Episode 48 Summary – The Insider You Didn't Hire

In this episode, Tabetha Baume explains how artificial intelligence has transformed the insider threat landscape by introducing AI agents that operate inside trusted environments with legitimate access to sensitive systems, data, and organizational workflows.

She examines emerging risks including agentic AI, prompt injection, shadow AI, deepfake impersonation, and fraudulent remote workers to demonstrate how organizations can unknowingly expose themselves to security breaches without traditional hacking or malicious insiders.

Her key message is that organizations must govern AI with the same rigor as human insiders by enforcing least-privilege access, human oversight, AI usage policies, continuous monitoring, and strong verification practices to securely integrate AI into mission-critical environments.

Episode 47 Summary – The Recruiter Who Wasn't

In this episode, Tabetha Baume explains how artificial intelligence has become a new type of insider threat, with AI assistants and autonomous agents operating inside trusted environments with legitimate access to sensitive systems and data.

She examines the risks posed by agentic AI, prompt injection attacks, shadow AI, deepfakes, and fraudulent remote workers to demonstrate how organizations can unknowingly introduce new vulnerabilities without a traditional cyber breach.

Her key message is that organizations must govern AI tools with the same discipline applied to human insiders by enforcing least-privilege access, human oversight, data protection policies, vendor due diligence, and continuous monitoring to safely integrate AI into security-sensitive environments.

Episode 46 Summary – The Academic Front

In this episode, Tabetha Baume explains how foreign adversaries exploit U.S. universities and academic research environments to acquire sensitive technologies, recruit future intelligence assets, and gain access to defense-related research.

She examines the cases of Charles Lieber, Zheng Xiaoqing, and Ji Chaoqun to demonstrate how foreign talent programs, technology theft, undisclosed foreign affiliations, and long-term recruitment efforts target both researchers and emerging professionals.

Her key message is that organizations must strengthen research security, export control compliance, data protection, and insider threat awareness while ensuring researchers and academic partners understand how to recognize, report, and defend against foreign intelligence collection efforts.

Episode 45 Summary – Elicitation Without Direct Questions

In this episode, Tabetha Baume explains how foreign intelligence services use elicitation techniques to gather sensitive information through seemingly harmless conversations rather than direct questions.

She examines the cases of Glenn Duffie Shriver, James Fondren, and Kevin Mallory to show how social interactions, professional networking, and online engagement can gradually evolve into intelligence collection and espionage.

Her key message is that cleared professionals must recognize elicitation tactics, limit sensitive disclosures, maintain strong operational security, and report suspicious contacts early to prevent foreign intelligence exploitation.

Episode 44 Summary – Don't Sleep on These Two

In this episode, Tabetha Baume explains how Iran and North Korea pose significant but often overlooked threats to cleared contractors through cyber operations, insider access, and unconventional intelligence tactics.

She highlights Iran’s cyber campaigns targeting critical infrastructure and defense contractors, as well as North Korea’s scheme of placing intelligence operatives inside U.S. companies through fraudulent remote IT jobs and laptop farm networks.

Her key message is that security programs must expand their focus beyond China and Russia by strengthening cyber defenses, remote hiring verification, insider threat awareness, and reporting processes to counter emerging threats from Iran and North Korea.

Episode 43 Summary – Gold Bars and Ghost Degrees

In this episode, Tabetha Baume examines the case of former CIA official David Rush, who allegedly used falsified credentials and abused his position of trust to steal millions of dollars in government assets, highlighting how insider threats extend far beyond traditional espionage.

She explains how failures in credential verification, continuous vetting, and organizational oversight allowed warning signs to go undetected for years, while emphasizing the importance of recognizing fraud, theft, and unexplained affluence as insider threat indicators.

Her key message is that organizations must strengthen vetting, reporting, and insider threat programs, while ensuring trained personnel remain vigilant for behavioral and financial warning signs that technology alone may not detect.

Episode 42 Summary – Foreign Influence in American Contracting

In this episode, Tabetha Baume explains how foreign-owned entities can access unclassified government contracts with limited ownership scrutiny, exposing major gaps in current contracting systems.

She highlights weaknesses in SAM.gov registration, recent fraud cases involving foreign-controlled companies, and the Department of Defense’s proposed DFARS rule aimed at expanding foreign ownership disclosures.

Her key message is that contractors must better vet ownership structures, teaming partners, and supply chains as the government increases focus on foreign influence and contracting transparency.

Episode 41 Summary – Cloud Computing & Classified Info

In this episode, Tabetha Baume explains the risks and compliance challenges of handling classified information in cloud environments, highlighting frameworks like NISPOM, FedRAMP, and CMMC.

She uses the Microsoft Storm-0558 breach to show how cloud misconfigurations and poor coordination between IT and security teams can expose sensitive government data. She also warns about growing risks from generative AI and shadow IT tools.

Her key message is that strong cloud security requires close collaboration between FSOs and IT teams, continuous monitoring, and proactive security practices to protect sensitive information.

Episode 40 Summary – CFD Podcast: Russia's SVR, FSB, and GRU

In this episode, Tabetha Baume explains how Russia’s intelligence services target cleared U.S. personnel and defense contractors through espionage, cyber attacks, insider recruitment, and AI-driven information operations.

She highlights cases like Robert Hanssen, the Russian illegals network, and Peter Debbins to show how Russian intelligence patiently cultivates insiders and exploits digital platforms, ransomware, and online communities to gather intelligence.

Her key message is that cleared organizations must strengthen cybersecurity, insider threat awareness, and reporting processes to defend against increasingly sophisticated Russian intelligence operations.

Episode 39 Summary – CFD Podcast: The World's Most Active Espionage Machine

In this episode, Tabetha Baume explains how Chinese intelligence agencies actively target the U.S. defense industrial base through cyber operations, LinkedIn recruitment, university partnerships, and insider threats.

She highlights real-world espionage cases like Chi Mak and Kevin Mallory to show how cleared professionals can be exploited through long-term intelligence operations and coercion tactics.

Her key message is that cleared organizations must strengthen counterintelligence awareness, insider threat programs, and reporting processes to better protect personnel, programs, and classified information from ongoing Chinese intelligence collection efforts.