Secure AF - A Cybersecurity Podcast

Suspected Chinese state-linked hackers breached an FBI surveillance network ... not by breaking through the front door, but through a third-party provider.

In this episode of the #SOCBrief, we break down how the attack happened, why supply chain vulnerabilities are one of the biggest risks facing SOC teams today, and what this means for organizations of all sizes. From compromised vendor ac...

Listen

Mark as Played

Ransomware as a Business: Inside Qilin’s Rise

March 24, 2026 • 39 mins

Qilin is quickly becoming one of the most dominant ransomware groups in the world, and it’s not because of groundbreaking tactics. It’s because of their business model.

In this episode, we break down how Qilin operates as a ransomware-as-a-service group, why affiliates are flocking to them (hint: 80–85% payouts), and how that’s fueling explosive growth across industries worldwide. From real...

Listen

Mark as Played

MuddyWater's New BugSleep Malware – Iran's Cyber Retaliation Ramps Up

March 18, 2026 • 6 mins

In this episode of the #SOCBrief, we break down BugSleep, a new backdoor malware tied to the Iranian threat group MuddyWater, and how it’s being used in targeted spear-phishing campaigns against organizations.

Learn how the malware works, what indicators SOC teams should watch for, and practical steps to detect and defend against these evolving attacks.

Watch full episodes ...

Listen

Mark as Played

🚨 The Telus Hack – ShinyHunters Strikes a Telecom Giant 🚨

March 13, 2026 • 11 mins

A massive breach has shaken the telecom world.

In this episode of the #SOCBrief, we break down the alleged TELUS hack claimed by the ShinyHunters threat group, what data may have been stolen, and why the potential exfiltration of massive datasets could have far-reaching consequences for organizations worldwide. From OAuth tokens and API keys to customer PII and enterprise systems, we explo...

Listen

Mark as Played

A.I. as a Multiplier: Introducing Vector Pulse A.I.

March 12, 2026 • 42 mins

A.I. conversations are everywhere ... but how can businesses realistically use it today? In this episode of Secure AF, we introduce Vector Pulse A.I. and discuss how A.I. can help organizations automate workflows, improve operational efficiency, and support smarter decision-making.

We also dive into the growing excitement (and concerns) around A.I., common mistakes companies make when adop...

Listen

Mark as Played

Heightened Cyber Threats Amid U.S.-Iran Conflict Escalation

March 11, 2026 • 5 mins

Geopolitical tensions are rising ... and cyber threats aren’t far behind. In this episode of the #SOCBrief, we break down the escalating U.S.-Iran conflict, the potential cyber retaliation from Iranian threat actors, and the steps SOC teams can take now to stay ahead of attacks and protect critical systems.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen o...

Listen

Mark as Played

OSINT Essentials – Unlocking Not So Hidden Insights for Your SOC

March 4, 2026 • 6 mins

Open-source intelligence (OSINT) isn’t just for threat actors ... it’s a powerful advantage for SOC teams too. In this episode, we break down how publicly available data can help you uncover exposed assets, detect vulnerabilities early, and shrink your attack surface before attackers do.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Sp...

Listen

Mark as Played

Talking SOC Shop: How SOCs Show Value to Leadership 📈

February 25, 2026 • 12 mins

This episode of the #SOCBrief goes beyond day-to-day cybersecurity news and dives into what SOC success actually looks like from the leadership side. Andrew and CISO Jonathan Kimmitt discuss how SOC teams can communicate risk, create meaningful deliverables, use metrics effectively, and gain leadership buy-in for security decisions.

From risk profiles to reporting and real-world decision ma...

Listen

Mark as Played

Keeping AI Human-Centered in Digital Forensics 🧑‍💻⚖️

February 24, 2026 • 41 mins

AI can categorize images, analyze logs, and surface patterns faster than any human ever could, but it doesn’t understand context, legality, or nuance. In this episode, we discuss how AI is transforming criminal forensics and SOC investigations while examining the ethical, legal, and operational guardrails that must stay in place. As organizations adopt more AI-driven tools, the real challe...

Listen

Mark as Played

SmarterMail RCE Flaw – Ransomware's New Favorite Door

February 18, 2026 • 6 mins

No phishing. No user interaction. Just exposed services and a missing authentication check. In this episode of the #SOCBrief, we dive into the SmarterMail RCE flaw already being exploited in the wild and why mail servers continue to be prime ransomware targets. We cover indicators to hunt for, detection tips, and practical steps SOC teams can take to reduce risk fast. 🛡️

Wa...

Listen

Mark as Played

MSI Mayhem – RATs Hiding in Phishing Installers to Evade Detection 🧠

February 11, 2026 • 6 mins

Attackers are hiding remote access trojans (RATs) inside malicious MSI installers disguised as legit software, and it’s surging in early 2026. We break down how these phishing attacks bypass EDR, what to look for, and how SOC teams can stop them before they turn into full-blown breaches.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, S...

Listen

Mark as Played

Love as an Attack Vector 💌

February 10, 2026 • 39 mins

Romance scams spike around Valentine’s Day ... and they’re more dangerous than you think. In this episode, we break down how scammers build emotional trust, isolate victims, and turn relationships into financial and emotional traps. Learn the warning signs, the psychology behind the scams, and how to protect yourself and the people you love 💞.

Watch full episodes at youtube...

Listen

Mark as Played

Double Trouble: Microsoft Office and Fortinet FortiCloud Flaws Under Attack 💥

February 4, 2026 • 5 mins

This week’s #SOCBrief covers a dangerous double-hit: a Microsoft Office security bypass and a Fortinet FortiCloud authentication flaw, both exploited in the wild. Andrew walks through what the CVEs mean, how attackers are abusing trusted tools, and the patching and hunting steps SOC teams should take immediately.

Watch full episodes at youtube.com/@aliascybersecurity.
Li...

Listen

Mark as Played

Top Ransomware Threats Dominating Early 2026

January 28, 2026 • 7 mins

Ransomware is kicking off 2026 at full speed. We break down the top active groups right now, how they’re getting in, what infrastructure they’re targeting, and the key indicators your SOC should be watching to stay ahead. 🔐⚠️

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Mark as Played

📂 Inside the Breaches: Real Insider Threat Case Files

January 27, 2026 • 39 mins

Insider threats don’t start with malware ... they start with access. From disgruntled employees to overlooked contractors, this episode breaks down real-world cases, common patterns, and how organizations can better protect what matters most. 🎧🛡️

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts...

Listen

Mark as Played

CISA Retires 10 Emergency Directives – Progress for Feds, Wake-Up for the Rest of Us

January 21, 2026 • 6 mins

CISA has officially retired 10 emergency directives ... marking real progress for federal cybersecurity 🚀 But for the private sector, these “old” vulnerabilities are still very much in play ⚠️ In this #SOCBrief, we break down what was retired, why it matters, and what your SOC should do next.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcas...

Listen

Mark as Played

New Year SOC Reset: New Year, New You(r Security Posture) 🔒

January 14, 2026 • 5 mins

Kick off 2026 by hitting reset on your SOC 📊. In this episode of the #SOCBrief, we break down key January priorities, from annual security posture reviews and rule tuning to training refreshers and forward planning, so your team starts the year resilient, aligned, and ready for what’s next.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcast...

Listen

Mark as Played

Trusted Access, Malicious Intent: Insider Threats Explained

January 13, 2026 • 46 mins

When the threat isn’t external, it’s personal. This episode breaks down insider threats and corporate espionage: how trusted access turns into real risk, what warning signs to watch for, and how organizations can protect themselves. 🔐⚠️

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Mark as Played

🔐 Holiday Cyber Threats & What’s Coming Next

January 7, 2026 • 10 mins

🎙️ In this episode, CISO Jonathan Kimmitt steps in to break down the latest cybersecurity threats impacting organizations during the holiday season and beyond. From ransomware spikes during understaffed weekends to holiday-themed phishing, critical Patch Tuesday vulnerabilities, and emerging AI-powered social engineering, Kimmitt covers what security leaders need to know as we head into 2...

Listen

Mark as Played

End-of-Year Wrap: 2025 Threat Trends and Bold Predictions for 2026 🎆

December 31, 2025 • 7 mins