x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

The Cyber Resilience Brief: A SafeBreach Podcast

The Cyber Resilience Brief is your 15-minute pulse on how organizations can build stronger defenses and achieve true cyber resilience. Each episode dives into the practical realities of Breach and Attack Simulation (BAS), adversarial exposure validation, and the evolving strategies that keep modern enterprises secure. Hosted by Tova Dvorin and brought to you by SafeBreach — the leader in Adversarial Exposure Validation — this podcast features insights from cybersecurity leaders, integration

technology tech news

All Episodes

12:31

Ep. 33 - BRICKSTORM Reemerges: CISA & NSA Warn of New...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/12/07

In Episode 33 of The Cyber Resilience Brief, hosts Tova Dvorin and Adrian Culley revisit the BRICKSTORM threat—this time through the lens of the new CISA, NSA, and Canadian Cyber Centre joint advisory. While Episode 24 explored BRICKSTORM’s origin, stealth techniques, and UNC5221’s long-term espionage campaign, this episode focuses on what’s changed, and why BRICKSTORM remains a critical concern for defenders in 2025 and into 2026.Tova and Adrian break down the advisory’s latest findings, including

en

17:12

Ep. 32 - Inside “The Com”: The Social-Engineering...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/12/03

In this episode of The Cyber Resilience Brief, host Tova Dvorin and offensive security expert Adrian Culley expose The Com—the decentralized cybercrime collective behind threat groups like Lapsus$, Scattered Spider (UNC 3944 / Octo Tempest), and ShinyHunters. Together, they break down how this teenage-to-young-adult adversary ecosystem has weaponized vishing, MFA fatigue, SIM-swapping, and cloud exfiltration to breach giants including Microsoft, Okta, Nvidia, MGM Resorts, and more. You’ll

en

7:52

Ep. 31 - From Exercise to Efficacy: Resilience as a...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/11/26

In this final episode of our November Critical Infrastructure series, The Cyber Resilience Brief host Tova Dvorin and SafeBreach offensive engineer Adrian Culley explore what it truly means to measure resilience — not just talk about it.They break down how the CISA resilience framework (“Know, Assess, Plan, and Continuously Improve”) connects directly to modern validation tools like Breach and Attack Simulation (BAS), Adversary Exposure Validation (AEV), and Continuous Red Teaming (CART). Discover

en

7:31

Ep. 30 - Bridging IT and OT - A Unified Red Team View

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/11/19

As IT and OT environments converge, critical infrastructure faces an evolving threat landscape where cyberattacks can have real-world, physical consequences. In this episode of The Cyber Resilience Brief, host Tova Dvorin and Adrian Culley, Offensive Cybersecurity Engineer at SafeBreach, explore how Continuous Automated Red Teaming (CART) delivers a unified approach to testing and securing IT/OT boundaries. Learn how continuous validation, segmentation assurance, and evidence-based remediation help

en

10:28

Ep. 29 - The Domino Effect: Validating Supply Chain...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/11/12

In this episode of The Cyber Resilience Brief, hosts Tova Dvorin and Adrian Culley explore the domino effect of supply chain vulnerabilities within critical infrastructure. Using real-world examples like SolarWinds, MOVEit, and Log4j, they unpack how a single compromised vendor can ripple across entire sectors—and how Adversary Exposure Validation (AEV) can help break that chain.Adrian explains how AEV models third-party attack paths and validates resilience across shared dependencies, while Tova

en

7:54

Ep. 28: Critical Infrastructure’s Unique Validation...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/11/05

In this episode of The Cyber Resilience Brief, host Tova Dvorin and SafeBreach offensive security engineer Adrian Culley explore the high-stakes world of critical infrastructure cybersecurity. November marks Critical Infrastructure Security and Resilience Month, and the discussion dives deep into why continuous validation — not periodic testing — is essential for protecting energy, water, finance, and healthcare systems from nation-state threats.Learn how Breach and Attack Simulation (BAS) can

en

17:19

Ep. 27 - The Evolution of ShinyHunters: From Data...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/29

The ShinyHunters threat group has transformed from a dark-web data broker into one of the most dangerous alliances in modern cybercrime. In this episode of The Cyber Resilience Brief, host Tova Dvorin and Adrian Culley, Offensive Security Engineer at SafeBreach, break down how the group’s merger with Scattered Spider marks a new era of as-a-service cybercrime — one built on social engineering, AI-powered vishing, and the exploitation of trust in SaaS ecosystems like Salesforce and

en

9:09

Ep. 26: The Cyber Resilience Playbook

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/27

In the finale of our Cybersecurity Awareness Month series, SafeBreach’s Cyber Resilience Brief delivers its most powerful episode yet — The Cyber Resilience Playbook.Join hosts Tova Dvorin and Adrian Culley as they connect the dots between Breach and Attack Simulation (BAS), Adversarial Exposure Validation (AEV), and Continuous Automated Red Teaming (CART) — revealing how these validation layers work together to create a unified framework for cyber resilience. Discover how organizations

en

10:40

Ep. 25: Beyond the Drill: The Power of Continuous...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/22

How can security teams stay truly proactive in a world where adversaries never stop?In this episode of The Cyber Resilience Brief, hosts Tova Dvorin and Adrian Culley explore Continuous Automated Red Teaming (CART) — the next evolution in proactive security validation. They break down how CART extends beyond traditional red teaming and breach simulation, combining automation and intelligence to deliver 24/7, real-time attack validation. Learn how CART helps organizations: Continuously test and

en

12:52

Ep. 24 - BrickStorm: From LoTL to "Living Off the...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/20

In this episode of The Cyber Resilience Brief, host Tova Dvorin and SafeBreach offensive security expert Adrian Culley unpack BrickStorm — a highly sophisticated espionage operation attributed to China-nexus group UNC5221. With an average dwell time of 393 days, this campaign redefines stealth and persistence in cyber warfare.Discover how attackers are “living off the blind spot” by exploiting critical infrastructure gaps in VPNs, VMware vCenter servers, and ESXi hosts — areas traditional security

en

9:54

Ep. 23 - Zeroing In on Adversary Exposure Validation...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/15

In episode 2 of our special 4-part Cybersecurity Awareness Month series, The Cyber Resilience Brief hosts Tova Dvorin and Adrian Culley dive deep into Adversary Exposure Validation (AEV) — the next evolution of Breach and Attack Simulation (BAS) and Continuous Threat Exposure Management (CTEM).Learn how AEV helps organizations move beyond endless vulnerability lists to validate exposures that real adversaries exploit, prioritize based on active threat intelligence, and shift from reactive defense

en

12:00

Ep. 22 - Scattered Spider's Declaration of War:...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/13

In this urgent episode of The Cyber Resilience Brief, host Tova Dvorin and Adrian Culley, Offensive Security Engineer at SafeBreach, break down the shocking manifesto released by Scattered Spider — also known as Lapsus$ and ShinyHunters — the same threat group now linked to the Jaguar Land Rover cyberattack that’s suspected to have Russian ties. As geopolitical tensions rise and Russia’s hybrid cyber warfare intensifies, Scattered Spider’s public “declaration of war” marks a chilling shift: from

en

6:43

Ep. 21 - The October Wake-Up Call: Awareness is Not...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/08

October may be Cybersecurity Awareness Month, but as SafeBreach experts Tova Dvorin and Adrian Culley reveal, awareness alone doesn’t stop attackers. In this kickoff episode of our special four-part Cyber Month series, we explore why traditional awareness training and annual penetration tests aren’t enough in today’s rapidly evolving threat landscape.Adrian and Tova break down: Why awareness ≠ readiness — and the critical role of validation How Breach and Attack Simulation (BAS) turns cyber

en

9:23

Ep. 20 - Changing Faces: Inside the BianLian...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/06

In this episode of The Cyber Resilience Brief, we expose the tactics of one of today’s most agile and financially motivated threat groups: BianLian. Originally known for double extortion ransomware, BianLian rapidly pivoted to pure data theft and extortion—making them harder to stop and faster to profit. SafeBreach offensive security engineer Adrian Culley joins host Tova Dvorin to unpack: How BianLian evolved from ransomware to exfiltration-based extortion. The TTPs behind their attacks, from

en

9:32

Ep. 19 (Special) - The US Government Shutdown and...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/01

As the US government shutdown begins, critical questions emerge about how funding instability threatens the nation’s cyber defense. In this urgent episode of The Cyber Resilience Brief, Tova and Adrian unpack the “dual threat” facing CISA: the looming expiration of the Cybersecurity Information Sharing Act of 2015, and deep budget cuts that could decimate its operational capacity.We explore how these pressures risk crippling CISA’s ability to issue timely, actionable threat alerts—and what that

en

12:28

Ep. 18 - From Logs to Insights: The Power of Parsers...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/10/01

In this episode of the Cyber Resilience Brief, we dive into detection engineering and one of its most powerful tools: parsers. SafeBreach experts Jonathan Tillman and Shachaf Raviv share how parsers transform raw logs into actionable insights, enabling organizations to scale detection engineering, customize security validation, and integrate seamlessly across SIEMs and security controls. --- This episode is also a teaser for our upcoming webinar, “Elevate Detection Engineering at Scale”, where

en

14:36

Ep. 17 - Inside the Dark Web: Lessons Hackers Teach...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/09/24

Step inside the hidden world of the dark web with SafeBreach’s Cyber Resilience Brief. In this episode, Senior Sales Engineer Hudney Piquant shares eye-opening stories from his explorations into hacker forums and ransomware recruitment pipelines.Discover: How cybercrime groups like Conti operate more like corporations than chaos-driven collectives. Why the psychology of hacking—speed, opportunism, and human exploitation—matters as much as technology. How penetration testing and adversary

en

8:58

Ep 16. - Malicious Listeners in Ivanti EPMM: Breaking...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/09/18

In this urgent episode of The Cyber Resilience Brief, host Tova Dvorin and SafeBreach’s Adrian Culley analyze the brand-new CISA AR25-261A report detailing malicious listeners in Ivanti Endpoint Manager Mobile (EPMM). We break down how attackers are exploiting CVE-2025-4427 and CVE-2025-4428, using sophisticated base64-encoded payload delivery to evade detection and establish persistent backdoors.Listeners will learn: How state-sponsored threat groups are targeting multiple industries—including

en

13:47

Ep 15 - Inside the Web of Scattered Spider: Social...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/09/17

Scattered Spider — also known as UNC3944, Oktapus, and Muddled Libra — has quickly become one of today’s most notorious cybercriminal groups. From high-profile breaches at MGM Resorts and Caesars Entertainment to attacks on retailers and airlines, their tactics show that the biggest threat isn’t always malware — it’s social engineering. In this episode of the Cyber Resilience Brief, co-hosts Tova Dvorin and Adrian Culley explore how Scattered Spider operates and what makes them so dangerous. We

en

18:45

Ep. 14 - NIS2 Directive Explained: Strengthening...

The Cyber Resilience Brief: A SafeBreach Podcast ·

2025/09/10

The EU’s NIS2 Directive is reshaping the global cybersecurity landscape with sweeping requirements for essential and important entities, strict reporting obligations, and substantial penalties for non-compliance. In this episode of Cyber Resilience Brief, host Tova Dvorin is joined by Adrian Culley, Senior Sales Engineer at SafeBreach and EU/UK regulatory expert, to unpack what NIS2 means for organizations worldwide.We explore: How NIS2 builds on DORA and connects to the upcoming Cyber Resilience

en

33 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs