Reimagining Cyber - real world perspectives on cybersecurity

Federal prosecutors have charged an alleged member of the Scattered Spider cybercrime group in a case that highlights how modern cyber investigations are evolving. While the arrest itself made headlines, one detail stood out: investigators reportedly used Microsoft's Global Device ID (GDID), alongside other forensic evidence, to help connect the dots. In this episode of Reimagining Cyber , Ty...

For years, cybersecurity assumed attackers had to break into organizations. Today, they increasingly just log in. Valid credentials, stolen browser sessions, OAuth tokens, help desk social engineering,and underground marketplaces have fundamentally changed how attacks unfold. So why are organizations still thinking about identity the same way they did five years ago? In this episode, Tyler Moffitt...

Every week brings another breach headline. A retailer is compromised. An airline suffers a cyberattack. A ransomware gang claims another victim. A cryptocurrency company loses sensitive data. The victims change, the industries change, and the attackers sometimes change—but many of today's most significant breaches follow a remarkably similar pattern. In this episode of Reimagining Cyber , Tyl...

For years, cybersecurity leaders have focused on identity as the new perimeter. MFA, Zero Trust, SSO, and identity protection became the center of modern security strategies. But while everyone was focused on identity, attackers never stopped targeting something much older: internet-facing infrastructure. VPNs. Firewalls. Remote access appliances. Recent attacks involving Check Point, Fortinet, Iv...

Scattered Spider has become one of the most disruptive cybercrime groups in the world—not because of advanced malware or zero-day exploits, but because of its mastery of social engineering and identity attacks. In this episode, Tyler Moffitt explores how the group is evolving its tactics. Rather than targeting organizations at random, Scattered Spider appears to be moving industry by industry, reu...

ClickFix is a fast-growing social engineering technique appearing in malware campaigns, compromised websites, fake CAPTCHA prompts, and browser verification scams.  In this episode Tyler Moffitt explains how attackers compromise legitimate sites by exploiting unpatched CMS or plugins, inject malicious JavaScript, and then trick visitors into “verifying” by opening Run/PowerShell and pasting a prel...

The 2026 Verizon DBIR is here — and one finding changes the conversation around cyber risk. For years, the industry has focused on identity as the primary attack surface. But according to the latest Data Breach Investigations Report, vulnerability exploitation has now overtaken credential abuse as the most common initial access vector in breaches. In this episode of Reimagining Cyber , Tyler Moffi...

Google says it may have uncovered the first real-world case of threat actors using AI assistance during zero-day exploit development — but is this truly a cybersecurity turning point, or another overhyped AI headline? In this episode of Reimagining Cyber, Tyler Moffitt unpacks what actually happened, what Google discovered, and why the reality is both less dramatic — and potentially more dangerous...

In this episode of Reimagining Cyber , host Rob Aragao sits down with MK Palmore to explore why small and medium-sized businesses are becoming prime targets for cyberattacks — and why traditional enterprise security models often fail them. Drawing on more than three decades of experience across the FBI and Fortune 500 leadership roles, MK shares how SMBs can rethink cybersecurity through a more sc...

In this milestone 200th episode of Reimagining Cyber , hosts Rob Aragao and Tyler Moffitt reflect on the journey so far—exploring how cybersecurity has evolved over the past five years and where it’s headed next. From the early focus on cyber resilience to today’s rapidly shifting threat landscape, they break down the biggest changes shaping the industry: the rise of ransomware as a business model...

Cybersecurity has entered a new era—and prevention alone is no longer enough. In this episode, Doug Merritt, CEO of Aviatrix and former CEO of Splunk, joins us to break down why security leaders must fundamentally rethink their approach. With decades of experience across Cisco, SAP, and the evolution of modern security operations, Doug brings a sharp, operator-level perspective on what’s changing—...

In this episode of Reimagining Cyber , Tyler Moffitt is joined by Mike DePalma to break down the biggest insights from the OpenText 2026 Cybersecurity Threat Report —and what they mean for MSPs and their customers. They explore how today’s threats are becoming more targeted, automated, and AI-driven, why small and mid-sized businesses are the primary target, and what’s changing across phishing, ra...

Inspired by the Artemis II mission, this episode explores cybersecurity in space and how NASA protects mission-critical systems. Rob Aragao speaks with NASA cybersecurity expert Tiffany Snyder about securing satellites, spacecraft, and space communications, and how cyber risk is managed across complex space missions. Learn how NASA approaches space cybersecurity, risk management, supply chain secu...

In this episode, cybersecurity expert Tyler Moffitt unpacks how modern cyberattacks have evolved into a seamless, scalable pipeline. What once appeared as separate threats—phishing, info stealers, credential theft, and ransomware—are now deeply interconnected stages of a single attack chain. The conversation explores how attackers no longer need to “hack” their way in. Instead, they log in using s...

Identity has long been the foundation of cybersecurity—but what if that foundation is starting to crack? In this episode of Reimagining Cyber , Tyler Moffitt unpacks a major shift happening right now: attackers aren’t breaking in anymore—they’re logging in. As AI accelerates phishing, fuels hyper-personalized social engineering, and powers a growing underground market for stolen credentials, tradi...

In this episode of Re-Imagining Cyber , host Tyler Moffitt sits down with senior threat research analyst Kelvin Murray to unpack a hard truth: luck has nothing to do with surviving a cyber attack. From the rise of AI-powered cybercrime to the persistence of old attack methods like RDP, the conversation explores why ransomware gangs continue to thrive in an increasingly industrialized underground e...

What if the next cyberattack doesn’t just steal your data—but turns off your water, power, or access to healthcare? In this eye-opening episode, Josh Corman ( I Am The Cavalry Dot Org ) returns to unpack a rapidly evolving threat landscape where cyberattacks are no longer just about information theft—they’re about real-world disruption and destruction. From nation-state actors pre-positioning insi...

AI is transforming every corner of technology—but it’s also creating an entirely new frontier for cybersecurity. In just a few short years, AI security has exploded into one of the fastest-growing segments in the industry. New startups are emerging almost weekly, regulators are racing to keep up, and security leaders are grappling with a fundamental question: how do you secure systems that are lea...

In this episode of Reimagining Cyber, host Rob Aragao sits down with Eric McAlpine, Founder and CEO of Momentum Cyber, to break down what’s really happening inside today’s cybersecurity market. Drawing from insights in the latest Momentum Cyber Almanac, Eric shares a behind-the-numbers look at: The rise of a two-tier cybersecurity market — the “haves” and the “have-nots” Why we may be in the middl...

Two weeks ago on Reimagining Cyber , we explored how agentic AI could become the next major security choke point. Since then, things have escalated. Enterprises are restricting — even banning — AI agents. Security teams are scrambling to regain visibility. Vendors are rushing out “agent security” features. And early warning signs are already surfacing. In this episode, Tyler Moffitt answers the cr...

One year after the Digital Operational Resilience Act (DORA) came into force, what has actually changed? In this follow-up episode of Reimagining Cyber , Rob Aragao welcomes back Dominic Brown of Graveslight Consulting to assess the reality of DORA in practice. Last time, the regulation was looming. Now, firms across the EU — and global financial institutions operating within it — have been living...

Agentic AI is moving fast — and it’s changing how risk shows up inside modern organizations. Autonomous AI agents are no longer just answering questions. They’re wired into cloud consoles, internal tools, ticketing systems, and finance platforms, acting on our behalf with real permissions and real consequences. And in the rush to automate, many teams are quietly centralizing access in ways securit...

AI has officially moved from experimentation to execution—and regulation is racing to catch up. In this episode of Reimagining Cyber , Tyler Moffitt is joined by Matt Aldridge to unpack what the rapidly evolving AI regulatory landscape means for security teams, businesses, and managed service providers heading into 2026. From the EU AI Act and GDPR to California’s CPRA and emerging rules around au...

Microsoft Defender is often treated as “good enough” security—built in, always on, and quietly doing its job. But what happens when malware convinces Windows to turn it off without triggering alarms? In this episode, cybersecurity expert Tyler Mofitt breaks down a real-world Windows malware campaign that disables Defender before anything else happens. No zero-days. No flashy exploits. Just a quiet...

In this episode, Rob Aragao sits down with Theresa Lanowitz for a deep dive into the evolving meaning of cyber resilience and why it has become a true business imperative. Moving beyond traditional cybersecurity, the conversation explores how organizations must unite leadership, technology, and operations to withstand and recover from today’s most disruptive cyber events. Theresa shares insights o...