x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Threat Talks - Your Gateway to Cybersecurity Insights

Threat Talks is your cybersecurity knowledge hub. Unpack the latest threats and explore industry trends with top experts as they break down the complexities of cyber threats. We make complex cybersecurity topics accessible and engaging for everyone, from IT professionals to every day internet users by providing in-depth and first-hand experiences from leading cybersecurity professionals. Join us for monthly deep dives into the dynamic world of cybersecurity, so you can stay informed, and stay

news tech news

All Episodes

17:15

Bad Successor: The Service Account Flaw to Watch

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/09

It was built to secure service accounts.Instead, it became the cleanest privilege-escalation vector of 2025.They called it Bad Successor (A.K.A. CVE-2025-53779).A new “secure by design” feature in Windows Server 2025 -DMSA -was supposed to fix service account hygiene. Instead, it introduced a loophole where attackers could claim successor status, skip password requirements, and silently inherit elevated rights from any target account.Including domain admin.Even after Microsoft patched the

en

45:18

From Hacker to Hero

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/03

What if your next great cyber defender is a teenager gaming in their bedroom right now?In this Threat Talks episode, Lieuwe Jan Koning and former FBI Supervisory Special Agent William McKean (founder of The Redirect Project) explore how young digital natives go From Hacker to Hero.They chart the journey from gaming and online communities to risky first hacks and real-world intrusions. Then they show how to redirect that curiosity away from cybercrime and into ethical hacking, cyber defense,

en

18:27

The Npm Worm Outbreak

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/25

The world’s biggest open-source ecosystem - npm - faced its first self-spreading worm.They called it Shai Hulud.It didn’t just infect one package. It infected developers themselves.When a maintainer got phished, the worm harvested credentials, hijacked tokens, and created new CI/CD workflows to keep spreading - automatically.No command-and-control. No manual uploads. Just a chain reaction across the npm registry.And while the world was busy shouting about “2.6 billion downloads affected,”

en

21:32

Inside the SalesLoft Breach

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/18

You were promised safe SaaS - but got silent data loss.In Inside the Salesloft Breach, Rob Maas and Luca Cipriano expose how trusted integrations became the attack vector.They trace how vishing calls, trojanized Salesforce tools, and GitHub-to-AWS pivots gave attackers OAuth access and drained CRMs without a single alert. You’ll hear how Drift integrations and bulk SOQL queries quietly moved data out of sight, while audit trails and API metadata disappeared.If you need provable control over

en

35:01

The App Store Nightmare: Why AI MCP Stores Are a Trap

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/11

The new AI app store is here - and it’s already making choices for your company. This episode shows you how to spot it, stop it, and stay safe.Host Lieuwe Jan Koning with RobMaas (Field CTO, ON2IT) explain the app storenightmare in plain language. A new system (MCP) lets AI tools like ChatGPT, Claude, and Gemini do tasks for you - sometimes too much. When a bad tool or a sneaky document gets in, it can read, send, or delete things without you noticing.Real cases, real damage:Postmark MCP

en

49:03

The Secret Diplomats Fighting Cyber Wars

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/04

Cyber defense doesn’t just happen in code. It’s shaped in conversation. Behind every cyber norm or sanction, there’s a diplomat working to stop digital wars before they start. In this episode of Threat Talks, Lieuwe Jan Koning (CTO & co-founder of ON2IT) sits down with Ernst Noorman, Ambassador at Large for Cyber Affairs for the Kingdom of the Netherlands. They reveal how backchannel talks, sanctions, and shared rules define what countries can and can’t do in cyberspace, and what CISOs

en

18:17

Patch Smarter, Not Harder

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/10/28

Patch smarter, not harder.Lieuwe Jan Koning and ON2IT Field CTO Rob Maas break down why “patch everything now” isn’t a strategy, but a risk multiplier. In this session, they teach a practical patching strategy: know your assets, patch edge first, stage updates, and use Zero Trust segmentation to choke off exposure so you only patch what truly matters: fast, safely, and without outages.(00:00) - 01:11 - Intro (01:11) - - 02:28 - Reality check #1: Not everything can be patched (02:28) - -

en

34:41

Public Key Infrastructure: The Foundation of Digital...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/10/21

How solid is your digital trust—or are you just hoping your PKI is secure?Let’s be honest: too many companies run on borrowed trust and forgotten certificates. In this episode of Threat Talks, ON2IT’s Lieuwe Jan Koning and Rob Maas pull back the curtain on what really holds your digital world together—and what can tear it down overnight.They break down PKI in plain language: the root of trust that must stay locked away, the intermediates that keep your systems running, and the automation

en

21:53

Why Your Cyber Hygiene Matters?

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/10/14

One unlocked phone can unravel the defenses of a billion-dollar enterprise—because in cybersecurity, small mistakes don’t stay small for long. Attackers can read notes, steal IDs, or impersonate you on WhatsApp. A reused password can launch a remote tool that looks completely legitimate.Rob Maas (Field CTO, ON2IT) and Luca Cipriano (Cyber Threat Intelligence Program Lead, ON2IT) reveal how poor cyber hygiene erodes trust, endangers partners, and weakens enterprise defenses.CISOs, CIO and IT

en

56:26

Resilience Over Fragmentation: The Risk You Can’t Ignore

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/10/07

The internet promised freedom. Now it monetizes you. The trade-off? Convenience for control.In this episode, Lieuwe Jan Koning and Prof. Jacobs reveal how scattered tools like meta and X create security gaps—and how one policy, fewer interfaces, and less data shared cut exposure and keep operations running.Real examples you’ll hear:• The neighborhood chat stuck on WhatsApp—and how switching to Signal breaks dependency.• How your address book upload leaks other people’s data to platforms.•

en

17:28

Zero Trust Step 5B: Maintain Controls

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/09/30

Boards don’t buy dashboards—they buy assurance. Breaches are late-stage symptoms of drift: rules pile up, logs lose signal, cloud/Kubernetes outpace governance. Lieuwe Jan Koning (ON2IT Co-Founder) and Rob Maas (Field CTO) show how Zero Trust Step 5B (Maintain) proves your controls still work—today.(00:00) - — Welcome & Zero Trust Step 5B(00:57) - — Five steps: fast recap (03:12) - — Maintain = policy validation (05:31) - — Vendor updates, hidden features (08:46) - — Traffic flows

en

30:32

Defend Against Hacktivist Groups like APT Handala |...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/09/23

Hacktivists don’t need zero-days to hurt you—they weaponize people. Host Lieuwe Jan Koning sits down with Yuri Wit (SOC analyst) and Rob Maas (Field CTO) to dissect APT Handala: how they hunt targets, deliver wipers, and brag about leaks. We map their moves to the Lockheed Martin Kill Chain and turn it into a Zero Trust defense playbook you can actually use—today.(00:00) - - 01:40 - Introduction(01:40) - - 02:27 - What is APT Handala? (02:27) - - 05:27 - Kill Chain Step 1:

en

19:10

Promptlock – The First AI-Powered Malware | The Cyber...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/09/16

First documented case: AI inside the breach.Promptlock marks the first time malware has used AI during execution, not just in preparation. In this Threat Talks deep dive, Rob Maas (Field CTO, ON2IT) sits down with Yuri Wit (SOC Analyst, ON2IT) to break down how it works: a Go loader calling an attacker’s LLM in real time, generating fresh payloads that adapt on the fly.This episode strips away sci-fi hype. You’ll see the psychology of an adversary that thinks mid-attack—and the Zero Trust

en

21:58

Data Bouncing: How HTTP Headers Leak Data | The Cyber...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/09/09

Your tools say “secure.” Your headers say “leaking.”In this Threat Talks Deep Dive, ON2IT’s Luca Cipriano (CTI & Red Team Lead) exposes Data Bouncing—a stealthy exfiltration trick that hides inside HTTP headers and abuses DNS lookups through trusted third parties. We show the demo, decode the psychology of the attack, and translate it into Zero Trust moves you can deploy today.(00:00) - – Why your defenses aren’t enough(00:11) - – What is Data Bouncing? (01:22) - – How attackers

en

44:54

AI, Play It Safe: Why CISOs Are Wrong to Ban AI

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/09/02

Playing it safe with AI sounds smart, but is banning it really how you prevent data leaks?In this episode of Threat Talks, ON2IT’s Lieuwe Jan Koning (ON2IT Co-Founder) sits down with Rob Maas, Field CTO at ON2IT, to tackle the hard question: How can CISOs and security leaders embrace AI safely—without exposing their organization to destructive data leaks?From Samsung’s ChatGPT ban to real-world AI hallucinations, we unpack why “AI, play it safe” doesn’t mean blocking innovation—it means

en

25:16

Zero Trust step 5A: Stop Breaches—Inspect Every Event...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/08/26

Zero Trust step 5A is where monitoring turns raw logs into decisive action.Hosts Lieuwe Jan Koning and Rob Maas (Field CTO, ON2IT) expose why MDR alone isn’t protection—and how context closes the gap. Learn to inspect every event, use Indicators of Good/Compromise, and set Rules of Engagement that stop lateral movement and alert fatigue.(00:00) - — Welcome & Step 5A (Monitor) setup(00:37) - — Steps 1–4 recap: protect surfaces, flows, architecture, policy (04:12) - — MDR vs

en

25:11

From Stealth to Wipers: Inside Russia’s APT 44 AKA...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/08/19

Russia’s most notorious cyber unit—Seashell Blizzard (also known as Sandworm, APT 44 and Iron Viking)—has taken down shipping giants, Olympic systems, and Ukraine’s power grid.In this Threat Talks deep dive, Lieuwe Jan Koning, Yuri Wit (Red Team), and Rob Maas (Blue Team) reveal exactly how these attacks unfold, why they’re so hard to stop, and how Zero Trust can tip the balance back to defenders.(00:00) - – Cyber warfare in the Ukraine conflict: setting the stage(01:10) - – Who is

en

13:45

Signal Gate: One Wrong Number Triggered the Largest...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/08/12

One mis-typed contact detonates Signal Gate, turning “secure” messaging into a classified-data leak.Host Lieuwe Jan Koning (Co-founder, ON2IT) and Thomas Manolis (Security Officer, AMS-IX) lay out the breach blow-by-blow—then drop the Zero Trust, Shadow IT and information-governance tactics every CISO needs before the next incident hits.High stakes, hard lessons—compressed into actionable steps you can brief to the board.Timestamps00:00 Cold-open: “wrong recipients” analogy00:37 What really

en

39:31

Splinternet Reality Check: Zero Trust Strategies for...

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/08/06

ON2IT’s Lieuwe Jan Koning goes one-on-one with AMS-IX CEO Peter van Burgel to expose why the once-open internet is splintering into rival, firewalled regions. Discover the geopolitical forces fueling this cybersecurity trend. Learn the Zero Trust resilience moves CISOs must deploy to stay sovereign in the future of the internet.Key Topics Covered• Drivers behind the Splinternet & what they mean for CISOs• Scenario-planning methodology for threat forecasting• Aligning Zero Trust with

en

13:55

Zero Trust Step 4B: How to Secure Admin Access

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/07/29

Administrative accounts come with serious power – and serious power, comes with serious risk.In part B of our deep dive into step four of Zero Trust (create Zero Trust policy), host Lieuwe Jan Koning and ON2IT Field CTO Rob Maas unpack how to build Zero Trust policies specifically for administrative access. They explore:1) Why admins are a high-value target – and what that means for policy2) How to build secure jump hosts and enforce strict access controls3) What ‘separation of identity’

en

100 results

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS News

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci