David Bombal

Afleveringen

1. #618: Your Smart Device Is Tracking You More Than You Think

   4 november 2026 · 35 min

   Afspelen
   Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. Lees meer

   // Glen Sorensen’s SOCIAL //
   LinkedIn: / glen-sorensen
   DeleteMe LinkedIn: / deleteme

   // Article REFERENCE //
   https://protonvpn.com/blog/windows-is...

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.com/shop/davidbombal

   // SPONSORS //
   Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

   // MENU //
   0:00 - Coming Up
   0:49 - Why Privacy Matters Even If You Have Nothing to Hide
   01:49 - How Much Are We Being Surveilled?
   02:52 - How Companies Collect and Sell Your Personal Data
   05:43 - Sponsor: Proton Drive
   07:32 - Who Is Buying Your Personal Data?
   08:34 - How Streaming Services and Smart TVs Track You
   10:19 - Why Mobile Apps Are a Privacy Risk
   11:41 - How Easy Is It to Find Someone's Personal Information?
   13:11 - Doxxing, Scams and the Dangers of Exposed Data
   14:32 - How Hackers Use Personal Data to Attack Companies
   16:03 - How Is Mass Surveillance Legal?
   17:01 - License Plate Readers and Location Tracking
   18:13 - Are Smart TVs Spying on You?
   19:03 - What Can I Actually Do?
   21:55 - Does DeleteMe Really Work?
   25:50 - Can You Ever Be Anonymous Online?
   28:02 - Which Operating System Is Best for Privacy?
   31:31 - How to Audit Your Apps and Permissions
   33:36 - The Best Privacy-Focused Web Browsers
   34:40 - Outro

   Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me an…

2. #617: This Is How NVIDIA's AI Mercedes Drives in Real Traffic

   4 november 2026 · 42 min

   Afspelen
   What happens when NVIDIA's AI drives a Mercedes-Benz CLA through Berlin traffic? David Bombal rides along to see how Alpamayo and the Halos safety stack work together. Lees meer

   At GTC Berlin, I ride in a Mercedes-Benz CLA running a development version of NVIDIA's Alpamayo driving software. We encounter cyclists, pedestrians, narrow roads, unusual junctions, parked cars and unpredictable drivers while the car handles much of the driving under human supervision.

   We look at what is actually happening behind the scenes: an end-to-end AI model proposes a driving path, a separate classical safety stack checks the environment and rules, and a trajectory arbiter decides when to allow the plan or fall back. The car uses on-board NVIDIA DRIVE Orin computing, cameras, radar and ultrasonic sensors.

   We also discuss training with US and European driving data, simulation with NVIDIA Cosmos, the difference between this development vehicle and NVIDIA's downloadable Alpamayo research models, and what it takes to adapt the system to different vehicles and countries.

   In this video:
   • A live AI-assisted drive through busy Berlin streets
   • How Alpamayo and the classical Halos safety stack work together
   • Why narrow roads, cyclists and German traffic lights are difficult cases
   • The cameras, radar, ultrasonic sensors and DRIVE Orin hardware
   • How real-world data and Cosmos simulation help train and test driving models
   • Which Alpamayo research models you can explore yourself Important: this demonstration is a supervised Level 2 driver-assistance system.

   The person in the driver's seat remains attentive and responsible; this is not an unsupervised robotaxi. Would you trust AI-assisted driving in a busy city? Which situation would you want it to handle first?

   NVIDIA Alpamayo: https://www.nvidia.com/en-us/solution...
   NVIDIA Halos: https://www.nvidia.com/en-us/ai-trust...

   Alpamayo research downloads: https://developer.nvidia.com/drive/do...

   Discord: discord.com/invite/usKSyzb
   Twitter: www.twi…

3. #616: How Police Can Track Your Phone

   26 oktober 2026 · 19 min

   Afspelen
   Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

   Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
   identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.

   At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter.

   Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware.

   In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments.

   We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have.

   Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video.
   #CyberSecurity #Privacy #Hacking

   // Cooper Quintin’s SOCIAL //
   EFF Website: https://www.eff.org/about/staff/coope...
   LinkedIn: / cooper-quintin-932029125
   Website: https://cooperq.com/

   // Web Page REFERENCE //
   https://www.eff.org/deeplinks/2025/03...
   https://www.eff.org/
   https://ssd.eff.org/

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify…

4. #615: How is AI Changing Cybersecurity?

   20 oktober 2026 · 16 min

   Afspelen
   Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. Lees meer

   // Kamal Hathi’s’ SOCIAL //
   LinkedIn: / kamal-hathi

   // Hanlin Fang’s SOCIAL //
   LinkedIn: / hanlinfang

   // Jessica Oppenheimer’s SOCIAL //
   LinkedIn: / jessbair

   // Craig Woolley’s SOCIAL //
   LinkedIn: / craig-woolley-783059111

   // Tom Smit’s SOCIAL //
   LinkedIn: / tsmit50

   // Bruce Snell’s SOCIAL //
   LinkedIn: / brucesnell-security

   // Heath Johnson’s SOCIAL //
   LinkedIn: / heathjohnsonvm

   // Paul Bannister’s SOCIAL //
   LinkedIn: / paul-bannister

   // Hao Yang’s SOCIAL //
   LinkedIn: / hao-yang-bb6ab429

   // Robert Castley’s SOCIAL //
   LinkedIn: / robertcastley

   // Leila Reyhani’s SOCIAL //
   LinkedIn: / leila-reyhani

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.com/shop/davidbombal

   // SPONSORS //
   Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

   // MENU //
   0:00 - How to stay in control in the world of AI
   00:38 - Visualizing data with Splunk
   02:24 - Born observable // Observability for AI
   04:36 - Cisco Data Fabric
   06:43 - Hunt and investigation // Security threats
   08:10 - Data foundation
   09:08 - The cost of AI and the ROIs
   09:41 - Red vs blue team with AI
   11:46 - Visualizing AI security
   13:00 - Targeted autonomy
   14:02 - .conf26 summary
   15:26 - Conclusion

   Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

   Disclaimer: This video is for educational purposes only.

   #splunk #cybersecurity #ai

5. #614: Learn Malware Analysis with Ghidra and x64dbg (for free)

   20 oktober 2026 · 43 min

   Afspelen
   Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills. Lees meer

   Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime.

   We also run ransomware in a lab VM to show what happens to the victim’s files.

   We discuss:
   • How ransomware gangs steal data before encrypting it
   • How static and dynamic analysis work together
   • Finding malware indicators in Sysmon logs
   • Why ransomware can print physical ransom notes
   • How reputation and trust work in criminal forums
   • How to start reverse engineering by compiling your own C programs and examining them in Ghidra

   If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved.

   // Sponsored SEGMENT //
   Big thank you to Proton Pass for sponsoring this video. To sign up for Proton Pass, please use the following link https://proton.me/davidbombal to get Proton Pass free.

   // Link to No Starch Website for Lindsay Kaye’s Book //
   Order Dissecting the Dark Web on No Starch: https://nostarch.com/dissecting-the-d...
   Use Coupon Code KAYE25 for 25% off Dissecting the Dark Web at NoStarch.com

   // Lindsay Kaye’s SOCIALS //
   Website: https://www.lindsaymkaye.com/
   LinkedIn: / lindsaymkaye
   Human Security Website: https://www.humansecurity.com/people/...

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.co…

6. #613: Think You’re Private Online? Watch This

   12 oktober 2026 · 27 min

   Afspelen
   Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. Lees meer

   How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools.

   We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first.

   If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools.
   In this interview:

   Why “I have nothing to hide” misses the point
   How to think about passwords, two-factor authentication and security planning

   Why messaging defaults and privacy settings matter
   What a VPN can and cannot do for your privacy
   AI features, cloud storage and questions to ask about your data
   Phone and computer privacy tradeoffs, email and encryption

   Which privacy setting or app are you going to review first? Let me know in the comments, and subscribe for more cybersecurity and privacy conversations.

   // Thorin Klosowski’s SOCIALS //
   Website: https://www.eff.org/about/staff/thori...
   EFF LinkedIn: https://www.linkedin.com/company/eff?...

   // Web page REFERENCE //
   https://ssd.eff.org/

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.com/sh…

7. #612: How Hackers Trick AI Into Giving Up Secrets (Demos and free labs)

   8 oktober 2026 · 19 min

   Afspelen
   Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. Lees meer

   // Free AI labs //
   Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_...
   AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-...

   // Jason Haddix’s SOCIALS //
   X: https://x.com/Jhaddix?lang=en
   Github: https://github.com/Arcanum-Sec
   Website: https://arcanum-sec.com/

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.com/shop/davidbombal

   // SPONSORS //
   Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

   // MENU //
   0:00 -Coming Up
   0:48 - Jason Haddix at DEF CON
   01:36 - Sponsor – Proton Drive
   03:31 - AI Chatbot Penetration Testing
   04:11 - The Prompt Injection Taxonomy
   06:19 - Bypassing AI Guardrails & Classifiers
   07:15 - DEF CON AI Hacking CTF
   08:31 - Why AI Security Testing Is Different
   10:18 - Instagram AI Account Takeover Demo
   14:39 - AI Meeting Transcript Prompt Injection Demo
   17:28 - How to Start Learning AI Security
   18:18 - Final Thoughts

   Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

   Disclaimer: This video is for educational purposes only.
   #ai #aihacking #promptinjection

8. #611: Building AI Agents? Set Up These Guardrails First

   1 oktober 2026 · 22 min

   Afspelen
   Big thanks to ‪@Cisco‬ & ‪@Splunkofficial‬ for sponsoring my trip to .Conf 2026 and also for sponsoring this video. Lees meer

   AI agents can do things you never intended. So how do you monitor their behavior, spot security problems and decide what they should be allowed to do? I’m joined by Splunk’s Kamal Hathi at .conf26 to discuss AI agent security, observability and what an agentic SOC means for the people working in cybersecurity.

   Kamal explains why setting a goal isn’t enough. You need visibility into what your agents are actually doing, clear guardrails and human oversight for important decisions. We also discuss why monitoring only a sample of agent activity can leave gaps, and how focused small language models could help reduce evaluation costs.

   In this interview, we cover:
   • Known agents, unregistered agents and unexpected behavior
   • AI evaluations, guardrails and zero trust
   • Automating SOC alert triage while keeping humans in control
   • Using AI to create SOAR playbooks
   • Running models locally for privacy, cost and control
   • Choosing between local models and cloud models
   • Whether you should still study computer science in 2027
   If you’re building AI agents, working in cybersecurity or deciding what to learn next, this conversation will give you plenty to think about.

   // Kamal Hathi’s’ SOCIAL //
   LinkedIn: / kamal-hathi

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: / davidbombal
   Apple Podcast: podcasts.apple.com/us/podcast...

   // MY STUFF //
   https://www.amazon.com/shop/davidbombal

   // SPONSORS //
   Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

   // MENU //
   0:00 - Coming Up
   0:43 - Intro
   02:25 - Security Against AI
   06:26 - Collecting Data on your A…

9. #610: WiFi Pineapple Pager: What Can It Actually Do?

   1 oktober 2026 · 23 min

   Afspelen
   Big thank you to proton VPN for sponsoring the video. To get 70% off your Proton VPN subscription use the following link: https://protonvpn.com/davidbombal Lees meer

   Note: Hak5 did not pay me to make this video. But, for full transparency: Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link below.

   // Buy Hak5 coolness here (Affiliate Link): //
   Buy Hak5: https://davidbombal.wiki/gethak5

   WiFi hacking without opening your laptop? ‪@DarrenKitchen‬ from ‪@hak5‬ joins me to talk about the WiFi Pineapple Pager and what this little Linux device can actually do.

   Darren shares the story behind the Pager, explains its support for 2.4, 5, and 6 GHz WiFi, and walks us through features including wireless reconnaissance, eventtriggered alerts, and community-created payloads. We also discuss how Bash and DuckyScript helpers let users build their own functionality, and how Pager Portal makes it possible to download payloads directly onto the device.

   How does it compare with the WiFi Pineapple Mark VII and Enterprise? We look at the different use cases, from portable testing to remotely auditing a client’s wireless network.

   And yes, someone has already made it run Doom.

   This is an interview and feature overview with the creator, covering the ideas, technology, and community behind the WiFi Pineapple Pager.

   // Darren Kitchen SOCIAL //
   YouTube: / darrenkitchen
   Website: https://hak5.org/pages/hack-across-am...
   X: https://x.com/hak5darren

   // Hak5 WEBSITE //
   https://shop.hak5.org/

   // Previous YouTube video with Darren REFERENCE //
   Hacking Gadgets Every Cybersecurity Pro should know: • Hacking Gadgets Every Cybersecurity Pro Sh...

   // David's SOCIAL //
   Discord: discord.com/invite/usKSyzb
   Twitter: www.twitter.com/davidbombal
   Instagram: www.instagram.com/davidbombal
   LinkedIn: www.linkedin.com/in/davidbombal
   Facebook: www.facebook.com/davidbombal.co
   TikTok: tiktok.com/@davidbombal
   YouTube: / @davidbombal
   Spotify: open.spotify.com/show/3f6k6gE...
   SoundCloud: /…

10. #609: How Hackers Target Satellites Through Ground Control Systems

    1 oktober 2026 · 39 min

    Afspelen
    Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase. Lees meer

    How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit.

    At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Via sat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser.

    We cover:
    • Why satellite security extends to systems on the ground
    • How path traversal and XSS affect mission control software
    • Telemetry, telecommands, CCSDS and the SDLS security layer
    • How GPS supports timing as well as navigation
    • Python examples, a prepared lab VM and learning resources
    • The authors’ nine satellite cybersecurity challenges on Hack The Box
    • Skills and career opportunities in spacecraft cybersecurity

    The demonstration uses a spacecraft simulator. The vulnerabilities shown were disclosed to the vendor and patched.

    // Link to No Starch Website for Milenko and Andrzej’s Book//
    The Spacecraft Hacker’s Handbook: https://nostarch.com/spacecraft-hacke...
    Use Coupon Code SPACE25 for 25% off The Spacecraft Hacker’s Handbook.

    // Milenko Starcik’s SOCIALS //
    Website: https://visionspace.com/team/milenko-...
    Website 2: https://starcik.space/

    // Andrzej Olchawa’s SOCIALS //
    Website: https://visionspace.com/author/a-olch...
    Website 2: https://andy.codes/
    X: https://x.c…

Alle 500 afleveringen →