Secure AF - A Cybersecurity Podcast

Alias Cybersecurity
  • 4.8 (10)
  • TECHNOLOGY
  • UPDATED SEMIMONTHLY

Think like a hacker. Defend like a pro. Welcome to the Secure AF Cybersecurity Podcast — your tactical edge in the ever-evolving cyber battlefield. Hosted by industry veterans including Donovan Farrow and Jonathan Kimmitt, this podcast dives deep into real-world infosec challenges, red team tactics, blue team strategies, and the latest tools shaping the cybersecurity landscape. Whether you're a seasoned pentester, a SOC analyst, or just breaking into the field, you'll find actionable insights, expert interviews, and unfiltered discussions with Alias team members and top-tier guests from across the cybersecurity spectrum. Stay sharp. Stay informed. Stay Secure AF.

  1. DEF CON 33 Debrief

    5D AGO

    DEF CON 33 Debrief

    Got a question or comment? Message us here! Fresh off the chaos of DEF CON 33, Tanner, Hickman, and Will break down the four-day hacker conference, from the eye-opening hacker villages and mind-bending talks to Hickman’s clutch CTF victory and Will’s bold dive into the Social Engineering Community’s Vishing Competition. No sleep, all signal. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    49 min
  2. ⚠️ Crypto24 ⚠️ Ransomware: Bypassing EDR and Bolstering Defenses

    AUG 20 · BONUS

    ⚠️ Crypto24 ⚠️ Ransomware: Bypassing EDR and Bolstering Defenses

    Got a question or comment? Message us here! In this episode, we break down the emerging Crypto24 ransomware attacks that use living-off-the-land techniques to bypass EDR. We’ll explore how these attacks unfold and the defensive strategies SOCs and organizations can use, like layered security, enhanced monitoring, and rapid response, to stay ahead of evolving threats. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    8 min
  3. 🚨 Gone Vishing: The Recent Surge of Vishing Attacks

    AUG 13 · BONUS

    🚨 Gone Vishing: The Recent Surge of Vishing Attacks

    Got a question or comment? Message us here! This week, we’re unpacking the phishing wave hitting SaaS platforms ... from social engineering to OAuth abuse and AI voice spoofing. Learn why people remain the #1 attack vector and how to stay one step ahead. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    11 min
  4. 🚨 SonicWall Firewall Ransomware Breakdown

    AUG 6 · BONUS

    🚨 SonicWall Firewall Ransomware Breakdown

    Got a question or comment? Message us here! On this episode of the #SOCBrief, we break down attacks on SonicWall firewalls. A wave of ransomware, possibly exploiting zero-day vulnerabilities, is compromising even fully patched systems. Learn how SOCs can respond fast and stay ahead. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    9 min
  5. Spilling the Tea: What Happens When Apps Launch Without Locking Down Security ☕

    JUL 30 · BONUS

    Spilling the Tea: What Happens When Apps Launch Without Locking Down Security ☕

    Got a question or comment? Message us here! This week’s SOC Brief unpacks how a misconfigured cloud bucket exposed 72,000+ user images from the Tea app, complete with geolocation metadata and real IDs. From national security risks to doxxing fallout, we break down what went wrong and what your security team must do to avoid the same mistakes. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    13 min
  6. 🚨⚠️ A Critical ZERO-DAY (CVE-2025-53770)

    JUL 25 · BONUS

    🚨⚠️ A Critical ZERO-DAY (CVE-2025-53770)

    Got a question or comment? Message us here! A critical zero-day (CVE-2025-53770) is actively targeting on-premises SharePoint servers AND it’s already been used to compromise over 100 organizations. In this #SOCBrief, Andrew and Tanner break down how the exploit works and what steps your team should take now. If your SharePoint instance is public-facing and unpatched ... assume compromise. 🎧 Tune in for insights, mitigation tips, and what to look for in your logs.  Links:  https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-overviewhttps://www.cisa.gov/news-events/alerts/2025/07/20/update-microsoft-releases-guidance-exploitation-sharepoint-vulnerabilitiesSupport the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    18 min
  7. 🚪 Offboarding isn't just HR's job …

    JUL 23 · BONUS

    🚪 Offboarding isn't just HR's job …

    Got a question or comment? Message us here! In this week’s #SOCBrief, we break down why offboarding policies are ABSOLUTELY critical for security teams. Overlooked items from abandoned accounts to old VPN access can leave backdoors wide open. Learn how SOCs monitor, contain, and shut down lingering access, and why communication between HR, IT, and cybersecurity is essential. 🎙️ Tune in. secureafpodcast.com Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    16 min
  8. Aligned by Design: CISO x Legal in Practice - Episode 92

    JUL 22

    Aligned by Design: CISO x Legal in Practice - Episode 92

    Got a question or comment? Message us here! 🎙️ NEW! Aligned by Design: CISO x Legal Introducing! A fresh new series that explores the intersection of cybersecurity and legal strategy. Join Alias CISO Jonathan Kimmitt and privacy attorney Tom Vincent as they unpack what happens when technology, compliance, risk, and law collide.  From real-world experiences to the nuances of the term "breach", these two break down the how, why, and what now? behind every security decision and legal gray area. Whether you're in the trenches of infosec or just trying to keep your data clean, CISO x Legal is your go-to podcast for smarter, sharper, and more aligned security practices. Support the show Watch full episodes at youtube.com/@aliascybersecurity. Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

    55 min
See All (104)

Ratings & Reviews

4.8
out of 5
10 Ratings

About

Think like a hacker. Defend like a pro. Welcome to the Secure AF Cybersecurity Podcast — your tactical edge in the ever-evolving cyber battlefield. Hosted by industry veterans including Donovan Farrow and Jonathan Kimmitt, this podcast dives deep into real-world infosec challenges, red team tactics, blue team strategies, and the latest tools shaping the cybersecurity landscape. Whether you're a seasoned pentester, a SOC analyst, or just breaking into the field, you'll find actionable insights, expert interviews, and unfiltered discussions with Alias team members and top-tier guests from across the cybersecurity spectrum. Stay sharp. Stay informed. Stay Secure AF.

Information

You Might Also Like