Safe Mode Podcast
Safe Mode Podcast
Podcast by Safe Mode Podcast
Episodes
Mentioned books

May 29, 2025 • 30min
Bishop Fox’s Rob Ragan and Iron Man Suit for pen testers
Greg Otto talks with Rob Ragan, Principal Technology Strategist at Bishop Fox, as he shares his vision of building an “Iron Man suit” for human security testers that is shaping how AI is used in offensive cybersecurity. Rob dives into lessons learned from developing adaptive AI tools, the unique challenges and risks facing modern AI systems, and effective strategies for safeguarding against adversarial attacks and data leakage. Discover how ethical frameworks, innovation, and industry collaboration can drive responsible offensive security, what organizations often get wrong about AI threats, and what’s needed to secure the future as AI transforms the cybersecurity landscape.
In our reporter chat, Greg Otto talks with Matt Kapko about a new wave of zero-days impacting Ivanti products.

May 22, 2025 • 45min
Olivia Rose on why the CISO role may not be the pinnacle of security work
In this episode, Greg sits down with Olivia Rose, Founder and CISO of the Rose CISO Group, to talk about her role in "CISO: The Worst Job I Ever Wanted," a groundbreaking cybersecurity docuseries that reveals the real experiences of Chief Information Security Officers. This podcast uncovers the pressures, sleepless nights, and personal sacrifices these leaders endure while making critical decisions and shouldering the responsibility of defending the digital world. Through honest and compelling stories, listeners gain a rare glimpse into the human side of one of the most challenging and misunderstood roles in technology.
In our reporter chat, Greg Otto talks with Derek Johnson and Tim Starks about their deep dives into why Salt Typhoon may never be out of U.S. telecom systems.

May 15, 2025 • 35min
Semperis CEO Mickey Bresman on the power of tabletop exercises
In this episode, Greg sits down with Semperis CEO Mickey Bresman to explore how organizations can proactively prepare for cyber crises before they strike. The conversation centers on the power of tabletop exercises—simulated attack scenarios that test response plans, reveal hidden vulnerabilities, and build muscle memory across teams. Together, Greg and Mickey discuss why preparation is far more than a technical checklist, how effective tabletop exercises bridge the gap between policy and real-world action, and what practical steps leaders can take to protect their organizations from the inside out.
In our reporter chat, Greg Otto talks with Cynthia Brumfield about the future of the CVE program.

May 8, 2025 • 32min
Expel CEO Dave Merkel on the impact of AI & Automation in modern SOCs
In this episode, we sit down with Dave Merkel, CEO of Expel to take an honest, practical look at how AI and automation are reshaping the modern Security Operations Center (SOC). Our discussion covers the most tangible changes in daily SOC operations since AI adoption, cutting through industry hype to reveal which claims deserve skepticism and which use cases have delivered meaningful, measurable value. Dave also gives insights into quantifying unique workloads, shaping policies, and fostering understanding between tech teams and business leaders are also addressed, along with the unintended risks AI can introduce to analyst workflows.
In our reporter chat, Greg Otto talks with Tim Starks about a jury verdict that compels NSO Group to pay $168M in damages to WhatsApp over spyware infections.

May 1, 2025 • 33min
Recorded Future’s Alexander Leslie on the ‘MarkoPolo’ traffer team
In this episode, Greg talks with Alexander Leslie, Threat Intelligence Analyst for Recorded Future’s Insikt Group and his research on “Marko Polo” – a notorious cybercriminal empire that orchestrates an array of scams, primarily using infostealer malware. Discover how this sophisticated syndicate has victimized tens of thousands worldwide and raked in millions in illicit revenue. Our guest breaks down the inner workings of these elusive "traffer teams," exploring their adaptable tactics, relentless persistence, and the insidious underground economy they fuel.
Greg Otto breaks down his biggest takeaways from the RSAC 2025 Conference.

Apr 24, 2025 • 39min
Verizon’s Alex Pinto on the takeaways from the 2025 DBIR
In this discussion, Alex Pinto, Associate Director of Threat Intelligence at Verizon Business and lead author of the Data Breach Investigations Report, shares vital insights on alarming cybersecurity trends. He highlights a staggering 44% of breaches involving ransomware and discusses the surge in exploited vulnerabilities and zero-day attacks, particularly affecting small and mid-sized businesses. Alongside him, Derek Johnson from CyberScoop dives into security challenges posed by OpenAI's latest GPT model, emphasizing the need for robust testing and risk management.

Apr 17, 2025 • 41min
Will Pearce on the ever-changing field of offensive AI security
In this episode, Greg talks with Will Pearce, CEO and Co-founder of Dreadnode about the rapidly evolving field of offensive AI security. Greg and Will discuss the unique challenges researchers face in testing AI models for vulnerabilities compared to traditional software, unveiling how adversarial attacks impact AI security and the ethical considerations at play. We also examine the role of regulatory frameworks and emerging threats, shedding light on how insights from offensive AI security can enhance human-AI interactions and elevate security standards across industries.
In our reporter chat, Greg talks with Matt Kapko on Ivanti’s issues with security in their network edge devices.

Apr 10, 2025 • 35min
Lior Div on how security teams should be using AI agents
In this episode, Greg talks with Lior Div, co-founder and CEO of 7AI. Lior and Greg explore how security teams are being reinforced with AI Agents and identify the areas where CISO are embracing this technological shift to optimize their talent resources. We'll also discuss the specific security functions these agents are performing, including email security, threat hunting, and other critical cybersecurity domains. Join us as we delve into the future of AI-augmented cybersecurity teams and the potential impact on the industry's ongoing battle against sophisticated cyber threats.
In our reporter chat, Greg talks with Derek Johnson about Google’s experimental LLM made for cybersecurity analysts.

Apr 2, 2025 • 33min
Ken Bagnall on how companies can work with governments to take down malicious infrastructure
In this episode, Greg Otto talks with Ken Bagnall, CEO of Silent Push Ken sheds light on the dynamics of the current cybercrime ecosystem. Ken reveals that a significant portion of the infrastructure is actually operated by affiliate networks using pre-existing technologies. During the discussion, Ken elaborates on how this ecosystem is fueled and examines the influential role played by affiliate groups, particularly those emerging from Africa and other developing countries. By offering these insights, the episode provides a fresh perspective on the often-overlooked aspects of global cybercrime operations.
In our reporter chat, Greg talks with Matt Kapko about the growing problem with remote IT workers from North Korea.

Mar 27, 2025 • 47min
Edera’s Alex Zenla on how to make cloud computing and AI secure-by-design
In this episode, Greg Otto talks with Edera co-founder and CTO Alex Zenla, charting her path from beginnings in Minecraft IRC channels to pioneering container isolation technology. Alex discusses her unique expertise in container security, GPU protection, and AI infrastructure, and how Edera is transforming the tech landscape with a commitment to balancing open-source benefits with robust security, setting new standards for cloud security's future.
In our reporter chat, Greg talks with Derek B. Johnson about a controversial executive order from Donald Trump that upends the way elections could be conducted in the future.


