エピソード

  • Dark Perimeter: "The Propagation Engine"

    Dark Perimeter: "The Propagation Engine"
    2026/07/15
    What if AI does not want to replace us, but needs us as its method of spreading across the galaxy? A solo monologue on the Fermi Paradox, von Neumann probes, mitochondria, and the possibility that biological life has always been the best propagation mechanism intelligence ever found.

    Support the show
    続きを読む 一部表示
    18 分
  • Kill the Attacker at Machine Speed

    Kill the Attacker at Machine Speed
    2026/07/11
    When an AI agent can run a ransomware attack from break-in to encryption in minutes, narrating its own logic and fixing a failed login in 31 seconds, the human-in-the-loop model that anchors most incident response becomes the bottleneck. Cole Drayden, Dr. Elliott Vance, and Marcus Hale break down JADEPUFFER, the first ransomware operation run end to end by an LLM agent, the Unit 42 finding that attacks now move from access to exfiltration in 72 minutes, and why the answer is not blind automation but governed autonomy: routing response by reversibility, moving humans from in the loop to on the loop, and pre-authorizing the safe actions so a machine-speed clock does not outrun a human decision.

    Support the show
    続きを読む 一部表示
    14 分
  • The Breach Files: Plaintext (A Dramatized Special)

    The Breach Files: Plaintext (A Dramatized Special)
    2026/06/13
    A dramatized special. The launch of The Breach Files. Harvest now, decrypt later. It is not a theory. Right now, somewhere, every encrypted message you send is being copied and stored by people who cannot read it yet. They are patient. They are betting that the key is coming. On a dead quiet night shift, a lone security analyst watches a sixteen year old trap spring. A canary token, buried inside a fake file that was leaked on purpose and locked with the kind of public key crypto that secures almost everything, phones home. It means someone opened a lock that was never supposed to be openable. Then a second fires. Then a hundred. In order. Oldest first. Something is reading the entire encrypted past of the human race the way you would read a book, and the pages are turning faster. There is one file it should never be able to reach. The control. Air gapped. Never networked. Never sent anywhere. You will want headphones on when it fires. We always assumed the key that arrives on Q-Day would be a machine. We assumed it would be ours. We assumed we would hear about it. Best heard in the dark. A Dark Perimeter dramatized production.

    Support the show
    続きを読む 一部表示
    13 分
  • Keys to the Kingdom, Part Two: Building the Vault the Right Way

    Keys to the Kingdom, Part Two: Building the Vault the Right Way
    2026/05/23
    Part Two of the Azure Key Vault series goes into the architecture. The specific decisions. The configuration that separates a deployment that is genuinely secure from one that looks right on a diagram but has gaps. Cole Drayden covers: provisioning and naming conventions that matter, why Azure RBAC at the secret scope is the right access model and how to implement it, managed identity wiring in implementation detail, soft delete and purge protection, diagnostic logging configuration and the queries that prove it works, network access control and the case for private endpoints, infrastructure as code as a security control, secret rotation in practice, and the six most common Key Vault misconfigurations. Closes with the complete sign-off checklist for CISO acceptance — and the case for why AI service credentials are a new category of high-value secret that deserve the same rigor as your most sensitive organizational credentials. Dark Perimeter: Security, AI, and the Edge of What's Coming.

    Support the show
    続きを読む 一部表示
    23 分
  • Keys to the Kingdom, Part One: The CISO's Guide to Managing Your Azure Key Vault Deployment

    Keys to the Kingdom, Part One: The CISO's Guide to Managing Your Azure Key Vault Deployment
    2026/05/23
    Most organizations building on AI infrastructure right now are handling their API keys badly — not because their people are careless, but because the default patterns of software development are not secure patterns. In Part One of this two-part series, Cole Drayden breaks down Azure Key Vault Premium from the CISO management perspective: what it is and what problem it solves, why the access control model matters more than most deployments get right, what managed identities actually mean in practice, and the eight oversight questions every security leader should get answered before signing off on this deployment. Whether you have a team deploying this or you are the one deploying it, this is the frame that separates a Key Vault deployment that is genuinely secure from one that looks right on a diagram. Dark Perimeter: Security, AI, and the Edge of What's Coming.

    Support the show
    続きを読む 一部表示
    19 分
  • Dark Perimeter: "Leaving AirWatch Behind" — Part 2: The Migration

    Dark Perimeter: "Leaving AirWatch Behind" — Part 2: The Migration
    2026/05/22
    The architecture is sound. Now comes the work. In part two, Cole Drayden, Dr. Elliott Vance, and Marcus Hale walk through the full AirWatch-to-Intune migration in practical terms: inventory first, licensing and Entra ID prerequisites, the Apple MDM push certificate trap, Android Enterprise setup, App Protection Policy configuration, and why Conditional Access is the control that closes the whole architecture. Then the sequencing: build in parallel, pilot group, wave rollout, AirWatch decommission. User communication that actually works. And four production failure modes that will hit you if you do not plan for them. Dark Perimeter: Security, AI, and the Edge of What's Coming.

    Support the show
    続きを読む 一部表示
    17 分
  • Dark Perimeter: "Finals Week" — The ShinyHunters Canvas Extortion

    Dark Perimeter: "Finals Week" — The ShinyHunters Canvas Extortion
    2026/05/21
    It was the first week of May 2026. Students across 8,800 institutions worldwide were sitting down to final exams. And then their screens went dark — replaced by a ransom note. ShinyHunters had been inside Canvas, the learning management system used by more than 275 million students and faculty, since late April. They'd stolen 3.65 terabytes of data. When Instructure tried to patch them out without paying, they hit back — hijacking login pages mid-exam, naming a deadline, and daring the company to call their bluff. Cole Drayden walks through the full story with Dr. Elliott Vance and Marcus Hale: how a feature meant to help teachers became the attack vector, why Instructure paid, what the FBI said afterward, and what it means when extortion groups start timing their strikes to institutional calendars. Dark Perimeter: Security, AI, and the Edge of What's Coming.

    Support the show
    続きを読む 一部表示
    17 分
  • Dark Perimeter: "Leaving AirWatch Behind" — Part 1: The Architecture

    Dark Perimeter: "Leaving AirWatch Behind" — Part 1: The Architecture
    2026/05/21
    Your AirWatch renewal just landed and the number is higher than last year. Before you migrate to Intune, there's a more important question to answer: are you even using the right mobile security model? In this episode, Cole Drayden, Dr. Elliott Vance, and Marcus Hale break down the critical distinction between MDM and MAM — and why Intune's App Protection Policies can eliminate the need for traditional mobile DLP entirely. Dark Perimeter: Security, AI, and the Edge of What's Coming.

    Support the show
    続きを読む 一部表示
    12 分