Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
Think like a hacker. Defend like a pro.
Welcome to the Secure AF Cybersecurity Podcast — your tactical edge in the ever-evolving cyber battlefield. Hosted by industry veterans including Donovan Farrow and Jonathan Kimmitt, this podcast dives deep into real-world infosec challenges, red team tactics, blue team strategies, and the latest tools shaping the cybersecurity landscape.
Whether you're a seasoned pentester, a SOC analyst, or just breaking into the field, you'll find actionable insights, expert interviews, and unfiltered discussions with Alias team members and top-tier guests from across the cybersecurity spectrum.
Stay sharp. Stay informed. Stay Secure AF.
| Episode | Date |
|---|---|
|
EP 65 - Ghosts, Phantoms, and Terrible OPSEC — Inside an AI-Assisted Ransomware Crew
|
Oct 29, 2026 |
|
EP. 119 - Q&A with Tanner and Andrew
|
Oct 27, 2026 |
|
EP. 64 - When the Fridge Becomes an Endpoint: The French Supermarket Cyberattack
|
Oct 22, 2026 |
|
EP. 118 - Alias Spooktacular: When Cybersecurity is like Ghost Hunting
|
Oct 20, 2026 |
|
EP. 63 - When the Security Appliance Becomes the Breach: The FortiMail Zero-Day
|
Oct 15, 2026 |
|
EP. 117 - The security risks organizations create when employees adopt AI faster than governance can keep up
|
Oct 13, 2026 |
|
EP. 62 - Don’t Trust the Agent: NVIDIA’s New AI Security Platform
|
Oct 08, 2026 |
|
EP. 61 - Hackers Hacking Hackers: ShinyHunters Turns Cl0p Into the Victim
|
Oct 01, 2026 |
|
EP. 60 - BlueMoon: When the Patch Becomes the Exploit Roadmap
|
Sep 24, 2026 |
|
EP. 116 - Seccon: 2026
|
Sep 22, 2026 |
|
EP. 59 - When Your RMM Becomes the Target – The N-able Zero-Day
|
Sep 17, 2026 |
|
EP. 115 - Operation Security: How to keep your family safe when posting about them.
|
Sep 15, 2026 |
|
EP. 114 - How Defenders Can Secure Enterprise AI Before Attackers Find the Gaps
|
Sep 11, 2026 |
|
EP. 58 - FalconFlank: When Your EDR Becomes the Attack Surface.
|
Sep 08, 2026 |
|
EP. 57 - Zimbra RCE Under Active Exploitation – Over 270 Servers Already Compromised
|
Sep 03, 2026 |
|
EP. 113 - Defcon 2026
|
Aug 25, 2026 |
|
EP. 56 - Akira Ransomware Uses Safe Mode to Blind EDR: Lessons for Defenders
|
Aug 20, 2026 |
|
EP. 55 - Windows BlueHammer Flaw Now Actively Exploited by Ransomware Gangs
|
Jul 08, 2026 |
|
EP. 54 - FortiBleed Attacks: Turning Fortinet Firewalls into Credential Stealers
|
Jul 01, 2026 |
|
EP. 53 - Arch Linux AUR Compromise – Supply Chain Risks in the Open Source World
|
Jun 24, 2026 |
|
EP. 52 - Qilin Ransomware Exploiting VPN Zero-Days: What SOCs Need to Do Now
|
Jun 17, 2026 |
|
EP. 112 - You're Probably Not Hacked, You're Being Tracked
|
Jun 16, 2026 |
|
EP. 51 - The SOC Brief Turns One 🎂 Insights, Stories & Lessons Learned
|
Jun 10, 2026 |
|
EP. 50 - Kali365 Phishing-as-a-Service: FBI Warns of New M365 Credential Theft Tool
|
Jun 03, 2026 |
|
EP. 111 - Incident Response 101: What to Do When You’re Under Attack
|
Jun 02, 2026 |
|
EP. 49 - First Known AI-Powered Zero-Day Exploit: What SOCs Need to Know 🤖
|
May 27, 2026 |
|
EP. 48 - ShinyHunters Breach of Instructure Canvas LMS 📚✏️: Lessons for SOCs on Third-Party Vendor Risks
|
May 20, 2026 |
|
EP. 110 - Canvas Breach Breakdown: What 9,000+ Outages Teach Us About SaaS Risk
|
May 19, 2026 |
|
EP. 47 - MuddyWater’s Ransomware Decoy: Iranian APTs Hiding Espionage in Plain Sight
|
May 13, 2026 |
|
EP. 46 - Qilin Ransomware’s EDR Killer DLL – How Attackers Are Subverting Defenses
|
May 06, 2026 |
|
EP. 109 - AI’s Inflection Point: From Productivity Tool to Existential Risk
|
May 05, 2026 |
|
EP. 45 - Axios NPM Supply Chain Compromise – Lessons for SOCs on Third-Party Risks
|
Apr 29, 2026 |
|
EP. 44 - Black Shrantac Ransomware – LOTL Tactics and Double Extortion on the Rise
|
Apr 22, 2026 |
|
EP. 108 - Think Fast or Get Pwned: How Esports Is Forging Elite Cyber Defenders
|
Apr 21, 2026 |
|
EP. 43 - Iranian APTs Targeting U.S. PLCs: OT Wake-Up Call for SOCs
|
Apr 15, 2026 |
|
EP. 42 - Google Chrome Zero-Days Under Active Attack – What SOCs Need to Do Now
|
Apr 08, 2026 |
|
EP. 107 - Beyond the Network: The Rise of Medical Device Security
|
Apr 07, 2026 |
|
EP. 41 - Interlock Ransomware Hits Cisco FMC Zero-Day: Lessons for SOCs on Edge Device Security
|
Apr 01, 2026 |
|
EP. 40 - Chinese Hackers Breach FBI Surveillance Network: Supply-Chain Lessons for SOCs
|
Mar 25, 2026 |
|
EP. 106 - Ransomware as a Business: Inside Qilin’s Rise
|
Mar 24, 2026 |
|
EP. 39 - MuddyWater's New BugSleep Malware – Iran's Cyber Retaliation Ramps Up
|
Mar 18, 2026 |
|
EP. 38 - 🚨 The Telus Hack – ShinyHunters Strikes a Telecom Giant 🚨
|
Mar 13, 2026 |
|
EP. 105 - A.I. as a Multiplier: Introducing Vector Pulse A.I.
|
Mar 12, 2026 |
|
EP. 37 - Heightened Cyber Threats Amid U.S.-Iran Conflict Escalation
|
Mar 11, 2026 |
|
EP. 36 - OSINT Essentials – Unlocking Not So Hidden Insights for Your SOC
|
Mar 04, 2026 |
|
EP. 35 - Talking SOC Shop: How SOCs Show Value to Leadership 📈
|
Feb 25, 2026 |
|
EP. 104 - Keeping AI Human-Centered in Digital Forensics 🧑💻⚖️
|
Feb 24, 2026 |
|
EP. 34 - SmarterMail RCE Flaw – Ransomware's New Favorite Door
|
Feb 18, 2026 |
|
EP. 33 - MSI Mayhem – RATs Hiding in Phishing Installers to Evade Detection 🧠
|
Feb 11, 2026 |
|
EP. 103 - Love as an Attack Vector 💌
|
Feb 10, 2026 |
|
EP. 32 - Double Trouble: Microsoft Office and Fortinet FortiCloud Flaws Under Attack 💥
|
Feb 04, 2026 |
|
EP. 31 - Top Ransomware Threats Dominating Early 2026
|
Jan 28, 2026 |
|
EP. 102 - 📂 Inside the Breaches: Real Insider Threat Case Files
|
Jan 27, 2026 |
|
EP. 30 - CISA Retires 10 Emergency Directives – Progress for Feds, Wake-Up for the Rest of Us
|
Jan 21, 2026 |
|
EP. 29 - New Year SOC Reset: New Year, New You(r Security Posture) 🔒
|
Jan 14, 2026 |
|
EP. 101 - Trusted Access, Malicious Intent: Insider Threats Explained
|
Jan 13, 2026 |
|
EP. 28 - 🔐 Holiday Cyber Threats & What’s Coming Next
|
Jan 07, 2026 |
|
EP. 27 - End-of-Year Wrap: 2025 Threat Trends and Bold Predictions for 2026 🎆
|
Dec 31, 2025 |
|
EP. 26 - 🎄 Holiday Season Security: Preparing Your SOC for the Festive Chaos
|
Dec 24, 2025 |
|
EP. 100 - Retrospective AF!
|
Dec 23, 2025 |
|
EP. 99 - The Reality of Stalking in a Digital Age 🕵️♂️⚠️
|
Dec 16, 2025 |
|
EP. 25 - Special Episode: Inside Weekly Threat-Intel Briefings with a vCISO 💼
|
Dec 15, 2025 |
|
EP. 24 - ⚠️ React2Shell Zero-Day ⚠️: Chinese Hackers Strike Within Hours
|
Dec 10, 2025 |
|
EP. 98 - Tis the Season for Cybercrime: How Hackers Target Holidays 🎄
|
Dec 09, 2025 |
|
EP. 23 - U.S.-Venezuela Tensions: Cyber Risks for American SOCs
|
Dec 03, 2025 |
|
EP. 97 - When People Think They’ve Been Hacked
|
Dec 02, 2025 |
|
EP. 22 - FortiWeb Zero-Day: Silent Patch and Firewall Wake-Up Call 🔥
|
Nov 26, 2025 |
|
EP. 96 - The Halls: 2025 Hacker Gift Guide 🎁💻
|
Nov 25, 2025 |
|
EP. 21 - Patch Tuesday: Zero-Day Alert and Patching Must-Dos ✅
|
Nov 19, 2025 |
|
EP. 20 - ⚠️ Insider Threats ⚠️: Ransomware Negotiators Gone Rogue
|
Nov 12, 2025 |
|
EP. 95 - The Art Of The Con (Cyber Edition) 🔐
|
Nov 11, 2025 |
|
EP. 19 - Atroposia RAT: The Malware That Scans for Its Own Exploits
|
Nov 05, 2025 |
|
EP. 18 - CAPTCHA Con: Hackers' Evolving ClickFix Malware Trap
|
Oct 29, 2025 |
|
EP. 17 - RondoDox Botnet Expansion: The Shotgun Approach to IoT Exploitation
|
Oct 22, 2025 |
|
EP. 16 - Obscura Ransomware: Unmasking a Stealthy New Threat ⚠️
|
Oct 15, 2025 |
|
EP. 15 - 🛡️ Pen Test Potential: How Organizations Are Missing Out on Fortifying the SOC 🛡️
|
Oct 08, 2025 |
|
EP. 94 - 2025 SECCON Debrief
|
Oct 07, 2025 |
|
EP. 14 - 🚨 Ransomware Rising: Variants, Tactics, and Defenses in 2025 🚨
|
Oct 01, 2025 |
|
EP. 13 - 💢 FileFix Fiasco 💢 Steganography's Stealthy StealC Drop
|
Sep 24, 2025 |
|
EP. 12 - Monitoring the Dark Web for Leaked Data in DFIR
|
Sep 17, 2025 |
|
EP. 11 - Mastering Incident Response: Essential for SOC Success
|
Sep 10, 2025 |
|
EP. 93 - DEF CON 33 Debrief
|
Aug 26, 2025 |
|
EP. 10 - 🚨 SonicWall Firewall Ransomware Breakdown
|
Aug 06, 2025 |
|
EP. 9 - Spilling the Tea: What Happens When Apps Launch Without Locking Down Security ☕
|
Jul 30, 2025 |
|
EP. 8 - 🚨⚠️ A Critical ZERO-DAY (CVE-2025-53770)
|
Jul 25, 2025 |
|
EP. 7 - 🚪 Offboarding isn't just HR's job …
|
Jul 23, 2025 |
|
EP. 92 - Aligned by Design: CISO x Legal in Practice
|
Jul 22, 2025 |
|
EP. 6 - 🚨 Record-Shattering DDoS Attack Alert 🚨
|
Jul 16, 2025 |
|
Secure AF SOC Brief #5 - Chrome CVE-2025-6554
|
Jul 09, 2025 |
|
Ep 91: The Engineers React to Breach News
|
Jul 08, 2025 |
|
Secure AF SOC Brief #4 - False Positives
|
Jul 02, 2025 |
|
Secure AF SOC Brief #3 - IOCs
|
Jun 25, 2025 |
|
Episode 90: Global Wars - Cyber Strikes Back
|
Jun 24, 2025 |
|
Secure AF SOC Brief #2 - SafePay
|
Jun 18, 2025 |
|
Episode 89: Meet the Alias SOC - on the Battlefront of Cybersecurity
|
Jun 13, 2025 |
|
EP. 1 - Secure AF SOC Brief - SOC Life
|
Jun 11, 2025 |
|
Episode 88: Two-Time CISO Showdown Champion (and Chad)
|
May 12, 2025 |
|
Episode 87: Securing Patient Data with HIPAA's New Security Rules
|
Apr 16, 2025 |
|
Episode 86: How to make your pen test training not suck
|
Apr 11, 2025 |
|
Episode 85: Is SANS the overpriced dinosaur of cybersecurity training?
|
Mar 11, 2025 |
|
Episode 84: New Years Cyber Resolutions Part 2
|
Jan 23, 2025 |
|
Episode 83: New Years Cyber Resolutions Part 1
|
Jan 10, 2025 |
|
Episode 82: Leaving It All On The Table - The What, How, and Why of Tabletop Exercises
|
Dec 05, 2024 |
|
Episode 81: IR Aversion, Part 2
|
Nov 21, 2024 |
|
Episode 80: IR Aversion, Part 1
|
Nov 07, 2024 |
|
Episode 79: Firewall Follies
|
Oct 24, 2024 |
|
Episode 78: S3CCON Debrief
|
Oct 04, 2024 |
|
Episode 77: Defcon Debrief 2024
|
Oct 03, 2024 |
|
Episode 76: Losing the Cyberwar Through Marketing, Part 2
|
Aug 22, 2024 |
|
Episode 75: Losing the Cyberwar Through Marketing, Part 1
|
Aug 08, 2024 |
|
Episode 74: Internship Intrigue
|
Jul 11, 2024 |
|
Episode 73: Never Been Vished?
|
Jun 28, 2024 |
|
Episode 72: Security in Process
|
Jun 13, 2024 |
|
Episode 71: When the CISO Speaks Up
|
May 30, 2024 |
|
Episode 70 - Boeing and Beyond
|
May 15, 2024 |
|
Episode 69 - AI or BS
|
May 02, 2024 |
|
Episode 68 - It's Exploit O'Clock
|
Apr 18, 2024 |
|
Episode 67 - The CISO Pen Test
|
Apr 04, 2024 |
|
Episode 65 - Holistic Security
|
Mar 07, 2024 |
|
Episode 64: Rules of Engagement
|
Feb 22, 2024 |
|
Episode 63 - Critial Infrastructure: The Final Frontier
|
Feb 01, 2024 |
|
Episode 62 - Entering Cyber Sideways
|
Jan 25, 2024 |
|
Episode 61 - Pen Test Types
|
Jan 11, 2024 |
|
Episode 60 - Integris' Assumed Incident
|
Jan 05, 2024 |
|
Episode 59 - Pen Test Gaps
|
Dec 21, 2023 |
|
Episode 58 - Solar Winds and Beyond
|
Dec 07, 2023 |
|
Episode 57 - Introducing Phillip Wylie
|
Nov 09, 2023 |
|
Episode 56 - The Human Incident Response
|
Oct 25, 2023 |
|
Episode 55 - The Hacking Business
|
Oct 02, 2023 |
|
Episode 54: Your Family Is The Target
|
Sep 07, 2023 |
|
Episode 53 - DefCon Debrief 2023
|
Aug 24, 2023 |
|
Episode 52 - DEF CON Preview 2023
|
Aug 09, 2023 |
|
Episode 51 - Digital Forensics
|
Jul 27, 2023 |
|
Episode 50! - Targets of Opportunity
|
Jul 13, 2023 |
|
Episode 49 - Pentester vs. Thintester
|
Jun 22, 2023 |
|
Episode 48 - Updates and Announcements - Secure AF
|
Jun 08, 2023 |
|
Episode 47 - IOT and XIOT Devices and Dangers
|
May 24, 2023 |
|
Episode 46 - Hacking a Cybersecurity Career
|
May 11, 2023 |
|
Episode 45 - Code of Honor
|
Apr 27, 2023 |
|
Episode 44 - Vendor Due Diligence
|
Apr 13, 2023 |
|
Episode 43 - Cyber Training that Doesn't Suck
|
Mar 30, 2023 |
|
#42 - SOC It To 'Em
|
Mar 16, 2023 |
|
#41 APIs: More Risk Than You Think
|
Mar 02, 2023 |
|
#40 Are The Hackers Winning?
|
Feb 16, 2023 |
|
#39 IT vs Cybersecurity
|
Dec 15, 2022 |
|
#38 Protecting Users From Themselves
|
Dec 01, 2022 |
|
#37 Cybersecurity In Action
|
Nov 17, 2022 |
|
#36 Mental Health in Cybersecurity
|
Nov 03, 2022 |
|
#35 Your Internet Identity
|
Oct 20, 2022 |
|
#34 Password Security
|
Oct 06, 2022 |
|
#33: Secure The Unexpected
|
Sep 22, 2022 |
|
#32 Memory Forensics
|
Sep 08, 2022 |
|
#31 Bonus Episode - We Made the List: Inc. 5000's Fastest Growing Companies
|
Sep 01, 2022 |
|
#30: DEFCON Debrief 2022
|
Aug 25, 2022 |
|
#29: Catch the Biggest Phish
|
Aug 11, 2022 |
|
#28: SIEM for Small Business
|
Jul 28, 2022 |
|
#27: Why You Need a Cybersecurity Homelab
|
Jul 14, 2022 |
|
#26: Password Cracking: An Overview
|
Jun 30, 2022 |
|
#25: World Backup Day
|
Mar 31, 2022 |
|
#24: The Seven Steps of Digital Forensics
|
Feb 09, 2022 |
|
#23: L33T or Lame: A Hacker Tool Review
|
Dec 16, 2021 |
|
#22: Using OSINT: A Look at Open Source Intelligence
|
Nov 11, 2021 |
|
#21: Conti Leak: A Look Inside
|
Sep 24, 2021 |
|
#20: DEF CON 2021: The Alias Experience
|
Aug 26, 2021 |
|
#19: How Hackers Choose Who to Attack and Why Small Businesses Should Care
|
Jul 29, 2021 |
|
#18: Pissing Off Your Pentesters: A Storytelling Episode
|
Jul 07, 2021 |
|
#17: Breaking Into Cybersecurity: How to Get Started in the Industry
|
Jun 22, 2021 |
|
#16: Rules of Engagement: Why You Gotta Have 'Em
|
Jan 14, 2021 |
|
#15: Port Scanning and Why it Matters
|
Dec 01, 2020 |
|
#14: Cyber Security Insurance: What You Need to Know
|
Nov 02, 2020 |
|
#13: Phishing: How to Avoid Being the Bait
|
Sep 08, 2020 |
|
#12: What You Need to Know About CMMC
|
Aug 20, 2020 |
|
#11: Network Monitoring and Tools
|
Jul 28, 2020 |
|
#10: Ransomware: What It Is and How to Avoid It
|
Jul 03, 2020 |
|
#9: Meet the Alias Security Crew
|
May 07, 2020 |
|
#8: Special Guest Interview: Chris Boykin of Future Com
|
Apr 27, 2020 |
|
#7: Securing Against the Coronavirus and Computer Viruses
|
Mar 30, 2020 |
|
#6: Special Guest Interview: Bonus
|
Feb 25, 2020 |
|
#5: Deepfakes: The Latest Trust Breaker
|
Jan 23, 2020 |
|
#4: The Internet of Things. What Is It?
|
Dec 27, 2019 |
|
#3: Don't Worry About the Recent VPN Breaches
|
Nov 18, 2019 |
|
#2: Practical Tips for Cyber Security Awareness Month
|
Oct 16, 2019 |
|
#1: Our DEFCON 2019 Experience
|
Oct 10, 2019 |