Podcast Episodes

Episode 151: Tool Time - PingCastle for Defenders

Season 1 Episode 151

In this episode, we’re digging into a super awesome Active Directory security tool called PingCastle. We’ll cover what it is, why it matters for Active Directory security, and how IT and security tea…

Published on 7 hours ago

Episode 150: How to Use Pentest Findings to Justify Your Next Security Spend

Season 1 Episode 150

https://offsec.blog/budget

In this episode, we’re tackling an often-overlooked opportunity: using pentest results to secure more budget for security initiatives. Too many organizations run a pentest, …

Published on 1 week ago

Episode 149: Building a Security Stack That Works A Practitioner’s Perspective

Season 1 Episode 149

In this episode, Brad and Spencer sit down with an experienced information security and risk manager to explore how they build and manage their security stack, choose the right tools, and win support…

Published on 2 weeks ago

Episode 148: Securing Windows: Common Misconfigurations That Give Attackers The Advantage

Season 1 Episode 148

This is the webinar I gave in August 2025 on the topic of common Windows misconfigurations I see during internal pentests. Make sure you grab your free gifts!

Learn how we do internal pentesting diffe…

Published on 3 weeks ago

Episode 147: When to Accept the Risk

Season 1 Episode 147

 In this episode, we’re digging into one of the most overlooked parts of a penetration test, when it actually makes sense to not fix a finding. Not every vulnerability deserves equal treatment, and s…

Published on 4 weeks ago

Episode 146: What Are the Security Implications of AI?

Season 1 Episode 146

In this episode of The Cyber Threat Perspective, we’re exploring the broader security implications of artificial intelligence. AI is transforming everything—from how we defend our networks to how att…

Published on 1 month ago

Episode 145: What To Do Minute 1 When Incident Response Arrives

Season 1 Episode 145

In this episode, we're diving into what to do the minute incident response arrives. That first moment matters—a lot. Whether it's a ransomware attack, unauthorized access, or data exfiltration, how y…

Published on 1 month, 1 week ago

Episode 144: How Cyber Threat Actors Are Using AI

Season 1 Episode 144

In this episode of The Cyber Threat Perspective, we're diving into one of the most pressing trends in cybersecurity: how threat actors are using AI. From deepfake scams and AI-generated phishing emai…

Published on 1 month, 2 weeks ago

Episode 143: Stop Wasting Money on Pentests - Do This First

Season 1 Episode 143

In this episode, we break down a question that often gets overlooked: When should you not do a penetration test? Not every organization needs a pentest right away, and choosing the wrong assessment c…

Published on 1 month, 3 weeks ago

Episode 142: How Active Directory Certificates Become Active Threats

Season 1 Episode 142

In this episode, we're diving into one of the most overlooked yet dangerous components of Active Directory: Certificate Services. What was designed to build trust and secure authentication is now bei…

Published on 2 months ago