Cybersecurity is technical. But the humans behind it? That's where it gets complicated.

Nim Nadarajah—CISO and managing partner from Critical Matrix, and one of the sharpest minds in the industry—sits down with host David Redekop for a conversation that goes far beyond firewalls and frameworks.

From the psychology of a breach victim who no longer knows who to trust, to cutting a client's SIEM costs by millions through process, not tools, this episode is a masterclass in what it actually takes to protect an organization in today's threat landscape.

Nim shares the story behind crowdsourcing the discovery of a gold mine (yes, really), why your crown jewels are probably already inside an AI you didn't approve, and what a five-year-old opening the kitchen sink cabinet taught him about zero trust security.

Whether you're a CISO, an MSP, a business owner, or someone who just wants to understand what's actually at stake with agentic AI—this one is for you.

Key Discussion Points

00:00 — Intro: Welcome to The Defender's Log

01:34 — Meet Nim Nadarajah: CISO & Managing Partner, Critical Matrix

02:00 — RSAC 2025 recap: 50,000 people, 30,000 steps, and emotional overload

03:18 — The stigma of being hacked: Is the "wall of shame" finally coming down?

05:00 — Competence, confidence, and capability: The 3 Cs of incident readiness

06:04 — Psychology of a breach: The human side of incident response

09:36 — "Who can I trust?" (What it really feels like to be a cyber victim)

12:10 — Nim's origin story: From high school library networks to corporate Canada

15:00 — The Goldcorp Challenge: Crowdsourcing a gold mine before crowdsourcing was a thing

20:31 — Process vs. tools: Why the blank page doesn't care what app you're using

23:00 — AI is everywhere and it's only as good as what you feed it

24:25 — Agentic AI, crown jewels & protecting your intellectual property

26:33 — Shadow AI, 800 firewall rules, and the free-for-all that already happened

29:09 — Zero trust explained through a kitchen sink (and a curious five-year-old)

33:22 — The SIEM transformation that saved millions and paid for itself in a month

37:36 — Dashboard fatigue: Why leaders need signal, not more screens

39:00 — Agentic SOC: Fearfully excited

41:02 — 29 employees, one human: The pure agentic company Nim met at RSAC

43:26 — Vibe coding is real: A salesperson built a privacy app with zero coding experience

46:00 — Ideas are approaching zero value—execution is everything now

46:57 — One sentence for the next generation: "The power of your ideas haven't been created yet."

👍 If this hit home, give it a like — it helps more people find these conversations

#CyberSecurity #CISO #IncidentResponse #AIRisk #AgenticAI #ZeroTrust #SIEM #ManagedSecurity #CyberLeadership #DataGovernance #CrownJewels #TechStrategy #ProcessOverTools #CyberResilience #TheDefendersLog #Podcast #CyberPodcast #MSP #InfoSec #DigitalTransformation #AIGovernance #CybersecurityLeadership #ToolFatigue #CyberAwareness #RSAC2025

The future of cybersecurity isn’t just about tools—it’s about how we think.

In this conversation, David Redekop sits down with Mitch Prior to unpack what really matters in modern security: from default-deny strategies and local data control to the growing role of AI in filtering signal from noise. What emerges isn’t just a technical discussion—it’s a philosophy.

They explore why certifications don’t always equal capability, how curiosity beats credentials, and why the next generation must learn how to think, not just what to think. As AI accelerates everything around us, the real edge belongs to those who can stay grounded, think critically, and build with intention.

This is a conversation about discipline, trade-offs, and staying ahead without losing control.

01:37 – Meeting Mitch & early Zero Trust conversations

If this conversation sparked a new way of thinking:

#CyberSecurity #AI #ZeroTrust #DataPrivacy #InfoSec #ArtificialIntelligence #TechLeadership #DigitalSecurity #FutureOfWork #Leadership

Cybersecurity and military defense share the same fundamental principle: you can’t go on offense if you don’t have a secure perimeter.

Steven Elliott’s journey—from a farming community in Kansas to the U.S. Army’s 75th Ranger Regiment, and later into finance and cybersecurity leadership—reveals how disciplined thinking, clear communication, and preparation for uncertainty shape strong decision-makers.

Markets are unpredictable. Technology is complex. Threats—both financial and digital—evolve constantly.

The real advantage comes from understanding risk, simplifying complexity, and building systems that help people make better decisions.

This conversation explores the lessons learned from military operations, financial advisory work, and cybersecurity leadership—and why defense, preparation, and clarity matter more than ever in today’s digital world.

Key Discussion Points

00:00 – Why no one can predict financial markets

If this conversation made you think differently about risk, leadership, or cybersecurity:

👍 Like the video so more people can find it

#CyberSecurity #Leadership #RiskManagement #MilitaryLeadership #DecisionMaking #CyberDefense #BusinessLeadership #SecurityStrategy #TechnologyLeadership #Podcast

Cybersecurity used to be about perimeter defenses and patch cycles.

Now it’s about decision speed, trust, and restraint—especially when AI is involved.

This conversation with Rafael Ramírez moves through decades of engineering experience, real-world incident response, and the uncomfortable reality that AI is scaling faster than governance, policy, and human intuition.

What stands out isn’t hype—it’s discipline. How leaders think about risk, how zero trust becomes a mindset (not a framework), and why AI security fails most often when it’s rushed instead of designed.

00:00 – Cybersecurity, curiosity, and being “born an engineer”

If you’re building, defending, or deploying AI inside real organizations, this one will challenge how you think about control, trust, and responsibility.

Join the conversation:

👍 Like this episode to support the channel

🔔 Subscribe for more real‑world security insights

💬 Share your biggest AI takeaway in the comments

🔗 Send this episode to a colleague or friend who works in network security

#CyberSecurity #AISecurity #ZeroTrust #AILeadership #Technology #RiskManagement #AgenticAI #TheDefendersLog #AdamNetworks #SecurityArchitecture #RiskManagement #CloudSecurity #DefensiveSecurity

Attackers are getting smarter—and the protocol they rely on most isn’t what you think.

In this powerful conversation, David Redekop and Johannes Weber break down how modern malware abuses DNS, why attackers prefer DNS tunneling and exfiltration, and the defensive strategies every organization needs in 2026.

Johannes brings decades of hands‑on experience as a network security specialist, consultant, packet analyst, and educator. Together, they trace the full threat landscape around DNS and explore the evolving tools, behaviors, and techniques shaping the defender’s playbook.

00:00 – Why 90% of malware still depends on DNS

01:00 – A fun start: German names, dual identities & cultural overlaps

03:00 – Johannes’ origin story: LAN parties → network engineer → security consultant

06:00 – You don’t need to code to thrive in network security

07:00 – DNS basics: recursive resolvers vs. authoritative servers

08:00 – How attackers abuse DNS “as designed”

10:30 – Lookalike domains & deceptive URL patterns

11:00 – DGAs (Domain Generation Algorithms) explained

12:00 – Newly registered vs. newly observed domains

14:00 – Aging domains & reputation‑based defense

15:00 – DNS exfiltration: how attackers sneak data out

16:00 – Step‑by‑step breakdown of DNS exfiltration

18:00 – DNS tunneling: when attackers turn DNS into a VPN

19:00 – Why signature‑based defenses fail

21:00 – Deep Query Inspection & entropy analysis

22:00 – Where DNS security belongs in your architecture

24:00 – TXT, NULL, A/AAAA abuse & blocking strategies

27:00 – DNS spoofing & cache poisoning

30:00 – DNSSEC: authentication vs. confidentiality

33:00 – DOH/DOT: privacy vs. visibility

36:00 – TLS interception & enterprise tradeoffs

39:00 – Securing roaming users in a VPN‑less world

41:00 – What Pi‑hole solves at home (and what it won’t)

43:00 – Johannes’ favorite tools: DNSViz, DNSDiag, DNSPing

44:30 – The Ultimate PCAP collection (15 years, 90+ protocols)

46:00 – Why Johannes teaches — and the next generation of defenders

48:00 – Closing thoughts & community resources

🛠️ Mentioned Tools & Resources

DNSViz – DNS trust visualization

DNSDiag / DNSPing – Resolver latency + diagnostic toolkit

Iodine / DNScat2 / DNS‑tunnel tools – Examples of DNS tunneling tech

Ultimate PCAP Collection (Johannes’ blog) – 15 years of protocols for Wireshark training

👍 Like this video to support the channel

🔔 Subscribe for more real‑world security insights

💬 Share your biggest DNS takeaway in the comments

🔗 Send this episode to a teammate or friend who works in network security

Together, we make the internet harder to attack — and easier to defend.#CyberSecurity #DNS #DNSSecurity #MalwareAnalysis #DNSExfiltration #DNSTunneling #DNSSEC #DOH #NetworkDefense #PacketAnalysis #Infosec #SecurityPodcast #BlueTeam

The odds remain badly stacked against the defender. As we hurtle toward a digital ecosystem populated by a trillion AI agents, the Universal Threat Ecosystem (UTE) is expanding at an asymmetric rate. The traditional security stack—obsessed with detection and response—is fundamentally broken because it requires a "Patient Zero." It waits for the compromise to occur before it rings the alarm.

In this episode of The Defender’s Log, David Redekop sits down with Francois, CISO and partner at ADAMnetworks, to dismantle the "Whack-a-mole" approach to cybersecurity. From the high-stakes world of film production and technical diving to the front lines of cyber warfare, Francois shares how a life spent mitigating physical risk informed a "Default Deny-all" posture.

The Asymmetric Challenge

We are currently witnessing the rise of Generative Adversarial Networks (GANs) in the hands of the adversary. Initial Access Brokers (IAB) and Ransomware-as-a-Service (RaaS) operators are using the defender’s own AI tools to train malware to be invisible. If your strategy relies on identifying "known bad," you have already lost.

Why "True Proactive" Defense is Mandatory:

• Neutralize Egress: If the malware cannot "call home" to its Command & Control (C2), the ATTACK IS DISRUPTED.

• Eliminate the Patient Zero Requirement: By moving the security boundary to the DNS layer with a Zero Trust Resolver, we stop connections to unknown and unverified entities.

• Sovereign Capability: Reclaim control over your network’s connectivity. Stop letting the internet happen to you and start shaping it.

Detection is a post-mortem. Prevention is sovereignty.

Francois and David explore the human element of the "Sheepdog mentality" and why the next generation of Blue Teamers must move beyond the application layer (Layer 7) and harden the foundation of connectivity itself.

Key Technical Concepts Discussed:

• Zero Trust Connectivity (ZTC): Moving beyond identity to strict connection control.

• OT & IoT Vulnerabilities: Why agentless protection is the only path forward for critical infrastructure.

• Preemptive Defense: Cutting off the attacker's resources before the infrastructure is even fully deployed.

In a world of a trillion AI agents, where the adversary uses your own defenses to train their attacks, can you afford to maintain a "Detect and Respond" posture? At what point does the convenience of an "open" network become an existential liability for your organization?

Defending the Internet, One Domain at a Time

In this episode of The Defender’s Log, host David Redekop sits down with Peter Lowe, the creator and maintainer of one of the internet’s most widely used blocklists, a resource quietly protecting users for over 27 years.

What started as a personal effort to block intrusive ads has evolved into a critical layer of modern cybersecurity infrastructure. Peter shares the technical, ethical, and human realities of maintaining a blocklist at internet scale, from DNS-based blocking and privacy challenges to dealing with criticism, threats, and constant technological change.

The conversation also explores unexpected territory: how language, culture, and communication shape security, why defaults in operating systems matter more than most users realize, and how Apple, Microsoft, and modern platforms influence privacy at scale.

This episode isn’t just about blocking domains; it’s about trust, responsibility, and defending the open internet without owning it.

The internet is a collision of legacy protocols and modern asymmetric threats. In this episode of The Defenders Log, I sit down with the man who built the foundation: Dr. Paul Mockapetris, the inventor of the Domain Name System (DNS).

We don't just reminisce about the 1980s; we dissect how the Universal Threat Ecosystem (UTE) has weaponized the very decentralization that made the internet possible. The failure today does not come from gross negligence, but the imperfect application of the current stack. The odds remain badly stacked against the defender. While generic tools focus on detection, which is fundamentally too late, this conversation pivots toward Zero Trust Connectivity (ZTC).

• The "Whack-a-Mole" Reality: Why chasing RaaS and IABs through traditional feeds is a losing game.

If you want to survive the next evolution of cyber warfare, you must shut down egress to the attacker. It is time to move beyond simple resolution and toward a hardened state of prevention.

#CyberSecurity #ZeroTrust #DNS #ZTC #ThreatIntelligence #ADAMnetworks #InfoSec #CyberWarfare #PaulMockapetris #SovereignCapability #DefaultDeny

In this episode of The Defender’s Log, host David Redekop sits down with DNS and DDI expert Andreas Taudte, who brings more than 16 years of experience in network security, DNS architecture, and threat mitigation.

Together, they unpack the real challenges organizations face with DNS, from evasion techniques and tunneling threats to the growing complexity of legacy systems and hybrid networks. Andreas explains why DNS predictability is essential, how DDI (DNS, DHCP, IPAM) has evolved, and what enterprises must do to build resilient, zero-trust-aligned network foundations.

Timestamps -

00:00 Introduction to DNS and DDI

01:20 Meet Andreas: A Deep Dive into DNS

06:22 The Journey into DNS and DDI

06:49 Understanding DDI: DNS, DHCP, and IPAM

09:53 Challenges and Stories from the Field

22:21 Security and Management in DNS and DDI

28:13 External Audits and DNS Management

30:16 Infrastructure as Code and Network Configuration

31:15 Building a Strong Foundation for Networks

31:30 The Reality of Temporary Solutions

32:00 Buzzwords and IT Management

33:34 Zero Trust and Default Deny All

34:25 DNS Threats and Exploits

44:22 Complex DNS Evasion Techniques

46:49 Combining Security Layers for Better Defense

52:03 Predictable DNS Resolution

54:17 Final Thoughts and Advice

#DNS #DNSSecurity #DDI #Cybersecurity #NetworkSecurity #ZeroTrust #ITInfrastructure #CyberThreats #IPAM #DHCP #SecurityArchitecture #BlueTeam #NetworkEngineering

In this powerful episode, host David Redekop sits down with Joshua Domagalski, Chief Information Security Officer and former offensive operator, to explore the real complexities of modern cyber defense.

Joshua opens up about his journey from the military to cybersecurity leadership, the shift from attacking systems to protecting them, and why defending is far more challenging than breaking in.

This conversation goes far beyond tools and tactics, it uncovers the human, strategic, and geopolitical layers that shape cybersecurity today.

You’ll learn about:

• Why offensive skills are essential for strong defense

Timestamps -

00:00 Introduction and Early Interests

01:00 Welcome to The Defender's Log

01:16 Joshua Domagalski's Journey into Cybersecurity

02:38 Challenges in Cyber Defense

04:19 The Importance of Offensive Skills for Defense

05:08 Balancing Proactive and Reactive Defense

06:42 AI Adoption and Cybersecurity

09:46 The Role of Experience vs. Certification

11:39 Joshua's Path to Becoming a CISO

14:16 Human Elements in Cybersecurity

22:09 Strategies for Insider Threats and Ransomware

36:17 Geopolitical Challenges in Cybersecurity

39:40 Final Thoughts and Advice

40:35 Conclusion and Call to Action

#Cybersecurity #CISO #CyberDefense #Infosec #BlueTeam #Ransomware #AIinSecurity #OffensiveSecurity #SecurityLeadership #TheDefendersLog