The Cyber Threat Perspective podcast artwork
Technology

The Cyber Threat Perspective

by SecurIT360

Not on the Mexico charts we track today.

If you like The Cyber Threat Perspective, try…

Latest episodes

  • OWASP Top 10 Part 5: Injection Attacks and Real Pen Test War Stories | Ep 199

    October 16, 2026 · 40 min

    We’re halfway through the OWASP Top 10, and this one is a favorite. Brad Causey is joined by Jordan Natter, SecurIT360’s resident web app pen tester, to cover A05: Injection. They explain how injection flaws work, why it slipped two spots…

  • [Replay] Painfully Persistent Problems: Weak Passwords

    October 9, 2026 · 36 min

    It’s Cybersecurity Awareness Month, so we’re bringing back one of the most practical episodes in our catalog. Strong passwords are one of the basics of good security, but weak and reused credentials are still a common way attackers get…

  • Your Employee Got Hacked. Now What? | Ep 198

    October 2, 2026 · 28 min

    Users will get compromised. Someone will click the link, and credentials will get stolen. The question that really matters is what happens next. In this episode, Spencer and Brad walk through the Post-Compromise Risk Framework (PRID), a…

  • The Basics Still Win: What GreyNoise's PaperCut Report Shows | Ep 197

    September 25, 2026 · 24 min

    One threat actor compromised at least 440 PaperCut instances across 395 organizations in 48 countries, using AI to run the same playbook at scale. The fastest path to domain admin took five minutes. But out of hundreds of organizations…

  • One Hacker, 42 Targets: Inside Anthropic's AI Threat Report | Ep 196

    September 18, 2026 · 52 min

    One French-speaking hacktivist targeted 42 organizations and got internal access to 14 of them, working alone. That is the kind of detail Anthropic's September 2026 threat intelligence report put on the record, with data spanning December…

Show 7 more episodesShow fewer episodes
  • [Replay] Episode 178: Internal Security Controls That Actually Frustrate Attackers

    September 11, 2026 · 31 min

    Replay of Episode 178, originally published April 22, 2026. We are re-running this one because it is the question we get asked most on internal pen test debriefs: of everything on the list, what actually slows an attacker down? Spencer…

  • Every IT Team Has a Joe | Ep 195

    September 4, 2026 · 28 min

    Interested in a pen test? Visit securit360.com. Every organization has a Joe. He is the long tenured engineer or admin who built half the environment, maintains the other half, and keeps most of it in his head. Everybody depends on him and…

  • Service Accounts: The Shortest Path to Domain Admin | Ep 194

    August 27, 2026 · 33 min

    Service accounts are one of the easiest paths to domain admin on an internal pen test, and one of the most neglected accounts in Active Directory. In this episode, Spencer and Tyler break down why service accounts keep falling…

  • Your IT Job Doubled. Nobody Told Your Boss. | Ep 193

    August 20, 2026 · 40 min

    In July 2026, Microsoft alone released 622 CVEs. In the 2010s, the monthly average was about a dozen. Nobody handed IT teams more time, budget, or headcount to match, and that gap is what burnout is actually made of. Somewhere in the last…

  • Subtractive Security: Stop Adding Tools and Start Deleting Attack Paths | Ep 192

    August 14, 2026 · 39 min

    Work with us --> https://www.securit360.com/#contact-anchor The OWASP Subtractive Security Top 10 Project --> https://github.com/OWASP/OWASP-Subtractive-Hardening-Top-10 The OWASP Subtractive Security Top 10 Project is an initiative to…

  • The CrowdStrike Settings That Actually Stop Us | Ep 191

    August 6, 2026 · 38 min

    Two pen testers have spent thousands of hours inside client networks, and the most common failure they see isn't a missing security product — it's an EDR nobody ever tuned. In this episode, Spencer and Tyler open up the CrowdStrike Falcon…

  • Episode 190 | OWASP Top 10 Part 4: Cryptographic Failures

    July 31, 2026 · 23 min

    Most cryptographic findings on your vulnerability report will never be exploited by a real attacker. So why do they keep showing up — and why should you still fix them? In this episode of the Cyber Threat Perspective, Brad Causey and…

Full episode archive on Apple Podcasts →

About the show

Step into the ever-evolving world of cybersecurity with the offensive security group from SecurIT360. We’re bringing you fresh content from our journeys into penetration testing, threat research and various other interesting topics.brad@securit360.com