Skip to content
Sign in
Artwork for Secure AF - A Cybersecurity Podcast
TechnologyBusinessEducation

Secure AF - A Cybersecurity Podcast

Alias Cybersecurity

Think like a hacker. Defend like a pro.

Welcome to the Secure AF Cybersecurity Podcast — your tactical edge in the ever-evolving cyber battlefield. Hosted by industry veterans including Donovan Farrow and Jonathan Kimmitt, this podcast dives deep into real-world infosec challenges, red team tactics, blue team strategies, and the latest tools shaping the cybersecurity landscape.


Whether you're a seasoned pentester, a SOC analyst, or just breaking into the field, you'll find actionable insights, expert interviews, and unfiltered discussions with Alias team members and top-tier guests from across the cybersecurity spectrum.


Stay sharp. Stay informed. Stay Secure AF.

Play
Open in
  • 33 episodes
  • weekly
  • Avg 19 min
  • English

Support the show

Goes straight to the publisher. podnod takes nothing.

Episodes 33

NewestOldestLongest
All20Unplayed20In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • Yesterday · 15 min

    EP. 63 - When the Security Appliance Becomes the Breach: The FortiMail Zero-Day

    Got a question or comment? Message us here! What happens when the very tool designed to protect your organization becomes the attack vector? In this episode, we break down the FortiMail zero-day vulnerability, how threat actors exploited it, and why security appliances continue to be high-value targets. We discuss the risks to organizations, lessons learned from recent attacks, and what security teams should be doing to reduce exposure when critical infrastructure is suddenly at risk. #Fortinet #FortiMail #CyberSecurity #ZeroDay Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • Tuesday · 45 min

    EP. 117 - The security risks organizations create when employees adopt AI faster than governance can keep up

    Got a question or comment? Message us here! Employees are adopting AI tools faster than many organizations can establish the governance, security, and compliance frameworks needed to manage them. While AI is driving innovation and productivity, it is also creating new risks that security leaders can no longer afford to ignore. In this episode, we sit down with Richa Kaul to discuss what happens when AI adoption outpaces governance. From shadow AI and data exposure to compliance concerns and risk management, we explore the security challenges organizations face as employees increasingly bring AI into their daily workflows. Richa shares her perspective on balancing innovation with security, the importance of building effective governance frameworks, and the steps organizations can take to reduce risk while still enabling teams to take advantage of AI technologies. If your organization is implementing AI tools, developing an AI strategy, or trying to understand the security implications of rapid AI adoption, this conversation provides valuable insights from one of the most important discussions happening in cybersecurity today. Guest: Richa Kaul - https://media.kitcaster.com/richa-kaul Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • October 8 · 15 min

    EP. 62 - Don’t Trust the Agent: NVIDIA’s New AI Security Platform

    Got a question or comment? Message us here! As AI agents become more powerful, they also introduce new security risks. In this episode, we explore NVIDIA’s latest AI security platform and how it's designed to help organizations monitor, secure, and govern AI-powered systems. We discuss the growing challenges of agentic AI, potential attack paths, and what defenders need to know as businesses increasingly rely on autonomous AI tools. Is your AI agent working for you... or creating new vulnerabilities? #ArtificialIntelligence #AISecurity #NVIDIA #CyberSecurity Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • October 1 · 15 min

    EP. 61 - Hackers Hacking Hackers: ShinyHunters Turns Cl0p Into the Victim

    Got a question or comment? Message us here! Podcast Alert! This week on The SOC Brief, we dive into one of the most ironic cybercrime stories of the year. The notorious Cl0p ransomware gang, known for targeting organizations worldwide, reportedly found itself on the receiving end of a breach by ShinyHunters. Join us as we break down what happened, what it means for the cybercriminal ecosystem, and the lessons defenders can learn when hackers become the hacked. #CyberSecurity #ThreatIntel #Ransomware #SOCBriefPodcast Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 24 · 14 min

    EP. 60 - BlueMoon: When the Patch Becomes the Exploit Roadmap

    Got a question or comment? Message us here! Patches are meant to strengthen security, but they can also give attackers valuable clues. In this episode, we explore how threat actors analyze updates, reverse-engineer fixes, and weaponize vulnerabilities before organizations have time to patch. #CyberSecurity #PatchManagement #ThreatIntelligence #BlueMoon Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 22 · 22 min

    EP. 116 - Seccon: 2026

    Got a question or comment? Message us here! SECCON may be over, but the conversations are just getting started. Join us as we recap this year's conference, share key takeaways, favorite moments, and the cybersecurity trends that had everyone talking. Tune in now! 🔐 #SECCON #Cybersecurity #Podcast #InfoSec Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 17 · 11 min

    EP. 59 - When Your RMM Becomes the Target – The N-able Zero-Day

    Got a question or comment? Message us here! When your trusted RMM platform becomes the target, the consequences can ripple across thousands of systems. In this episode, we break down the N-able Zero-Day, examine how attackers exploit vulnerabilities in remote management tools, and discuss the critical lessons MSPs and IT teams can take away to strengthen their security posture and reduce risk. #CyberSecurity #Nable #RMM #ZeroDay Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 15 · 19 min

    EP. 115 - Operation Security: How to keep your family safe when posting about them.

    Got a question or comment? Message us here! In a world where our lives are increasingly digital, protecting your family's privacy has never been more important. Join us as we dive into OPSEC (Operational Security), practical online safety tips, and simple strategies to reduce your digital footprint and keep your loved ones safe from cyber threats. 🔒 Learn how to safeguard personal information 👨‍👩‍👧‍👦 Protect your family from online risks 💻 Build smarter digital habits Listen now and take the first step toward a more secure online life. #OPSEC #CyberSecurity #OnlineSafety #DigitalPrivacy Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 11 · 54 min

    EP. 114 - How Defenders Can Secure Enterprise AI Before Attackers Find the Gaps

    Got a question or comment? Message us here! In this episode, we explore the hidden risks of enterprise AI and the strategies organizations can use to close security gaps before attackers exploit them. #EnterpriseAI #Cybersecurity #AIGovernance #SecurityLeadership Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • September 8 · 10 min

    EP. 58 - FalconFlank: When Your EDR Becomes the Attack Surface.

    Got a question or comment? Message us here! 🎙️ New Episode Alert: FalconFlank: When Your EDR Becomes the Attack Surface EDR solutions are designed to protect organizations from modern threats, but what happens when attackers target the very tools meant to stop them? Join us as we explore how security platforms can become part of the attack surface and what defenders need to know to stay ahead. #CyberSecurity #EDR #ThreatIntelligence #InfoSec #SOC #CyberDefense #FalconFlank Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • August 25 · 54 min

    EP. 113 - Defcon 2026

    Got a question or comment? Message us here! A recap of DEFCON 2026 featuring the Latest in cybersecurity, hacking, AI, and digital defense. Don't miss the highlights from one of the world's most influential security conferences. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • August 20 · 5 min

    EP. 56 - Akira Ransomware Uses Safe Mode to Blind EDR: Lessons for Defenders

    Got a question or comment? Message us here! Akira ransomware operators have demonstrated how abusing Windows Safe Mode can effectively disable or bypass endpoint detection and response (EDR) tools, underscoring the need for defenders to harden recovery environments, monitor Safe Mode activity, and implement layered detection controls that remain effective even during system startup changes. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • July 8 · 4 min

    EP. 55 - Windows BlueHammer Flaw Now Actively Exploited by Ransomware Gangs

    Got a question or comment? Message us here! Ransomware operators are leveraging the BlueHammer privilege escalation flaw to gain SYSTEM-level access and disable security controls. Get the latest insights and response recommendations. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • July 1 · 4 min

    EP. 54 - FortiBleed Attacks: Turning Fortinet Firewalls into Credential Stealers

    Got a question or comment? Message us here! FortiBleed is turning perimeter defenses into attack infrastructure. In this episode, we unpack how adversaries exploit FortiOS vulnerabilities, harvest credentials directly from firewalls, and pivot deeper into networks, plus detection strategies, threat hunting tips, and mitigation guidance for SOC teams. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • June 24 · 5 min

    EP. 53 - Arch Linux AUR Compromise – Supply Chain Risks in the Open Source World

    Got a question or comment? Message us here! This #SOCBrief episode explores a recent Arch Linux AUR supply chain compromise, where malicious community packages were used to steal credentials and gain persistence. It highlights the risks of third-party repositories and offers key detection and mitigation strategies for security teams to better protect against similar attacks. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • June 17 · 4 min

    EP. 52 - Qilin Ransomware Exploiting VPN Zero-Days: What SOCs Need to Do Now

    Got a question or comment? Message us here! A single unpatched VPN could be all it takes. Qilin ransomware is actively exploiting VPN zero-days to breach networks and accelerate ransomware deployment. We walk through the tactics, the real risk to your organization, and actionable SOC strategies to stay ahead. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • June 16 · 43 min

    EP. 112 - You're Probably Not Hacked, You're Being Tracked

    Got a question or comment? Message us here! You probably haven’t been hacked, you’ve been tracked. This episode breaks down how ad tech, mobile apps, and data brokers create massive behavioral profiles without ever touching your phone’s security. Learn how tracking really works, why it matters, and what you can actually do about it. 📱👁️📡 Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • June 10 · 13 min

    EP. 51 - The SOC Brief Turns One 🎂 Insights, Stories & Lessons Learned

    Got a question or comment? Message us here! It’s our 1-year anniversary! 🎂 From bite-sized cyber insights to growing a passionate listener base, this episode reflects on the journey, the challenges, and the wins along the way. Expect laughs, lessons, and behind-the-scenes stories you won’t want to miss. 🚀 Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
  • June 3 · 5 min

    EP. 50 - Kali365 Phishing-as-a-Service: FBI Warns of New M365 Credential Theft Tool

    Got a question or comment? Message us here! The FBI is warning about Kali365, a new phishing‑as‑a‑service tool designed to steal Microsoft 365 credentials and enable account takeovers at scale. In this episode, we break down how it works, why it’s so effective, and what your SOC can do right now to detect and defend against it. 🎧 Tune in now at secureafpodcast.com Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    • Transcript
Showing 1–20 of 33 episodes