Threat Talks - Your Gateway to Cybersecurity Insights

Lapsus$:Teenagers Hacked Microsoft.

A group of teenagers walked into Microsoft, NVIDIA and Okta. No zero-days. No custom malware. No command and control infrastructure. They bought leaked credentials, or th

How a 19-Year-Old Hacked the NEWS Without Breaking In

Your Outlook account recovery will accept an authenticator code on its own. No password, no inbox, no phone number.  Anyone holding that TOTP secret owns the account, and

The End of Reactive Security

You already had the threat intel. The IP was on your blocklist, the file hash was known bad. So why did your MDR only raise an alert instead of blocking it? Lieuwe Jan Ko

NIST CSF 2.0: No CISO, No Excuse

The new NIST Cybersecurity Framework 2.0 is out, and most teams still ask the same question: what do I do tomorrow? Lieuwe Jan Koning sits down with NIST's Amy Mahn and D

Your SOC Won't Survive AI Attackers Without This Shift

Running a SOC was always hard. With AI in attackers' hands, hard becomes impossible, unless you change how you work. Rob Maas, Field CTO at ON2IT, sits down with Lieuwe J

Shiny Hunters: One Name Behind a Dozen Mega-Breaches

Salesforce, Google, Okta, Louis Vuitton, Allianz, Odido: all breached under the same name. Shiny Hunters may not even be one group. It is a brand that different criminal

HackShield: Raising the Next Generation of Cyber Heroes

The hacker who will attack your organization in five years is in school right now, and nobody is teaching that kid what to do online.  HackShield is trying to change tha

The Hacker Who'll Hit You in 5 Years Is in School

The hacker who will attack your organization in five years is in primary school right now, and nobody is teaching them anything. Tim Murck, Co-founder & Chief Product Off

JADEPUFFER: The AI Malware With No Human in the loop

What if AI stopped being the assistant to cybercriminals and became the attacker itself? That's no longer hypothetical. JADEPUFFER is the first documented case of ransomw

Four Firewall Mistakes Still Wrecking Networks in 2026

Three out of four firewall rule sets ON2IT’s SOC inherits from new customers share the same blind spots, and none of the fixes cost extra licensing. In this episode, Lie

Would Your Boss Read Your Prompts? Private AI, Explained

Would you still use ChatGPT if your boss, or the AI provider, could read every single prompt you typed in? Most of us type something we would never share publicly into an

Framework Fatigue: Why NIST Rebuilt the Cybersecurity Framework

Ten years after its first release, the NIST Cybersecurity Framework got a full rebuild. Not because it failed, but because everyone started using it, and it was never bui

Why Do You Trust Your AI Agent?

Agentic AI is powerful, and someone recently found that out the hard way when an AI tool, given free rein with a user’s own permissions, deleted her entire mailbox. That

Mythos is not the AI Apocalypse

Mythos found a 23-year-old vulnerability in FreeBSD that no human team had caught. Your 30-day patch cycle assumes years before it gets weaponized. Today that window is o

What about Iran? One Word Document, Three Backdoors

Every big nation state has a cyber army: China, Russia, the US, Europe. But what about Iran? Meet Boggy Serpens, a group tied to Iran’s civilian intelligence service whos

Europe Is Losing the Sea Cable Race

In 2026, 40 new submarine cables go live. Most won't land in Europe. Europe is losing the sea cable race, and most people haven't noticed yet. In this second part of our

Russia Cutting Cables?

The headlines say Russia’s shadow fleet is cutting cables. The experts say most faults come from clumsy ship anchors. Ninety-nine percent of global internet traffic runs

Hero Culture and a $1 Million Mistake

A company skips a security check two days before Black Friday and loses $1 million when transactions land in the wrong bank accounts. A machine learning team is told no o

When Compliance Replaces Security

A SaaS company buys enterprise ChatGPT for 800 staff and strangely only uses 30 seats. A corporate signs annual risk exemptions for five years until the exception list it

The Agent Problem

Your AI agents are users now. They have your permissions. They read your email. They send messages. And they act on instructions that anyone with an internet connection c