DTF Cyber Podcast

Government RECALLS AI Code?! The Fall of Fable 5 | #DTF046

The US government just laid down the hammer, officially recalling frontier AI models Fable 5 and Mythos 5. In Episode 46 of the DTF Cyber Podcast, Damian, Troy, and Fern dive into the chaos. Did a sophisticated prompt jailbreak a vulnerability-chaining machine into a zero-day weapon? What does this sudden regulation mean for corporate security teams, supply chain resiliency, and the blue team vs. red team arms race? We also pull back the curtain on Anthropic's quiet 30-day data retention policy changes and discuss why the entry-level SOC analyst job might be gone in a year. Episode Timestamps: 00:00 - Fern can’t log into Anthropic 01:16 - Clearing up miscommunications: Who is blocked? 03:50 - Is this a third-party risk or supply chain resilience issue? 04:30 - The geopolitics of AI: Handcuffing US developers 06:40 - Protecting critical infrastructure from weaponized zero-days 08:45 - The risk of wrappers and pinning a business to a single model 11:22 - CEO Dario Amodei’s ironic stance on government AI agencies 14:55 - Diversifying your enterprise portfolio of AI tools 17:05 - The fine print: 30-day prompt retention and privacy traps 19:15 - RSI: Understanding Recursive Self-Improvement suppression 21:00 - Shadow IT vs. Shadow AI in corporate environments 22:00 - Corporate MSAs: Why SaaS giants don’t negotiate terms 24:56 - AI Discovery & AI Governance: Tokenizing PII traffic 26:50 - Thick clients, APIs, and enforcing MCP gateway controls 29:34 - The CISO WhatsApp groups blow up over the weekend 32:45 - Secure by Design: Is AI a lazy shortcut for secure coding? 36:50 - Skip the fundamentals? Why laziness equals a data breach 39:40 - Behavior Drift: When AI forgets what a high vulnerability is 41:50 - Is AI coming for your job? The death of Tier 1 SOC analysts 46:30 - Going to school to learn a tool vs. learning how to learn 50:17 - Episode Final Predictions: The shift to private, local models

The 3-Day Patch Trap: Security vs. Operational Chaos | #DTF045

The patching paradigm has officially broken. CISA is considering a massive shift to a mandatory 3-day patch window for active exploits, but is a 72-hour turnaround an operational shield or a localized denial-of-service attack on your own engineering teams? In Episode 45, Damian, Troy, and Fern dive headfirst into the brutal reality of emergency vulnerability management. They tear down the growing chasm between risk-aware CISOs and resource-strapped IT operations, discuss how advanced AI models like Alibaba's newest frontier tech are accelerating multi-stage exploit chaining, and debate why checking a compliance box doesn't mean your network is actually secure. From fish tank thermometer pivots to modern pit crew optimization, learn how to audit your external attack surface and build a resilient defense-in-depth architecture before the next zero-day drops. 00:01:07 — The 3-Day Patch Deadline Panic 00:02:06 — Breaking Down the CISA KEV Patch Window 00:02:30 — Fern's Story: The System Admin's Weekend Nightmare 00:03:15 — Breaking Down the CISA KEV Prioritization Catalog 00:04:39 — The Shrinking External Attack Surface Reality Window 00:06:49 — IoT Perimeters: The Famous Fish Tank Thermometer Pivot 00:09:37 — Restricting Lateral Threat Movement with Microsegmentation 00:10:25 — Monitoring Hidden Network Risks & Shadow AI Sprawl 00:14:01 — Exploit Chaining: Autonomous AI Defenses & Alibaba's Frontier Model 00:15:40 — CIRCIA Reporting Directives vs. Mitigation Rules 00:22:15 — Troy's CISO Perspective: Change Advisory Boards vs. Absolute Chaos 00:25:46 — The Innovation Gap: Why Automated Testing Trumps Manual Code 00:28:01 — Debate: Does Compliance-First Security Make Us Vulnerable? 00:33:55 — The Great Debate: Staged Deployment Ring-Fencing vs. Total Lockout 00:37:56 — Progressive Update Flows & Automated Patch Verification Staging 00:43:40 — Shifting the Burden: Formal Risk Transfer to the CIO's Office 00:48:32 — Damian's Technical Takeaway for Security Infrastructure Engineers 00:49:45 — Troy's Strategic Insight for Corporate Executive Directors 01:01:14 — Fern's Pit Crew Analogy

The True Cost of AI Hidden Token Costs and Cloud Charges| #DTF044

Are you caught between a bedrock and a hard place with your organization's cloud budget? In Episode 44 of the DTF Cyber Podcast, Damian, Troy, and Fern break down the massive, unexpected financial and operational risks of enterprise AI deployments. From unmonitored AI agents creating a 100,000 "recursive loop" bill overnight to non-technical employees "vibe coding" insecure software with hardcoded secrets, the team looks past the AI hype to expose the real logistics of Day 2 operations. They also dive into the invisible data lake "IO tax," the legal pitfalls of building side projects on corporate tenants, and recent procurement data from Tropic revealing an automatic 20% to 30% "AI tax" on SaaS contract renewals. Don't let runaway token costs erode your profit margins. Hit that subscribe button, leave a thumbs up, and learn how to implement the hard engineering and financial guardrails your business needs today! TIMESTAMPS 00:00:10 - Recursive Loops & The $100,000 Bill Surprise 00:01:14 - Job Security vs. Downsizing Human Capital 00:03:03 - Vibe Coding & Bursting Credit Card Limits 00:07:42 - Model Right-Sizing: Avoiding Over-Compute 00:09:50 - The Invisible Data Lake Tax 00:10:48 - Evaluating Hidden AI Compute Fees in SaaS 00:13:29 - Token Bloat and the Field of Haystacks 00:17:28 - The Cascading Effects of Pay-Per-Use Metering 00:19:19 - The Rise of "Shadow Developers" 00:23:18 - Side Projects & Corporate Intellectual Property Traps 00:25:04 - Implementing Shadow AI Discovery & Security Tools 00:32:18 - The Startup Compliance Dilemma (The Lack of SOC 2) 00:33:21 - Secure Coding Vulnerabilities & AI Hardcoded Secrets 00:41:21 - Tropic's Procurement Insights: Navigating the SaaS AI Tax 00:51:01 - Engaging Finance in AI Strategy & Enforcing Guardrails http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.

Agentic SOC: Machine Speed vs. Human Liability| #DTF043

The hackers are already moving at light speed. If you’re still waiting for a human to click "Approve," you’ve already lost the company. But if your autonomous AI nukes a production server during a board meeting, who stands in front of the regulators? In Episode 43, the DTF crew dives into the massive 2026 shift from automated playbooks to Agentic AI. Damian argues that traditional SOAR is dead, Troy warns of the audit trail of a ghost, and Fern wonders if we’re all just vibe coding our way into an existential crisis.In this episode, we cover: - Why Human-in-the-loop is becoming a security vulnerability. - The difference between automation (scripts) and agency (reasoning). - How to govern a fleet of "Digital Interns" without losing control. - Why this technology might finally let you fire your underperforming MSP. Timestamps: 0:00 – Machine speed vs. Human approval 0:37 – The 2026 SOC Reality 2:37 – Fern’s Tesla Nightmare: The terror of Full Self-Driving 5:58 – Defining the 2026 SOC: Automation vs. Agency 10:01 – Why SOAR is officially "Legacy Tech" 15:04 – Reasoning Chains: How AI invents its own playbooks 20:23 – The Digital Intern Analogy: Scaling Tier 1 27:15 – Troy’s Reality Check: Can you audit a ghost? 33:00 – The Model Armor: Wrapping AI in Governance 40:45 – Boardroom Conflict: Who is liable for an AI mistake? 45:20 – The Kill Switch Necessity: Who holds the keys? 50:15 – Killing the MSP: Bringing the SOC back in-house 56:30 – Existential Crisis: Vibe Coding and the future of cyber jobs 1:04:50 – The Bottom Line: Transitioning to an AI Orchestrator 1:09:20 – Final Verdict: Don't be scared, be efficient #CyberSecurity #CISO #AI #AgenticAI #SOC #InfoSec #TechPodcast #DTFcyber http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.

200,000 Laptops Wiped in Minutes: The Stryker Attack & The Match Group Leak| #DTF042

In this episode of the DTF Cyber Podcast, Damian, Troy, and Fern tackle the terrifying reality of 2026: Identity is the new weapon of mass destruction. From the architectural suicide pact that allowed a 200,000-device wipe at Stryker to the personal blackmail engines fueled by the Match Group data breach, the team explores why your own IT tools are being turned against you. Timestamps 00:00 – The "Architectural Suicide Pact" (Stryker & Match overview). 00:44 – Vegas Recording: Fern introduces the location (Findlay Automotive Group conference room). 03:00 – The 2026 Trend: Troy explains why exfiltration is the new ransomware end-game. 04:44 – The Match Incident: Troy breaks down the "Blackmail Engine" and voice-cloning risks. 07:09 – Governance Failures: Damian explains Multi-Admin Approval (MAA) and why it failed at Stryker. 10:00 – The Platform Myth: Troy discusses the "Holy Grail" of full-stack identity. 12:54 – Just-In-Time (JIT) Access: Damian breaks down automating validation for critical tasks. 18:30 – Observability Strategy: Troy discusses mapping security tools to the MITRE ATT&CK framework. 20:50 – The Cost of Downtime: Analyzing the $10M/day loss of the MGM hack. 25:40 – The SaaS Trap: Troy identifies over-privileged accounts in Salesforce and stale SaaS apps. 30:40 – Executive Friction: The Reporting Structure debate: Where the CIO and CISO clash. 33:00 – The Reporting Debate: Troy argues why the CISO should report to Legal or Risk. 38:50 – Innovate or Die: Damian's take on why blocking AI is a losing strategy. 40:40 – Closing Thoughts: Troy’s final plea to fix the Basics before moving to AI. 44:59 – Final Wrap-up: Thanking Findlay Automotive Group and the Henderson, NV hosts.