Alligator in the Boat

In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar sat down with Matteo Tomasini, Founder & CEO of District4 Labs, for a masterclass on hard target investigations across the deep and dark web. Drawing on more than a decade of corporate investigations experience at firms like Prescient, BlueVoyant, and K2 Intelligence, Matteo walked through the layered methodology behind identifying threat actors — starting with public records aggregators like TLO, Accurint, and Clear, and expanding outward through breach data, social media, and internet infrastructure. His core message: every identifier is a lead, not a fact, and validation at every step separates real intelligence from garbage-in-garbage-out.The conversation dug into the human side of adversary tradecraft. Matteo explained why even the most operationally disciplined threat actors eventually make mistakes — reusing a password, forgetting to launch a VPN, or leaving a footprint in a Minecraft account created when they were twelve years old. He shared how "pivoting through time" has helped him identify Russian hackers and other hard targets by exploiting the OpSec gaps of the past. AJ, Kacper, and Matteo also examined the industry's current tension around AI, platform consolidation, and the risk that newer analysts are becoming too dependent on tools that hide their methodology behind polished outputs.The episode closed with a sobering discussion of provenance, chain of custody, and the growing threat of fabricated datasets — Matteo recounted receiving a Coinbase "leak" from a threat actor that turned out to be entirely synthetic, generated with a Python script. Whether the audience is corporate CTI teams racing to stop the bleeding or European law enforcement working under closure-rate pressure, the through-line is the same: show your work, deal in likelihoods rather than absolutes, and never trust a single data source without corroboration.Guest-at-a-Glance💡Name: Matteo Tomasini💡Role: Founder & CEO💡Company: District4 Labs💡Noteworthy: Deep and dark web data company providing investigators and cyber analysts access to billions of records with compromised PII. Previously Managing Director and Cyber Practice Lead at Prescient, Director of Incident Response and Threat Intelligence at BlueVoyant, and Senior Practitioner at K2 Intelligence. Expertise spans deep and dark web investigations, social media intelligence, online threat monitoring, threat attribution, and complex cyber investigations.💡Where to find them: District4 Labs, LinkedIn

In this episode of the NeedleStack podcast, hosts AJ Nash and Kacper Piwowar tackle one of the most consequential — and least understood — regulatory shifts to hit generative AI: mandatory AI watermarking. Prompted by the EU AI Act's requirement that providers embed machine-readable markers into any synthetic text, audio, image, or video, AJ and Kacper walk through what watermarking actually is (spoiler: it's not a visible logo), how providers like Anthropic, Google, and OpenAI are being forced to comply, and why the technology, while well-intentioned, may create as many problems as it solves.The conversation moves quickly from the technical mechanics — visible markers, latent pixel-level patterns, and model-level fingerprints — to the human consequences. AJ and Kacper unpack how false positives could damage the reputations of contractors, academics, journalists, and intel analysts whose writing styles happen to mirror AI training data. They also examine the reverse problem: watermark-clean content that's actually AI-generated slipping past detection and being trusted more than it should be, precisely because a "neutral" tool validated it. Along the way, they question whether the industry is applying a technical solution to what is fundamentally a social problem.The episode closes on a bigger philosophical question: does it matter how content was produced if the outcome is accurate, sourced, and defensible? AJ and Kacper argue that the future belongs to authenticity, traceability, and tradecraft — sources, methods, and citations that let creators defend their work when watermark scores inevitably get it wrong. For OSINT practitioners, intel analysts, and anyone whose credibility depends on the integrity of their output, it's a call to double down on discipline before the machines start grading everyone's homework.This episode features the two co-hosts of NeedleStack..AJ Nash — CEO at Unspoken Security and co-host of NeedleStack. AJ brings two decades of intelligence community experience across counter-terrorism, counter-insurgency, counter-human trafficking, and war crimes work, followed by more than a decade in the private sector building intelligence-driven security programs. Find him on LinkedIn.Kacper Piwowar — Senior Product Marketing Manager at Authentic8 and co-host of NeedleStack. Kacper brings a background spanning Microsoft, the MSP industry, and years of tech-sector experience across multiple markets. He describes himself as a tech aficionado who enjoys unpacking emerging technologies and their real-world implications. Find him on LinkedIn and on future episodes of NeedleStack.

Can intelligence work be serious, mission-critical—and still be fun?In this episode of NeedleStack, hosts AJ Nash and Kacper Piwowar sit down with Cat Self, Senior Director of Adversary Research at Tidal Cyber, to explore how play, creativity, gamification, and psychological safety can make cybersecurity and intelligence teams more effective.Drawing on Cat’s experience in military intelligence, red teaming, threat hunting, MITRE ATT&CK, adversary research, and team leadership, the conversation examines why challenging problems and meaningful missions make intelligence work rewarding—and what happens when burnout, repetitive tasks, and productivity pressures take over.The discussion dives into research on learning through play and the “Batman Effect,” including how imagination and role-playing can improve engagement with tedious or difficult tasks. The group connects those findings directly to cyber threat intelligence, adversary emulation, red teaming, tabletop exercises, and wargaming.They also explore the changing role of AI in cybersecurity and intelligence, why faster content generation isn’t the same as intelligence analysis, and how AI may actually raise the standard for what humans consider “good enough.”

In this episode of NeedleStack, host AJ Nash welcomes new co-host Kacper Piwowar to tackle the growing threat of deepfakes and synthetic media. They explore how AI has made impersonation cheap and easy, with more than 100 million fake profiles on Meta platforms alone and deepfake losses projected to hit $40 billion by 2027. The sobering reality: Only 24.5% of people can accurately detect AI-generated content, making everyone from individuals to investigators vulnerable.AJ and Kacper discuss practical protection strategies and introduce a paradigm shift in fighting deepfakes. They cover the balance between necessary digital presence and privacy protection, implications for OSINT professionals, and why effective security education must meet people where they are.

In this (very timely) episode of NeedleStack, host AJ Nash and guest Kevin Uniacke from Seerist discuss securing the 2026 FIFA World Cup across the US, Canada, and Mexico.They explore how intelligence professionals break down massive security challenges across multiple countries, the differences in threat environments between venues, and why organized crime is actually more predictable than random threats. Kevin shares insights on the intelligence cycle, stakeholder requirements, and how to deliver actionable intelligence products. The conversation covers travel safety for attendees, the role of AI in open-source intelligence, and practical preparation tips including site surveys and emergency planning.They also discuss why transparency in intelligence sources matters and the importance of expert analysis over social media rumors.

Integrating security into our daily lives can feel overwhelming. From password management to encryption, it’s easy to feel frustrated. Robert Vamosi and AJ Nash share our experiences navigating security in our personal and professional lives. They discuss practical strategies like how to choose your seat in a restaurant for safety and the importance of encryption. Remember, security isn’t just a job; it’s a lifestyle. Finding the right balance is key, and it’s okay to have slip-ups along the way.

In this episode, hosts Robert Vamosi and AJ Nash engage with cybersecurity expert John DiMaggio to explore the complexities of ransomware negotiation. They discuss the process of responding to ransomware attacks, the stakeholders involved, and the legal and ethical considerations that companies face when deciding whether to pay a ransom. The conversation delves into the tactics used by ransomware groups, the importance of understanding target selection, and the role of insurance in these scenarios. Additionally, they highlight the need for standards in negotiation practices and preventative measures that organizations can take to mitigate risks. The episode concludes with a discussion on the future of ransomware negotiation and the importance of having knowledgeable advisors in the field.

NeedleStack hosts, AJ Nash and Robert Vamosi engage with Roman Sannikov a seasoned expert in cyber threat intelligence, to explore the complexities of the dark web. The conversation delves into the myths surrounding the dark web, the community dynamics within cybercrime, and the professionalization of criminal enterprises. Roman shares insights on how trust and reputation are managed in these underground communities, the barriers to entry for new members, and the human element that often gets overlooked in discussions about cybercriminals.

In this episode of NeedleStack, hosts AJ Nash and Robert Vamosi engage with John Costello, a director at WireScreen, to discuss the complexities of China's strategic competition with the United States. The conversation covers China's technological advancements, the implications of its five-year plans, challenges in intelligence gathering, and the dynamics of military-civil fusion. The discussion also touches on the importance of due diligence for businesses engaging with Chinese companies and the role of Chinese students in U.S. education.

In this episode, the hosts discuss the implications of surveillance technology and AI on intelligence, journalism, and civil liberties. They explore the dual nature of surveillance as both a tool for security and a potential threat to privacy. The conversation delves into the challenges posed by misinformation, the importance of expertise in navigating these issues, and the ethical considerations surrounding the use of surveillance technology. The episode concludes with reflections on the future of journalism and the role of AI in shaping public perception and trust.