Secure AF - A Cybersecurity Podcast

Ransomware operators are leveraging the BlueHammer privilege escalation flaw to gain SYSTEM-level access and disable security controls.

Get the latest insights and response recommendations.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Watch

Mark as Played

FortiBleed Attacks: Turning Fortinet Firewalls into Credential Stealers

July 1, 2026 • 4 mins

FortiBleed is turning perimeter defenses into attack infrastructure.

In this episode, we unpack how adversaries exploit FortiOS vulnerabilities, harvest credentials directly from firewalls, and pivot deeper into networks, plus detection strategies, threat hunting tips, and mitigation guidance for SOC teams.

Watch full episodes at youtube.com/@aliascybersecurity.
List...

Listen

Watch

Mark as Played

Arch Linux AUR Compromise – Supply Chain Risks in the Open Source World

June 24, 2026 • 5 mins

This #SOCBrief episode explores a recent Arch Linux AUR supply chain compromise, where malicious community packages were used to steal credentials and gain persistence.

It highlights the risks of third-party repositories and offers key detection and mitigation strategies for security teams to better protect against similar attacks.

Watch full episodes at youtube.c...

Listen

Watch

Mark as Played

Qilin Ransomware Exploiting VPN Zero-Days: What SOCs Need to Do Now

June 17, 2026 • 4 mins

A single unpatched VPN could be all it takes.

Qilin ransomware is actively exploiting VPN zero-days to breach networks and accelerate ransomware deployment. We walk through the tactics, the real risk to your organization, and actionable SOC strategies to stay ahead.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere...

Listen

Watch

Mark as Played

You're Probably Not Hacked, You're Being Tracked

June 16, 2026 • 43 mins

You probably haven’t been hacked, you’ve been tracked. This episode breaks down how ad tech, mobile apps, and data brokers create massive behavioral profiles without ever touching your phone’s security.

Learn how tracking really works, why it matters, and what you can actually do about it. 📱👁️📡

Watch full episodes at youtube.com/@aliascybersecurity....

Listen

Watch

Mark as Played

The SOC Brief Turns One 🎂 Insights, Stories & Lessons Learned

June 10, 2026 • 13 mins

It’s our 1-year anniversary! 🎂

From bite-sized cyber insights to growing a passionate listener base, this episode reflects on the journey, the challenges, and the wins along the way. Expect laughs, lessons, and behind-the-scenes stories you won’t want to miss. 🚀

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify an...

Listen

Watch

Mark as Played

Kali365 Phishing-as-a-Service: FBI Warns of New M365 Credential Theft Tool

June 3, 2026 • 5 mins

The FBI is warning about Kali365, a new phishing‑as‑a‑service tool designed to steal Microsoft 365 credentials and enable account takeovers at scale. In this episode, we break down how it works, why it’s so effective, and what your SOC can do right now to detect and defend against it.

🎧 Tune in now at secureafpodcast.com

Watch full episodes at youtube.com/@aliasc...

Listen

Watch

Mark as Played

Incident Response 101: What to Do When You’re Under Attack

June 2, 2026 • 37 mins

What actually happens when a company gets hacked?

In this episode, we break down real-world incident response, from initial access and ransomware tactics to forensic investigation and common mistakes that make things worse. If your organization had an incident tomorrow, would you know what to do?

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on App...

Listen

Watch

Mark as Played

First Known AI-Powered Zero-Day Exploit: What SOCs Need to Know 🤖

May 27, 2026 • 4 mins

In this episode of the #SOCBrief, we dive into the first confirmed case of an AI-powered zero-day exploit. With attackers leveraging AI to discover vulnerabilities, generate exploit code, and bypass defenses faster than ever, this marks a major shift in how threats are developed and deployed.

We break down how the attack worked, what made the exploit unique, and the key detection and ...

Listen

Watch

Mark as Played

ShinyHunters Breach of Instructure Canvas LMS 📚✏️: Lessons for SOCs on Third-Party Vendor Risks

May 20, 2026 • 5 mins

In this episode of the #SOCBrief, we break down the ShinyHunters breach of Instructure’s Canvas LMS and what it means for security teams everywhere.

From exploiting a lesser-monitored service to exfiltrating millions of records, this attack highlights the growing risk of third-party vendors and supply chain exposure. We walk through how the breach unfolded, key indicators of com...

Listen

Watch

Mark as Played

Canvas Breach Breakdown: What 9,000+ Outages Teach Us About SaaS Risk

May 19, 2026 • 55 mins

When the Canvas LMS went down, thousands of institutions came to a halt, right in the middle of finals. In this episode, we break down what really happened, what data may have been exposed, and why this incident is a wake-up call for every organization relying on SaaS platforms.

From vendor risk and contract blind spots to business continuity failures, we unpack the real lessons sec...

Listen

Watch

Mark as Played

MuddyWater’s Ransomware Decoy: Iranian APTs Hiding Espionage in Plain Sight

May 13, 2026 • 5 mins

MuddyWater is blurring the line between ransomware and espionage... using Chaos ransomware as a decoy to distract defenders while quietly stealing data and maintaining persistence.

In this episode, we break down how this tactic works, what SOC teams should watch for, and how to detect the hidden activity beneath the noise.

Watch full episodes at youtube.com/@aliascybers...

Listen

Watch

Mark as Played

Qilin Ransomware’s EDR Killer DLL – How Attackers Are Subverting Defenses

May 6, 2026 • 6 mins

Qilin ransomware is deploying a malicious DLL to disable EDR tools before encryption begins.

In this #SOCBrief, we break down how the attack works, what to look for, and how defenders can respond.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Watch

Mark as Played

AI’s Inflection Point: From Productivity Tool to Existential Risk

May 5, 2026 • 49 mins

Artificial intelligence is evolving faster than most organizations, and regulators, are prepared for. In this episode of the #SecureAFPodcast, we sit down with Chris Hood, a veteran technologist and financial industry leader, to explore how AI has evolved from early computing to today’s large language models and agentic systems.

We discuss real‑world AI use in highly regulated environ...

Listen

Watch

Mark as Played

Axios NPM Supply Chain Compromise – Lessons for SOCs on Third-Party Risks

April 29, 2026 • 4 mins

A malicious Axios NPM package highlights how quickly supply chain compromises can spread through trusted dependencies.

In this #SOCBrief, we break down what happened, the risks to downstream applications, and what SOC teams should be monitoring to catch similar attacks early.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spot...

Listen

Watch

Mark as Played

Black Shrantac Ransomware – LOTL Tactics and Double Extortion on the Rise

April 22, 2026 • 5 mins

A new ransomware group is blending in with legitimate tools. This #SOCBrief breaks down Black Shrantac and how to detect it early.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Watch

Mark as Played

Think Fast or Get Pwned: How Esports Is Forging Elite Cyber Defenders

April 21, 2026 • 39 mins

Cybersecurity success increasingly hinges on cognitive readiness, the ability to spot patterns fast, make the right calls under pressure, and perform amid chaos.

On this episode of the SECURE AF PODCAST, Will Arnett sits down with Jessica Gulick, Founder and Commissioner of the U.S. Cyber Games, to discuss why cognitive training is critical, how esports players develop these s...

Listen

Watch

Mark as Played

Iranian APTs Targeting U.S. PLCs: OT Wake-Up Call for SOCs

April 15, 2026 • 6 mins

Iranian-affiliated APT actors are actively targeting U.S. critical infrastructure, specifically PLCs powering essential operations across water, energy, and manufacturing.

This #SOCBrief breaks down the latest CISA alert, how attackers are exploiting OT environments, and what security teams need to be watching for right now. From key indicators to practical defense strategies, this is your ...

Listen

Watch

Mark as Played

Google Chrome Zero-Days Under Active Attack – What SOCs Need to Do Now

April 8, 2026 • 5 mins

Chrome just became the attack surface of the week.

We’re breaking down the latest zero-day exploits, what attackers are doing with them, and how SOC teams can respond before it turns into something bigger.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Watch

Mark as Played

Beyond the Network: The Rise of Medical Device Security

April 7, 2026 • 27 mins

Healthcare security isn’t just about networks anymore.

In this episode, we dive into the complex world of connected medical devices, the challenges of securing them, and why organizations need a more holistic approach to cybersecurity.

Watch full episodes at youtube.com/@aliascybersecurity.
Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Listen

Watch

Mark as Played