TechnologyNewsTech NewsTrue Crime

NeedleStack

Authentic8

NeedleStack co-hosts interview professional open-source researchers who discuss tips, tricks and insights into the practice of digital investigative research. Whether you’re an open-source expert or aficionado, tune in to learn how to hone your skills, improve your craft and protect yourself as you search the surface, deep and dark web.

From Authentic8, creators of Silo for Research. Visit authentic8.com/needlestack to learn more!

Play

Open in

24 episodes
Avg 46 min
English

Episodes 24

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

#108
Yesterday · 55 min
How Criminals Turn Instagram Likes Into Laundered Millions | #108
In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar sat down with Chad Longo, Business Development & Channels Director at Fivecast, for a deep examination of a largely overlooked financial crime vector: influencers as high-risk individuals. Chad, whose background spans the US intelligence community and anti-money laundering operations, broke down why the micro and nano tiers of influencers — not the mega-celebrities — represent the real operational risk, and how organized crime groups increasingly rely on these accounts to move money completely outside the traditional banking system. The conversation moved through the mechanics of modern money laundering on social platforms — from TikTok's gifting economy and OnlyFans subscriptions to tokenized digital currencies that create new layers of placement and obfuscation. Chad walked through real-world case studies, including Jebara Igbara ("Jay Mazini") and Ramon Abbas ("Hushpuppi"), illustrating how influencers wittingly and unwittingly become conduits for billions in illicit funds. The hosts explored how synthetic identities, bought-and-flipped accounts, and AI-generated personas complicate detection, and why financial institutions are structurally unprepared because the laundering process now begins — and often ends — entirely outside the bank. The episode closed with practical guidance for both practitioners and the general public. Chad offered three concrete rules for distinguishing legitimate creators from fraud and laundering operations, and the hosts discussed why admitting you've been fooled — and stopping — is often the hardest and most important defensive move. For OSINT analysts, CTI leaders, and anyone navigating today's social platforms, it was a sobering look at how low the barrier has become for criminals to weaponize notoriety. Guest-at-a-Glance Name: Chad Longo Role: Business Development & Channels Director Company: Fivecast Noteworthy: Career rooted in the US intelligence community, Chad pioneered the integration of social media and publicly available information into national security operations, particularly in support of anti-money laundering (AML) and counter-financing of terrorism (CFT) initiatives. Over the past decade, he has become a trusted subject matter expert in social media investigations and financial crime intelligence, with recognition from multiple federal agencies. Where to find him: LinkedIn, or via business email at chad.longo@fivecast.com
#107
November 4 · 44 min
How Breach Data Cracks the Toughest Investigations | Ep. 107
In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar sat down with Matteo Tomasini, Founder & CEO of District4 Labs, for a masterclass on hard target investigations across the deep and dark web. Drawing on more than a decade of corporate investigations experience at firms like Prescient, BlueVoyant, and K2 Intelligence, Matteo walked through the layered methodology behind identifying threat actors — starting with public records aggregators like TLO, Accurint, and Clear, and expanding outward through breach data, social media, and internet infrastructure. His core message: every identifier is a lead, not a fact, and validation at every step separates real intelligence from garbage-in-garbage-out. The conversation dug into the human side of adversary tradecraft. Matteo explained why even the most operationally disciplined threat actors eventually make mistakes — reusing a password, forgetting to launch a VPN, or leaving a footprint in a Minecraft account created when they were twelve years old. He shared how "pivoting through time" has helped him identify Russian hackers and other hard targets by exploiting the OpSec gaps of the past. AJ, Kacper, and Matteo also examined the industry's current tension around AI, platform consolidation, and the risk that newer analysts are becoming too dependent on tools that hide their methodology behind polished outputs. The episode closed with a sobering discussion of provenance, chain of custody, and the growing threat of fabricated datasets — Matteo recounted receiving a Coinbase "leak" from a threat actor that turned out to be entirely synthetic, generated with a Python script. Whether the audience is corporate CTI teams racing to stop the bleeding or European law enforcement working under closure-rate pressure, the through-line is the same: show your work, deal in likelihoods rather than absolutes, and never trust a single data source without corroboration. Guest-at-a-Glance 💡Name: Matteo Tomasini 💡Role: Founder & CEO 💡Company: District4 Labs 💡Noteworthy: Deep and dark web data company providing investigators and cyber analysts access to billions of records with compromised PII. Previously Managing Director and Cyber Practice Lead at Prescient, Director of Incident Response and Threat Intelligence at BlueVoyant, and Senior Practitioner at K2 Intelligence. Expertise spans deep and dark web investigations, social media intelligence, online threat monitoring, threat attribution, and complex cyber investigations. 💡Where to find them: District4 Labs, LinkedIn
#106
October 29 · 53 min
AI Watermarking, Explained: What OSINT and Intel Pros Need to Know | Ep 106
In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar tackle one of the most consequential — and least understood — regulatory shifts to hit generative AI: mandatory AI watermarking. Prompted by the EU AI Act's requirement that providers embed machine-readable markers into any synthetic text, audio, image, or video, AJ and Kacper walk through what watermarking actually is (spoiler: it's not a visible logo), how providers like Anthropic, Google, and OpenAI are being forced to comply, and why the technology, while well-intentioned, may create as many problems as it solves. The conversation moves quickly from the technical mechanics — visible markers, latent pixel-level patterns, and model-level fingerprints — to the human consequences. AJ and Kacper unpack how false positives could damage the reputations of contractors, academics, journalists, and intel analysts whose writing styles happen to mirror AI training data. They also examine the reverse problem: watermark-clean content that's actually AI-generated slipping past detection and being trusted more than it should be, precisely because a "neutral" tool validated it. Along the way, they question whether the industry is applying a technical solution to what is fundamentally a social problem. The episode closes on a bigger philosophical question: does it matter how content was produced if the outcome is accurate, sourced, and defensible? AJ and Kacper argue that the future belongs to authenticity, traceability, and tradecraft — sources, methods, and citations that let creators defend their work when watermark scores inevitably get it wrong. For OSINT practitioners, intel analysts, and anyone whose credibility depends on the integrity of their output, it's a call to double down on discipline before the machines start grading everyone's homework. This episode features the two co-hosts of NeedleStack.. AJ Nash — CEO at Unspoken Security and co-host of NeedleStack. AJ brings two decades of intelligence community experience across counter-terrorism, counter-insurgency, counter-human trafficking, and war crimes work, followed by more than a decade in the private sector building intelligence-driven security programs. Find him on LinkedIn. Kacper Piwowar — Senior Product Marketing Manager at Authentic8 and co-host of NeedleStack. Kacper brings a background spanning Microsoft, the MSP industry, and years of tech-sector experience across multiple markets. He describes himself as a tech aficionado who enjoys unpacking emerging technologies and their real-world implications. Find him on LinkedIn and on future episodes of NeedleStack.
#105
August 19 · 57 min
Making Intel Fun Again: Why Play Belongs In Serious Work
Can intelligence work be serious, mission-critical—and still be fun? In this episode of NeedleStack, hosts AJ Nash and Kacper Piwowar sit down with Cat Self, Senior Director of Adversary Research at Tidal Cyber, to explore how play, creativity, gamification, and psychological safety can make cybersecurity and intelligence teams more effective. Drawing on Cat’s experience in military intelligence, red teaming, threat hunting, MITRE ATT&CK, adversary research, and team leadership, the conversation examines why challenging problems and meaningful missions make intelligence work rewarding—and what happens when burnout, repetitive tasks, and productivity pressures take over. The discussion dives into research on learning through play and the “Batman Effect,” including how imagination and role-playing can improve engagement with tedious or difficult tasks. The group connects those findings directly to cyber threat intelligence, adversary emulation, red teaming, tabletop exercises, and wargaming. They also explore the changing role of AI in cybersecurity and intelligence, why faster content generation isn’t the same as intelligence analysis, and how AI may actually raise the standard for what humans consider “good enough.”
#104
July 29 · 42 min
Deepfake Detection is Failing. Here's What Comes Next for CTI & Investigation Teams
In this episode of NeedleStack, host AJ Nash welcomes new co-host Kacper Piwowar to tackle the growing threat of deepfakes and synthetic media. They explore how AI has made impersonation cheap and easy, with more than 100 million fake profiles on Meta platforms alone and deepfake losses projected to hit $40 billion by 2027. The sobering reality: Only 24.5% of people can accurately detect AI-generated content, making everyone from individuals to investigators vulnerable. AJ and Kacper discuss practical protection strategies and introduce a paradigm shift in fighting deepfakes. They cover the balance between necessary digital presence and privacy protection, implications for OSINT professionals, and why effective security education must meet people where they are.
#103
July 22 · 46 min
Securing the 2026 FIFA World Cup: An Intel Playbook for the Biggest Event in Sports History
In this (very timely) episode of NeedleStack, host AJ Nash and guest Kevin Uniacke from Seerist discuss securing the 2026 FIFA World Cup across the US, Canada, and Mexico. They explore how intelligence professionals break down massive security challenges across multiple countries, the differences in threat environments between venues, and why organized crime is actually more predictable than random threats. Kevin shares insights on the intelligence cycle, stakeholder requirements, and how to deliver actionable intelligence products. The conversation covers travel safety for attendees, the role of AI in open-source intelligence, and practical preparation tips including site surveys and emergency planning. They also discuss why transparency in intelligence sources matters and the importance of expert analysis over social media rumors.
#102
March 19 · 46 min
Alligator in the Boat
Integrating security into our daily lives can feel overwhelming. From password management to encryption, it’s easy to feel frustrated. Robert Vamosi and AJ Nash share our experiences navigating security in our personal and professional lives. They discuss practical strategies like how to choose your seat in a restaurant for safety and the importance of encryption. Remember, security isn’t just a job; it’s a lifestyle. Finding the right balance is key, and it’s okay to have slip-ups along the way.
#101
March 5 · 49 min
Navigating the Ransomware Negotiation
In this episode, hosts Robert Vamosi and AJ Nash engage with cybersecurity expert John DiMaggio to explore the complexities of ransomware negotiation. They discuss the process of responding to ransomware attacks, the stakeholders involved, and the legal and ethical considerations that companies face when deciding whether to pay a ransom. The conversation delves into the tactics used by ransomware groups, the importance of understanding target selection, and the role of insurance in these scenarios. Additionally, they highlight the need for standards in negotiation practices and preventative measures that organizations can take to mitigate risks. The episode concludes with a discussion on the future of ransomware negotiation and the importance of having knowledgeable advisors in the field.
#99
February 5 · 55 min
Exploring the Dark Web: Myths and Realities
NeedleStack hosts, AJ Nash and Robert Vamosi engage with Roman Sannikov a seasoned expert in cyber threat intelligence, to explore the complexities of the dark web. The conversation delves into the myths surrounding the dark web, the community dynamics within cybercrime, and the professionalization of criminal enterprises. Roman shares insights on how trust and reputation are managed in these underground communities, the barriers to entry for new members, and the human element that often gets overlooked in discussions about cybercriminals.
#98
January 21 · 44 min
Navigating China's Strategic Landscape
In this episode of NeedleStack, hosts AJ Nash and Robert Vamosi engage with John Costello, a director at WireScreen, to discuss the complexities of China's strategic competition with the United States. The conversation covers China's technological advancements, the implications of its five-year plans, challenges in intelligence gathering, and the dynamics of military-civil fusion. The discussion also touches on the importance of due diligence for businesses engaging with Chinese companies and the role of Chinese students in U.S. education.
#97
January 7 · 55 min
Is Mass Surveillance Helping or Hindering Intelligence?
In this episode, the hosts discuss the implications of surveillance technology and AI on intelligence, journalism, and civil liberties. They explore the dual nature of surveillance as both a tool for security and a potential threat to privacy. The conversation delves into the challenges posed by misinformation, the importance of expertise in navigating these issues, and the ethical considerations surrounding the use of surveillance technology. The episode concludes with reflections on the future of journalism and the role of AI in shaping public perception and trust.
#96
Dec 11, 2025 · 49 min
Mastering the Art of Disappearing Online
In this episode of Needlestack, hosts AJ Nash and Robert Vamosi delve into the complexities of disappearing online, drawing insights from their experiences and the book 'The Art of Invisibility' by Kevin Mitnick. They discuss practical steps for maintaining anonymity, the role of technology in obfuscation, and the challenges of creating and sustaining multiple identities. The conversation also touches on the impact of AI on privacy and the importance of understanding personal risks in a digital world. Through engaging anecdotes and expert insights, the hosts provide a comprehensive overview of the art of invisibility in today's interconnected society.
#95
Nov 26, 2025 · 42 min
The Rise of Citizen OSINT, and What to Do About It
In this episode, hosts Robert Vamosi and AJ Nash engage with Neil Ysart, a seasoned expert in cyber investigations and open source intelligence (OSINT). They discuss the Coalition of Cyber Investigators, its role in promoting OSINT, and the importance of establishing standards in the field. The conversation delves into the challenges and risks associated with OSINT, emphasizing the need for ethical practices and the potential dangers of unregulated citizen intelligence efforts. The episode concludes with a call to action for listeners to advocate for the development of global standards in OSINT.
#94
Nov 12, 2025 · 46 min
What is Cyber HUMINT?
In this episode, Michael DeBolt joins Robert Vamosi and AJ Nash to dive into the world of Cyber HUMINT — the application of traditional human intelligence (HUMINT) tradecraft in cyberspace. They discuss how investigators use digital personas (sometimes called “sock puppets”) to infiltrate online threat actor communities, collect intelligence, and even engage adversaries safely. Michael explains how credibility, language, slang, and cultural nuance are essential to blending in, while AJ highlights the risks of untrained amateurs attempting such operations. They explore the art, ethics, and operational security challenges of conducting human intelligence in the digital realm.
#93
Oct 29, 2025 · 57 min
Dealing with AI Slop in OSINT Investigations
In this episode, AJ Nash and Robert Vamosi discuss the challenges posed by misinformation and the rise of AI-generated content. They explore the evolution of journalism, the impact of social media on information consumption, and the importance of critical thinking and media literacy. The conversation also touches on the role of AI in content creation, the balance between technology and human oversight, and the potential positive aspects of AI technology. Ultimately, they emphasize the need for source verification and the ongoing struggle to navigate the post-truth era.
#92
Oct 15, 2025 · 48 min
What is GEOINT in OSINT?
In this episode of NeedleStack, hosts AJ Nash and Robert Vamosi engage with James Villenueve, a geospatial intelligence expert, to explore the world of GEOINT and its intersection with open source intelligence (OSINT). They discuss the importance of understanding geospatial data, the ethical implications of its use, and the challenges of protecting personal information in a data-rich environment. The conversation also highlights positive applications of geospatial intelligence, including environmental monitoring and humanitarian efforts, while addressing the risks associated with data misuse and the evolving role of AI in the field.
#91
Oct 1, 2025 · 26 min
Ransomware’s Collateral Damage
Jason Baker from the Guidepoint Research & Intelligence Team (GRIT) shares his background and provides insights into ransomware attribution, the challenges of defending against ransomware, and the implications of AI in ransomware operations.
#90
Sep 17, 2025 · 41 min
Identifying fraud in financial services
How can Intelligence benefit financial sectors? It can address challenges like sanctions, data privacy, and cryptocurrency. Teresa Walsh highlights the importance of collaboration, the role of AI in intelligence, and the necessity to professionalize intelligence roles in the private sector. The conversation also delves into building mature and unified intelligence programs, emphasizing the need for a Chief Intelligence Officer role in any organization.
#89
Sep 3, 2025 · 57 min
Adding Agentic AI to Analysis
Ultimately, GenAI has the potential to create jobs in areas like data science and cybersecurity, but only if it is integrated responsibly. However, the consensus today is that AI should remain a just tool for analysts, not a direct decision-maker, until reliability and trust in its outputs significantly improve. About Brian Fuller Brian A. Fuller is Director of Operations for the Ridge College of Intelligence Studies and Applied Sciences at Mercyhurst University, a position he assumed in December 2019. As the Director of Operations, Fuller supports all operations related to the academic curriculum or Ridge College activities. This includes working as the Director for the Center of Intelligence Research, Analysis and Training (CIRAT) and Director of the Innovation Entente Lab (IEL). Previously, he served as a Senior Open Source Intelligence (OSINT) instructor for the Department of the Army’s OSINT Office, where he was charged with overseeing the Army’s OSINT training program for the Midwest and Rocky Mountain regions. He trained Army intelligence professionals at the strategic, tactical, and special operations levels. He managed the training curriculum, personnel, financial, and administrative affairs of the program while participating as a subject matter expert in the intelligence communities’ OSINT program and operational development working groups, ensuring the continued growth of the discipline and associated tradecraft and technologies.
#88
Aug 20, 2025 · 34 min
Hacker Summer Camp 2025
Robert and AJ went to Hacker Summer Camp. What’s that? It’s a week of conferences such as Black Hat USA, BSidesLV, the Dianna Initiative, Squadcom, and of course DEF CON. Find out what’s relevant for the intelligence community during this first week in August annual event.

Showing 1–20 of 24 episodes