ShadowTalk:
Powered by ReliaQuest
ReliaQuest’s ShadowTalk is a weekly podcast featuring discussions on the latest cybersecurity news and threat research. ShadowTalk’s hosts come from threat intelligence, threat hunting, security research, and leadership backgrounds providing practical perspectives on the week’s top cybersecurity stories.
Listen to the latest episodes on your favorite podcast channels.
shadowtalk podcast
All Episodes
184 resources
ARTEX for Everyone: What Widely Available AI Hacking Means for Defenders
ARTEX for Everyone: What Widely Available AI Hacking Means for Defenders. In this episode: how ARTEX went from open-source GitHub tool to real-world attacks, plus defender steps like credential rotation and AI red-teaming.
PHP2Shell: Inside the AI-Assisted Exploit Race
PHP2Shell: Inside the AI-Assisted Exploit Race. In this episode: PHP2Shell's two critical vulnerabilities, how AI cut exploit development to under an hour, and why one error message could save defenders.
QuartzLine: A PDF Viewer Deploying a Backdoor at Scale
QuartzLine: A PDF Viewer Deploying a Backdoor at Scale. In this episode: QuartzLine's malvertising chain, stealthy persistence, and what defenders can do now to hunt, close access gaps, and automate containment.
AI Attacks From the Front Lines
AI Attacks From the Front Lines. This week, John Dilgen and Alexandra Moore break down an AI-driven intrusion — the attack flow, the feedback loop, and defender takeaways.
ShadowTalk: CISO Wisdom: Turning Security Investments Into Measurable Risk Reduction
ShadowTalk: CISO Wisdom: Turning Security Investments Into Measurable Risk Reduction. In this episode: Jigar Shah on automating repetitive work, prioritizing vulnerabilities by business risk, and tying security spend to measurable outcomes.
ShadowTalk: DPRK Insider Threats: How Remote-Worker Tactics Are Evolving
ShadowTalk: DPRK Insider Threats: How Remote-Worker Tactics Are Evolving. This week, Daxton Wirth and John Dilgen unpack evolving DPRK remote-worker tactics, the hiring red flags teams keep missing, and how to investigate before exposure.
Fake NDAs, Real Money: Inside the M&A Social Engineering Playbook
Fake NDAs, Real Money: Inside the M&A Social Engineering Playbook. This week: the Phantom Deal social engineering campaign, recent endpoint-security and Windows zero-days, and how to detect attacks when EDR goes blind.
From Vulnerability Research to Domain Admin in Minutes
From Vulnerability Research to Domain Admin in Minutes. In this episode: AI-accelerated attacks on PaperCut, initial access to domain admin in 7 minutes, and what China's AI distillation campaigns mean for defenders.
One Empty Field: The Email Security Bypass Letting Attackers Impersonate Your Executives
One Empty Field: The Email Security Bypass Letting Attackers Impersonate Your Executives. In this episode: how attackers bypass Microsoft 365's RejectDirectSend to spoof executives, launch BEC and payment fraud, and which controls actually close the gap.
From Data Dumps to Critical Findings: The New Era of Data Extortion
From Data Dumps to Critical Findings: The New Era of Data Extortion. This week, John Dilgen and Brandon Tirado unpack AI-assisted data theft, "soft data" risks, and why credential rotation at scale is now a survival skill.
Nation-State Actors: Iran’s PLC Attacks, Russia’s Zero-Click Email Exploit, and North Korea’s Fake Employees
Nation-State Actors: Iran’s PLC Attacks, Russia’s Zero-Click Email Exploit, and North Korea’s Fake Employees. In this episode: Iran's PLC attacks on safety systems, Russia's zero-click email exploit stealing 90 days of inbox data, and North Korea's fake job applicants.
When AI Escapes the Lab: The Hugging Face Breach, PyPI Malware, and What It Means for Defenders
When AI Escapes the Lab: The Hugging Face Breach, PyPI Malware, and What It Means for Defenders. This week, John Dilgen and Tehman Tariq break down the first fully autonomous AI attacks—17,000 events, PyPI malware, and social engineering at machine speed.
Learn How GreyMatter Agentic AI Scales Your Security Operations
GreyMatter is an agentic AI security operations platform with 6 agentic Teammates that use hundreds of agent skills and AI tools to work toward an objective, not just tasks.
