Inside Cyber Minds S3E6 — Dr. Martin Strohmeier on aviation cybersecurity, aircraft hacking, and the vulnerabilities in CPDLC — the "instant messaging" system between pilots and air traffic control. Martin is a senior cybersecurity scientist at the Cyber-Defence Campus of armasuisse (Swiss DoD), co-founder of the OpenSky Network, and presented his CPDLC attack research at DEF CON. Recorded onsite at DEF CON. 🎯 Free Cyber Security Career Guide — the roles, skills, certs, and shortest route into cybersecurity (bonus: unlocks a free LufSec lesson):👉 https://www.lufsec.com/products/digital_downloads/cyber-security-career-guide?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e6 🛡️ Build hands-on offensive security and wireless hacking skills with LufSec courses:👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e6-course ------------------------------------------------------- Much of the communication keeping aircraft safe was designed decades ago — with no encryption and no authentication. Martin's research shows what that means today: attackers with cheap radio equipment can read and spoof messages in systems like CPDLC, the datalink pilots and controllers increasingly use instead of voice. In this episode we cover how aviation protocols get hacked, what he presented at DEF CON, how the OpenSky Network turned crowdsourced ADS-B receivers into a global research platform, what it's like doing offensive research inside a defense ministry, and how AI is changing aviation security on both sides. Topics Covered Aviation cybersecurity: the unencrypted skiesCPDLC vulnerabilities: spoofing messages to the flight deckHow aircraft tracking works (ADS-B and the OpenSky Network)Hacking research inside the Swiss Cyber-Defence CampusCivil vs. military aviation securityAI and the future of aviation threats People can connect with Martin on LinkedIn: https://www.linkedin.com/in/martin-strohmeier-513b8060/🌐 Personal site: https://mstrohmeier.net/✈️ OpenSky Network: https://opensky-network.org/ Inside Cyber Minds is a cybersecurity podcast by LufSec — unscripted conversations with hackers, CISOs, researchers, founders, and security leaders on mindset, emerging threats, and the human side of cybersecurity. ▶️ Subscribe on YouTube: https://youtube.com/@Lufsec🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640🎤 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds💼 LinkedIn: https://www.linkedin.com/company/lufsec/Aviation cybersecurity is failing because modern cockpits rely on protocols designed decades ago without encryption.Martin Strohmeier joins us to explain how attackers use cheap radio equipment to exploit CPDLC vulnerabilities, allowing them to spoof messages between pilots and air traffic control. We break down the reality of aircraft hacking, how aviation protocols were designed for trust rather than security, and why the lack of authentication in these datalinks creates a significant risk for the flight deck.Beyond the threats, we explore how the OpenSky Network uses crowdsourced ADS-B receivers to create a global research platform and how AI is changing both the attack surface and defense strategies. This is a look at the technical disconnect between legacy infrastructure and modern wireless security requirements.Subscribe for weekly cybersecurity deep dives, and let us know in the comments if you think aviation protocols can ever be truly secured without a total system redesign.#Cybersecurity #AviationSecurity #AircraftHacking #CPDLC #AvionicsSecurity #WirelessSecurity #InfoSec #DEFCON #InsideCyberMinds #LufSec

🎯 Free Cyber Security Career Guide Break into cybersecurity without wasting years on the wrong path. Get the free guide — the roles, skills, certs, and the shortest route in: 👉 https://www.lufsec.com/products/digital_downloads/cyber-security-career-guide?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e6🎓 Bonus: download the guide, and you'll unlock a free lesson from the LufSec course library.🛡️ This episode is all about OSINT, reconnaissance, and internet-scale intelligence. To build practical offensive security and recon skills, explore LufSec's cybersecurity courses and hands-on training: 👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e6-courseSeason 3 of Inside Cyber Minds continues with an episode recorded onsite at DEF CON with John McCary, founder of Port:194 — an intelligence firm that continuously scans all 4.3 billion IPv4 addresses on the internet and never throws a scan away.A student tracked Elon Musk's apartment using a dark web AI search engine. See how this student's OSINT skills exposed a major privacy gap.While attending Black Hat, I learned the story of a Midwest student who utilized a Chinese dark web AI search engine to pinpoint a high-profile location. This case highlights how accessible, emerging technology is changing the landscape of open source intelligence. We break down the methodology used and why this kind of discovery is becoming a reality for researchers today.This incident serves as a stark reminder of the evolving threat landscape in digital privacy. By leveraging advanced search tools, individuals can bypass traditional barriers to information gathering. We analyze the implications of these tools and what this means for future security operations.Topics CoveredFrom combat veteran and diplomat to DARPA's AI office Building TIGR: classified software that became an Army program of record Why he founded Port:194 and how DarkMouse scans the whole internet Change detection: catching certificate impersonation and brand spoofing How sanctioned operators rebrand — and how history exposes them OSINT tradecraft and teaching the next generation of analysts Commissioned intelligence vs. self-service security tools AI for risk prediction and entity classification at internet scale Advice for anyone building a career in OSINT and cyber intelligenceAbout John McCaryJohn McCary is the founder of Port:194, a decorated combat veteran, former State Department Foreign Service Officer, and Certified Ethical Hacker. At DARPA he designed and led the TIGR software and hardware suite, later developing intelligence and analysis software for national security organizations. He teaches OSINT at the University of Arizona's College of Applied Science and Technology and has been featured in the Wall Street Journal, the Washington Post, and an Oscar-nominated documentary.🌐 https://port194.com/About Inside Cyber MindsInside Cyber Minds is a cybersecurity podcast by LufSec featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, and security leaders. The show focuses on mindset, decision-making, leadership, security culture, emerging threats, and the human side of cybersecurity.LinkedIn → https://www.linkedin.com/company/lufsec/John McCary Founder, Port:194 https://port194.com/Subscribe for more real-world security analysis, and let us know in the comments if you think AI search tools are a net positive or negative for personal privacy.#Cybersecurity #OSINT #ThreatIntelligence #Reconnaissance #DARPA #EthicalHacking #InfoSec #DEFCON #CyberIntelligence #InsideCyberMinds #LufSec

Inside Cyber Minds S3E13 — Ted Harrington on application security, penetration testing, IoT hacking, and the hacker mindset. Ted is Executive Partner at Independent Security Evaluators (ISE) — first to hack the iPhone — #1 bestselling author of Hackable and Inner Hacker, and founder of IoT Village. Recorded onsite at DEF CON.🎯 Free Cyber Security Career Guide — the roles, skills, certs, and shortest route into cybersecurity (bonus: unlocks a free LufSec lesson):👉 https://www.lufsec.com/products/digital_downloads/cyber-security-career-guide?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e13🛡️ Build hands-on application security and penetration testing skills with LufSec courses:👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e13-course-------------------------------------------------------Ted's team at ISE was first to hack the iPhone — and has since hacked cars, medical devices, and password managers to make them safer. In this episode we cover what real penetration testing looks like (and why most "pen tests" are just vulnerability scans), how to do application security right, what a decade of running IoT Village at DEF CON reveals about IoT security, how anyone can build the hacker mindset, and what happens to appsec when AI writes the code.Topics CoveredPenetration testing vs. vulnerability scanningApplication security done right (the Hackable method)First to hack the iPhone: the ISE storyIoT security: lessons from a decade of IoT VillageThe Inner Hacker: thinking like an attackerAI-generated code and the future of appsecPeople can connect with Ted on LinkedIn: https://www.linkedin.com/in/securityted/🌐 ISE: https://www.ise.io/📕 Hackable: https://www.hackablebook.com/📗 Inner Hacker: A New Way of Thinking — https://www.amazon.com/Inner-Hacker-New-Way-Thinking/dp/B0FQ7GTY1RInside Cyber Minds is a cybersecurity podcast by LufSec — unscripted conversations with hackers, CISOs, researchers, founders, and security leaders on mindset, emerging threats, and the human side of cybersecurity.Stop worrying about artificial intelligence as a menace and start viewing it as a neutral instrument for your goals. This talk explains why the outcome of using new technology depends on the person wielding it.Captured at IoT Village, this presentation addresses the common anxiety surrounding automated systems. Just as a kitchen knife is neither inherently evil nor virtuous, the impact of software depends entirely on the operator. We break down the responsibility of the developer, moving the conversation away from abstract fear and toward practical, ethical usage. If you build or manage digital products, this perspective provides a framework for evaluating your daily tech stack.Understanding how we apply these capabilities determines our future success. By focusing on the human intent behind the code, we can better navigate the landscape of modern artificial intelligence without getting lost in the hype. This session is designed for anyone looking to ground their workflow in reality rather than speculation.Subscribe for weekly tech strategy breakdowns, and comment below on how you are currently using artificial intelligence in your own projects.0:00 The Hacker Mindset and Ethical Security0:53 From Career Transition to Security Leadership3:59 Debunking the Security Myth7:25 The Dual Reality of IoT Security12:50 Mastering Threat Modeling for New Devices#Cybersecurity #ApplicationSecurity #PenetrationTesting #IoTSecurity #EthicalHacking #AppSec #DEFCON #InfoSec #InsideCyberMinds #LufSec

🎯 Free Cyber Security Career GuideBreak into cybersecurity without wasting years on the wrong path. Get the free guide — the roles, skills, certs, and the shortest route in:👉 https://www.lufsec.com/products/digital_downloads/cyber-security-career-guide?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e3 🎓 Bonus: download the guide, and you'll unlock a free lesson from the LufSec course library. 🛡️ To build practical network and offensive security skills like the ones the NOC uses, explore LufSec's cybersecurity courses and hands-on training:👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e3-course ------------------------------------------------------- Season 3 of Inside Cyber Minds continues with a behind-the-scenes episode recorded onsite at DEF CON, inside the operation most attendees never see: the Network Operations Center. Every August, the DEF CON NOC builds a conference network from the ground up — hundreds of access points, terabytes of traffic, tens of thousands of devices — then hands it to a crowd that includes some of the best hackers on the planet, many actively probing it with rogue access points, Wi-Fi Pineapples, Flipper Zeros, and fake SSIDs mimicking the real thing. It's often called the most hostile network in the world. The NOC's job is to keep it running anyway. Sparky, who leads the NOC, and longtime team member Chris "Mac" McEniry take us inside how it all works: planning a network that exists for one week a year, defending infrastructure while it's under constant attack, what they actually see on the wire, and why a volunteer team keeps coming back to do the hardest networking job in the industry. Is DEF CON Wi-Fi actually safe? What attacks show up every single year? And what can enterprise defenders learn from a network that survives the ultimate stress test every August? Topics Covered Inside the DEF CON Network Operations CenterBuilding a conference network from scratch every yearDefending the "most hostile network in the world"Rogue access points, fake SSIDs, and what attendees actually tryIs DEF CON Wi-Fi safe? What the NOC really seesWireless security at massive scaleWar stories from years of DEF CON networksWhat enterprise defenders can learn from the NOCVolunteering and the DEF CON community About the DEF CON NOC The DEF CON NOC is the official networking team of DEF CON, the world's largest hacker conference. The volunteer team designs, deploys, and defends the entire conference network — wired and wireless — for tens of thousands of attendees in one of the most adversarial computing environments anywhere. Sparky leads the NOC; Chris "Mac" McEniry is a longtime team member and infrastructure planner. 🌐 https://noc.defcon.org/ About Inside Cyber Minds Inside Cyber Minds is a cybersecurity podcast by LufSec featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, and security leaders — mindset, leadership, security culture, emerging threats, and the human side of cybersecurity. Watch & Listen ▶️ YouTube: https://youtube.com/@Lufsec 🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc🎤 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds🎧 Audible: https://www.audible.com/podcast/Inside-Cyber-Minds/B0G15CT6R1?source_code=ASSGB149080119000H&share_location=pdp🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640 LinkedIn → https://www.linkedin.com/company/lufsec/ Guests:Sparky — DEF CON NOC LeadChris "Mac" McEniry — DEF CON NOChttps://noc.defcon.org/ #Cybersecurity #DEFCON #NetworkSecurity #WiFiSecurity #WirelessSecurity #InfoSec #HackerConference #InsideCyberMinds #LufSec

🛡️ This episode is all about red teaming, critical infrastructure security, and defending operational technology in the real world. To build practical offensive security skills like the ones Ken's team uses, explore LufSec's cybersecurity courses and hands-on training:👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s3e2-course-------------------------------------------------------Season 3 of Inside Cyber Minds continues with a special episode recorded onsite at DEF CON with CDR Kenneth Miltenberger, Commanding Officer of the U.S. Coast Guard's 2003 Cyber Protection Team.Ken's path into cybersecurity didn't start behind a keyboard — it started at sea. He shares how he went from standing watch on the deck of a Coast Guard cutter to building the Coast Guard's first red team, and what it takes to stand up offensive cyber capability inside a military service.We dig into a side of cybersecurity most people never see: the ports, terminals, and vessels of the Marine Transportation System — critical infrastructure that moves trillions of dollars through the U.S. economy, and a target adversaries are actively probing.What does a cyber attack on a port actually look like? How does a military red team operate against critical infrastructure? Where does the Coast Guard fit between government and the private companies that own most of the maritime industry? And how is AI changing the threats to the systems that keep global trade running?This episode is about mission, leadership, and defending the infrastructure everyone depends on but few people think about.Topics CoveredFrom sea duty to cyber: a non-traditional path into cybersecurityBuilding the Coast Guard's first red team from scratchWhat Cyber Protection Teams do and how they operateMaritime cybersecurity and the Marine Transportation SystemHow exposed America's ports really areRed teaming critical infrastructure and operational technologyPublic-private partnership in maritime defenseAI and the future of critical infrastructure threatsAdvice for anyone who wants to serve and work in cyberAbout CDR Kenneth MiltenbergerCDR Kenneth Miltenberger is the Commanding Officer of the U.S. Coast Guard's 2003 Cyber Protection Team. He built the Coast Guard's Cyber Operational Assessments Branch and stood up the service's first red team, after earlier tours as a cyber blue team branch chief and, before that, as a deck watch and communications officer at sea. He holds an MSEE from the University of Maryland and is pursuing his PhD.⚓ https://gocoastguard.com/🛡️ https://www.uscg.mil/MaritimeCyber/About Inside Cyber MindsInside Cyber Minds is a cybersecurity podcast by LufSec featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, and security leaders. The show focuses on mindset, decision-making, leadership, security culture, emerging threats, and the human side of cybersecurity.Watch & Listen▶️ YouTube: https://youtube.com/@Lufsec🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc🎤 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds🎧 Audible: https://www.audible.com/podcast/Inside-Cyber-Minds/B0G15CT6R1?source_code=ASSGB149080119000H&share_location=pdp🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640https://gocoastguard.com/https://www.uscg.mil/MaritimeCyber/#Cybersecurity #CoastGuard #MaritimeCybersecurity #RedTeam #CriticalInfrastructure #PortSecurity #InfoSec #DEFCON #InsideCyberMinds #LufSec

Season 3 of Inside Cyber Minds starts with a special episode recorded onsite at DEF CON with Jeff Moss, founder of DEF CON and one of the most influential figures in hacker culture and the cybersecurity community.

For this Season 3 premiere, we step outside the studio and into the environment that Jeff helped create — a gathering that has become one of the most recognizable institutions in hacking and cybersecurity.

In this conversation, Jeff reflects on the evolution of the hacker community, how DEF CON has changed over the years, what has stayed true to its roots, and how the relationship between hackers, governments, corporations, researchers, and the broader security industry continues to evolve.

We also explore the culture behind cybersecurity.

What makes someone a hacker?

How has the community changed as cybersecurity became a global industry?

What happens when something that began as an underground gathering becomes part of the mainstream security world?

And where does Jeff believe the hacker mindset is heading next?

This episode is about more than DEF CON.

It is about curiosity, community, experimentation, trust, security research, and the mindset that continues to push cybersecurity forward.

Recorded onsite at DEF CON, this is a special start to Season 3 of Inside Cyber Minds.

• The origins and evolution of DEF CON
• How hacker culture has changed over the years
• What the hacker mindset really means
• The relationship between hackers and the cybersecurity industry
• Security research and responsible experimentation
• How the community has grown from underground roots to global influence
• The role of curiosity in cybersecurity
• Governments, corporations, hackers, and trust
• What has changed — and what has not — at DEF CON
• Advice for the next generation of hackers and security researchers
• The future of cybersecurity and hacker culture

Jeff Moss is the founder of DEF CON and Black Hat, and has spent decades helping shape the global cybersecurity and hacker communities.

His work has brought together hackers, researchers, security professionals, policymakers, and industry leaders while helping create spaces where security research, experimentation, and open technical discussion can thrive.

Inside Cyber Minds is a cybersecurity podcast by LufSec featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, security leaders, and some of the people who have helped shape the cybersecurity industry.

The show focuses on mindset, decision-making, leadership, security culture, emerging threats, and the human side of cybersecurity.

▶️ YouTube: https://youtube.com/@Lufsec

🔗 Listen on your favorite platform
🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc
🎤 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds
🎧 Audible: https://www.audible.com/podcast/Inside-Cyber-Minds/B0G15CT6R1?source_code=ASSGB149080119000H&share_location=pdp
🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640

LinkedIn → https://www.linkedin.com/company/lufsec/

#Cybersecurity #DEFCON #JeffMoss #Hacking #EthicalHacking #SecurityResearch #Hackers #InfoSec #InsideCyberMinds #LufSec

Topics CoveredAbout Jeff MossAbout Inside Cyber MindsWatch & Listen

🛡️ This episode is all about vulnerability disclosure, bug bounty programs, and working effectively with security researchers. To build practical offensive security skills, explore LufSec’s cybersecurity courses and hands-on training:👉 https://www.lufsec.com/courses/?utm_source=youtube&utm_medium=onramp&utm_campaign=career-guide-funnel&utm_content=s2e8-course━━━━━━━━━━━━━━━━━━━━Season 2 of Inside Cyber Minds continues with Katie Moussouris — founder and CEO of Luta Security and one of the most influential leaders in vulnerability disclosure, bug bounty programs, and hacker economics.Katie has helped shape how major technology companies, governments, and global organizations work with security researchers. Her career includes launching vulnerability programs at Microsoft, contributing to the creation of Hack the Pentagon, and helping develop international standards for vulnerability disclosure and handling.Her core argument: launching a bug bounty program is not the same as building a mature vulnerability management capability. Organizations must first create the internal processes, resources, ownership, and remediation capacity required to receive and act on vulnerability reports.We discuss how organizations should work with hackers, why some bug bounty programs fail, and how leaders can determine whether their security teams are ready to engage with external researchers.Katie also explains the economics behind vulnerability research, how incentives influence researcher behavior, and why paying for vulnerabilities without fixing the underlying process can create more problems than value.We explore coordinated vulnerability disclosure, researcher relationships, government programs, liability protections, security maturity, and the difference between generating more vulnerability reports and actually reducing organizational risk.Katie also shares her perspective on the future of vulnerability research, how AI may affect bug discovery and exploitation, and what security leaders must understand before scaling a disclosure or bounty program.Topics CoveredKatie’s path into cybersecurity and vulnerability researchThe origins of modern bug bounty programsBuilding vulnerability disclosure programs at MicrosoftThe creation and impact of Hack the PentagonWhy bug bounty programs are not a shortcut to security maturityVulnerability disclosure versus vulnerability managementHow organizations should work with security researchersThe economics of vulnerabilities and hacker incentivesMeasuring the ROI of bug bounty programsCommon mistakes organizations make when launching programsCoordinated vulnerability disclosure and safe harborGovernment collaboration with ethical hackersPreparing internal teams to receive vulnerability reportsHow AI may change vulnerability discovery and exploitationThe future of bug bounties and security researchAbout Inside Cyber MindsA LufSec cybersecurity podcast featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, authors, and industry leaders about mindset, decisions, emerging threats, and the human side of cybersecurity.LinkedIn: https://www.linkedin.com/company/lufsec/Katie Moussouris and Luta SecurityWebsite:https://www.lutasecurity.com/X:https://x.com/LutaSecurityhttps://x.com/k8em0Bluesky:https://bsky.app/profile/lutasecurity.bsky.socialhttps://bsky.app/profile/k8em0.bsky.social#Cybersecurity #BugBounty #VulnerabilityDisclosure #EthicalHacking #HackerEconomics #KatieMoussouris #LutaSecurity #InsideCyberMinds

Season 2 of Inside Cyber Minds continues with David Girvin — offensive security expert, cybersecurity leader, and founder of Honey Badger, focused on securing AI agents at the execution layer.After an injury forced him to leave welding, David discovered hacking and bug bounty programs. That curiosity became a career spanning offensive security, threat modeling, detection engineering, MDR, startup leadership, and AI security.His core argument: AI governance cannot stop at policies, model evaluations, or prompt filtering. As agents gain access to tools, credentials, data, and business processes, organizations need controls that govern what they can actually execute.We discuss adaptive agent governance, runtime enforcement, deterministic controls, and why securing thousands of autonomous agents requires a different security architecture.David also shares lessons from BitDiscovery, 1Password, Red Canary, and Sumo Logic, and explains how offensive security, leadership, detection engineering, and threat modeling shaped his approach.We explore how attackers may target AI agents, why prompt injection is not going away, how attacks could evolve, and which AI security failures may emerge over the next two years.David also predicts that by 2028, AI will handle more repetitive SOC analysis while humans focus on judgment, investigation, and complex decisions.Topics CoveredDavid’s journey from welding to offensive cybersecurityBug bounty programs and early hacksThreat modeling for AI agentsWhy traditional AI governance is not enoughAdaptive agent governance at the execution layerRuntime governance and deterministic controlsSecuring agents with access to tools, systems, and dataPrompt injection and future AI attack techniquesManaging thousands of autonomous agentsHow AI may reshape SOC roles by 2028Expected AI security failures over the next two yearsChapters00:00 Introduction to David Girvin and his background01:14 Early security experiences and breaking into cars02:04 Transition from welding to cybersecurity03:32 Discovering hacking and bug bounty programs04:28 Offensive security work and early hacks06:38 Understanding the defender’s perspective08:42 The impact of AI on cybersecurity10:41 Startup GTM lessons from BitDiscovery12:32 Leadership challenges at 1Password14:00 Threat modeling inside a large organization15:42 Detection engineering and MDR operations18:25 Lessons from Red Canary and Sumo Logic20:00 Founding Honey Badger and focusing on AI security22:15 Hacking agents and securing agent environments25:43 Adaptive agent governance explained36:14 AI governance and deterministic controls40:37 Scaling security across thousands of AI agents45:53 Future agent attack techniques and AI risks51:29 Why prompt injection remains a major threat53:33 Runtime governance and platform integrations58:24 How SOC analyst roles may evolve by 202801:02:46 Expected AI security failures over the next two years01:04:23 Closing remarksAbout Inside Cyber MindsA LufSec cybersecurity podcast featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, authors, and industry leaders about mindset, decisions, emerging threats, and the human side of cybersecurity.Watch & Listen🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc🍎 Apple: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640🎤 Amazon: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds🎧 Audible: https://www.audible.com/podcast/Inside-Cyber-Minds/B0G15CT6R1LinkedIn: https://www.linkedin.com/company/lufsec/David Girvin: https://assury.ai/#Cybersecurity #AISecurity #AgentSecurity #PromptInjection #AIGovernance #OffensiveSecurity #DavidGirvin #InsideCyberMinds

Season 2 of Inside Cyber Minds continues with Roger Grimes — cybersecurity author, researcher, speaker, and one of the industry’s most experienced voices on malware, social engineering, identity, artificial intelligence, and emerging security threats.

In this episode, Roger shares lessons from decades on the front lines of cybersecurity and explains why organizations continue to be compromised despite investing heavily in security tools.

We discuss the two problems behind most successful cyberattacks, why identity and social engineering remain so effective, and how defenders can focus on the risks that actually cause the majority of real-world breaches.

The conversation also explores the growing impact of artificial intelligence and quantum computing on cyber threats and defenses. Roger explains what security leaders should take seriously today, what is still being exaggerated, and how organizations should prepare for a rapidly changing threat landscape.

This is a practical and strategic discussion about security fundamentals, emerging technology, risk prioritization, and why cybersecurity teams must become more data-driven.

If you care about AI security, quantum computing, identity attacks, social engineering, ransomware, and building more effective security programs, this episode is essential listening.

Topics Covered

• The two root causes behind most successful cyberattacks
• Why social engineering remains one of the biggest security risks
• Identity, credentials, and authentication attacks
• Why organizations often focus on the wrong security problems
• Artificial intelligence as an offensive and defensive security tool
• How quantum computing could affect cybersecurity
• Post-quantum cryptography and organizational readiness
• Malware, ransomware, and modern attacker techniques
• Data-driven defense and risk prioritization
• Lessons from Roger’s decades in cybersecurity
• How security leaders should prepare for emerging threats
• The future of cybersecurity education and awareness

Roger Grimes’ New Book

Roger recently released his 16th book:

How AI and Quantum Impact Cyber Threats and Defenses

Amazon:
https://www.amazon.com/dp/B0GGB7Y855/

Get a Free PDF Copy

Roger is offering podcast viewers a free PDF copy of the book:

https://www.knowbe4.com/hubfs/AI-Quantum-Book-Roger-Grimes.pdf

About Inside Cyber Minds

Inside Cyber Minds is a cybersecurity podcast by Lufsec, featuring deep, unscripted conversations with hackers, CISOs, researchers, founders, authors, and industry leaders.

The show focuses on mindset, decision-making, leadership pressure, emerging threats, and the human side of cybersecurity.

Watch & Listen

▶️ YouTube: https://youtube.com/@Lufsec

🔗 Listen on your favorite platform
🎙️ Spotify: https://open.spotify.com/show/6hWg94SxRjHUMCMXoKutlc
🎤 Amazon Music: https://music.amazon.com/podcasts/87069409-9772-4c83-821a-d5607e52be51/inside-cyber-minds
🎧 Audible: https://www.audible.com/podcast/Inside-Cyber-Minds/B0G15CT6R1?source_code=ASSGB149080119000H&share_location=pdp
🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/inside-cyber-minds/id1851011640

LinkedIn: https://www.linkedin.com/company/lufsec/

#Cybersecurity #ArtificialIntelligence #QuantumComputing #RogerGrimes #InsideCyberMinds