Dark Markets are making cybercrime more accessible than ever. Malware, remote access tools, phishing kits, credit cards information: all of it is readily available, and oftentimes available as a service, if you just know where to look. Subscribing to these illicit services is now as easy as signing up for Disney+.

In this Deep Dive, host Rob Maas and special guest, cybersecurity researcher Michele Campobasso, discuss dark markets, and the rise of cybercrime-as-a-service.

Key questions answered in this Deep Dive:

🕶️ What are dark markets, and how do they work?

🔑        How do cybercriminals (or intrepid researchers) access these dark markets?

🎬        How is cybercrime becoming as accessible as a streaming service?

⚠️  What risks do businesses face from dark markets?

🔎        What role does threat intelligence plays in monitoring these markets?

With cybercrime as easy to access as a Netflix subscription, Rob and Michele explore how these underground marketplaces operate, how they’re changing the threat landscape, and what organizations can do to protect themselves.

The Dark Web Economy: Hacks for $10?

Would you pay $10 for access to a corporate system? Because someone on the dark web already has. In this episode of Threat Talks, host Lieuwe Jan Koning talks to cybersecurity researcher Michele Campobasso about the business of cybercrime. From ransomware services to stolen credentials, the dark web is thriving.

💰 How much is YOUR data worth on the dark web?
🚨What’s for sale—and who’s buying?
🛒 How is hacking becoming a subscription-based service?

Cybercriminals operate like well-run businesses, offering hacking tools, stolen credentials, and even customer support. But if cybercrime is getting more sophisticated, what can individuals and businesses do to fight back?

⏳ What happens when time goeswrong?

Time synchronizationis an overlooked but essential part of cybersecurity. A few microseconds ofdrift can lead to failed transactions, inaccurate forensic logs, or evensecurity breaches.

In this episode of ThreatTalks, host Rob Maas (Field CTO, ON2IT) and guest Jan van Boesschoten(Innovation Manager, AMS-IX) discuss:

·      How does time impact cybersecurity, and whathappens when it drifts?

·      Why is NTP no longer sufficient for high-speeddigital transactions?

·      How does Precision Time Protocol (PTP) providemicrosecond accuracy (and why does that matter)?

·      Could time manipulation be an attack vector,and how do organizations mitigate this risk?

From financialtransactions to forensic log analysis, knowing exactly when an eventoccurs can make or break an organization’s security posture.

Many organizations hesitate to implement SSL decryption due to concerns over complexity, privacy, and performance. However, the reality is that failing to decrypt means failing to see threats.In this Deep Dive, host Lieuwe Jan Koning and Rob Maas (Field CTO at ON2IT) explore why decrypting SSL traffic is critical for cybersecurity.

• Why is SSL decryption necessary, and what are the risks of ignoring encrypted traffic?
• How do modern malware and attacks leverage encryption to bypass traditional security measures?
• What are the top three things organizations must do to implement SSL decryption effectively?
• Why do only 3.5% of organizations have an active SSL decryption policy, and how can this change?

Rob Maas explains how decrypting SSL traffic allows security teams to detect and stop threats at an early stage, preventing malware downloads, phishing attempts, and web-based attacks before they reach endpoints.

Cybersecurity shouldn’t always be about playing defense – it can also be about disrupting attackers before they succeed. In this Deep Dive, host Lieuwe Jan Koning and cybersecurity expert Rick Howard break down the Intrusion Kill Chain and the strategic shift it introduced in the world of cybersecurity.

•  How does the Intrusion Kill Chain flip the script on cyberattacks?
• The 250 active adversary campaigns that security teams must track
• How MITRE ATT&CK and the Diamond Model strengthen modern defense strategies
• Why global governments and intelligence agencies aren’t doing more to share cyber threat intelligence

Despite decades of talk about intelligence sharing, most information is still exchanged manually, often via spreadsheets. As Howard points out, a true global threat-sharing framework could give defenders the upper hand.

Don’t miss this deep dive into adversary strategies and what they mean for the future of cybersecurity.

👕 Receive your Threat Talks T-shirt via https://threat-talks.com/

🗺️ Explore the Hack's Route in Detail 🗺️ via https://threat-talks.com

🕵️ Threat Talks is a collaboration between @ON2IT and @AMS-IX

I think, therefore I am, is René Descartes’first principle. But how does that relate to cybersecurity?

In this episode of Threat Talks, hostLieuwe Jan Koning is joined by Rick Howard – former Commander of the US Army’sComputer Emergency Response Team and former CSO of Palo Alto Networks – todiscuss the first principle of cybersecurity.

❓What’s the difference between cybersecurity strategy and tactics?

❓How come some random geezers are better at cybersecurity forecastingthan industry pros?

❓Is resilience the ultimate cybersecurity strategy?

❓Why does Rick Howard think Zero Trust is a passive strategy? 

And for the book lovers amongst us – over500 cybersecurity books are published each year. Wanna know which are worthyour time?

Rick Howard’s Cybersecurity Canon has gotyou covered: https://icdt.osu.edu/about-cybersecurity-canon

👕 Receive your Threat Talks T-shirthttps://threat-talks.com/🗺️ Explore the Hack's Route in Detail 🗺️https://threat-talks.com🕵️ Threat Talks is a collaboration between @ON2IT and @AMS-IX

🚨 Can you still trust what you see? 🚨

Deepfakes aren’t just for entertainment anymore: they’re now an increasingly powerful tool for cybercriminals. With AI advancing rapidly, attackers can clone voices, fake identities, and manipulate live video in real time.

In this episode of Threat Talks, we explore how deepfake scams have already cost companies millions.

From CEO voice fraud to bypassing identity checks, the risks are rising.

👥 How do deepfakes work?

👥 What makes them so dangerous?

👥 How can organizations protect themselves?

Join host Rob Maas and ON2IT SOC analyst Yuri Wit as they break down the latest deepfake threats and what you can do to stay ahead.

👕 Receive your Threat Talks T-shirt https://threat-talks.com/🗺️ Explore the Hack's Route in Detail

🗺️https://threat-talks.com

🕵️ Threat Talks is a collaboration between @ON2IT and @AMS-IX

Quantum computing promises unprecedented computational power, but it also threatens the encryption standards we trust today.

In this episode of Threat Talks, Jeroen Scheerder from ON2IT delves into post-quantum cryptography and answers key questions:

• What is Quantum Computing?
• Why does it challenge RSA and other encryption standards?
• What is Q-Day, and when will it happen?
• How can companies prepare for the post-quantum era?

🎯 Key Takeaways

🛡 Data minimization and post-quantum cryptographic algorithms are essential.

📈 Start planning your migration strategy now.

🚨 Don’t procrastinate – quantum computing is coming sooner than you think.

💻 More Resources: Visit Threat-Talks.com to stay informed on quantum computing and its impact on cybersecurity.

📢 Like, Subscribe & Share – Help us spread the word about preparing for the quantum age!=== ► YOUTUBE: https://youtube.com/@ThreatTalks► SPOTIFY: https://open.spotify.com/show/1SXUyUEndOeKYREvlAeD7E► APPLE: https://podcasts.apple.com/us/podcast/threat-talks-your-gateway-to-cybersecurity-insights/id1725776520👕 Receive your Threat Talks T-shirthttps://threat-talks.com/post-quantum-threat-to-encryption/🗺️ Explore the Hack's Route in Detail 🗺️https://threat-talks.com/downloads/🕵️ Threat Talks is a collaboration between @ON2IT and @AMS-IX

🔒 Are endpoint protection solutions enough to safeguard your organization?

In this episode of Threat Talks – The Deep Dive, Rob Maas hosts Luca Cipriano, ON2IT’s Cyber Threat Specialist, to uncover the truth.

Learn✅ The differences between AVs, EDRs, and XDRs

✅ Common bypass techniques used by attackers

✅ Why defense-in-depth and Zero Trust are must-haves for any cybersecurity strategy

💡 Key Insights

• EDRs are essential but not invincible
• Combining smart tools with robust security practices is the winning strategy

📩 Have questions or thoughts?

Reach out at [email protected]!

🎙️ Follow Threat Talks for weekly cybersecurity insights.=== ► YOUTUBE: https://youtube.com/@ThreatTalks► SPOTIFY: https://open.spotify.com/show/1SXUyUEndOeKYREvlAeD7E► APPLE: https://podcasts.apple.com/us/podcast/threat-talks-your-gateway-to-cybersecurity-insights/id1725776520👕 Receive your Threat Talks T-shirthttps://threat-talks.com/breaking-the-defenses-edr-bypass/🗺️ Explore the Hack's Route in Detail 🗺️https://threat-talks.com/downloads/🕵️ Threat Talks is a collaboration between @ON2IT and @AMS-IX

Ever wondered what it’s like to see cybersecurity through a hacker’s eyes? In this episode of Threat Talks, Lieuwe Jan Koning talks with Tom van der Wiele, ethical hacker and founder of Hacker Minded, about how cybercriminals operate and how businesses can defend themselves.

📌 What You’ll Learn:

With over two decades of experience, Tom offers unique perspectives on staying one step ahead in the ever-evolving world of cybersecurity.

🎯 Don’t forget to like, share, and subscribe to stay informed on the latest cybersecurity insights. New episodes every Tuesday!