EP. 60 - BlueMoon: When the Patch Becomes the Exploit Roadmap

Got a question or comment? Message us here!This Halloween, we're stepping inside a ransomware operation where AI meets bad OPSEC. From careless mistakes to digital ghosts left behind, discover how attackers are using AI and where they're exposing themselves along the way.#CyberSecurity #Ransomware #OPSEC #HalloweenPodcastSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!You've got cybersecurity questions, and we're answering them.In this episode, Tanner and Andrew sit down to tackle questions submitted by our listeners, covering a wide range of cybersecurity topics, industry trends, career advice, security best practices, and more.Whether you're new to cybersecurity, an experienced professional, or simply interested in staying informed about today's cyber landscape, this Q&A session offers practical insights and real-world perspectives from the Alias team.Thanks to everyone who submitted questions. If you'd like to be featured in a future Q&A episode, let us know what topics you'd like us to cover.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!Connected devices are everywhere, and attackers know it. In this episode, we examine the French supermarket cyberattack and what it reveals about the growing risks of interconnected systems. From smart devices and operational technology to point-of-sale systems and supply chain infrastructure, we explore how modern retail environments have become prime targets for cybercriminals. Learn what security teams can do to protect expanding attack surfaces before everyday technology becomes an unexpected entry point.#CyberSecurity #RetailSecurity #CyberAttack #ThreatIntelSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!Halloween is almost here, and we're getting into the spirit with a special Alias Spooktacular episode.What do cybersecurity professionals and ghost hunters have in common? More than you might think. In this fun and lighthearted conversation, we explore the similarities between tracking cyber threats and chasing paranormal activity, sharing stories, laughs, and a few spooky cybersecurity insights along the way.Whether you're a cybersecurity enthusiast, a Halloween fan, or just looking for something a little different, this episode is packed with seasonal fun and security-themed entertainment.Subscribe and join us for more cybersecurity conversations, industry insights, and the occasional spooky surprise.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!What happens when the very tool designed to protect your organization becomes the attack vector? In this episode, we break down the FortiMail zero-day vulnerability, how threat actors exploited it, and why security appliances continue to be high-value targets. We discuss the risks to organizations, lessons learned from recent attacks, and what security teams should be doing to reduce exposure when critical infrastructure is suddenly at risk.#Fortinet #FortiMail #CyberSecurity #ZeroDaySupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!Employees are adopting AI tools faster than many organizations can establish the governance, security, and compliance frameworks needed to manage them. While AI is driving innovation and productivity, it is also creating new risks that security leaders can no longer afford to ignore.In this episode, we sit down with Richa Kaul to discuss what happens when AI adoption outpaces governance. From shadow AI and data exposure to compliance concerns and risk management, we explore the security challenges organizations face as employees increasingly bring AI into their daily workflows.Richa shares her perspective on balancing innovation with security, the importance of building effective governance frameworks, and the steps organizations can take to reduce risk while still enabling teams to take advantage of AI technologies.If your organization is implementing AI tools, developing an AI strategy, or trying to understand the security implications of rapid AI adoption, this conversation provides valuable insights from one of the most important discussions happening in cybersecurity today.Guest: Richa Kaul - https://media.kitcaster.com/richa-kaulSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!As AI agents become more powerful, they also introduce new security risks. In this episode, we explore NVIDIA’s latest AI security platform and how it's designed to help organizations monitor, secure, and govern AI-powered systems. We discuss the growing challenges of agentic AI, potential attack paths, and what defenders need to know as businesses increasingly rely on autonomous AI tools. Is your AI agent working for you... or creating new vulnerabilities? #ArtificialIntelligence #AISecurity #NVIDIA #CyberSecuritySupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!Podcast Alert! This week on The SOC Brief, we dive into one of the most ironic cybercrime stories of the year. The notorious Cl0p ransomware gang, known for targeting organizations worldwide, reportedly found itself on the receiving end of a breach by ShinyHunters. Join us as we break down what happened, what it means for the cybercriminal ecosystem, and the lessons defenders can learn when hackers become the hacked. #CyberSecurity #ThreatIntel #Ransomware #SOCBriefPodcastSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!Patches are meant to strengthen security, but they can also give attackers valuable clues. In this episode, we explore how threat actors analyze updates, reverse-engineer fixes, and weaponize vulnerabilities before organizations have time to patch.#CyberSecurity #PatchManagement #ThreatIntelligence #BlueMoonSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.

Got a question or comment? Message us here!SECCON may be over, but the conversations are just getting started. Join us as we recap this year's conference, share key takeaways, favorite moments, and the cybersecurity trends that had everyone talking. Tune in now! 🔐#SECCON #Cybersecurity #Podcast #InfoSecSupport the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.