosures & Data Layer Visibility 42:30 - Data at Rest Encryption: Is AI The Solution?
#48
June 29 · 1 hr 12 min· Video
The Top 10 Cybersecurity Metrics Every CISO Should Track
Are you tracking cybersecurity metrics that actually keep your business secure, or are you just reporting "the weather" to your executive board? In Episode 48 of the DTF Cyber Podcast, Damian Chung, Troy Wilkinson, and Fern sit down with enterprise security operations leader Jason Barnes to look past the vanity metrics and deliver a definitive blueprint on the metrics that actually drive decisions. We break down the operational realities of security telemetry across three critical categories: operational speed, corporate risk liability, and the human element. From navigating the true timeline of Mean Time to Detect (MTTD) to calculating hard-dollar risk through the FAIR model, this episode details exactly how to align engineering data with courtroom and boardroom defensibility. 📌 Key Timestamps: 00:00 - Security Metrics vs. Reporting the Weather 01:53 - Welcoming Special Guest Jason Barnes 02:50 - Ripping Dashboards Apart: Grouping by Category 03:37 - Metric 1: Mean Time to Detect (MTTD) & Attacker Dwell Time 05:26 - Fern’s "Intruder in the Attic" Analogy 08:00 - Addressing Timeline Manipulation in SOC Detection Logic 09:51 - Metric 2: Mean Time to Respond & Remediate (MTTR) 12:41 - Alert Fatigue: The Danger of Acknowledging Without Triaging 15:55 - Metric 3: Patch Cadence & The 72-Hour KEV Mandate 24:14 - Brand Reputation vs. Lost Sales: Calculating True Impact 27:03 - Metric 4: Security Control Coverage & Mapping MITRE ATT&CK 31:16 - The Shelfware Epidemic: Why 80% of Tools are Half-Deployed 32:02 - Metric 5: Supply Chain & Managing Third-Party Risk 38:31 - Metric 6: Cyber Risk, Financial Exposure, & The FAIR Model 45:19 - Metric 7: Phishing Repeat Offenders & Broken Human Firewalls 00:49:09 - Metric 8: Alert-to-Analyst Ratio & Workforce Burnout 00:50:44 - Operationalization Failures: Growth in Alerts From New Tools 00:51:51 - Metric 9: Security Investment ROI & Eliminating Uncertainty 00:53:40 - Guilt by Association: Why Shelfware Kills Long-Term Sales Relationships 00:58:01 - Metric 10: Incident Root-Cause Trends & After Action Reports 01:03:14 - Case Management vs. Using AI to Summarize Root Cause Analysis (RCA) Themes 01:06:04 - Metric 11 (BONUS JASON BARNES LANE): Exploitability & Internal Surface Attack Mapping (CMDB)
#47
June 23 · 1 hr 7 min· Video
Is Your Entry-Level Cyber Job Officially Dead? | #DTF047
The traditional cybersecurity entry-level pipeline is fundamentally changing. In Episode 47 of the DTF Cyber Podcast, Damian, Troy, and Fern break down the rapid evolution of security operations centers and tackle a stark reality: the traditional Tier-1 SOC analyst job is officially dead. With modern baseline metrics proving that AI platforms are automating over 50% of basic alert triage and log parsing, our hosts debate what this means for university programs, upcoming graduates, and mid-career professionals looking to break into the industry. Fern introduces Jevons Paradox to explain the counterintuitive explosion of corporate data ingestion. Meanwhile, Damian and Troy face off on the corporate risk management landscape of "Building vs. Buying" automated security operations tools, the hidden dangers of undocumented enterprise AI sprawl, and why cybersecurity hiring is morphing from a wide-bottom pyramid into a highly specialized diamond. Whether you are a tier-1 analyst trying to stay relevant, a student planning your career map, or an enterprise security leader trying to scale a global team, this episode delivers raw, unscripted strategy on how to reinvent your technical skillset before you get left behind. --- ⏱️ CHAPTER TIMESTAMPS --- 00:00:00 - The University Pipeline Panic: Training for Dead Jobs? 00:01:07 - Welcome to Episode 47: The Level-1 SOC Analyst Job is Dead 00:01:59 - The AI SOC Market Explosion: Tracking 60+ New Automation Vendors 00:03:50 - Troy’s Evolution Analogy: From the Abacus to the Digital Calculator 00:04:17 - The Triage Threshold: Do Students Still Need to Learn Manual Log Parsing? 00:06:08 - Function vs. Job: Redefining Security Operations Metrics 00:09:29 - Road Trip Retrospective: Looking Back at AWS re:Invent 00:10:48 - The Gartner Baseline Metric: 50% of Tier-1 Tasks Automated 00:11:16 - The Anthropic Velocity: Unpacking the 8x Capability Multiplier 00:13:53 - Fern's Analogy Corner: Jevons Paradox & Exponential Data Lakes 00:17:01 - Autonomous Detection Engineering: Will AI Manage Its Own Ingestion? 00:22:12 - CISO Executive Assessment: The Build vs. Buy Infrastructure Dilemma 00:23:27 - Enterprise AI Sprawl: The Risk of Shadow API Keys & Tokens 00:29:07 - The Career Shift: Moving Up to AI Auditing & Agent Orchestration 00:32:18 - The Talent Diamond: Why Cyber Hiring is Changing Shape 00:35:10 - Alternative Entry Points: Vulnerability Management & GRC Realities 00:37:46 - Token Productivity Markers: Tracking Misuse & Side-Hustle Risks 00:41:30 - Damian's Hiring Blueprint: Why Growth Trajectory Beats a Degree 00:52:39 - The Non-Linear Path: Transitioning via Help Desks & IT Admins 00:58:35 - The Art of Interviewing: Damian's 300+ Career SOC Direct Hires 01:01:30 - Producer's Final Verdict: Reinventing Yourself for Judgment Day 01:04:50 - Episode Song - Where the Agents Hunt
#46
June 15 · 56 min· Video
Government RECALLS AI Code?! The Fall of Fable 5 | #DTF046
The US government just laid down the hammer, officially recalling frontier AI models Fable 5 and Mythos 5. In Episode 46 of the DTF Cyber Podcast, Damian, Troy, and Fern dive into the chaos. Did a sophisticated prompt jailbreak a vulnerability-chaining machine into a zero-day weapon? What does this sudden regulation mean for corporate security teams, supply chain resiliency, and the blue team vs. red team arms race? We also pull back the curtain on Anthropic's quiet 30-day data retention policy changes and discuss why the entry-level SOC analyst job might be gone in a year. Episode Timestamps: 00:00 - Fern can’t log into Anthropic 01:16 - Clearing up miscommunications: Who is blocked? 03:50 - Is this a third-party risk or supply chain resilience issue? 04:30 - The geopolitics of AI: Handcuffing US developers 06:40 - Protecting critical infrastructure from weaponized zero-days 08:45 - The risk of wrappers and pinning a business to a single model 11:22 - CEO Dario Amodei’s ironic stance on government AI agencies 14:55 - Diversifying your enterprise portfolio of AI tools 17:05 - The fine print: 30-day prompt retention and privacy traps 19:15 - RSI: Understanding Recursive Self-Improvement suppression 21:00 - Shadow IT vs. Shadow AI in corporate environments 22:00 - Corporate MSAs: Why SaaS giants don’t negotiate terms 24:56 - AI Discovery & AI Governance: Tokenizing PII traffic 26:50 - Thick clients, APIs, and enforcing MCP gateway controls 29:34 - The CISO WhatsApp groups blow up over the weekend 32:45 - Secure by Design: Is AI a lazy shortcut for secure coding? 36:50 - Skip the fundamentals? Why laziness equals a data breach 39:40 - Behavior Drift: When AI forgets what a high vulnerability is 41:50 - Is AI coming for your job? The death of Tier 1 SOC analysts 46:30 - Going to school to learn a tool vs. learning how to learn 50:17 - Episode Final Predictions: The shift to private, local models
#45
May 26 · 1 hr 5 min· Video
The 3-Day Patch Trap: Security vs. Operational Chaos | #DTF045
The patching paradigm has officially broken. CISA is considering a massive shift to a mandatory 3-day patch window for active exploits, but is a 72-hour turnaround an operational shield or a localized denial-of-service attack on your own engineering teams? In Episode 45, Damian, Troy, and Fern dive headfirst into the brutal reality of emergency vulnerability management. They tear down the growing chasm between risk-aware CISOs and resource-strapped IT operations, discuss how advanced AI models like Alibaba's newest frontier tech are accelerating multi-stage exploit chaining, and debate why checking a compliance box doesn't mean your network is actually secure. From fish tank thermometer pivots to modern pit crew optimization, learn how to audit your external attack surface and build a resilient defense-in-depth architecture before the next zero-day drops. 00:01:07 — The 3-Day Patch Deadline Panic 00:02:06 — Breaking Down the CISA KEV Patch Window 00:02:30 — Fern's Story: The System Admin's Weekend Nightmare 00:03:15 — Breaking Down the CISA KEV Prioritization Catalog 00:04:39 — The Shrinking External Attack Surface Reality Window 00:06:49 — IoT Perimeters: The Famous Fish Tank Thermometer Pivot 00:09:37 — Restricting Lateral Threat Movement with Microsegmentation 00:10:25 — Monitoring Hidden Network Risks & Shadow AI Sprawl 00:14:01 — Exploit Chaining: Autonomous AI Defenses & Alibaba's Frontier Model 00:15:40 — CIRCIA Reporting Directives vs. Mitigation Rules 00:22:15 — Troy's CISO Perspective: Change Advisory Boards vs. Absolute Chaos 00:25:46 — The Innovation Gap: Why Automated Testing Trumps Manual Code 00:28:01 — Debate: Does Compliance-First Security Make Us Vulnerable? 00:33:55 — The Great Debate: Staged Deployment Ring-Fencing vs. Total Lockout 00:37:56 — Progressive Update Flows & Automated Patch Verification Staging 00:43:40 — Shifting the Burden: Formal Risk Transfer to the CIO's Office 00:48:32 — Damian's Technical Takeaway for Security Infrastructure Engineers 00:49:45 — Troy's Strategic Insight for Corporate Executive Directors 01:01:14 — Fern's Pit Crew Analogy
#44
May 18 · 59 min· Video
The True Cost of AI Hidden Token Costs and Cloud Charges| #DTF044
Are you caught between a bedrock and a hard place with your organization's cloud budget? In Episode 44 of the DTF Cyber Podcast, Damian, Troy, and Fern break down the massive, unexpected financial and operational risks of enterprise AI deployments. From unmonitored AI agents creating a 100,000 "recursive loop" bill overnight to non-technical employees "vibe coding" insecure software with hardcoded secrets, the team looks past the AI hype to expose the real logistics of Day 2 operations. They also dive into the invisible data lake "IO tax," the legal pitfalls of building side projects on corporate tenants, and recent procurement data from Tropic revealing an automatic 20% to 30% "AI tax" on SaaS contract renewals. Don't let runaway token costs erode your profit margins. Hit that subscribe button, leave a thumbs up, and learn how to implement the hard engineering and financial guardrails your business needs today! TIMESTAMPS 00:00:10 - Recursive Loops & The $100,000 Bill Surprise 00:01:14 - Job Security vs. Downsizing Human Capital 00:03:03 - Vibe Coding & Bursting Credit Card Limits 00:07:42 - Model Right-Sizing: Avoiding Over-Compute 00:09:50 - The Invisible Data Lake Tax 00:10:48 - Evaluating Hidden AI Compute Fees in SaaS 00:13:29 - Token Bloat and the Field of Haystacks 00:17:28 - The Cascading Effects of Pay-Per-Use Metering 00:19:19 - The Rise of "Shadow Developers" 00:23:18 - Side Projects & Corporate Intellectual Property Traps 00:25:04 - Implementing Shadow AI Discovery & Security Tools 00:32:18 - The Startup Compliance Dilemma (The Lack of SOC 2) 00:33:21 - Secure Coding Vulnerabilities & AI Hardcoded Secrets 00:41:21 - Tropic's Procurement Insights: Navigating the SaaS AI Tax 00:51:01 - Engaging Finance in AI Strategy & Enforcing Guardrails http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#43
May 11 · 1 hr 12 min· Video
Agentic SOC: Machine Speed vs. Human Liability| #DTF043
The hackers are already moving at light speed. If you’re still waiting for a human to click "Approve," you’ve already lost the company. But if your autonomous AI nukes a production server during a board meeting, who stands in front of the regulators? In Episode 43, the DTF crew dives into the massive 2026 shift from automated playbooks to Agentic AI. Damian argues that traditional SOAR is dead, Troy warns of the audit trail of a ghost, and Fern wonders if we’re all just vibe coding our way into an existential crisis.In this episode, we cover: - Why Human-in-the-loop is becoming a security vulnerability. - The difference between automation (scripts) and agency (reasoning). - How to govern a fleet of "Digital Interns" without losing control. - Why this technology might finally let you fire your underperforming MSP. Timestamps: 0:00 – Machine speed vs. Human approval 0:37 – The 2026 SOC Reality 2:37 – Fern’s Tesla Nightmare: The terror of Full Self-Driving 5:58 – Defining the 2026 SOC: Automation vs. Agency 10:01 – Why SOAR is officially "Legacy Tech" 15:04 – Reasoning Chains: How AI invents its own playbooks 20:23 – The Digital Intern Analogy: Scaling Tier 1 27:15 – Troy’s Reality Check: Can you audit a ghost? 33:00 – The Model Armor: Wrapping AI in Governance 40:45 – Boardroom Conflict: Who is liable for an AI mistake? 45:20 – The Kill Switch Necessity: Who holds the keys? 50:15 – Killing the MSP: Bringing the SOC back in-house 56:30 – Existential Crisis: Vibe Coding and the future of cyber jobs 1:04:50 – The Bottom Line: Transitioning to an AI Orchestrator 1:09:20 – Final Verdict: Don't be scared, be efficient #CyberSecurity #CISO #AI #AgenticAI #SOC #InfoSec #TechPodcast #DTFcyber http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#42
May 4 · 47 min· Video
200,000 Laptops Wiped in Minutes: The Stryker Attack & The Match Group Leak| #DTF042
In this episode of the DTF Cyber Podcast, Damian, Troy, and Fern tackle the terrifying reality of 2026: Identity is the new weapon of mass destruction. From the architectural suicide pact that allowed a 200,000-device wipe at Stryker to the personal blackmail engines fueled by the Match Group data breach, the team explores why your own IT tools are being turned against you. Timestamps 00:00 – The "Architectural Suicide Pact" (Stryker & Match overview). 00:44 – Vegas Recording: Fern introduces the location (Findlay Automotive Group conference room). 03:00 – The 2026 Trend: Troy explains why exfiltration is the new ransomware end-game. 04:44 – The Match Incident: Troy breaks down the "Blackmail Engine" and voice-cloning risks. 07:09 – Governance Failures: Damian explains Multi-Admin Approval (MAA) and why it failed at Stryker. 10:00 – The Platform Myth: Troy discusses the "Holy Grail" of full-stack identity. 12:54 – Just-In-Time (JIT) Access: Damian breaks down automating validation for critical tasks. 18:30 – Observability Strategy: Troy discusses mapping security tools to the MITRE ATT&CK framework. 20:50 – The Cost of Downtime: Analyzing the $10M/day loss of the MGM hack. 25:40 – The SaaS Trap: Troy identifies over-privileged accounts in Salesforce and stale SaaS apps. 30:40 – Executive Friction: The Reporting Structure debate: Where the CIO and CISO clash. 33:00 – The Reporting Debate: Troy argues why the CISO should report to Legal or Risk. 38:50 – Innovate or Die: Damian's take on why blocking AI is a losing strategy. 40:40 – Closing Thoughts: Troy’s final plea to fix the Basics before moving to AI. 44:59 – Final Wrap-up: Thanking Findlay Automotive Group and the Henderson, NV hosts.
#41
April 27 · 1 hr 6 min· Video
Your Resume is Boring. Here’s Why You’re Still Stuck in Entry-Level | #DTF041
Is your resume landing in the trash before a human even sees it? This week on the DTF Cyber Podcast, Troy, Damian, and Fern get brutally honest about the cybersecurity job market. We aren't just talking about certifications; we're talking about why the standard advice is failing the next generation of cyber professionals. Troy reveals why he trashed 48 resumes in one morning, Damian explains why a GitHub repo is worth more than a degree, and Fern asks the questions every job-seeker is thinking but is too afraid to ask. If you're stuck in the entry-level trap, this episode is your roadmap out. Don't forget to Like, Subscribe, and hit the Bell to stay ahead of the curve! TIMESTAMPS: ⁠00:00 — Cold Open: Why Degrees Don't Stop Breaches 01:21 — Tale of Two Cities: The Cyber Bootcamp Reality 03:14 — The AI Crunch: Reskilling Mid-Flight 06:15 — Recipe vs. Cooking: Why Certifications Aren't Enough 08:28 — Project-Based Hiring: What Damian Looks for First 11:29 — The Debate: Is AI Replacing Human Thought? 15:12 — Adaptability: Finding Your Spot in the AI Workforce 20:02 — Proof of Record 22:18 — Soft Skills: The Differentiator in a Level Playing Field 23:48 — Bypassing Automated Resume Systems 27:31 — State of Fear: Lessons from Multi-Million Dollar Firms 30:15 — Stolen Valor: Spotting Fakes in Cybersecurity 32:09 — The Failure Interview: What Did You Learn? 35:13 — Leadership Relations: Building Bridges Before the Fire 40:36 — Pen Testing: Strategic or Not? 44:23 — Setting Yourself Apart 47:08 — The Open Source Debate 53:42 — Practical Projects: Using YouTube & Portfolios to Stand Out 1:03:17 — Fern’s Final Thought: Stop Hiding Your Value 1:04:05 - Episode 41 Anthem
#40
April 13 · 53 min· Video
Anthropic Mythos: The AI That Just Fired Its CISO? | #DTF#040
Anthropic just changed the rules of the game with "Mythos"—a frontier-tier model that doesn't just find vulnerabilities; it reasons through a 23,000-word "Living Constitution" to decide if it even wants to help you. In this milestone Episode 40, Damian, Troy, and Fern dive into Project Glasswing, the secret group of 12 companies given early access to this "digital nuke," and debate whether we are heading toward a future of AI-on-AI warfare. From 72% exploit success rates to AI toilets, we cover the technical, the tactical, and the hysterical. Timestamps: •⁠ ⁠00:00 – Intro •⁠ ⁠02:15 – Project Glasswing: Why is Anthropic gatekeeping Mythos? •⁠ ⁠05:39 – The Stats: 72% success in generating working exploits •⁠ ⁠13:30 – Damian’s Deep Dive: Why BSD and zero-days are back in the spotlight •⁠ ⁠19:40 – The 23,000-Word Constitution: Can AI have ethics? •⁠ ⁠28:50 – Troy’s Reality Check: Liability and the "Self-Evolving" rule set •⁠ ⁠42:00 – The Great Debate: Should we bury this tech or embrace it? •⁠ ⁠50:00 – Fern’s Final Thought: AI toilets and the future of fiber
#39
April 6 · 49 min· Video
Your AI Just Spent $50,000: The Shadow AI Agent Nightmare | #DTF039
In this episode, Damian, Troy, and Fern dive into the 'Wild West' of 2026: Shadow AI. From autonomous agents paying unapproved invoices to the rinse and repeat of the 2010 cloud revolution, the team debates whether AI agents are productivity miracles or a liability nightmare for the modern CISO. Timestamps: ⁠00:00 - The $50k Shadow Agent Invoice 01:02 - Fern’s Nightmare Scenario: The AI Agent in Production 02:15 - 2010 vs. 2026: Why Shadow AI is the new Shadow IT 04:14 - Damian’s Technical Deep Dive: The Permission Explosion & Admin Entitlements ⁠11:08 - The State of the Union: CISO Mandates and the "Chief AI Officer" 26:10 - Troy’s CISO Perspective: Managing Identity Governance & Global Risk 40:13 - The Great Debate: Micro-segmentation for AI Agents 46:49 - Final Verdict: Can You Govern What You Can't See? http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#38
March 16 · 1 hr 4 min· Video
The Life and Death Stakes of Healthcare Cybersecurity | #DTF038
In Episode 38 of the DTF Cyber Podcast, Fern and Troy welcome Healthcare CISO, Bob Schlotfelt. We dive into why an incident at a hospital is fundamentally different from a retail breach. While Damian is out, Bob brings decades of insight into protecting patient safety over just protecting data. We discuss the nightmare of unpatchable medical devices, why compliance doesn't equal security, and the hilarious (but effective) ways to get a nurse's attention for security training. Chapter Markers: •⁠ ⁠00:00 - Intro: Netflix vs. Banks vs. Hospitals •⁠ ⁠01:46 - Introducing Bob, Healthcare CISO •⁠ ⁠08:38 - The Threat to Connected Medical Devices •⁠ ⁠18:50 - Fixing "Operational Friction" on the Hospital Floor •⁠ ⁠34:06 - Security Awareness in the Bathroom Stalls? •⁠ ⁠43:09 - Why Compliance (HIPAA) is NOT Security. •⁠ ⁠1:01:00 - Telling Truth to Power: Boardroom Advice. http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#37
March 9 · 1 hr 6 min
Cybersecurity Salaries 2026: The "AI Squeeze" is Here | #DTF037
Is the "Cyber Skills Gap" a myth? In this episode, Damian, Troy, and Fern strip away the HR fluff and talk about the cold, hard reality of the 2026 job market. From entry-level SOC roles being "squeezed" by AI to $3.5M CISO roles that come with massive personal liability, we’re breaking down what you’re actually worth and why your resume is likely being ghosted by a bot. If you aren't negotiating your insurance and building your own AI tools, you're falling behind. THE DEEP DIVE: •⁠ ⁠00:00 – Intro •⁠ ⁠01:11 – Fern’s 2026 Job Hunt: Why 50 applications led to zero interviews. •⁠ ⁠04:20 – The "Skills Gap" Debate: Do companies actually want to hire? •⁠ ⁠09:02 – SALARY: The Entry-Level SOC Analyst floor in 2026. •⁠ ⁠14:15 – The Grocery Store Phone Call: How networking beats the portal every time. •⁠ ⁠19:40 – Damian’s Warning: Why "Prompting" AI makes you obsolete. •⁠ ⁠25:10 – The "AI Squeeze": Can a $200 license replace a Tier 1 Analyst? •⁠ ⁠31:30 – The Reporting Trap: Why CISOs reporting to CIOs is a massive risk. •⁠ ⁠35:41 – SALARY: Engineering, Pen-Testing, and Cloud Security ranges. •⁠ ⁠40:11 – The "AI Premium": How to add 20% to your base salary right now. •⁠ ⁠41:51 – The "Clearance Bump": Is the polygraph worth the extra $30k? •⁠ ⁠43:24 – SALARY: The $3.5 Million CISO—who is actually making this? •⁠ ⁠48:50 – D&O Insurance: If you aren't a "Named Director," you aren't protected. •⁠ ⁠55:30 – Risk Management vs. "Check-the-box" Compliance. •⁠ ⁠01:04:56 – Final Advice: Don't be a holdout for a dead salary. EPISODE HIGHLIGHTS: •⁠ ⁠The AI Squeeze: Troy explains why entry-level salaries are stagnating as automation handles the "low-hanging fruit." •⁠ ⁠Building vs. Prompting: Damian breaks down why the "Prompt Engineer" is a temporary role—you need to build the infrastructure to survive. •⁠ ⁠Executive Liability: Why you should never take a CISO role without checking the company's Directors and Officers (D&O) insurance policy. Are you seeing these salary shifts in your neck of the woods? Drop a comment below with your role and your 2026 outlook. #Cybersecurity #CISO #TechSalaries #AI #CareerAdvice #DTFPodcast #CyberJobs http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#36
March 2 · 1 hr 12 min· Video
Why Your Tech Won’t Save You: The Human ROI of Cyber Security | Dom Vogel #DTF036
Chances are you’ve got the best tech money can buy, the latest AI, and the biggest firewalls—but you’re still losing. In this episode of the DTF Cyber Podcast, Damian and Fern sit down with Vancouver-based leadership coach and "positivity troll" Dom Vogel to discuss why the weakest link in cybersecurity isn’t a line of code, it’s the person behind the keyboard. We’re ignoring the hardware today to focus on the Human Side of Security. Dom shares his 20+ years of experience transitioning from corporate burnout to coaching cyber leaders on empathy, branding, and "connected leadership" in the AI era. In this episode, we dive into: * The CIO Branding Problem: A real-world story of how a helpdesk’s "likability index" changed a CEO’s perception of IT. * The 1,000 Applicant Crisis: Why junior roles are getting overwhelmed and how to "short-circuit" the online application black hole. * Certs vs. Communication: Why technical certifications are now "table stakes" and how soft skills are the real differentiator in 2026. * Authentic Leadership: Why vulnerability is a leader’s most powerful tool for building trust and mental resiliency within teams. * Personal Brand vs. Reputation: Understanding the "visceral emotional reaction" people have to your name. Connect with Dom Vogel: LinkedIn: https://www.linkedin.com/in/domvogel/ Website: https://www.vogelleadershipcoaching.com Subscribe to DTF Cyber: Don't miss our upcoming deep dive into 2026 Cyber Salaries and the "AI Premium" in Episode 37! Video Timestamps 00:00 – The Weakest Link: Tech vs. Humans 02:18 – Meet Dom Vogel: The Ball Cap & Beard Guy 03:33 – The CIO Branding Problem: A Helpdesk Story 06:12 – Translating Risk into "Boardroom Conversation" 08:12 – The 1,000 Applicant Problem: Standing Out in Noise 10:07 – Why Applying Online is a "Black Hole" 12:23 – Technical Skills are Now "Table Stakes" 14:51 – Photography & Networking: Fern’s Origin Story 19:05 – Stop Investing Only in Certs 21:07 – Vulnerability: A Leader’s Most Powerful Tool 24:42 – Story: The Helpdesk Manager Who Loved Marketing 28:01 – Will AI Replace the Human Craving for Interaction? 33:32 – Creating Psychological Safety in Your Team 37:56 – The Janitor Test: How to Hire for Culture Fit 42:07 – Operational Leverage: Reinvesting in Your People 47:28 – The "Soft Skills" Payday: Why CISOs Need Sales Training 51:06 – Remote Work vs. Office: The Choice Matters 55:30 – What is a "Positivity Troll"? 59:54 – Personal Brand vs. Reputation: What They Say When You Leave 01:05:02 – How Content Creation Leads to Job Offers http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.
#35
February 23 · 1 hr 3 min· Video
72 Hours to Report or Else: The New Compliance Nightmare
In this episode, Damian, Troy, and Fern dive into the heated controversy surrounding new federal reporting mandates. We explore the "Feds vs. Firewalls" dynamic: does mandatory reporting actually help stop the bad guys, or is it just a massive resource drain on teams already fighting for their lives? We break down the 72-hour reporting window for significant incidents and the even tighter 24-hour requirement if you decide to pay a ransom. From the ambiguity of what defines a "significant incident" to the personal liability risks for CISOs, we’re looking at the real-world implications of these 2026 directives. Key topics include: * The struggle between immediate threat response and mandatory paperwork. * How the SBA size threshold might pull 30,000 "non-critical" companies into these rules. * The "minimum viable content" framework for initial reports. * Why the "don’t pay" mantra is harder to follow when human lives are on the line. Timestamps 00:00 – Intro 02:46 – The Car Crash Analogy: Should you call 911 or save the body? 03:55 – Defining Critical Infrastructure: Telecom, Energy, and Gas. 04:41 – The Ticking Clock: Does the 72 hours start at detection or declaration? 05:15 – The 24-Hour Ransom Rule: What happens if you pay? 06:48 – Private Sector Concerns: Will this extend beyond the 16 critical sectors? 09:34 – The Executive War Room: Who is responsible for the communications? 10:47 – Partnering with the FBI: Intel sharing vs. criminal investigation 12:23 – Global Context: The EU’s 24-hour "Early Warning" requirement 15:03 – The Resource Drain: Why incident responders are in revolt 16:59 – CISA vs. FBI: Simplifying the reporting paperwork 20:49 – The ROI of Reporting: What’s in it for the private company? 21:49 – The 30,000 Entity Controversy: Mid-sized companies as "covered entities" 25:56 – Cyber Awareness: Learning from past incidents to prevent future attacks 28:56 – "Minimum Viable Content": Reporting when facts are still changing 34:00 – Legal Risks: Consent to search and "anything you say can be used against you" 36:59 – The "Office Space" Effect: Bureaucracy vs. Collaboration. 40:41 – Voluntary vs. Mandated: The role of ISACs and InfraGard. 48:22 – The Moral Dilemma: Why outlawing ransom payments is complicated 51:13 – 2026 Deadlines: Upcoming CISA Town Halls and feedback loops. 54:33 – Career Implications: Will GRC finally get the respect it deserves? http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.

Showing 1–20 of 24 episodes