Down the Security Rabbithole Podcast (DtSR)

DtSR Episode 731 - Anton Chuvakin AI Laughs At Your Firewall Policy

TL;DR: AI doesn't care about your firewall policy. We dig into the uncomfortable question many security teams are quietly asking: Are firewalls still relevant in the

DtSR Episode 730 - Matt Coons Agentic Detection Engineering

TL;DR: Stop vibe-coding your detections! This week's pod features Matt Coons at GitLab as we talk about detection engineering, but with AI agents. Guest Matt Coons

DtSR Episode 729 - Xavier Ashe 1 A.M. at Sprint: The Night Yahoo Went Down

TL;DR: Xavier Ashe was there when that first DDoS attack by MafiaBoy went down. He's got stories, and we're going to tell them. Recorded live at BSides Atlanta

DtSR Episode 728 - Wes Widner - Unlocking Open-Weight Models

TL;DR: This week's pod is a conversation about AI and "Open-Weight Models", and if you aren't intimately familiar with what these are this is an episode for you

DtSR Episode 727 - Phil Brass - When AI Supports Pentesting

TL;DR: Phile has been penetration testing for a long time. The difference now is that he's having a much easier time with it thanks to AI. It's an interesting w

DtSR Episode 726 - Mehul Revankar - Three Dollars To Hack Your Stack

TL;DR: Mehul joins Rafal live from BSides Atlanta to talk about how AI is changing how vulnerabilities are found and exploited at scale and cost. It's an interesting

DtSR Episode 725 - Michael Santarcangelo - The Importance of Communicating Value

TL;DR: This episode is all about an essential skill few of us have mastered. How do you communicate value? What is it? And how do you make sure you're evaluating val

DtSR Episode 724 - Anton Chuvakin - Unpacking the AI Hysteria

TL;DR: This week's podcast features Rafal & Anton discussing the hype and hysteria that surrounds today's AI headlines. Which side is right, which side is propa

DtSR Episode 723 - Richard Bird Security is Built Wrong

TL;DR: This week's guest is Richard Bird, who has a new book coming out. He says, "Cybersecurity measures activity while its adversaries measure opportunity," and th

DtSR Episode 722 - Robert Hanse & Jeremiah Grossman - Vulnerability Math Ain't Mathing

TL;DR: Robert "RSnake" Hansen & Jeremiah Grossman join the pod to talk about the "Vuln-pocalypse", or rather, the lack thereof. We do some math, discuss whether it's

DtSR Episode 721 - Finance Masterclass for Cyber (Part 2)

TL;DR: This pod is part 2 of a 2-part series in which Patrick shares his insights on the world of finance as it relates to cyber startups and financing. As promised, the

DtSR Episode 720 - Finance Masterclass for Cyber (Part 1)

TL;DR: This week's pod features a Masterclass on finance for Cyber folks, led by Patrick Dennis, where we ask all kinds of questions and go from idea to the pre-grow

DtSR Episode 719 - Budget Season for CISOs

Guests Jack KorzeniowskiKen FosterTL;DR: Budget season is upon us, and Rafal & James sit down with Ken Foster and Jack Korzeniowski to get some insights into how CISOs d

DtSR Episode 718 - Black Hat Recap And The Rush To Rebrand Everything

Guest: Dr. Chase "ZeroTrust" Cunningham TL;DR: AI Marketing slop took over Black Hat Las Vegas 2026, and Rafal sits down for a one-on-one with Chase Cunningham. Featurin

DtSR Episode 717 - Your UI is Bullshit

Guests: Michael Farnum, Sam Van Ryder TL;DR: Most cybersecurity dashboards don’t fail because they’re ugly. They fail because they don’t change what we do next. Descrip

DtSR Episode 716 - What if Context Replaced Alerts Entirely

Guests: Jason Vest & Josh Neil TL;DR: Alert fatigue is still a problem; detection isn't generationally better - but we have all this AI. So what gives? Description

DtSR Episode 715 - Reducing The Toil of the SOC Analyst

TL;DR: David Kennedy & Larry Whiteside, Jr. join the podcast to talk about how 'alerts' are a terrible measure of work in the SOC, and what we're doing abo

DtSR Episode 714 - Limitations and Expectations for AI SOC Part 2

TL;DR: This week's pod is the conclusion to the 2-part series on AI SOC with Anton Chuvakin, Daniel Miessler, Rock Lambros, Erik Bloch, and Raja Mukerji. We talk abo

DtSR Episode 713 - Limitations and Expectations for AI SOC Part 1

TL;DR: Join Raja Mukerji, Anton Chuvakin, Daniel Miessler, Rock Lambros, and Erik Bloch for a banger of an episode (part 1 of 2) where we debate the potential of AI and t

DtSR Episode 712 - Lies My AI SOC Salesman Tells

TL;DR: Seth Summersett of Embed Security joins the podcast to talk about the snake oil that's coming from the AI SOC sellers. There's such a significant gap bet