LimaCharlie

The Cybersecurity Defenders Podcast

An accessible but technical podcast about cybersecurity and the people who keep the internet safe. The podcast is built as a series of segments: we will be looking back at the last couple of weeks in cybersecurity news, talking to different people in the industry about areas of their expertise, we're going to break apart some of the TTPs being used by adversaries, and we will even cover a little bit of hacker history.

Author

LimaCharlie

Category

Technology

Podcast website

limacharlie.io

Latest episode

Jul 9, 2026

Where to listen?

Podcasts in the app Replaio Radio Coming soon

Podcasts are coming to the app soon. Install now and be the first to see a whole new take on podcasts

Get it on Google Play Install for free Android 5M+ downloads · 4.8 rating iOS soon

Episodes

#263 - Intel Chat: BlackBasta, BlueNoroff, Operation ForumTroll & Aisuru 03.11.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . The UK Information Commissioner's Office (ICO) recently released a comprehensive 136-page report detailing the BlackBasta ransomware attack on Capita in March 2023 . Kaspersky researchers have detailed two active campaigns from North Korean APT group BlueNoroff, which continue...

#262 - Defender Fridays: What does "AI-ready SOC" actually mean? With Dr. Anton Chuvakin from CISO, Google Cloud 31.10.2025

Dr. Anton Chuvakin, Security Advisor at Office of the CISO, Google Cloud and a recognized expert in SIEM, log management, and PCI DSS compliance, will help us cut through the buzzwords and discuss modern security operations. Join the Defender Fridays community , live every Friday, to discuss the dynamic world of information security in a collaborative space with seasoned professionals. Dr. Chuvaki...

#261 - Scaling MSP & MSSP Services with Hannah Lloyd, Co-Founder / CRO of enhanced.io 29.10.2025

On this episode of The Cybersecurity Defenders Podcast we speak with Hannah Lloyd, Co-Founder and CRO of enhanced.io, about how MSPs can launch, sell and scale security offerings. With 10+ years of channel sales experience, Hannah leads global new business generation and account management to deliver innovative cybersecurity solutions to enhanced.io ’s MSP partners. As a GTIA EC member (2018) and...

#260 - Intel Chat: Kansas City National Security Campus breach, COLDRIVER, new KEV catalog additions & AWS outage 27.10.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . A breach at the Kansas City National Security Campus (KCNSC), a facility responsible for manufacturing roughly 80% of the non-nuclear components for U.S. nuclear weapons, was enabled by two critical Microsoft SharePoint vulnerabilities . COLDRIVER, a Russian state-sponsored gro...

#259 - Defender Fridays: Breaking Down Microsoft Defender for Endpoint with Ken Westin from LimaCharlie 24.10.2025

Ken, Senior Solutions Engineer at LimaCharlie, dives into the incredibly confusing licensing tiers, pricing models and feature sets for Microsoft Defender for Endpoint. Today we discuss: The difference between tiers Ways to solve Defender visibility issues and increase operational transparency How its capabilities can be customized and expanded for better flexibility and scalability for service pr...

#258 - Intel Chat: Oracle EBS, Storm-2603, North Korean IT infiltration & LLM poisoning study 20.10.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . CrowdStrike is tracking a mass exploitation campaign leveraging a previously unknown vulnerability in Oracle E-business suite or EBS . A threat group, tracked as Storm-2603, has been observed using the open source Velociraptor DFIR tool as part of it’s post-exploitation toolkit...

#257 - Defender Fridays: Using Honeyfiles to Detect Adversaries with Zane Gittins from Meissner Filtration Products 20.10.2025

Zane demonstrates deploying honeyfiles via Velociraptor and discuss deception techniques for early detection of compromise. Learn how decoy files can serve as tripwires for infostealers and adversaries in your environment. Watch on YouTube for better visuals. Join the Defender Fridays community , live every Friday, to discuss the dynamic world of information security in a collaborative space with...

#256 - Intel Chat: RediShell, Cisco zero-day vulnerability, AI voice cloning tech, Brickstorm & pro-Russia teen hackers arrested 13.10.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . A newly disclosed vulnerability in Redis, dubbed RediShell and tracked as CVE-2025-49844, affects all Redis versions and carries a maximum CVSS score of 10.0 . Cisco has disclosed a critical zero-day vulnerability—CVE-2025-20352—affecting its widely deployed IOS and IOS XE soft...

#255 - Defender Fridays: Identity Automation in the Age of Agentic AI with Matthew Chiodi from Cerby 10.10.2025

Matt, Chief Strategy Officer at Cerby, discusses how the autonomous AI agents create a demand for a fresh approach to identity security and shares practical insights on navigating these new challenges. Join the Defender Fridays community , live every Friday, to discuss the dynamic world of information security in a collaborative space with seasoned professionals. Matt has spent 20+ years at the in...

#254 - Roadmap to Community Cyber Defense with Sarah Powazek, Program Director of Public Interest Cybersecurity, UC Berkeley CLTC 08.10.2025

On this episode of The Cybersecurity Defenders Podcast we speak with Sarah Powazek about the Roadmap to Community Cyber Defense. Diving into the report, Sarah emphasizes the need for low-resource organizations and cyber experts to come together in a co-responsibility model for cyber defense. Learn more about the UC Berkeley Center for Long-Term Cybersecurity (CLTC). Get help or join the Cyber Resi...

#253 - Defender Fridays: Building the Strelka File Scanning System with Josh Liburdi from DoorDash 03.10.2025

Josh Liburdi, Principal Engineer of Security Operations at DoorDash, joins Maxime Lamothe-Brassard, LimaCharlie CEO / Founder, to talk about building the Strelka file scanning system. As a security engineer who works in security operations (prevention, detection, and response), Josh has more than a decade of industry experience and has worked at several diverse organizations, including Brex, Targe...

#252 - Intel Chat: Secret Service SWAT Infrastructure, Nimbus Manticore, malicious ads targeting macOS, SpamGPT & GitHub NPM changes 29.09.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . A recent investigation by the U.S. Secret Service claims to have uncovered a massive swatting infrastructure centered around New York City . Check Point researchers are tracking an Iran-linked cyber-espionage group known as Nimbus Manticore, which appears to be expanding its op...

#251 - Defender Fridays: Hunting Chinese State Actors with David Burkett from Corelight 26.09.2025

Maxime Lamothe-Brassard, LimaCharlie CEO / Founder, and our Defender Fridays community sat down with David Burkett to discuss hunting Chinese State Actors with the Latest CISA Joint Advisory. As a dedicated and highly experienced Cloud Detection Engineer and Security Architect, David has the privilege of working at a Fortune 50 Company where he leverages his extensive background in cybersecurity t...

#250 - Intel Chat: PromptLock, "Shai-Hulud", EdisonWatch & FileFix campaign 22.09.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . ESET Research has uncovered what it believes to be the first documented case of AI-powered ransomware, dubbed PromptLock . Multiple CrowdStrike-branded npm packages were recently discovered to be compromised, marking a new wave in the ongoing “Shai-Hulud” supply chain attack ca...

#249 - Defender Fridays: Security State of Affairs with Cliff Janzen, CISO and VP of Security Services at Arctiq 19.09.2025

LimaCharlie CEO, Max Lamothe-Brassard welcome Cliff Janzen, CISO and VP of Security Services at Arctiq, for a special "Security Potpourri" session! What's on the menu? SOC operations and optimization Security automation strategies Penetration testing insights All through Cliff's expert lens and real-world experience. Join us for an insightful discussion on the current security landscape! Cliff is...

#248 - Predictive vs. Reactive Cybersecurity with Robert Boles, Founder / CEO of BLOKWORX 17.09.2025

On this episode of the Cybersecurity Defenders Podcast we speak with Robert Boles, Founder / CEO of BLOKWORX . A veteran of the U.S. Marine Corps, Rob founded BLOKWORX in 2006 to further his passion for creating fast, secure networks. Since 1999 Rob was a core technical contributor and presenter on an Advanced IP Team, delivering bleeding edge WAN and Managed Security services to Small, Mid-level...

#247 - Intel Chat: JavaScript high-profile phishing, Red Sea cable cutting, Contagious Interview campaign & Salty2FA 15.09.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . A high-profile phishing incident has resulted in the compromise of several widely-used JavaScript packages on npm, after a developer known as "Qix" inadvertently clicked a malicious link from a fake support email . Multiple undersea cable cuts in the Red Sea have led to degrade...

#246 - Defender Fridays: AI in the SOC with Matt Bromiley from Prophet Security 12.09.2025

Matt Bromiley breaks down how AI is transforming (and should be transforming) SOC workflows. Whether you're already using AI tools or wondering where to start, this is the conversation you don't want to miss. Matt is a security engineer at Prophet Security, refining Prophet AI to enhance automated alert triage, investigation, and response. His work ensures that customers can cut through the noise...

#245 - Intel Chat: Salt Typhoon, Scattered LapSus Hunters, WhatsApp vulnerability & AI-assisted compromise 08.09.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . The Salt Typhoon cyber campaign, attributed to Chinese state-backed hackers, has been declared a national defense crisis by the FBI and allied intelligence agencies . A group identifying itself as “Scattered LapSus Hunters” has posted a threat on Telegram demanding that Google...

#244 - Intel Chat: Trend Micro Apex One, PyPI domains, RingReaper & Openbaar Ministrie attack 01.09.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . CISA has added CVE-2025-54948, a critical vulnerability in Trend Micro Apex One, to its Known Exploited Vulnerabilities (KEV) catalog, signaling that the flaw has been actively exploited in the wild . PyPI has introduced new security measures to detect and respond to expired do...

#243 - Defender Fridays: Detection prioritization via the BloodHound attack graph with Jared Atkinson, CTO at SpecterOps 29.08.2025

Maxime Lamothe-Brassard, Founder and CEO of LimaCharlie, and the Defender Fridays community sit down with Jared Atkinson and dive into BloodHound. Jared is a security researcher who specializes in Digital Forensics and Incident Response. Recently, he has been building and leading private sector Hunt Operations capabilities. In his previous life, Jared lead incident response missions for the U.S. A...

#242 - Building human & AI synergy with Peter Ruta, Founder / CEO of Arcanna.ai 27.08.2025

On this episode of the Cybersecurity Defenders Podcast we speak with Peter Ruta, Founder / CEO, Arcanna.ai. Peter is a Romanian-born entrepreneur and technology expert with over 13 years of experience in the industry. His interest in technology was sparked after following a military path, and he went on to secure key jobs in prominent tech companies such as Cisco. In 2015, Peter decided to pursue...

#241 - Intel Chat:Apache ActiveMQ, Elastic EDR vulnerability, kernel-level EDR killers & PipeMagic 26.08.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community . • Attackers are actively exploiting CVE-2023-46604, a remote code execution vulnerability in Apache ActiveMQ first disclosed in October 2023, that is used to compromise cloud-hosted Linux servers . • AshES Cybersecurity has publicly disclosed a critical zero-day vulnerability i...

#240 - Defender Fridays: Remote Management Tool Abuse with Ezra Woods, Security Engineer at Grand Canyon Education 23.08.2025

Ezra Woods, Security Engineer at Grand Canyon Education, shares insights on current attack trends and practical defensive strategies you can use to protect your environment with Maxime Lamothe-Brassard, Founder and CEO of LimaCharlie, and the Defender Fridays community. On Defender Fridays we delve into the dynamic world of information security, exploring its defensive side with seasoned professio...

#239 - Intel Chat: Scattered Spider or ShinyHunters, Linux kernel’s eBPF subsystem, MAPP & BlackSuit ransomware group 19.08.2025

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. • Recent reporting from DataBreaches has added yet another twist to the attribution puzzle between Scattered Spider and ShinyHunters. https://databreaches.net/2025/08/03/are-scattered-spider-and-shinyhunters-one-group-or-two-and-who-did-france-arrest/ • A recent disclosure on th...

Listen to the The Cybersecurity Defenders Podcast podcast in Replaio

Radio and podcasts in one app - free, with no sign-up. Install today and do not miss the launch

Get it on Google Play

Replaio is not a podcast publisher; show names, artwork and audio belong to their authors and are distributed through public RSS feeds.