
Hacker And The Fed
Former FBI Special Agent, Chris Tarbell, and ex-Anonymous/LulzSec blackhat hacker turned network penetration tester, Hector Monsegur (aka Sabu), once faced off as adversaries in cyberspace before becoming close friends and now podcast co-hosts. Whether you are a legal professional, cybersecurity practitioner, or forensic investigator, Chris and Hector will bring you their unique perspectives on the latest developments in cybersecurity.
Latest episodes

Dec 12, 2024 • 46min
Telecom Hacks, Ransomware Fallout, Encrypted Chats, and a Diss Track Challenge
This week on Hacker And The Fed former FBI agent Chris Tarbell and ex-black hat hacker Hector Monsegur discuss the largest U.S. telecom hack in history attributed to Chinese state-sponsored attackers, the FBI’s surprising push for encrypted communications, and the takedown of an encrypted messaging service used by criminals. They also tackle the bankruptcy of vodka giant Stoli following a devastating ransomware attack and share actionable advice for cybersecurity resilience.Send HATF your questions at questions@hackerandthefed.com.

Dec 5, 2024 • 45min
DB Cooper, ExxonMobil & Corporate Espionage, and Ross Ulbricht's Potential Pardon
This week on Hacker And The Fed former FBI agent Chris Tarbell and ex-black hat hacker Hector Monsegur discuss their obsession with the DB Cooper case and the latest potential break in the decades-old mystery. Hector shares stories about his early days as a hacker and the challenges of trust in loosely connected cybercriminal groups. They also tackle corporate espionage and the ethics of hackers-for-hire in light of ExxonMobil’s alleged involvement in a hacking scandal. Wrapping up, they address listener questions about second chances, with Hector reflecting on his journey of redemption, and weigh in on the contentious debate around Ross Ulbricht's potential pardon.

Nov 28, 2024 • 47min
A THANKSGIVING SPECIAL: Phishing Failures, Red Team Career Advice, and Cybersecurity Ethics
This week on Hacker And The Fed former FBI agent Chris Tarbell and ex-black hat hacker Hector Monsegur discuss key cybersecurity challenges, from the effectiveness of phishing training to the ethical dilemmas of vulnerability disclosure. They explore how technical controls and employee education can work together to defend against increasingly sophisticated attacks, including SMS and social media phishing. They also dive into career advice for transitioning from Blue Team to Red Team roles and the complexities of the cybersecurity job market. And to close out, a heartfelt Thanksgiving message.

Nov 21, 2024 • 40min
Italian Hacking Scandal, NSA Best Practices, Insider Threats & a Former Anonymous Hacker?
This week on Hacker And The Fed former FBI agent Chris Tarbell and ex-black hat hacker Hector Monsegur dive into a massive hacking scandal targeting Italian political elites, revealing insider threats and international intrigue. They break down NSA mobile device security best practices and share their own successes (and failures) in following them. Plus, updates on their personal lives, community work, and how ethical hacking can prevent breaches like this.Send HATF your questions at questions@hackerandthefed.com.

Nov 14, 2024 • 30min
We're Back!
Hacker And The Fed is back. Finally rebooting after a temporary hiatus. Former FBI Special Agent, Chris Tarbell, and ex-Anonymous/LulzSec blackhat hacker turned network penetration tester, Hector Monsegur (aka Sabu), once faced off as adversaries in cyberspace before becoming close friends and now podcast co-hosts. Whether you are a legal professional, cybersecurity practitioner, or forensic investigator, Chris and Hector will bring you their unique perspectives on the latest developments in cybersecurity.Send HATF your questions at questions@hackerandthefed.com.

Jan 31, 2024 • 1h 34min
The Colonial Pipeline Hack, the SEC's X Account, and Special Agent Aron Mann on Homeland Security and Cyber
Special Agent Aron Mann from Homeland Security Investigations Cyber Crime Center discusses the Colonial Pipeline hack, the dark web intensifying the insider threat, and the SEC's X account being hacked. They also explore the rise of insider threats, vulnerability of employees, and the importance of security measures.

Dec 21, 2023 • 1h 26min
A Train Hack, $80M Pig Butchering Scheme, and Greg Van Houten of Haynes Boone on the SEC's New Cybersecurity Disclosure Rules
This week on the podcast, we interview Greg Van Houten, a seasoned civil litigator who focuses on insurance recovery. We discuss the SEC's new cybersecurity disclosure rules, a massive unreported hack, a train hack, indictments in an $80M pig butchering scheme, and a MongoDB security breach.

Nov 30, 2023 • 1h 24min
The FBI Shares Tactics of a Ransomware Gang, a Ransom Payment Fail, and Cyber Law with Lance Taubin
This week on Hacker And The Fed we speak with Lance Taubin of Alston & Bird about being a cyber lawyer, the FBI shares the tactics of the ransomware gang Scattered Spider, a company pays a ransom and their data is exposed anyway, Alpha BlackCat uses government regulations to further pressure a victim to pay, and the FCC is trying to make SIM swapping more difficult.Links from the episode: FBI Shares Tactics of Notorious Scattered Spider Hacker Collectivehttps://www.bleepingcomputer.com/news/security/fbi-shares-tactics-of-notorious-scattered-spider-hacker-collective/ Dolly.com Pays Ransom, Attackers Release Data Anywayhttps://cybernews.com/security/dolly-data-breach-ransomware-attack/#google_vignette Ransomware Gang Files SEC Complaint Over Victim’s Undisclosed Breachhttps://www.bleepingcomputer.com/news/security/ransomware-gang-files-sec-complaint-over-victims-undisclosed-breach/ FCC Enforces Stronger Rules to Protect Customers Against SIM Swapping Attackshttps://thehackernews.com/2023/11/fcc-enforces-stronger-rules-to-protect.html Lance Taubin | Technology and Privacy Attorney | Alston & BirdSupport our sponsors:NAXO is a premier cybersecurity and investigations firm whose mission to fight cybercrime aligns perfectly with Hacker and the Fed’s content.Go to cloudsolvers.com tell them “Hacker and the Fed sent you” to get a free assessment of your current environment.

Oct 26, 2023 • 1h 25min
The SolarWinds hack, North Korea IT Workers, Hackers Targeting a Data Company, and Listener Questions
This week on Hacker And The Fed we break down the SolarWinds hack, there are 8 new vulnerabilities found in SolarWinds, thousands of remote IT workers have been working for North Korea, hackers are targeting a company that handles data requests for law enforcement, and we answer listener questions about VPN services, password managers and patch management.Links from the episode: Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeoverhttps://www.darkreading.com/vulnerabilities-threats/critical-solarwinds-rce-bugs-enable-unauthorized-network-takeover Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program, FBI Sayshttps://apnews.com/article/north-korea-weapons-program-it-workers-f3df7c120522b0581db5c0b9682ebc9b?taid=6531b8b29c11a80001ef2a28 Hackers Target Company That Vets Police Data Requests for Tech Giantshttps://www.404media.co/hackers-target-kodex-accounts-edrs/ Support our sponsors:Go to JoinDeleteMe.com/FED and use the code FED20 for 20% offGo to Cloudsolvers.com and tell them "Hacker and the Fed sent you" for a free assessment of your current environmentGet your Hacker and the Fed merchandise at hackerandthefed.comSend HATF your questions at questions@hackerandthefed.com

Oct 19, 2023 • 1h 25min
MOVEit and MGM Resorts Hacks, U.S. Senate's Email System Melts Down, Cisco Can't Stop Using Static Passwords, and Listener Questions
Updates on MOVEit and MGM Resorts hacks, US Senate email system meltdown, Cisco's use of static passwords. Listener questions on single sign-on, circumventing IT rules, LinkedIn profiles.