Deep in the Dark Matter: What Security Chiefs See That Others Don’t

From Crisis to Prevention: Rethinking Cybersecurity Leadership

Cybersecurity leaders have spent years building stronger detection and response capabilities. But is that enough? In this episode of The Defender's Log, David Redekop sits down with former CIO, CTO, and cybersecurity executive Phil Johnston to discuss what changes when you've personally led an organization through a major cyber incident. Drawing on decades of experience spanning military communications, government cybersecurity, and executive leadership, Phil shares why cybersecurity should never be viewed as just an IT problem, how organizations can improve resilience, and why prevention, containment, and operational simplicity may be the future of cyber defense. They also explore AI, business risk, executive accountability, incident recovery, intellectual property protection, and what cybersecurity leaders should prioritize over the next five years.   Key Discussion Points * 00:00 — Introduction * 00:55 — Phil's journey from military communications to cybersecurity leadership * 02:26 — Living through a major cyber incident * 06:15 — Why cybersecurity is a business problem, not an IT problem * 08:12 — What separates successful recoveries from failed recoveries * 11:08 — Detection vs prevention: where organizations should focus * 16:52 — Why Phil joined ADAM Networks * 23:12 — The future of cybersecurity and AI-driven attacks * 27:24 — Advice for today's CIOs and security leaders * 30:20 — AI, innovation, and empowering employees securely * 34:40 — The business impact of intellectual property theft * 36:07 — Joining ADAM Networks as Field CIO * 38:12 — Leadership, experience, and protecting people   If this conversation challenged your thinking: 👍 Like this episode 🔔 Follow for more conversations with cybersecurity leaders, CISOs, and technology executives 💬 Share your biggest takeaway in the comments 🔗 Send this episode to a leader responsible for security, risk, or technology strategy   #CyberSecurity #CyberLeadership #CISO #CyberRisk #ZeroTrust #CyberDefense #AI #BusinessLeadership #DigitalTransformation #TheDefendersLog #ADAMNetworks

Deep in the Dark Matter: What Security Chiefs See That Others Don’t

What if the biggest threats on the internet are the ones nobody can fully measure? In this special episode of The Defender’s Log, host David Redekop sits down with John Todd, Andreas Taudte, and Andrew Campling for a deep conversation about the hidden realities shaping cybersecurity today. From Zero Trust DNS and encrypted traffic to malicious domain “dark matter” and the growing complexity of enterprise security, this discussion pulls back the curtain on what security leaders are actually seeing behind the scenes. The panel explores how attackers quietly evolve their tactics, why modern privacy technologies sometimes create entirely new security problems, and how organizations struggle to balance visibility, compliance, protection, and personal privacy in an increasingly connected world. The conversation also dives into DNS as the internet’s control plane, the risks hiding inside IoT and OT environments, the challenge of securing legacy infrastructure, and why the future of cybersecurity may depend less on perimeter defense and more on understanding behavior patterns at scale. This is the kind of conversation that changes how you look at the internet after the episode ends. Key Discussion Points 02:58 — Why malicious domains keep growing instead of shrinking 04:35 — The case for Zero Trust DNS in enterprises and homes 05:30 — The scale of harmful content online and why it keeps increasing 07:40 — Why protective DNS should be the default 10:00 — Enterprise visibility, DNS logging, and encrypted DNS challenges 12:00 — Privacy vs security: where the debate gets messy 16:00 — How encryption can unintentionally protect bad actors 20:00 — Why modern privacy tools can force companies to inspect everything 23:30 — Moving security controls closer to the endpoint 25:00 — DNS challenges in schools, factories, OT, and IoT environments 29:15 — “We’re solving one problem by creating another” 31:00 — Why DNS is becoming the internet’s true control plane 33:00 — The reality of securing legacy infrastructure 35:00 — Making Zero Trust DNS practical for real-world users 36:00 — Extended DNS Errors (EDE) and making security visible 40:00 — How attackers hide malicious domains in plain sight 42:00 — The rise of “aged” domains and stealthy phishing operations 43:20 — Detecting attacks through DNS behavior patterns Don’t forget to: • Subscribe for more conversations with cybersecurity leaders and innovators • Share this episode with someone working in IT, security, or network infrastructure • Leave a review to help more people discover The Defender’s Log • Follow along for future episodes exploring the technologies shaping the modern internet #CyberSecurity #DNS #ZeroTrust #ThreatIntelligence #CISO #InfoSec #CyberDefense #NetworkSecurity #Privacy #EnterpriseSecurity #ThreatDetection #DNSSecurity #CyberThreats #DigitalInfrastructure #TechPodcast

Defending the Kids: DNS, Filters, and the Fight for Safer Schools

What happens when a childhood curiosity for computers turns into a mission to protect the next generation online? Tom Newton shares the path from experimenting with modems and BBS systems in the early days of computing to defending schools and students against modern cyber threats. The discussion goes deep into digital safety, BYOD risks, VPN abuse, AI-generated evasion techniques, and why protecting young people online requires more than just technology. The conversation also explores the human side of cybersecurity— curiosity, mentorship, freedom, responsibility, and the challenge of balancing privacy with protection in a permanently recorded world. Whether you're in cybersecurity, education, parenting, or technology leadership, this discussion highlights why digital defense today is ultimately about people.   Key Discussion Points 02:06 – How Tom got into technology 04:26 – Early hacking culture, modems & BBS systems 06:40 – Switching from chemistry to computer science 10:45 – Discovering cybersecurity through a worm outbreak 13:26 – Finding Smoothwall & becoming a defender 16:41 – The importance of mentors and “Johnnys” in life 19:22 – Growing up before everything was permanently recorded 23:21 – The challenge of protecting kids online 24:45 – Peer-to-peer abuse inside productivity tools 26:00 – How students bypass filters and hide games 28:00 – Why content filtering matters more than URL filtering 29:27 – Why keeping kids safe takes a community 32:00 – Balancing exploration, freedom, and protection 33:24 – Privacy vs child safety online 37:33 – UNDERMINR and the discovery process 39:00 – Free VPNs, malware, and harmful advertising 42:00 – Sexualized ads and harmful online ecosystems 44:24 – Why UNDERMINR changes defensive assumptions 48:35 – How Smoothwall and Linewize defend against it 49:37 – The future of privacy, trust, and visibility online Don’t forget to: 👍 Like this video 🔔 Subscribe for more conversations on cybersecurity, technology, and digital defense 💬 Comment with your biggest takeaway from the discussion 🔗 Share this with someone working in tech, education, or online safety #CyberSecurity #OnlineSafety #DigitalDefense #CyberDefense #Privacy #EducationTechnology #InfoSec #AI #Networking #TechnologyLeadership #Podcast #CyberAwareness

Protective DNS and the Future of Cyber Defense Architecture

What started as the “phonebook of the internet” is now one of the most critical layers in cybersecurity. In this episode of The Defender’s Log, David Redekop sits down with Cricket Liu—often called the godfather of DNS—to unpack how DNS evolved from a trusted utility into a frontline security control. From the early days of DNS and BIND to the rise of protective DNS, threat intelligence, and zero trust architectures, this conversation traces the real story behind modern network defense.   Key Discussion Points 00:00 From “phonebook” to frontline defense: why DNS became critical to security 02:20 The origins of protective DNS and response policy zones (RPZ) 05:00 Why many organizations still run DNS “wide open” 06:30 The evolution of threat intelligence: from feeds to analytics-driven detection 09:00 How passive DNS data powers modern security insights 12:30 AI’s impact on attackers: customized malware and evasion tactics 13:30 DNS encryption (DoT, DoH, DoQ): privacy vs. visibility tradeoffs 16:00 Where encryption matters most (and where it may not) 20:40 Why protective DNS is still the most overlooked security layer 23:30 The risks of “log-only” mode and missed prevention opportunities 25:20 Zero Trust DNS and controlling where devices can connect 29:50 DNSSEC adoption: why it’s uneven and what it really protects 34:00 What we’d change about DNS if we could redesign it today 37:00 Why DNS still works 40+ years later 40:10 Advice for the next generation: no gatekeepers, no excuses 42:20 AI vs. human curiosity: what actually creates breakthroughs   At its core, this episode is about one idea: there’s no secret sauce. The tools, the knowledge, and the mechanisms are already available. The difference comes down to how we use them. If you work in security, networking, or IT leadership, this is a grounded, practical look at where DNS fits in the fight—and why it matters more than ever. Don’t forget to: 👍 Like this video if it changed how you think about DNS security 🔔 Subscribe for more real conversations with leaders shaping cybersecurity 💬 Comment: What’s your biggest takeaway—or where is your DNS strategy falling short? 🔗 Share this with someone responsible for network or security architecture #CyberSecurity #DNS #NetworkSecurity #ZeroTrust #ThreatIntelligence #InfoSec #AI #CyberDefense #DataSecurity #SecurityArchitecture #TheDefendersLog

Why DNS Is Your First Line of Cyber Defense

Most security conversations focus on firewalls, endpoints, and threat detection. Very few start where many attacks begin. That’s why this conversation with Chris Buijs stood out. We unpack why DNS remains one of the most underinvested—and misunderstood—layers in cybersecurity, how automation can strengthen defense (or quietly introduce risk), and why resilient architecture starts with treating foundational infrastructure as strategic. Chris brings decades of perspective spanning networking, DNS, automation, observability, and cyber defense. If you care about Zero Trust, resilience, architecture, or the future of defensive infrastructure, this one goes deep.   Key Talking Points * 00:02:11 – Meaning of “20” & Amsterdam Identity * 00:03:00 – Language & Tech Culture (English in Tech) * 00:07:38 – Chris’s Origin Story (Early Tech Journey) * 00:11:00 – Evolution of Networks (TCP/IP, DNS, DHCP) * 00:14:00 – DNS Becomes a Core Focus * 00:19:07 – Downtime & “It’s Always DNS” Insight * 00:22:00 – Organizational Challenges Around DNS * 00:25:00 – Underinvestment in DNS & Infrastructure * 00:26:25 – Automation vs Security (DevSecOps Shift) * 00:31:21 – Internet Scanning (Shodan, Census, Exposure) * 00:34:00 – DNS & NTP Attack Vectors * 00:36:39 – Timeless Security Principle (Access Lists) * 00:39:05 – Final Advice (DNS in Security Strategy) * 00:40:14 – Conversation Wrap-Up   If this conversation challenged how you think about cyber defense: 👍 Like this podcast 🔔 Subscribe for more conversations on cyber leadership and resilient architecture 💬 Comment with your biggest takeaway from the discussion 🔗 Share this with someone responsible for security, networking, or infrastructure strategy   #CyberSecurity #DNS #ZeroTrust #NetworkSecurity #CyberDefense #Automation #Infosec #DigitalResilience #SecurityArchitecture #DevSecOps #ThreatDetection #DefendersLog