エピソード

  • The New Weakest Link

    The New Weakest Link
    2026/11/04

    For years, cybersecurity professionals have warned that people are the weakest link. We click things we shouldn't, reuse passwords, and sometimes make decisions before stopping to think. But as AI becomes more deeply connected to the systems we use every day, there may be another weak link emerging, one that can move much faster than any human.

    Today's guest is Richard Hummel, Vice President of Threat Intelligence and Research at Security Scorecard. Richard has spent nearly two decades in cybersecurity, working on everything from nation-state threats and malware analysis to intrusion detection and network security. Over the years, he's watched cybercrime change from relatively simple attacks into a much more organized and fast-moving industry.

    We talk about what AI is adding to that mix, how quickly new attacks can develop, and why giving AI too much access inside a company can create problems of its own. We also get into AI-powered phishing, non-human identities, and a real example from Richard's own experience where an AI assistant opened something it probably shouldn't have.

    Show Notes:
    • [01:04] Richard Hummel shares his background in threat intelligence and nearly two decades of work tracking nation-state actors, cybercriminals, and other online threats.
    • [03:03] Attackers who are motivated by disruption rather than money can be especially difficult to predict and defend against.
    • [04:30] Ransomware remains a major threat even as older attacks like point-of-sale malware and website defacement have become less common.
    • [06:54] Cybercrime now operates more like a business, with specialists handling phishing, malware, infrastructure, payments, and other parts of an attack.
    • [13:17] AI-powered attacks may look familiar to defenders, but they can move much faster than traditional cyberattacks.
    • [18:10] Security teams need to pay attention not only to threats coming into a network but also to what AI and other systems may be sending out.
    • [19:43] AI could become the new weakest link when organizations give it broad access without the same controls they place on human users.
    • [21:47] Just-in-time privileges can limit what an AI system is allowed to access and how long it keeps those permissions.
    • [23:33] AI tools can expose sensitive information when companies capture prompts, screens, and internal work in the name of productivity.
    • [29:32] Threat intelligence teams monitor underground communities to understand how cybercriminals are adopting and using AI.
    • [33:28] DDoS tools are beginning to add AI on top of automation to help attackers choose, adjust, and refine their attacks.
    • [37:09] Agent-driven traffic may soon outpace human traffic and change how websites, infrastructure, and online businesses operate.
    • [45:23] A personal example shows how an AI assistant can create risk when it opens an attachment without enough restrictions in place.
    • [48:13] Security awareness training can reduce risk, but people still make mistakes and need a plan for what happens when they do.

    Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

    Links and Resources:
    • Podcast Web Page
    • Facebook Page
    • whatismyipaddress.com
    • Easy Prey on Instagram
    • Easy Prey on Twitter
    • Easy Prey on LinkedIn
    • Easy Prey on YouTube
    • Easy Prey on Pinterest
    • Richard Hummel - LinkedIn
    • Security Scorecard
    • STRIKE Threat Intelligence
    • Driftnet
    • AI Security Cannot Depend on Everyone Slowing Down
    続きを読む 一部表示
    52 分
  • New Rules of Privacy

    New Rules of Privacy
    2026/10/21

    Most of us give out the same phone number and email address without thinking twice. But when that information gets combined with everything else available online, it can reveal a surprising amount about who we are, where we live, and the people around us. And with AI making it easier to pull those details together, scammers can create attacks that feel much more personal and believable than they used to.

    My guest today is Arjun Bhatnagar, the co-founder and CEO of privacy and security company Cloaked. Arjun has spent more than 20 years in technology, starting out as a programmer at a young age and later working as a CTO and leading engineering teams. His work now focuses on helping people take back more control over their personal information and digital identities.

    We talk about how AI is changing scams, why reusing the same contact information can make us easier to track, and what he calls "data poisoning" or using aliases and alternative information to make that tracking more difficult. We also discuss why privacy doesn't have to be all or nothing, and some practical ways to make yourself a harder target without giving up the technology you use every day.

    Show Notes:
    • [01:51] Arjun Bhatnagar explains how his interest in privacy began with using fake names and unique email aliases online.
    • [05:05] Privacy and data protection matter to everyone, not just celebrities, executives, or other high-profile targets.
    • [07:17] AI has made scams cheaper to create, easier to personalize, and much more convincing.
    • [10:10] Public attitudes toward privacy have shifted as people have become more aware of how their information is collected and used.
    • [12:43] Privacy is about having control over personal information rather than trying to remain completely anonymous.
    • [15:05] Data poisoning can make it harder for companies and scammers to build an accurate profile of someone.
    • [18:27] Alias phone numbers, email addresses, and other identifiers can protect personal information without disrupting everyday communication.
    • [21:23] Cloaked uses different types of phone numbers to reduce tracking without creating an unnecessary shortage of available numbers.
    • [26:14] Reusing the same username across multiple platforms can make separate accounts easier to connect.
    • [29:41] Deepfakes, voice cloning, and highly personalized phishing attacks are becoming increasingly difficult to recognize.
    • [37:21] Individuals are often expected to manage cybersecurity risks that companies are better equipped to handle.
    • [40:39] Keeping multiple privacy tools in one service raises security concerns and requires careful protection of user data.
    • [43:43] A phone number can reveal a surprising amount of personal information through data brokers and public sources.

    Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

    Links and Resources:
    • Podcast Web Page
    • Facebook Page
    • whatismyipaddress.com
    • Easy Prey on Instagram
    • Easy Prey on Twitter
    • Easy Prey on LinkedIn
    • Easy Prey on YouTube
    • Easy Prey on Pinterest
    • Cloaked
    • Arjun Bhatnagar - LinkedIn
    続きを読む 一部表示
    44 分
  • Protecting Kids Online

    Protecting Kids Online
    2026/10/07
    Kids are growing up with technology in a way none of us did. Phones, games, social media, school devices, and now AI are all part of everyday life, and parents are left trying to figure out how much access is too much. Keeping kids completely away from technology probably isn't realistic, but neither is handing them everything and hoping they figure it out. My guest today is Chris McKenna, founder of Protect Young Eyes, author, and digital safety advocate. Chris works with families, schools, churches, legislators, and technology companies to help create safer digital spaces for kids. His path into this work began after a career in business and ministry, where he started seeing firsthand how quickly smartphones and other devices were changing childhood and the kinds of risks young people were encountering. In our conversation, we discuss what "the right tech at the right time" can look like, how parents can introduce more independence without handing over everything at once, and why relationships and conversations matter just as much as parental controls. We also get into social media, smartphones, gaming, AI, and the pressure kids face when everyone around them seems to have access to the same platforms. Chris also shares practical ways families can lower risk, build digital discernment, and give kids room to make smaller mistakes while they are still learning. Show Notes: [00:50] Chris McKenna shares how his background in business and ministry eventually led him to work in digital safety and launch Protect Young Eyes.[02:52] We discuss why parents began giving smartphones and tablets to younger children and how technology gradually became part of nearly every area of life.[07:39] We look at the pressure parents face when other kids already have smartphones, social media, and unrestricted access to the internet.[10:54] We discuss how online risks have changed the old idea of "stranger danger" and why kids need to recognize concerning behaviors instead of simply avoiding strangers.[12:09] Chris explains why he believes in giving kids the right technology at the right time instead of either banning technology completely or giving them unrestricted access.[17:00] We discuss the five habits Chris recommends for families, including modeling healthy technology use, building strong relationships, delaying addictive technology, and adding layers of protection.[20:32] We talk about digital leadership and why adults and kids both need to learn how to slow down before reacting emotionally online.[22:19] We discuss what parents should consider before giving young teens access to smartphones and social media.[25:44] Chris explains how parents can create a gradual path toward greater technology access instead of simply saying no without explaining what comes next.[30:00] We discuss the shared responsibility of parents, technology companies, schools, policymakers, and others when it comes to protecting children online.[35:12] We turn to artificial intelligence and discuss how parents can begin conversations with kids about AI through curiosity rather than condemnation.[36:16] Chris explains the difference between relational and technical tools for managing AI and why parents should know which apps their children are downloading.[38:28] We discuss AI companions and why Chris believes minors should not be using highly personalized AI relationships without strong boundaries.[40:11] Chris explains his seven-day rule and why parents should try apps themselves before deciding whether their children are ready to use them.[44:24] We discuss some of Chris's strongest recommendations for families, including monitoring devices and keeping parents in charge of the technology in their homes.[46:03] Chris explains the idea of helping kids "fail small" so they can develop better judgment while parents are still there to guide them. Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review. Links and Resources: Podcast Web PageFacebook Pagewhatismyipaddress.comEasy Prey on InstagramEasy Prey on TwitterEasy Prey on LinkedInEasy Prey on YouTubeEasy Prey on PinterestProtect Young EyesChris McKenna - LinkedIn
    続きを読む 一部表示
    48 分
  • Hidden Phone Tracking

    Hidden Phone Tracking
    2026/09/23
    Your phone gives off a surprising amount of information just by being connected to a cellular network. Things like your location, who you communicate with, and your daily patterns can all become part of the data tied to your mobile service. While some of that information is necessary to keep a cellular network functioning, questions remain about how much data carriers really need to collect, how long they should keep it, and what happens when that information ends up in the wrong hands. My guest today is Ruddy Wang, head of consumer growth at CAPE, a privacy-first mobile carrier designed to collect as little customer information as possible. Ruddy began his career as a U.S. diplomat before moving into the technology world, including roles at Facebook and Uber, where he helped launch more than 100 cities across Brazil. His experience in government and technology gave him an early look at how much information our phones can reveal and how that data can be used, which eventually led him to CAPE and its effort to rethink mobile service with privacy and security built in from the start. In our conversation, we discuss how cellular networks track phones, why identifiers such as IMSI and IMEI numbers matter, and how signaling attacks can potentially intercept calls or text messages without the user realizing anything has happened. We also get into SIM swaps, some of the weaknesses in traditional carrier security, and what CAPE is doing differently to make mobile service more private. We also talk about practical steps people can take to reduce unnecessary data sharing and strengthen the security of their accounts, even if they have no plans to change mobile carriers. Show Notes: [01:02] Ruddy Wang shares his background and how his work as a diplomat and in technology shaped his interest in mobile privacy.[04:36] We discuss why cellular carriers retain customer data and how that information can be monetized or shared.[07:19] We break down IMSI and IMEI numbers and how these identifiers can be used to recognize and track phones.[10:13] We explore signaling attacks and how someone may be able to track a phone or intercept communications through the global telecom system.[12:22] We compare signaling attacks with SIM swaps and explain why some attacks can happen without the phone owner noticing anything unusual.[14:42] We discuss why vulnerabilities built into the global telecommunications system can be difficult to prevent and what users can do to reduce their exposure.[18:56] We look at the differences between traditional mobile network operators and MVNOs and how those relationships affect service and security.[20:26] We discuss how CAPE uses its own mobile core and SIM technology to add privacy protections while still relying on other carriers' towers.[23:19] We explore the limits of cellular privacy, including why traditional phone calls cannot offer the same end-to-end encryption as some messaging apps.[26:32] We discuss how CAPE approaches SIM swap protection by giving customers control through a recovery phrase rather than relying on customer support.[28:35] We talk about who is most interested in privacy-focused mobile service and why demand has expanded beyond people with high-risk security concerns.[32:55] We discuss how much personal information mobile carriers actually need from customers and CAPE's approach to collecting less data.[36:18] We look at the cost of privacy-focused mobile service and how CAPE's pricing and referral model compares with traditional carriers.[40:20] We discuss Ruddy's experience with a convincing fake crowdfunding site and how the scam managed to fool him.[43:10] We share practical ways to improve mobile privacy and account security, including opting out of data sharing and moving away from SMS authentication. Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review. Links and Resources: Podcast Web PageFacebook Pagewhatismyipaddress.comEasy Prey on InstagramEasy Prey on TwitterEasy Prey on LinkedInEasy Prey on YouTubeEasy Prey on PinterestCapeRuddy Wang - LinkedIn
    続きを読む 一部表示
    46 分
  • Ransomware Evolution

    Ransomware Evolution
    2026/09/16
    Ransomware has changed dramatically over the years. What started as criminals locking up individual computers and demanding relatively small payments has grown into a much larger operation involving stolen data, entire networks, third-party vendors, and increasingly sophisticated ways of pressuring victims to pay. Now AI is adding another wrinkle, giving criminals new tools while also creating some unexpected problems for them. Joining me to talk about how ransomware has evolved is Allan Liska, a ransomware researcher and Field CISO at Recorded Future. Allan has more than 30 years of experience in information security and has spent the last 12 years researching ransomware. He has advised major corporations and government agencies, served on national ransomware task forces, and written extensively about ransomware and threat intelligence. We talk about how ransomware became the business it is today, why small businesses can be just as vulnerable as larger organizations, and how attackers are increasingly going after trusted vendors instead of their intended targets directly. We also discuss what happens inside an organization after an attack, why disrupting ransomware groups really can make a difference, how AI is being used by criminals, and some of the mistakes ransomware operators make that ultimately work against them. Show Notes: [01:06] Allan Liska introduces himself and shares how his work at FireEye led him to begin researching ransomware more than a decade ago.[03:10] Growing ransomware problems pushed Allan and other researchers to begin developing better detections for attacks that many security teams were overlooking.[05:22] Ransomware evolved from attacks on individual computers to taking down entire networks and later stealing data to pressure victims into paying.[06:30] Publicly naming victims gave ransomware groups their own form of publicity and made it much harder for organizations to quietly deny an attack.[08:05] Encryption creates technical challenges for criminals, and stealing valuable data can sometimes be just as effective as encrypting an organization's systems.[09:28] Attackers increasingly target vendors and partners, while some groups are now using AI to create fake stolen data and falsely claim organizations as victims.[13:05] Chris and Allan discuss how transparency and regular communication can help organizations manage public trust after a security incident.[14:35] Ransomware response can quickly lead to employee burnout, making outside coordination and basic needs like sleep, food, and scheduling an important part of incident management.[16:14] A major breach may temporarily open security budgets, so organizations should already know which improvements they would prioritize after an incident.[23:29] International law enforcement agencies have become increasingly creative about tracking ransomware operators and waiting for them to make mistakes.[25:48] Being skilled at hacking does not necessarily mean criminals are equally skilled at protecting their identities or activities from intelligence agencies.[28:21] Ransomware groups frequently make technical and strategic mistakes, including faulty AI-generated tools, reused encryption keys, and stealing data nobody considers valuable.[29:36] Fewer ransomware victims are paying, but average payments are increasing, and ransomware remains profitable enough to attract new threat actors.[33:09] Allan explains why simply banning ransom payments may not work and discusses approaches that could give governments better intelligence about where payments go.[39:33] Collaboration remains an important part of ransomware research, and Allan encourages people entering the field to learn from other researchers and security communities. Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review. Links and Resources: Podcast Web PageFacebook Pagewhatismyipaddress.comEasy Prey on InstagramEasy Prey on TwitterEasy Prey on LinkedInEasy Prey on YouTubeEasy Prey on PinterestAllan Liska - SANSBooks by Allan LiskaRecorded FutureRansomware Live Europol AlertsCISA Alerts
    続きを読む 一部表示
    41 分
  • The Counterfeit Economy

    The Counterfeit Economy
    2026/09/09

    A counterfeit handbag may leave someone disappointed. A counterfeit medication, airbag, or child's car seat can do far more damage. Fake products now reach into nearly every part of daily life, and many of them arrive through online stores that look completely legitimate.

    Kari Kammel saw the danger firsthand when a pharmacist overseas offered her several versions of the same medication. Some were authentic, while others were openly described as counterfeit. That experience stayed with her. She now directs the Center for Anti-Counterfeiting and Product Protection at Michigan State University, where she works with consumers, brands, researchers, and law enforcement.

    Kari talks about how counterfeit goods enter the marketplace and why they have become so difficult to recognize. She explains what shoppers should examine before placing an order and what to check when the package arrives. The conversation also looks at the health risks behind fake products, the criminal activity they may fund, and the real reason an unbelievable deal can be so cheap.

    Show Notes:
    • [01:04] Kari Kammel explains how the Center for Anti-Counterfeiting and Product Protection works to keep fake products away from consumers.
    • [02:28] An encounter with counterfeit medication leads Kari into the field of brand protection.
    • [03:34] Why even counterfeit experts sometimes purchase fake products by mistake.
    • [06:11] The worldwide scale of counterfeiting and how online sales accelerated its growth.
    • [08:30] Small direct-to-consumer packages make counterfeit shipments harder for customs officials to detect.
    • [10:46] Why the word "dupe" can refer to either a legitimate alternative or an illegal counterfeit.
    • [13:22] Counterfeit goods extend far beyond luxury items into car parts, electronics, toys, and medical products.
    • [16:08] The health risks of fake clothing, cancer medications, and injectable weight-loss drugs.
    • [18:12] Why people become less cautious and more impulsive while shopping online.
    • [19:38] Only the brand can confirm authenticity, but consumers can still look for warning signs.
    • [20:29] Checking the seller, business address, website, and contact information before placing an order.
    • [23:30] Suspicious photographs, fake reviews, unusual prices, and shortages that attract counterfeit sellers.
    • [25:41] What packaging, shipping origin, and product differences can reveal after an order arrives.
    • [27:25] How unauthorized "third shift" manufacturing produces goods outside a brand's quality controls.
    • [28:36] Following the money from counterfeit sales to organized crime and other illegal activity.
    • [31:58] How counterfeiters divide shipments and change tactics to avoid customs inspections.
    • [35:00] The countries involved in manufacturing, transporting, and purchasing counterfeit goods.
    • [38:15] How brands search for fake products and try to remove them from online marketplaces.
    • [39:15] The whack-a-mole problem created by counterfeit listings and AI-generated advertisements.
    • [41:00] Child labor, human trafficking, unsafe factories, and the hidden costs behind cheaper products.

    Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

    Links and Resources:
    • Podcast Web Page
    • Facebook Page
    • whatismyipaddress.com
    • Easy Prey on Instagram
    • Easy Prey on Twitter
    • Easy Prey on LinkedIn
    • Easy Prey on YouTube
    • Easy Prey on Pinterest
    • Kari Kammel - A-CAPP Team - Michigan State University
    • Kari Kammel - LinkedIn
    続きを読む 一部表示
    43 分
  • The Internet is Playing You

    The Internet is Playing You
    2026/09/02

    A convincing lie no longer needs to look suspicious. It can appear in a familiar social media feed, come from someone who seems real, or arrive as a video that looks almost impossible to fake. By the time doubt sets in, the post may already have been shared thousands of times.

    Few people understand that online environment better than today's guest. Nina Jankowicz has spent more than a decade studying what she calls the bad things that happen on the internet. She is an internationally recognized expert on disinformation and online harassment. She was also named one of Time magazine's 100 most influential people in AI.

    Nina explains how disinformation spreads and why emotional content travels so quickly. She talks about online harassment, doxxing, romance scams, and AI-generated impersonation. The conversation also covers ways to check questionable information and protect your personal data. Just as important, Nina shares how to step away from trolls before they take over your time and attention.

    Show Notes:
    • [01:00] Nina Jankowicz describes her work studying disinformation, online harassment, and AI-generated harm.
    • [03:50] The important difference between misinformation and deliberate disinformation.
    • [05:09] Why an emotional reaction may be a sign that someone is trying to manipulate you.
    • [07:09] How social media platforms monetize attention and reward harmful engagement.
    • [10:05] Using lateral reading and multiple sources to evaluate questionable online content.
    • [12:27] Why slowing down matters when an image or video may have been generated by AI.
    • [14:04] How algorithmic feeds have made information consumption increasingly passive.
    • [17:01] When an aggressive disagreement crosses the line into harassment.
    • [19:34] Threats, doxxing, and the limits of platforms and law enforcement.
    • [22:18] Nina's one-reply rule and how blocking trolls removes the attention they want.
    • [24:07] Why laws and law enforcement training have not kept pace with cyberstalking.
    • [26:06] Preserving screenshots, documenting abuse, and asking employers for support.
    • [29:23] Password managers, two-factor authentication, and the personal details hidden in photos.
    • [32:34] Removing information from data brokers and making online safety more manageable.
    • [34:40] A romance scam involving stolen images and real-time AI impersonation.
    • [37:35] Why older adults need digital literacy training as much as children do.
    • [39:44] Addressing disinformation without suppressing speech or telling people what to believe.
    • [42:12] How social media incentives favor profitable engagement over trustworthy information.

    Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

    Links and Resources:
    • Podcast Web Page
    • Facebook Page
    • whatismyipaddress.com
    • Easy Prey on Instagram
    • Easy Prey on Twitter
    • Easy Prey on LinkedIn
    • Easy Prey on YouTube
    • Easy Prey on Pinterest
    • Nina Jankowicz
    • Nina Jankowicz - LinkedIn
    • How to Lose the Information War: Russia, Fake News, and the Future of Conflict
    • How to Be a Woman Online: Surviving Abuse and Harassment, and How to Fight Back
    続きを読む 一部表示
    44 分
  • The Psychology of Yes

    The Psychology of Yes
    2026/08/26

    It is easy to say you would never fall for a scam when you are looking at the situation from the outside. In the moment, though, things can feel much less obvious. A request may sound reasonable, the person may seem trustworthy, and saying no can feel awkward enough that you go along with something you would normally question.

    Today's guest studies exactly why that happens. Vanessa Bohns is the Bronstein Family Professor and Chair of Organizational Behavior at Cornell University's ILR School. Her work focuses on social influence, compliance, and the pressure people feel to cooperate, even when they are uncomfortable with what they are being asked to do.

    Vanessa shares several experiments that show just how strong that pressure can be. People agreed to write in library books and even handed over their unlocked phones. She explains why it can be tougher to refuse someone in person or over the phone. The conversation also covers a few simple ways to slow things down before making a decision.

    Show Notes:
    • [01:00] Vanessa Bohns explains how she began studying influence and why people are more likely to say yes than expected.
    • [04:01] Small favors reveal how much people underestimate the power of a simple request.
    • [06:53] The library book experiment shows how awkwardness can outweigh clear ethical concerns.
    • [09:58] Why people are wired to cooperate and avoid the social discomfort of saying no.
    • [15:37] How scammers use a few believable details to make an unlikely story feel true.
    • [18:32] Why a small cue of authority can be more convincing than an elaborate explanation.
    • [22:29] Creating distance from a request gives you time to think and verify what is happening.
    • [25:31] Advance warning helps people make a more thoughtful decision instead of reacting automatically.
    • [29:46] Participants hand over their unlocked phones even when private search histories are at stake.
    • [33:16] Incentives and the fear of losing access can push people to break their own rules.
    • [34:24] Social pressure can be powerful even when there is no financial reward.
    • [37:49] A phishing email uses authority, urgency, and reciprocity to fool an influence expert.
    • [41:02] Firm personal rules can make it easier to resist pressure from salespeople and scammers.
    • [44:20] Asking for a request in writing reduces pressure and gives you time to process it.
    • [46:20] Why knowledge does not make anyone immune and scam victims deserve more grace.
    • [48:20] Helping a family member avoid another scam without blaming them for what already happened.
    • [49:20] Vanessa's final takeaway on slowing things down and preparing for the possibility that anyone can be fooled.

    Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

    Links and Resources:
    • Podcast Web Page
    • Facebook Page
    • whatismyipaddress.com
    • Easy Prey on Instagram
    • Easy Prey on Twitter
    • Easy Prey on LinkedIn
    • Easy Prey on YouTube
    • Easy Prey on Pinterest
    • Vanessa Bohns - ILR School - Cornell University
    • Vanessa Bohns
    • Vanessa Bohns - LinkedIn
    • Vanessa Bohns - Instagram
    • Books by Vanessa Bohns
    続きを読む 一部表示
    50 分