x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Threat Talks - Your Gateway to Cybersecurity Insights

Threat Talks is your cybersecurity knowledge hub. Unpack the latest threats and explore industry trends with top experts as they break down the complexities of cyber threats. We make complex cybersecurity topics accessible and engaging for everyone, from IT professionals to every day internet users by providing in-depth and first-hand experiences from leading cybersecurity professionals. Join us for monthly deep dives into the dynamic world of cybersecurity, so you can stay informed, and stay

news tech news

All Episodes

14:48

React2Shell Explained

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/03/24

Log4j caught everyone off guard. React2Shell might be doing the same right now.Across thousands of React apps, exposure is already baked in - accelerated by vibe coding and shipped without scrutiny.In some cases, one request is all it takes.React2Shell turns that exposure into remote code execution in React and Next.js environments -triggered by a single HTTP POST request.In this episode of Threat Talks, host Rob Maas and SOC analyst Yuri Wit break down how React2Shell works, why it’s more

en

22:54

Zero Trust in the AI Era

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/03/17

AI can fake your voice.Deepfakes can move millions of dollars in minutes. And attackers no longer need to break trust - they can simulate it.Security teams are entering an era where nothing can be trusted at face value.In part two of our Zero Trust series with Dr. Zero Trust, Chase Cunningham, he and Lieuwe Jan Koning (Co-Founder and CTO at ON2IT Cybersecurity) explore what the future of Zero Trust looks like in an AI-driven world. How do you verify identity when voices and faces can be

en

20:21

Zero Trust: From Revolution to Reality

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/03/10

Zero Trust is easy to say. Hard to execute.Most organizations try to build it themselves.Most underestimate the complexity.Most get stuck in architecture diagrams instead of protecting what actually matters: data.If execution determines success – should you really be doing it alone?In this episode of Threat Talks, Lieuwe Jan Koning, Co-Founder and CTO at ON2IT Cybersecurity, sits down with Dr. Chase Cunningham, architect of the Zero Trust Extended (ZTX) framework, to break down what Zero

en

29:45

China is Already Inside your infrastructure

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/03/03

China is Already Inside your infrastructure. And the EU is done ignoring it.In this exclusive first discussion of the upcoming EU Cybersecurity Act revision, Bart Groothuis, MEP, joins Lieuwe-Jan Koning, CTO and Co-Founder, to explain why vendor dependency is now a board-level security risk.Groothuis breaks down how the revised EU Cybersecurity Act will shift Europe from soft guidance to hard enforcement - introducing formal “high-risk vendor” treatment inside critical infrastructure.This

en

19:56

OpenClaw and The Dark Side of Agentic AI

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/02/24

Your biggest threat this year isn’t malware. It’s your own AI assistant.OpenClaw connects an LLM directly to your terminal, browser, email, and chat. It runs with your permissions. It executes tasks without hesitation.Days after launch, researchers found a One-Click RCE.Cisco called it a security nightmare.Gartner called it an unacceptable risk.OpenClaw (formerly known as Clawdbot and Moltbot) represents a new phase of agentic AI: autonomous assistants operating inside your environment with

en

13:57

Inside the MongoBleed Memory Leak

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/02/17

Imagine your memory just became the attack surface.That’s MongoBleed. Or as others know it: CVE-2025-14847. No passwords to crack, no complex exploit chain. Just normal protocol behavior, repeated at scale.Each request leaks a little more MongoDB memory until something valuable shows up, even in environments that already follow network segmentation best practices.Rob Maas (Field CTO, ON2IT) hosts Luca Cipriano (CTI & Red Team Program Lead) to dissect MongoBleed, an unauthenticated

en

21:59

How to pass any cybersecurity certification

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/02/10

Certifications play a central role in cybersecurity career development.Yet many experienced engineers find themselves failing exams they should easily pass.The problem isn’t a lack of knowledge or skills.It’s the disconnect between real-world security work, and certifications built around memorization, UI trivia, and version-specific details that will be obsolete in two months.In this episode of Threat Talks, Rob Maas (Field CTO, ON2IT) and Nicholai Piagentini(Technical Enablement Engineer,

en

47:12

The Battle of Defending a Digital City

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/02/03

When it comes to running an airport, there’s no room for error.Any casualty is one too much. That’s the reality of all airports, including DFW Airport. It’s a 28-square-mile operation, bigger than the island of Manhattan, functioning as a city with its own police, fire services, OT environments, and always-on digital infrastructure. In this Threat Talks episode, Lieuwe-Jan Koning (Co-Founder and CTO, ON2IT) sits down with Eric Bowerman (CISO of DFW Airport), to unpack how cybersecurity

en

18:12

From IPs to people

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/01/27

Detection fails without identity. When activity isn’t tied to a person, anomalies stop telling a story - they’re just signals without context. And when your logs only show IP addresses, your security team is left responding to shadows, not real risk. In this Threat Talks Deep Dive, Rob Maas (Field CTO, ON2IT) and Nicholai Piagentini (Technical Enablement Engineer, ON2IT) show how identity-based firewalling fixes that-by enforcing policy based on who the user is, not where they connect

en

47:38

Beyond NIS2 Compliance

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/01/21

Most organizations ask one question: “Are we compliant?”The question that actually matters is: “Will we still be operating when things go wrong?”In this Threat Talks episode, Lieuwe Jan Koning speaks with Jasper Nagtegaal about what NIS2 is really trying to change - and why cyber resilience fails when organizations treat it as a policy exercise instead of a business risk.This isn’t about regulators.It’s about how digital risk is explained, understood, and acted on - from technical teams to

en

37:32

Maritime Cybersecurity: Predictable = Hackable

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/01/13

You’re Port Control. A vessel requests entry.No captain. No crew. Just autonomy.In maritime cybersecurity, the risk isn’t that the ship is autonomous.It’s that you no longer know who’s steering.Lieuwe Jan Koning (Co-Founder & CTO, ON2IT) joins Stephen McCombie (Professor of Maritime IT Security, NHL Stenden) and Hans Quivooij (CISO, Damen Shipyards) to expose the illusion of control in autonomous shipping - where technology moves fast, responsibility blurs, and regulation lags

en

38:25

Before the Mayday: Cyber Attacks at Sea

Threat Talks - Your Gateway to Cybersecurity Insights ·

2026/01/06

Could Stuxnet happen again - this time at sea?In this Threat Talks episode, host Lieuwe Jan Koning sits down with Professor Stephen McCombie, global expert in maritime cybersecurity, to unpack real-world cyber attacks on critical infrastructure and why the maritime sector is dangerously exposed.From GPS spoofing and insider threats to aging ship systems and state-sponsored attacks, this conversation reveals how maritime cyber risk is no longer theoretical - it’s already disrupting global

en

41:07

Looking Back at 2025: Cybersecurity at a Turning Point

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/30

2025 was the year detection stopped being enough.Because attacks stopped behaving the way detection was built to handle.OT systems were hit with real-world consequences. AI stopped being just a productivity tool and became an attacker. And SOCs discovered - often painfully - that speed alone still means reacting too late.In this special end-of-year Threat Talks episode, Lieuwe Jan Koning is joined by Luca Cipriano, Yuri Wit, and Rob Maas, all in ugly Christmas sweaters, to unpack why the

en

22:02

BGP Vortex: Internet Kill Switch?

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/23

Could a single BGP trick really break the internet?A new “BGP Vortex” claim says yes - by abusing route oscillation and BGP communities to trigger endless update loops and exhaust router CPU. So we check what actually holds up in the real world.In this Threat Talks Deep Dive, Rob Maas, Field CTO at ON2IT, sits down with Eric Nghia Nguyen Duy, Network Engineer at AMS-IX, to understand what BGP (short for Border Gateway Protocol) actually does, how the proposed Vortex mechanism works (route

en

22:57

WSUS RCE: Update Weaponized

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/16

Attackers are abusing a WSUS flaw - Microsoft’s Windows Server Update Services - to detonate PowerCat, spawn reverse shells, and plant ShadowPad. All from the update server your entire Windows estate trusts by default.One weak crypto key and a broken deserialization function let attackers hit your WSUS server with unauthenticated SYSTEM-level code execution. Chinese APT groups are already exploiting it to drop malware in memory, blend into legitimate WSUS traffic, and pivot deeper into the

en

17:15

Bad Successor: The Service Account Flaw to Watch

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/09

It was built to secure service accounts.Instead, it became the cleanest privilege-escalation vector of 2025.They called it Bad Successor (A.K.A. CVE-2025-53779).A new “secure by design” feature in Windows Server 2025 -DMSA -was supposed to fix service account hygiene. Instead, it introduced a loophole where attackers could claim successor status, skip password requirements, and silently inherit elevated rights from any target account.Including domain admin.Even after Microsoft patched the

en

45:18

From Hacker to Hero

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/12/03

What if your next great cyber defender is a teenager gaming in their bedroom right now?In this Threat Talks episode, Lieuwe Jan Koning and former FBI Supervisory Special Agent William McKean (founder of The Redirect Project) explore how young digital natives go From Hacker to Hero.They chart the journey from gaming and online communities to risky first hacks and real-world intrusions. Then they show how to redirect that curiosity away from cybercrime and into ethical hacking, cyber defense,

en

18:27

The Npm Worm Outbreak

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/25

The world’s biggest open-source ecosystem - npm - faced its first self-spreading worm.They called it Shai Hulud.It didn’t just infect one package. It infected developers themselves.When a maintainer got phished, the worm harvested credentials, hijacked tokens, and created new CI/CD workflows to keep spreading - automatically.No command-and-control. No manual uploads. Just a chain reaction across the npm registry.And while the world was busy shouting about “2.6 billion downloads affected,”

en

21:32

Inside the SalesLoft Breach

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/18

You were promised safe SaaS - but got silent data loss.In Inside the Salesloft Breach, Rob Maas and Luca Cipriano expose how trusted integrations became the attack vector.They trace how vishing calls, trojanized Salesforce tools, and GitHub-to-AWS pivots gave attackers OAuth access and drained CRMs without a single alert. You’ll hear how Drift integrations and bulk SOQL queries quietly moved data out of sight, while audit trails and API metadata disappeared.If you need provable control over

en

35:01

The App Store Nightmare: Why AI MCP Stores Are a Trap

Threat Talks - Your Gateway to Cybersecurity Insights ·

2025/11/11

The new AI app store is here - and it’s already making choices for your company. This episode shows you how to spot it, stop it, and stay safe.Host Lieuwe Jan Koning with RobMaas (Field CTO, ON2IT) explain the app storenightmare in plain language. A new system (MCP) lets AI tools like ChatGPT, Claude, and Gemini do tasks for you - sometimes too much. When a bad tool or a sneaky document gets in, it can read, send, or delete things without you noticing.Real cases, real damage:Postmark MCP

en

115 results

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS News

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci