Threat Talks - Your Gateway to Cybersecurity Insights

NIST CSF 2.0: No CISO, No Excuse

The new NIST Cybersecurity Framework 2.0 is out, and most teams still ask the same question: what do I do tomorrow? Lieuwe Jan Koning sits down with NIST's Amy Mahn and D

Your SOC Won't Survive AI Attackers Without This Shift

Running a SOC was always hard. With AI in attackers' hands, hard becomes impossible, unless you change how you work. Rob Maas, Field CTO at ON2IT, sits down with Lieuwe J

Shiny Hunters: One Name Behind a Dozen Mega-Breaches

Salesforce, Google, Okta, Louis Vuitton, Allianz, Odido: all breached under the same name. Shiny Hunters may not even be one group. It is a brand that different criminal

HackShield: Raising the Next Generation of Cyber Heroes

The hacker who will attack your organization in five years is in school right now, and nobody is teaching that kid what to do online.  HackShield is trying to change tha

The Hacker Who'll Hit You in 5 Years Is in School

The hacker who will attack your organization in five years is in primary school right now, and nobody is teaching them anything. Tim Murck, Co-founder & Chief Product Off

JADEPUFFER: The AI Malware With No Human in the loop

What if AI stopped being the assistant to cybercriminals and became the attacker itself? That's no longer hypothetical. JADEPUFFER is the first documented case of ransomw

Four Firewall Mistakes Still Wrecking Networks in 2026

Three out of four firewall rule sets ON2IT’s SOC inherits from new customers share the same blind spots, and none of the fixes cost extra licensing. In this episode, Lie

Would Your Boss Read Your Prompts? Private AI, Explained

Would you still use ChatGPT if your boss, or the AI provider, could read every single prompt you typed in? Most of us type something we would never share publicly into an

Framework Fatigue: Why NIST Rebuilt the Cybersecurity Framework

Ten years after its first release, the NIST Cybersecurity Framework got a full rebuild. Not because it failed, but because everyone started using it, and it was never bui

Why Do You Trust Your AI Agent?

Agentic AI is powerful, and someone recently found that out the hard way when an AI tool, given free rein with a user’s own permissions, deleted her entire mailbox. That

Mythos is not the AI Apocalypse

Mythos found a 23-year-old vulnerability in FreeBSD that no human team had caught. Your 30-day patch cycle assumes years before it gets weaponized. Today that window is o

What about Iran? One Word Document, Three Backdoors

Every big nation state has a cyber army: China, Russia, the US, Europe. But what about Iran? Meet Boggy Serpens, a group tied to Iran’s civilian intelligence service whos

Europe Is Losing the Sea Cable Race

In 2026, 40 new submarine cables go live. Most won't land in Europe. Europe is losing the sea cable race, and most people haven't noticed yet. In this second part of our

Russia Cutting Cables?

The headlines say Russia’s shadow fleet is cutting cables. The experts say most faults come from clumsy ship anchors. Ninety-nine percent of global internet traffic runs

Hero Culture and a $1 Million Mistake

A company skips a security check two days before Black Friday and loses $1 million when transactions land in the wrong bank accounts. A machine learning team is told no o

When Compliance Replaces Security

A SaaS company buys enterprise ChatGPT for 800 staff and strangely only uses 30 seats. A corporate signs annual risk exemptions for five years until the exception list it

The Agent Problem

Your AI agents are users now. They have your permissions. They read your email. They send messages. And they act on instructions that anyone with an internet connection c

Your Sales Team is now a Developer

The biggest security threat in your organization right now? Your sales team. AI coding tools have crossed into every department, and most organizations have no idea what

The Hidden Risk of Your Infrastructure

Volt Typhoon spent years pre-positioning inside US critical infrastructure. Salt Typhoon pulled off one of the largest espionage campaigns in history. They didn't break i

America Just Changed the Rules of Cyber War

If you're waiting for the executive orders to act, you're already behind.    The U.S. has just released a new national cyber strategy. The core message is clear: stop