Down the Security Rabbithole Podcast (DtSR)

27:54

DtSR Episode 726 - Three Dollars To Hack Your Stack

Down the Security Rabbithole Podcast (DtSR) ·

2026/10/06

TL;DR: Mehul joins Rafal live from BSides Atlanta to talk about how AI is changing how vulnerabilities are found and exploited at scale and cost. It's an interesting conversation about how much it costs to break into an organization's software stack. Video: https://youtu.be/kGajA9ipsp4 Guest Mehul RevankarDescription A disclosed vulnerability no longer needs weeks of hacker effort. When exploitation becomes an automated, agentic workflow measured in minutes and dollars of compute, the way we ...

en

44:45

DtSR Episode 725 - The Importance of Communicating Value

Down the Security Rabbithole Podcast (DtSR) ·

2026/09/29

TL;DR: This episode is all about an essential skill few of us have mastered. How do you communicate value? What is it? And how do you make sure you're evaluating value in a way that makes sense to the person you're talking to? This is something that's essential to your career, your business, and your life, and Michael is a master of this art. Don't miss this one. Guest: Michael SantarcangeloDescription Most cybersecurity pros know the feeling: you ship real work, you reduce real ri...

en

38:10

DtSR Episode 724 - Unpacking the AI Hysteria

Down the Security Rabbithole Podcast (DtSR) ·

2026/09/22

TL;DR: This week's podcast features Rafal & Anton discussing the hype and hysteria that surrounds today's AI headlines. Which side is right, which side is propaganda, and what's real? Listen and find out. Guest Anton ChuvakinDescription AI panic has officially gone mainstream, and we’re feeling it from every direction: “AI will kill us” on one end and “AI is useless hype” on the other. Rafal brings in Anton Chuvakin to filter the noise and ask a simpler question: what’s actually true...

en

39:15

DtSR Episode 723 - Richard Bird Security is Built Wrong

Down the Security Rabbithole Podcast (DtSR) ·

2026/09/15

TL;DR: This week's guest is Richard Bird, who has a new book coming out. He says, "Cybersecurity measures activity while its adversaries measure opportunity," and thirty years of spending has been priced against the wrong scoreboard. Great start, and you know it's going to get a little punchy. Guest: Richard BirdDescription Cybersecurity spending has exploded for 30 years, and the scoreboard still looks brutal. We sit down with Richard to talk about his new book, “Built Wrong: Why Cybers...

en

48:49

DtSR Episode 722 - Vulnerability Math Ain't Mathing

Down the Security Rabbithole Podcast (DtSR) ·

2026/09/09

TL;DR: Robert "RSnake" Hansen & Jeremiah Grossman join the pod to talk about the "Vuln-pocalypse", or rather, the lack thereof. We do some math, discuss whether it's worth patching vulnerabilities attackers don't exploit, and discuss a potential alternative to the madness of vuln management and patching we're all living with today. Guests Robert "RSnake" HansenJeremiah GrossmanDescription The “vulnerability apocalypse” makes great headlines, but our day-to-day reality is stranger: more sc...

en

66:58

DtSR Episode 721 - Finance Masterclass for Cyber...

Down the Security Rabbithole Podcast (DtSR) ·

2026/09/01

TL;DR: This pod is part 2 of a 2-part series in which Patrick shares his insights on the world of finance as it relates to cyber startups and financing. As promised, the tracksuit shows up, and it's an epic episode! Guest: Patrick Dennis Description Private equity can feel like a plot twist: one day you are celebrating growth, the next day you are hearing new words like EBITDA, leverage, recap, and “value creation plan,” and everything from headcount to product scope is suddenly und...

en

46:35

DtSR Episode 720 - Finance Masterclass for Cyber...

Down the Security Rabbithole Podcast (DtSR) ·

2026/08/25

TL;DR: This week's pod features a Masterclass on finance for Cyber folks, led by Patrick Dennis, where we ask all kinds of questions and go from idea to the pre-growth stage of a company. What's next? Check out part 2 coming next. Guest: Patrick Dennis Description A splashy funding announcement can feel like proof you’re winning, but it can also be the moment the clock gets louder. We sit down with returning guest Patrick Dennis, a multi-time [cybersecurity] CEO and operator who “swims in the...

en

37:05

DtSR Episode 719 - Budget Season for CISOs

Down the Security Rabbithole Podcast (DtSR) ·

2026/08/18

Guests Jack KorzeniowskiKen FosterTL;DR: Budget season is upon us, and Rafal & James sit down with Ken Foster and Jack Korzeniowski to get some insights into how CISOs deal with budgets, separate truth from fiction, and get down into the dirty secrets. Description Budget season can feel like a slow-motion incident response: everyone has competing priorities, nobody wants surprise spend, and security still has to defend the enterprise. We sit down with experienced security leaders to ...

en

35:48

DtSR Episode 718 - Black Hat Recap And The Rush To...

Down the Security Rabbithole Podcast (DtSR) ·

2026/08/11

Guest: Dr. Chase "ZeroTrust" Cunningham TL;DR: AI Marketing slop took over Black Hat Las Vegas 2026, and Rafal sits down for a one-on-one with Chase Cunningham. Featuring their patented level of snark, real analysis, and hype detection, it's a fun conversation. Description Black Hat is supposed to be where the security industry shows its best work. This year, it also showed its biggest temptation: slap “AI” on everything, crank the volume, and sort out the truth later. We break down what we ...

en

40:25

DtSR Episode 717 - Your UI is Bullshit

Down the Security Rabbithole Podcast (DtSR) ·

2026/08/04

Guests: Michael Farnum, Sam Van Ryder TL;DR: Most cybersecurity dashboards don’t fail because they’re ugly. They fail because they don’t change what we do next. Description In Episode 717, Rafal sits down with Michael Farnum (Cybersec Community) and Sam (Dragos, a long-time OT and industrial cybersecurity practitioner) to talk about the uncomfortable truth behind security UI/UX: much of what shows up in the GUI is pure noise. We dig into the split between “pretty but useless” interfaces and t...

en

32:47

DtSR Episode 716 - What if Context Replaced Alerts...

Down the Security Rabbithole Podcast (DtSR) ·

2026/07/28

Guests: Jason Vest & Josh Neil TL;DR: Alert fatigue is still a problem; detection isn't generationally better - but we have all this AI. So what gives? Description Alert fatigue is not just a workload problem; it is a product design problem. We dig into a provocative claim sparked by a LinkedIn post: today’s “AI SOC triage” can be a band-aid if it only cleans up alerts after the fact instead of improving threat detection where it starts, in raw telemetry and early signal extraction. We’r...

en

39:40

DtSR Episode 715 - Reducing The Toil of the SOC Analyst

Down the Security Rabbithole Podcast (DtSR) ·

2026/07/21

TL;DR: David Kennedy & Larry Whiteside, Jr. join the podcast to talk about how 'alerts' are a terrible measure of work in the SOC, and what we're doing about it. We discuss the analyst experience, why it's so difficult and leads to burning our best staff out, and also David introduces his latest: NightBeacon CMD. You need to hear this. I'm starting to edit my own videos, so hopefully you like the new format. YouTube Video: https://youtu.be/aMTFaXwRl_A Have something to say? Let's hea...

en

32:09

DtSR Episode 714 - Limitations and Expectations for...

Down the Security Rabbithole Podcast (DtSR) ·

2026/07/14

TL;DR: This week's pod is the conclusion to the 2-part series on AI SOC with Anton Chuvakin, Daniel Miessler, Rock Lambros, Erik Bloch, and Raja Mukerji. We talk about the rational application of AI to cybersecurity and what the future holds for the various options. You won't want to miss this one. Youtube Video: https://youtu.be/5YIpZuQLTMg Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-=-=-=-=-=-=-=-=...

en

31:45

DtSR Episode 713 - Limitations and Expectations for...

Down the Security Rabbithole Podcast (DtSR) ·

2026/07/07

TL;DR: Join Raja Mukerji, Anton Chuvakin, Daniel Miessler, Rock Lambros, and Erik Bloch for a banger of an episode (part 1 of 2) where we debate the potential of AI and the current state of delivery for SOC and security applications. This episode was made possible by a group of people with much better things to do than record a podcast who donated their time. Please join me in thanking them for their generous contributions. YouTube video: ...coming soon, blame Anton Have something to say? Let...

en

32:22

DtSR Episode 712 - Lies My AI SOC Salesman Tells

Down the Security Rabbithole Podcast (DtSR) ·

2026/06/30

TL;DR: Seth Summersett of Embed Security joins the podcast to talk about the snake oil that's coming from the AI SOC sellers. There's such a significant gap between what you're being sold and what's real. Seth and the gang talk about what's real, what you should expect, and where the line of bullsh** is. YouTube video: https://youtube.com/live/Z8R19cjTjwA? Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-...

en

34:14

DtSR Episode 711 - Tim Chase Boring but Necessary

Down the Security Rabbithole Podcast (DtSR) ·

2026/06/23

TL;DR: This week's pod features Tim Chase, a field CISO and, by background, a practitioner. We talk about "prioritization", a topic that's boring but incredibly necessary, as I am confident nobody out here has this solved yet! YouTube Video: https://youtube.com/live/099rUu0pV0g Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= YouTube hom...

en

47:14

DtSR Episode 710 - Leading and Innovating in Security

Down the Security Rabbithole Podcast (DtSR) ·

2026/06/16

TL;DR: This week's podcast features Adam Ely - innovator, leader, and founder. Adam's led some of the world's largest security orgs, and started a tiny start-up. He's got knowledge and wisdom to share, so take it in. YouTube video: https://youtube.com/live/PVTDaiiwlMs Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= YouTube home: https://yout...

en

15:54

DtSR Episode 709 - Zero Trusting OT

Down the Security Rabbithole Podcast (DtSR) ·

2026/06/09

TL;DR: Phillip Wylie joins Rafal live from Zero Trust World 2026 in Orlando, FL, to talk about Operational Technologies (OT) in the context of Zero Trust. As the Joker once said, "Hubba Hubba, who do you trust?" YouTube: https://youtu.be/N5sI85IwxIQ Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= YouTube home: https://youtube.com/playlist?li...

en

52:41

DtSR Episode 708 - Does AI Give Threat Actors an...

Down the Security Rabbithole Podcast (DtSR) ·

2026/06/02

TL;DR: This week's pod features Karim Hijazi, Adam Meyers, and Will Gragido on AI and the potential advantages for adversaries. It's a fascinating discussion with in-depth analysis, commentary, and relatable stories that will give you the insights you can't get anywhere else. Buckle in, this one's an hour but completely worth it. YouTube Video: https://www.youtube.com/live/w7nBe_uS8G4 Energy-Based Model company (that Karim referenced): https://logicalintelligence.com/ Have something...

en

44:56

DtSR Episode 707 - Impact of AI on the Intelligence Game

Down the Security Rabbithole Podcast (DtSR) ·

2026/05/26

TL;DR: Today's pod features Will Gragido, a multi-time returning guest with deep expertise in cyber intelligence, threat actors, and related activity. Will shares his expertise with us on how AI will impact the gathering, analysis, dissemination, and utilization of adversary and threat intelligence. YouTube Video: https://youtube.com/live/l7mrBPRTokQ Have something to say? Let's hear it. Support the show >>> Please consider clicking the link above to support the show! -=-=-=-=-=...

en

All Episodes

Similar Podcasts

Expres Ráno

Expres FM

Squiz Today

Squiz Media

The Good Builder Podcast

The Good Builder

7am

Solstice Media

News Sight

Joseph Ford Cotto, DBA