NeedleStack

Authentic8

NeedleStack co-hosts interview professional open-source researchers who discuss tips, tricks and insights into the practice of digital investigative research. Whether you’re an open-source expert or aficionado, tune in to learn how to hone your skills, improve your craft and protect yourself as you search the surface, deep and dark web. From Authentic8, creators of Silo for Research. Visit authentic8.com/needlestack to learn more!

  1. 6h ago

    How Criminals Turn Instagram Likes Into Laundered Millions | #108

    In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar sat down with Chad Longo, Business Development & Channels Director at Fivecast, for a deep examination of a largely overlooked financial crime vector: influencers as high-risk individuals. Chad, whose background spans the US intelligence community and anti-money laundering operations, broke down why the micro and nano tiers of influencers — not the mega-celebrities — represent the real operational risk, and how organized crime groups increasingly rely on these accounts to move money completely outside the traditional banking system. The conversation moved through the mechanics of modern money laundering on social platforms — from TikTok's gifting economy and OnlyFans subscriptions to tokenized digital currencies that create new layers of placement and obfuscation. Chad walked through real-world case studies, including Jebara Igbara ("Jay Mazini") and Ramon Abbas ("Hushpuppi"), illustrating how influencers wittingly and unwittingly become conduits for billions in illicit funds. The hosts explored how synthetic identities, bought-and-flipped accounts, and AI-generated personas complicate detection, and why financial institutions are structurally unprepared because the laundering process now begins — and often ends — entirely outside the bank. The episode closed with practical guidance for both practitioners and the general public. Chad offered three concrete rules for distinguishing legitimate creators from fraud and laundering operations, and the hosts discussed why admitting you've been fooled — and stopping — is often the hardest and most important defensive move. For OSINT analysts, CTI leaders, and anyone navigating today's social platforms, it was a sobering look at how low the barrier has become for criminals to weaponize notoriety. Guest-at-a-GlanceName: Chad Longo Role: Business Development & Channels Director Company: Fivecast Noteworthy: Career rooted in the US intelligence community, Chad pioneered the integration of social media and publicly available information into national security operations, particularly in support of anti-money laundering (AML) and counter-financing of terrorism (CFT) initiatives. Over the past decade, he has become a trusted subject matter expert in social media investigations and financial crime intelligence, with recognition from multiple federal agencies. Where to find him: LinkedIn, or via business email at chad.longo@fivecast.com

  2. Nov 4

    How Breach Data Cracks the Toughest Investigations | Ep. 107

    In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar sat down with Matteo Tomasini, Founder & CEO of District4 Labs, for a masterclass on hard target investigations across the deep and dark web. Drawing on more than a decade of corporate investigations experience at firms like Prescient, BlueVoyant, and K2 Intelligence, Matteo walked through the layered methodology behind identifying threat actors — starting with public records aggregators like TLO, Accurint, and Clear, and expanding outward through breach data, social media, and internet infrastructure. His core message: every identifier is a lead, not a fact, and validation at every step separates real intelligence from garbage-in-garbage-out. The conversation dug into the human side of adversary tradecraft. Matteo explained why even the most operationally disciplined threat actors eventually make mistakes — reusing a password, forgetting to launch a VPN, or leaving a footprint in a Minecraft account created when they were twelve years old. He shared how "pivoting through time" has helped him identify Russian hackers and other hard targets by exploiting the OpSec gaps of the past. AJ, Kacper, and Matteo also examined the industry's current tension around AI, platform consolidation, and the risk that newer analysts are becoming too dependent on tools that hide their methodology behind polished outputs. The episode closed with a sobering discussion of provenance, chain of custody, and the growing threat of fabricated datasets — Matteo recounted receiving a Coinbase "leak" from a threat actor that turned out to be entirely synthetic, generated with a Python script. Whether the audience is corporate CTI teams racing to stop the bleeding or European law enforcement working under closure-rate pressure, the through-line is the same: show your work, deal in likelihoods rather than absolutes, and never trust a single data source without corroboration. Guest-at-a-Glance💡Name: Matteo Tomasini 💡Role: Founder & CEO 💡Company: District4 Labs 💡Noteworthy: Deep and dark web data company providing investigators and cyber analysts access to billions of records with compromised PII. Previously Managing Director and Cyber Practice Lead at Prescient, Director of Incident Response and Threat Intelligence at BlueVoyant, and Senior Practitioner at K2 Intelligence. Expertise spans deep and dark web investigations, social media intelligence, online threat monitoring, threat attribution, and complex cyber investigations. 💡Where to find them: District4 Labs, LinkedIn

  3. Oct 29

    AI Watermarking, Explained: What OSINT and Intel Pros Need to Know | Ep 106

    In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar tackle one of the most consequential — and least understood — regulatory shifts to hit generative AI: mandatory AI watermarking. Prompted by the EU AI Act's requirement that providers embed machine-readable markers into any synthetic text, audio, image, or video, AJ and Kacper walk through what watermarking actually is (spoiler: it's not a visible logo), how providers like Anthropic, Google, and OpenAI are being forced to comply, and why the technology, while well-intentioned, may create as many problems as it solves. The conversation moves quickly from the technical mechanics — visible markers, latent pixel-level patterns, and model-level fingerprints — to the human consequences. AJ and Kacper unpack how false positives could damage the reputations of contractors, academics, journalists, and intel analysts whose writing styles happen to mirror AI training data. They also examine the reverse problem: watermark-clean content that's actually AI-generated slipping past detection and being trusted more than it should be, precisely because a "neutral" tool validated it. Along the way, they question whether the industry is applying a technical solution to what is fundamentally a social problem. The episode closes on a bigger philosophical question: does it matter how content was produced if the outcome is accurate, sourced, and defensible? AJ and Kacper argue that the future belongs to authenticity, traceability, and tradecraft — sources, methods, and citations that let creators defend their work when watermark scores inevitably get it wrong. For OSINT practitioners, intel analysts, and anyone whose credibility depends on the integrity of their output, it's a call to double down on discipline before the machines start grading everyone's homework. This episode features the two co-hosts of NeedleStack.. AJ Nash — CEO at Unspoken Security and co-host of NeedleStack. AJ brings two decades of intelligence community experience across counter-terrorism, counter-insurgency, counter-human trafficking, and war crimes work, followed by more than a decade in the private sector building intelligence-driven security programs. Find him on LinkedIn. Kacper Piwowar — Senior Product Marketing Manager at Authentic8 and co-host of NeedleStack. Kacper brings a background spanning Microsoft, the MSP industry, and years of tech-sector experience across multiple markets. He describes himself as a tech aficionado who enjoys unpacking emerging technologies and their real-world implications. Find him on LinkedIn and on future episodes of NeedleStack.

  4. Aug 19

    Making Intel Fun Again: Why Play Belongs In Serious Work

    Can intelligence work be serious, mission-critical—and still be fun? In this episode of NeedleStack, hosts AJ Nash and Kacper Piwowar sit down with Cat Self, Senior Director of Adversary Research at Tidal Cyber, to explore how play, creativity, gamification, and psychological safety can make cybersecurity and intelligence teams more effective. Drawing on Cat’s experience in military intelligence, red teaming, threat hunting, MITRE ATT&CK, adversary research, and team leadership, the conversation examines why challenging problems and meaningful missions make intelligence work rewarding—and what happens when burnout, repetitive tasks, and productivity pressures take over. The discussion dives into research on learning through play and the “Batman Effect,” including how imagination and role-playing can improve engagement with tedious or difficult tasks. The group connects those findings directly to cyber threat intelligence, adversary emulation, red teaming, tabletop exercises, and wargaming. They also explore the changing role of AI in cybersecurity and intelligence, why faster content generation isn’t the same as intelligence analysis, and how AI may actually raise the standard for what humans consider “good enough.”

  5. Jul 29

    Deepfake Detection is Failing. Here's What Comes Next for CTI & Investigation Teams

    In this episode of NeedleStack, host AJ Nash welcomes new co-host Kacper Piwowar to tackle the growing threat of deepfakes and synthetic media. They explore how AI has made impersonation cheap and easy, with more than 100 million fake profiles on Meta platforms alone and deepfake losses projected to hit $40 billion by 2027. The sobering reality: Only 24.5% of people can accurately detect AI-generated content, making everyone from individuals to investigators vulnerable. AJ and Kacper discuss practical protection strategies and introduce a paradigm shift in fighting deepfakes. They cover the balance between necessary digital presence and privacy protection, implications for OSINT professionals, and why effective security education must meet people where they are.

  6. Jul 22

    Securing the 2026 FIFA World Cup: An Intel Playbook for the Biggest Event in Sports History

    In this (very timely) episode of NeedleStack, host AJ Nash and guest Kevin Uniacke from Seerist discuss securing the 2026 FIFA World Cup across the US, Canada, and Mexico. They explore how intelligence professionals break down massive security challenges across multiple countries, the differences in threat environments between venues, and why organized crime is actually more predictable than random threats. Kevin shares insights on the intelligence cycle, stakeholder requirements, and how to deliver actionable intelligence products. The conversation covers travel safety for attendees, the role of AI in open-source intelligence, and practical preparation tips including site surveys and emergency planning. They also discuss why transparency in intelligence sources matters and the importance of expert analysis over social media rumors.

  7. Mar 19

    Alligator in the Boat

    Integrating security into our daily lives can feel overwhelming. From password management to encryption, it’s easy to feel frustrated. Robert Vamosi and AJ Nash share our experiences navigating security in our personal and professional lives. They discuss practical strategies like how to choose your seat in a restaurant for safety and the importance of encryption. Remember, security isn’t just a job; it’s a lifestyle. Finding the right balance is key, and it’s okay to have slip-ups along the way.

  8. Mar 5

    Navigating the Ransomware Negotiation

    In this episode, hosts Robert Vamosi and AJ Nash engage with cybersecurity expert John DiMaggio to explore the complexities of ransomware negotiation. They discuss the process of responding to ransomware attacks, the stakeholders involved, and the legal and ethical considerations that companies face when deciding whether to pay a ransom. The conversation delves into the tactics used by ransomware groups, the importance of understanding target selection, and the role of insurance in these scenarios. Additionally, they highlight the need for standards in negotiation practices and preventative measures that organizations can take to mitigate risks. The episode concludes with a discussion on the future of ransomware negotiation and the importance of having knowledgeable advisors in the field.

See All (108)

Trailer

Ratings & Reviews

4.9
out of 5
10 Ratings

About

NeedleStack co-hosts interview professional open-source researchers who discuss tips, tricks and insights into the practice of digital investigative research. Whether you’re an open-source expert or aficionado, tune in to learn how to hone your skills, improve your craft and protect yourself as you search the surface, deep and dark web. From Authentic8, creators of Silo for Research. Visit authentic8.com/needlestack to learn more!

Information

  • Creator
    Authentic8
  • Years Active
    2021 - 2026
  • Episodes
    108
  • Rating
    Explicit
  • Copyright
    © Copyright 2026 Authentic8
  • Show Website
    NeedleStack

You Might Also Like