"This Is Fine" with Hunter Strategy

Hunter Strategy

Welcome to "This Is Fine" with Hunter Strategy, because who doesn't need another podcast, right? But hold on, this isn't your typical corporate spiel. "This Is Fine" dives deep into Cloud security and agile methods, but with a twist of humor, sarcasm, and a sprinkle of dad jokes. Instead of boring PDFs, we bring lively discussions to life, offering a peek behind the curtain at our quirky team. Join us for a roller coaster ride through tech talk and more. Trust us, it's going to be fine... probably!

  1. Why Purple Team is the Team of the Future

    1d ago

    Why Purple Team is the Team of the Future

    This episode explores why purple teaming is becoming a smarter security strategy, with host, Matt Triner, speaking alongside guests Jordan Lazo, Gabriel Abdalawad, and Jake Williams from Hunter Strategy. They break down the difference between red, blue, and purple teams, and explain how collaboration helps organizations improve detections and reduce blind spots. The conversation also covers why purple teaming is especially valuable for less mature organizations that need to build stronger security foundations. Overall, the guests argue that sharing tactics, testing detections, and closing gaps creates more practical security than working in silos. Episode Chapters: 00:00 Introduction to Cybersecurity Teams 01:00 Defining Blue, Red, and Purple Teams 03:19 The Philosophy of Purple Teaming 07:57 Real-World Examples of Detection and Exploitation 12:55 Building a Purple Team in Less Mature Organizations 18:39 The Importance of Detection Engineering 23:49 Understanding Decay and AI Solutions 29:53 Cloud Security: Risks and Responsibilities 31:17 Documentation Challenges in Cloud Implementations 37:54 The Case for Purple Teams 44:24 Strategies for Implementing Purple Teams

    48 min
  2. The Future of Cyber Warfare: Trends and Predictions

    Jun 25

    The Future of Cyber Warfare: Trends and Predictions

    Cyber warfare is often misunderstood and this episode explains why it’s usually a supporting act rather than the main event in modern conflict. Jake Williams and Bryson Bort break down how cyber operations differ from kinetic warfare, why attribution and battle damage assessment are so difficult, and why political and strategic limits often matter more than the technology itself. You’ll also hear how adversaries use low-cost, scalable cyber campaigns to create disruption without triggering direct escalation. Overall, it’s a sharp look at how cyber tactics are reshaping future warfare and global security. Episode Chapters: 00:00 Introduction to Cyber Warfare 05:16 The Role of Cyber in Modern Warfare 07:51 Stuxnet: A Case Study in Cyber Warfare 10:52 Legal Definitions and Warfare 16:17 The Complexity of Cyber Operations 17:50 Investment in Cyber Capabilities 22:10 The Future of Cyber Warfare 27:06 Ethics and Cyber Warfare 33:51 Predictions for Future Conflicts 41:30 Educating on Cyber Warfare

    43 min

  3. Jun 18

    Cybersecurity Challenges in Internet of Things (IoT) Devices

    Cybersecurity Challenges in Internet of Things (IoT) Devices IoT isn't just smart bulbs and garage door openers, it's the badge scanner at your office door, the sensors on a wind turbine, the x-ray machine at your hospital, and the PLC system running a manufacturing floor. The attack surface is enormous, and most of it was never built with security in mind. In this episode, host Matt Triner sits down with Adeel Chohan, Head of Data & AI at Provectus, to unpack why IoT security is so hard to get right and why it keeps getting harder. They dig into device procurement gaps, firmware vulnerabilities, the challenges of securing brownfield infrastructure, and why security is almost always the last conversation in an IoT deployment, not the first. From power grids to hospital networks to factory floors, Adeel and Matt explore what it actually takes to secure environments where connected devices outnumber the people managing them - and why legacy perimeter defenses aren't built for this reality. You can't protect what you can't see. Episode Chapters: 00:00 Introduction to IoT Device Security 02:47 The Broad Scope of IoT Devices 05:35 Unique Considerations for Securing IoT Devices 09:56 Challenges in Implementing Security Measures for IoT Devices 23:27 The Role of Cloud Providers in Enabling and Securing IoT Devices 26:49 The Challenge of IoT Cybersecurity and the Need for Standardization 27:42 From Point-to-Point Solutions to Standardized Device Management 31:05 The Trade-Offs Between Proprietary and Standardized Protocols 42:01 The Role of Regulation in Ensuring IoT Security 44:27 The Impact of Decreasing Sensor Costs on IoT Security 46:33 The Mindset Shift Towards Prioritizing IoT Security 49:06 The Future of IoT Security: Regulations, Collaboration, and AI

    51 min
  4. Continuous Monitoring and Risk Assessment

    Jun 11

    Continuous Monitoring and Risk Assessment

    Unlock the future of cybersecurity in the Department of Defense with insights on the latest tools, frameworks, and strategies transforming network monitoring. Most agencies are still relying on outdated processes—are you prepared for the shift toward automated, real-time risk assessments? In this episode, Dan Beller, Director of Cloud Solutions at Hunter Strategy, and Chris Sowards, GRC expert, reveal how cutting-edge innovations like OSCAL, cloud-native integrations, and advanced vulnerability scanning are revolutionizing continuous monitoring for defense networks. Episode Chapters: 00:00 Introduction to Continuous Monitoring and Risk Assessment 02:05 Continuous Monitoring and the ATO Process 03:23 Continuous Monitoring and System Modifications 06:15 Evolution of Continuous Monitoring 08:45 Assessment and Compliance in Continuous Monitoring 12:44 Tooling and Automation in Continuous Monitoring 16:04 Future Trends in Continuous Monitoring 19:04 Building Trust and Relationships 19:43 Challenges in Generating Artifacts 20:29 Automating ATO Process 22:48 GRC as a Gateway into Cybersecurity 24:00 The Value of GRC Professionals 24:29 The Importance of GRC in Software Development 25:51 The Need for Improved Tooling 27:08 The Role of OSCAL in Trusting Tooling 28:31 Tools for Managing Disparate Scanning Results 29:52 The Challenge of Limited Authorizations 30:51 Collaboration and Human Readability in OSCAL 34:07 The Need for Connected Governance 36:27 Measuring the Success of Continuous Monitoring

    47 min
  5. Building A Secure Culture

    Jun 4

    Building A Secure Culture

    Most organizations overlook the secret ingredient to cybersecurity success: culture. In this eye-opening episode, cybersecurity veterans Russell Eubanks and AJ King reveal how building a strong security culture isn’t just good practice, it's essential. They share powerful stories demonstrating what a thriving security culture looks like and how it can prevent costly breaches. Discover why aligning mindsets and fostering collaboration across teams can transform security from a challenge into a strategic advantage. Perfect for leaders eager to embed security into their organization's DNA, this conversation offers proven strategies to transform your mindset—and your defenses. 00:00 Introduction to Security Culture 02:27 The Importance of Culture in Cybersecurity 05:19 Examples of Good and Bad Security Culture 11:01 Comparing Security Cultures Across Organizations 18:35 Common Pitfalls in Enhancing Security Culture 21:58 Integrating Security into Organizational Culture 23:45 The Role of Non-Security Management 26:35 Empowering All Employees in Security 29:28 Phishing Exercises: A Double-Edged Sword 38:25 Key Takeaways for Executives and Non-Executives

    44 min
  6. Zero Trust Framework + NIST 800-53r5

    May 28

    Zero Trust Framework + NIST 800-53r5

    In this episode of "This is Fine," AJ King, Alex Sharpe, and Jake Williams delve into the complexities of the Zero Trust framework and its overlay against NIST 800-53 R5. They explore the philosophical and practical aspects of Zero Trust, emphasizing its role in modern cybersecurity. The discussion highlights the challenges and strategies for implementing Zero Trust, particularly in government and commercial sectors. The episode concludes with insights on how organizations can approach Zero Trust as an evolving mindset rather than a fixed goal. Episode Chapters: 00:00 Introduction to Zero Trust and NIST 800-5305:37 Challenges in Implementing Zero Trust11:18 The Role of Identity in Zero Trust17:11 The Evolution of Zero Trust22:29 Final Thoughts on Zero Trust Implementation

    41 min
  7. The State of Pen Testing

    May 21

    The State of Pen Testing

    In this episode of This is Fine, cybersecurity experts AJ King, Joshua Marpet, and Jake Williams dive into the complexities of pen testing. They explore why standardization is crucial for effective testing and how misconceptions can lead to security gaps. Discover the importance of proper scoping to focus on high-impact areas and why a pen test should simulate real attack scenarios. This discussion is essential for security leaders aiming to enhance their testing programs and communicate value across teams. Learn how to turn pen testing into a strategic security pillar and make smarter cybersecurity investments.00:00 Introduction to Pen Testing and Cybersecurity Experts 02:02 Common Misconceptions About Pen Testing 07:35 The Need for Standardization in Pen Testing 10:49 Defining Pen Testing: Dimensions and Attributes 16:51 The Role of Compliance in Pen Testing 21:57 The Impact of Breaches on Shareholder Value 23:15 The Impact of Cyber Insurance on Business Operations 25:59 Understanding the Role of CISOs in Cybersecurity 27:34 Challenges in Scoping Penetration Tests 30:38 The Importance of Standards in Cybersecurity 33:33 Regulatory Environment and Its Influence on Cybersecurity 36:23 The Role of Regulation in Cybersecurity Standards 39:14 Defining Objectives for Effective Penetration Testing 41:31 Maximizing Value from Penetration Testing Budgets

    53 min

  8. May 14

    Nation State Offensive Cyber Operations

    Most organizations dramatically underestimate how quickly offensive cyber techniques evolve—and how crucial stealth and rapid detection truly are. In this episode, Jake Williams, a cybersecurity veteran, joins Hunter Strategy’s AJ King and Jordan Lazo to expose the real tactics behind cyber warfare—and how your organization can keep pace. Discover why the myth of complex, Hollywood-style attacks is just that, and why most breaches happen through simple social engineering or widespread credential theft. Tune in now to master the art of cyber resilience in a hostile digital landscape—because in cyber warfare, the winners are those who adapt first. Episode Chapters: 00:00 Introduction to Cybersecurity and Nation-State Threats04:46 The Rise of Zero-Day Exploits12:23 Common Misconceptions in Offensive Cyber Operations18:15 The Reality of Cyber Attacks25:33 Public-Private Collaboration in Cybersecurity30:15 Staying Ahead in Offensive Operations

    37 min
See All (27)

Trailer

Ratings & Reviews

5
out of 5
2 Ratings

About

Welcome to "This Is Fine" with Hunter Strategy, because who doesn't need another podcast, right? But hold on, this isn't your typical corporate spiel. "This Is Fine" dives deep into Cloud security and agile methods, but with a twist of humor, sarcasm, and a sprinkle of dad jokes. Instead of boring PDFs, we bring lively discussions to life, offering a peek behind the curtain at our quirky team. Join us for a roller coaster ride through tech talk and more. Trust us, it's going to be fine... probably!

Information