Cyber Compliance & Beyond

SIM swapping is rapidly becoming one of the most common—and damaging—cyberattacks. In this episode, Efani General Manager Mark Kreitzman explains how attackers seize phone numbers through social engineering and weak carrier controls, shares his own SIM-swap incident, and reveals how quickly criminals can access accounts, cloud data, and crypto. We also cover why SMS-based MFA is no longer safe and what organizations can do to protect high-risk users and critical systems. Key topics: What SIM swapping is and why it's a rising attack vector How attackers bypass telecom security using social engineering and insider help Why SMS-based MFA is vulnerable and outdated Real-world impact: account takeovers, cloud compromise and crypto theft Enterprise risks, compliance concerns and recommended security controls How AI tools help criminals target high-value victims faster

Threat hunting is one of cybersecurity's most talked‑about, and misunderstood, disciplines. In this episode, Cole French and guest Ben Lieberman breaks down what threat hunting really looks like inside complex, high‑volume environments and why fundamentals matter more than flashy techniques. We dig into how telemetry is collected, how attackers blend into normal activity, and why red and blue teams often view threats differently.  At its core, threat hunting is about mindset: understanding attacker behavior, knowing what "normal" looks like, and cutting through massive data to spot what truly matters.  You'll learn:   Why attackers often rely on simple, well‑known techniques The challenges of working with massive telemetry and alert volume  How tools like Splunk and Security Onion help find real signals  Why red teams sometimes test the wrong things  The importance of baselining and building detections around real behavior 

As AI is reshaping the threat landscape, the timeline for vulnerability discovery has collapsed. In this episode, guest Matt Stern breaks down how attackers are using AI to find and exploit weaknesses in minutes, and what organizations must do to keep pace.  We explore how modern AI‑driven testing can scan code, APIs, and mobile apps at scale, surface logic flaws traditional tools miss and help teams secure software before release. Matt also explains how continuous AI‑powered pen testing reduces blind spots, cuts alert noise, and allows humans to focus on advanced threats.  Finally, we look at the next frontier of agentic AI — guardrails, documentation checks, and automated reviews that help organizations prepare for a world where both attackers and defenders operate at machine speed. 

Following Part 1's deep dive into GTG-1002 and the rise of autonomous cyber operations, Part 2 shifts toward what leaders must do to get ahead of next-generation AI-enabled threats. Guest Nury Turkel explains how regulatory risk forms long before official rulemaking, often emerging first through congressional hearings, agency speeches, draft legislation, and national-security analyses. Nury argues that organizations gain an advantage by tracking long-term trendlines—such as bipartisan momentum and multi-agency action—rather than reacting to headlines, and by cultivating geopolitical literacy and responsible leadership. The conversation concludes with emerging AI-related risks to the defense industrial base and practical steps leaders can take to reduce technical debt, strengthen resilience, and stay ahead of next-generation threats. References: Wall Street Journal: China Tells Its AI Leaders to Avoid U.S. Travel Over Security Concerns (paywall) Bloomberg: China Expands Travel Curbs to Top AI Talent at Private Firms (paywall) Reuters: China Restricts Overseas Travel for Top AI Talent at Alibaba, DeepSeek

AI-enabled cyber operations have moved from theory to reality, with the GTG-1002 incident marking the first widely recognized case of an AI system independently executing a multi-step intrusion. In this 2-episode conversation, Nury Turkel explains how this shift is reshaping national security—from adversaries using AI to accelerate reconnaissance and credential misuse to the growing geopolitical stakes between the U.S. and China in advanced AI development. The episode highlights how governments and organizations must rethink readiness, regulation, and innovation as AI becomes both a transformative capability and a destabilizing force in global competition. References: Wall Street Journal: The First Large-Scale Cyberattack by AI (paywall) Anthropic Report on GTG-1002: Disrupting the first reported AI-orchestrated cyber espionage campaign (download)