Just in time for spooky season, this episode takes you into the darkest corners of the cyber underworld, where the real monsters aren’t ghosts or goblins, but ransomware gangs lurking in the shadows.

We sat down with Matthew Maynard (3.42), a cybersecurity pro by day and a real-life cyber ghostbuster by night, who doesn’t just hunt vulnerabilities, but haunts the hackers themselves.

While most bug bounty programs reward researchers for finding flaws, Matthew’s work is far more chilling (and thrilling). As part of threat intelligence programs like Halcyon’s Threat Research Intelligence Program (TRIP), he infiltrates ransomware gangs, extracts their secrets and helps shut down their operations before they strike.

For CISOs and executives, Matthew’s experience offers a rare and critical perspective on how to shift from reactive fire-drills to proactive threat hunting. By leveraging dark web intelligence, undercover engagements, and threat actor profiling, security leaders can anticipate attacks, disrupt criminal operations, and even recover stolen data before it’s too late.

Generative AI is poised to revolutionize vulnerability discovery in critical infrastructure, but will it actually fix the problem, or just shift the burden?

The recent AI Cybersecurity Challenge (AIxCC), a two-year competition sponsored by the US Defense Advanced Research Projects Agency (DARPA) and Advanced Research Projects Agency for Health (ARPA-H), crowned winners whose AI systems autonomously discovered and patched zero-day flaws in real-world code.

Now, with models potentially going open-source, the implications for defenders, attackers and policymakers are seismic.

In this episode, we sat down with Taesoo Kim, the leader of Team Atlanta, the AIxCC winning team, and Andrew Carney, program manager for the AIxCC at DARPA and ARPA-H.

In the interview (13.56), they discuss why the commercialization of GenAI-powered vulnerability scanning tools could be just around the corner and how "self-healing infrastructure" might soon become a reality.

In this special episode of the Infosecurity Magazine podcast, we dive deep into the rapidly evolving story surrounding Microsoft SharePoint On-Premises.

Recent disclosures have revealed a series of vulnerabilities now being exploited in targeted campaigns, with Chinese threat actors at the centre but other threat actors joining in the attacks.

This episode breaks down the complexities of the incident, the ongoing exploitations and the broader implications for security practitioners. Stay updated as this story unfolds and equip yourself with valuable insights to better understand and defend against emerging cyber threats.

Our discussion includes:

Timeline of events surrounding the ToolShell Microsoft SharePoint on-prem vulnerability (02.20)

Interview with Charles Carmakal, CTO at Mandiant, now part of Google Cloud (06.38). Charles details these critical vulnerabilities and steps towards patching and what some orgnaizations may be missing, leaving them vulnerable to compromise.

Interview Lorri Janssen-Anessi, Director of External Cyber Assessments at BlueVoyant. With extensive experience from her time at the NSA and the Department of Homeland Security, Lorri provides an in-depth perspective on the impact these attacks are having and what they mean for organizations today. (17.18)

Sing up to receive Infosecurity Magazine's weekly newsletter here.

In this Infosecurity podcast episode, the team dive into the details of Donald Trump's June 2025 Cybersecurity Executive Order (EO).

This EO revises previous orders from both Barack Obama and Joe Biden, while also removing a host of requirements from Biden's January 2025 EO.

From software supply chains and quantum computing to the research and testing of AI for cyber defense, this new order covers a wide array of critical cybersecurity topics.

To unpack the details of the latest EO We sit down with Nick Reese, the co-founder and COO of Frontier Foundry, a Professor at New York University and a member of the Homeland Security Advisory Board at the George Washington University.

Reese brings invaluable experience from his time as Director for Emerging Technology Policy at the US Department of Homeland Security (2019-2023).

In our discussion, we break down the intricate details of the executive order, helping us understand its provisions and the nuances of the changes it introduces to the cybersecurity landscape.

Sing up to receive Infosecurity Magazine's weekly newsletter here.

In this episode of the Infosecurity Magazine podcast we dive into the exciting world of Infosecurity Europe.

Two veteran cybersecurity pros share their expert advice on how to get the most out of your visit to one of the industry's premier events.

Heather Lowrie, former CISO and co-founder of Resilionix, and Jon Davies, Director - Cyber, KPMG share their perspectives on emerging cybersecurity themes to expect at the event and their reflections on how Infosecurity Europe has evolved over the years.

We touch on how to navigate the diverse offerings at Infosecurity Europe, the value of engaging in Table Talks and Masterclasses and how to best plan your visit.

This episode is packed with valuable insights to help you maximize your experience at Infosecurity Europe.

Infosecurity Europe returns from 3rd to 5th June, 2025, at London’s Excel, celebrating its 30th anniversary. Registration is now open at infosecurityeurope.com.

Find out more about Infosecurity Europe via the website here. https://www.infosecurityeurope.com/en-gb/lp/register-now.html?utm_source=advert&utm_medium=referral&utm_campaign=infosecurity_magazine&utm_content=&utm_term=

Discover more from our sponsor, Vanta, here. https://www.vanta.com/demo-uk?utm_campaign=emea_generic&utm_source=info-security&utm_medium=podcast

Sing up to receive Infosecurity Magazine's weekly newsletter here. https://www.infosecurity-magazine.com/my-account/login/

In this episode of Infosecurity Magazine's podcast, we delve into the critical realm of vulnerability management, exploring the pivotal roles played by two US government-funded security programs that today are under pressure as vulnerability reporting explodes.

Join us as we discus the latest developments involving the National Vulnerability Database (NVD), operated by a dedicated team within NIST, which has been under pressure for the last 12 months.

We’ll also touch on the recent uncertainty relating to the CVE Program, sponsored by the US Department of Homeland Security (DHS) and CISA and managed by the non-profit MITRE Corporation.

These programs serve as essential data sources for organizations worldwide, enabling them to identify, prioritize and remediate vulnerabilities effectively.

Our discussion is enriched by insights from expert guests, including:

• Brian Martin, former member of the CVE Board (10:23)

• Stephen Shaffer, a principal security engineer at a leading pharmaceutical company (26:55)

• Rose Gupta, Cyber Exposure Management Lead at AssuredPartners (39:43)

Discover more from our sponsor, Vanta, https://www.vanta.com/demo-uk?utm_campaign=emea_generic&utm_source=info-security&utm_medium=podcast

Sing up to receive Infosecurity Magazine's weekly newsletter https://www.infosecurity-magazine.com/my-account/login/

With 4.3 million devices infected and 3.9 billion stolen passwords shared by hackers, infostealers have emerged as one of the dominant malware threats of 2024.

According to recent reports from Kela and Huntress, these stealthy attackers are now involved in one in four cyber-attacks, making them a major concern for individuals and organizations alike.

In our latest podcast episode, we take a closer look at the rise of infostealers and what you can do to protect yourself from these insidious threats.

You will hear from Leonid Rozenberg, Cybercrime and Threat Intelligence Researcher at Hudosn Rock about:

Infostealers’ ability to steal passwords stored in browsers and other malware features that most people don’t usually talk about (7:24)

The latest trends in infostealer development, deployment and distribution in 2025 (26:40)

How organizations and individuals can prevent and mitigate the infostealer threat (32:07)

Discover more from our sponsor, Vanta, here. https://www.vanta.com/demo-uk?utm_campaign=emea_generic&utm_source=info-security&utm_medium=podcast

Sign up to recieve Infosecurity Magazine's weekly newsletter here.https://www.infosecurity-magazine.com/my-account/login/

Listen to this episode of the Infosecurity Magazine podcast for your comprehensive guide to Infosecurity Europe 2024, taking place at the Excel London from 2-6 June.

This episode dives deep into Europe's leading information security event, featuring insights from seasoned attendees Paul Watts, Distinguished Analyst and vCISO at the Information Security Forum, and Mun Vajil, CISO at Trainline.

Listen to learn:

• What Infosecurity Europe is all about and how to register.

• Proven strategies to maximize your experience, whether you're a first-timer or a veteran.

• Highlights of the conference program, including must-see sessions, key topics and exclusive speakers.

• How to navigate the exhibition and connect with leading cybersecurity vendors.

Plus, get valuable tips to help you make the most of your Infosecurity Europe experience.

Click here to register for Infosecurity Europe 2024: https://www.infosecurityeurope.com/en-gb.html

This episode of the Infosecurity Magazine Podcast dives deep into the recent cyber-attack on Change Healthcare, a major player in US healthcare billing and data.

The attack's impact went beyond data breaches, disrupting prescriptions, payments, and causing significant financial losses.

Hear from:

Wes Wright, Chief Healthcare Officer at Ordr, (08.37) who explains how the attack rippled through the healthcare system.

Victor Acin, Head of Threat Intel at Outpost24, (26.00) who sheds light on the ransomware gang that targeted Change Healthcare and why healthcare is a prime target

The discussion explores the attack's tactics, the future of Ransomware-as-a-Service (RaaS), and what lessons healthcare can learn to improve its cybersecurity posture.

Operation Cronos took the cybersecurity world by storm as law enforcement disrupted one of the most prolific ransomware gangs in the world.

Now the dust has settled it’s time for a first assessment of the takedown’s impact on the LockBit ransomware group.

In this episode, the Infosecurity Magazine team goes behind the scenes of the law enforcement operation with Prodaft, a threat intelligence company that collaborated with the FBI, the NCA, and Europol to take down the group’s infrastructure.

We also dissected the operation’s impact on LockBit’s activity and explored what the future holds for this notorious cybercriminal organization, with great insights from RedSense, another threat intelligence firm that spent three years investigating the group.

You will hear from:

-Koryak Uzan, co-founder of Prodaft (6.52)

-Marley Smith, principal threat researcher at RedSense and Yelisey Bohuslavskyi, RedSense co-founder (31.36)