David Bombal

Alle afleveringen

500 afleveringen, van nieuw naar oud

  1. #618: Your Smart Device Is Tracking You More Than You Think

    4 november 2026 · 35 min

    Afspelen
    Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. Lees meer

    // Glen Sorensen’s SOCIAL //
    LinkedIn: / glen-sorensen
    DeleteMe LinkedIn: / deleteme

    // Article REFERENCE //
    https://protonvpn.com/blog/windows-is...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:49 - Why Privacy Matters Even If You Have Nothing to Hide
    01:49 - How Much Are We Being Surveilled?
    02:52 - How Companies Collect and Sell Your Personal Data
    05:43 - Sponsor: Proton Drive
    07:32 - Who Is Buying Your Personal Data?
    08:34 - How Streaming Services and Smart TVs Track You
    10:19 - Why Mobile Apps Are a Privacy Risk
    11:41 - How Easy Is It to Find Someone's Personal Information?
    13:11 - Doxxing, Scams and the Dangers of Exposed Data
    14:32 - How Hackers Use Personal Data to Attack Companies
    16:03 - How Is Mass Surveillance Legal?
    17:01 - License Plate Readers and Location Tracking
    18:13 - Are Smart TVs Spying on You?
    19:03 - What Can I Actually Do?
    21:55 - Does DeleteMe Really Work?
    25:50 - Can You Ever Be Anonymous Online?
    28:02 - Which Operating System Is Best for Privacy?
    31:31 - How to Audit Your Apps and Permissions
    33:36 - The Best Privacy-Focused Web Browsers
    34:40 - Outro

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me an…

  2. #617: This Is How NVIDIA's AI Mercedes Drives in Real Traffic

    4 november 2026 · 42 min

    Afspelen
    What happens when NVIDIA's AI drives a Mercedes-Benz CLA through Berlin traffic? David Bombal rides along to see how Alpamayo and the Halos safety stack work together. Lees meer

    At GTC Berlin, I ride in a Mercedes-Benz CLA running a development version of NVIDIA's Alpamayo driving software. We encounter cyclists, pedestrians, narrow roads, unusual junctions, parked cars and unpredictable drivers while the car handles much of the driving under human supervision.

    We look at what is actually happening behind the scenes: an end-to-end AI model proposes a driving path, a separate classical safety stack checks the environment and rules, and a trajectory arbiter decides when to allow the plan or fall back. The car uses on-board NVIDIA DRIVE Orin computing, cameras, radar and ultrasonic sensors.

    We also discuss training with US and European driving data, simulation with NVIDIA Cosmos, the difference between this development vehicle and NVIDIA's downloadable Alpamayo research models, and what it takes to adapt the system to different vehicles and countries.

    In this video:
    • A live AI-assisted drive through busy Berlin streets
    • How Alpamayo and the classical Halos safety stack work together
    • Why narrow roads, cyclists and German traffic lights are difficult cases
    • The cameras, radar, ultrasonic sensors and DRIVE Orin hardware
    • How real-world data and Cosmos simulation help train and test driving models
    • Which Alpamayo research models you can explore yourself Important: this demonstration is a supervised Level 2 driver-assistance system.

    The person in the driver's seat remains attentive and responsible; this is not an unsupervised robotaxi. Would you trust AI-assisted driving in a busy city? Which situation would you want it to handle first?

    NVIDIA Alpamayo: https://www.nvidia.com/en-us/solution...
    NVIDIA Halos: https://www.nvidia.com/en-us/ai-trust...

    Alpamayo research downloads: https://developer.nvidia.com/drive/do...

    Discord: discord.com/invite/usKSyzb
    Twitter: www.twi…

  3. #616: How Police Can Track Your Phone

    26 oktober 2026 · 19 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
    identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.

    At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter.

    Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware.

    In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments.

    We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have.

    Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video.
    #CyberSecurity #Privacy #Hacking

    // Cooper Quintin’s SOCIAL //
    EFF Website: https://www.eff.org/about/staff/coope...
    LinkedIn: / cooper-quintin-932029125
    Website: https://cooperq.com/

    // Web Page REFERENCE //
    https://www.eff.org/deeplinks/2025/03...
    https://www.eff.org/
    https://ssd.eff.org/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify…

  4. #615: How is AI Changing Cybersecurity?

    20 oktober 2026 · 16 min

    Afspelen
    Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. Lees meer

    // Kamal Hathi’s’ SOCIAL //
    LinkedIn: / kamal-hathi

    // Hanlin Fang’s SOCIAL //
    LinkedIn: / hanlinfang

    // Jessica Oppenheimer’s SOCIAL //
    LinkedIn: / jessbair

    // Craig Woolley’s SOCIAL //
    LinkedIn: / craig-woolley-783059111

    // Tom Smit’s SOCIAL //
    LinkedIn: / tsmit50

    // Bruce Snell’s SOCIAL //
    LinkedIn: / brucesnell-security

    // Heath Johnson’s SOCIAL //
    LinkedIn: / heathjohnsonvm

    // Paul Bannister’s SOCIAL //
    LinkedIn: / paul-bannister

    // Hao Yang’s SOCIAL //
    LinkedIn: / hao-yang-bb6ab429

    // Robert Castley’s SOCIAL //
    LinkedIn: / robertcastley

    // Leila Reyhani’s SOCIAL //
    LinkedIn: / leila-reyhani

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - How to stay in control in the world of AI
    00:38 - Visualizing data with Splunk
    02:24 - Born observable // Observability for AI
    04:36 - Cisco Data Fabric
    06:43 - Hunt and investigation // Security threats
    08:10 - Data foundation
    09:08 - The cost of AI and the ROIs
    09:41 - Red vs blue team with AI
    11:46 - Visualizing AI security
    13:00 - Targeted autonomy
    14:02 - .conf26 summary
    15:26 - Conclusion

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational purposes only.

    #splunk #cybersecurity #ai

  5. #614: Learn Malware Analysis with Ghidra and x64dbg (for free)

    20 oktober 2026 · 43 min

    Afspelen
    Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills. Lees meer

    Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime.

    We also run ransomware in a lab VM to show what happens to the victim’s files.

    We discuss:
    • How ransomware gangs steal data before encrypting it
    • How static and dynamic analysis work together
    • Finding malware indicators in Sysmon logs
    • Why ransomware can print physical ransom notes
    • How reputation and trust work in criminal forums
    • How to start reverse engineering by compiling your own C programs and examining them in Ghidra

    If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved.

    // Sponsored SEGMENT //
    Big thank you to Proton Pass for sponsoring this video. To sign up for Proton Pass, please use the following link https://proton.me/davidbombal to get Proton Pass free.

    // Link to No Starch Website for Lindsay Kaye’s Book //
    Order Dissecting the Dark Web on No Starch: https://nostarch.com/dissecting-the-d...
    Use Coupon Code KAYE25 for 25% off Dissecting the Dark Web at NoStarch.com

    // Lindsay Kaye’s SOCIALS //
    Website: https://www.lindsaymkaye.com/
    LinkedIn: / lindsaymkaye
    Human Security Website: https://www.humansecurity.com/people/...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.co…

  6. #613: Think You’re Private Online? Watch This

    12 oktober 2026 · 27 min

    Afspelen
    Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. Lees meer

    How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools.

    We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first.

    If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools.
    In this interview:

    Why “I have nothing to hide” misses the point
    How to think about passwords, two-factor authentication and security planning

    Why messaging defaults and privacy settings matter
    What a VPN can and cannot do for your privacy
    AI features, cloud storage and questions to ask about your data
    Phone and computer privacy tradeoffs, email and encryption

    Which privacy setting or app are you going to review first? Let me know in the comments, and subscribe for more cybersecurity and privacy conversations.

    // Thorin Klosowski’s SOCIALS //
    Website: https://www.eff.org/about/staff/thori...
    EFF LinkedIn: https://www.linkedin.com/company/eff?...

    // Web page REFERENCE //
    https://ssd.eff.org/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/sh…

  7. #612: How Hackers Trick AI Into Giving Up Secrets (Demos and free labs)

    8 oktober 2026 · 19 min

    Afspelen
    Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. Lees meer

    // Free AI labs //
    Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_...
    AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-...

    // Jason Haddix’s SOCIALS //
    X: https://x.com/Jhaddix?lang=en
    Github: https://github.com/Arcanum-Sec
    Website: https://arcanum-sec.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 -Coming Up
    0:48 - Jason Haddix at DEF CON
    01:36 - Sponsor – Proton Drive
    03:31 - AI Chatbot Penetration Testing
    04:11 - The Prompt Injection Taxonomy
    06:19 - Bypassing AI Guardrails & Classifiers
    07:15 - DEF CON AI Hacking CTF
    08:31 - Why AI Security Testing Is Different
    10:18 - Instagram AI Account Takeover Demo
    14:39 - AI Meeting Transcript Prompt Injection Demo
    17:28 - How to Start Learning AI Security
    18:18 - Final Thoughts

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational purposes only.
    #ai #aihacking #promptinjection

  8. #611: Building AI Agents? Set Up These Guardrails First

    1 oktober 2026 · 22 min

    Afspelen
    Big thanks to ‪@Cisco‬ & ‪@Splunkofficial‬ for sponsoring my trip to .Conf 2026 and also for sponsoring this video. Lees meer

    AI agents can do things you never intended. So how do you monitor their behavior, spot security problems and decide what they should be allowed to do? I’m joined by Splunk’s Kamal Hathi at .conf26 to discuss AI agent security, observability and what an agentic SOC means for the people working in cybersecurity.

    Kamal explains why setting a goal isn’t enough. You need visibility into what your agents are actually doing, clear guardrails and human oversight for important decisions. We also discuss why monitoring only a sample of agent activity can leave gaps, and how focused small language models could help reduce evaluation costs.

    In this interview, we cover:
    • Known agents, unregistered agents and unexpected behavior
    • AI evaluations, guardrails and zero trust
    • Automating SOC alert triage while keeping humans in control
    • Using AI to create SOAR playbooks
    • Running models locally for privacy, cost and control
    • Choosing between local models and cloud models
    • Whether you should still study computer science in 2027
    If you’re building AI agents, working in cybersecurity or deciding what to learn next, this conversation will give you plenty to think about.

    // Kamal Hathi’s’ SOCIAL //
    LinkedIn: / kamal-hathi

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:43 - Intro
    02:25 - Security Against AI
    06:26 - Collecting Data on your A…

  9. #610: WiFi Pineapple Pager: What Can It Actually Do?

    1 oktober 2026 · 23 min

    Afspelen
    Big thank you to proton VPN for sponsoring the video. To get 70% off your Proton VPN subscription use the following link: https://protonvpn.com/davidbombal Lees meer

    Note: Hak5 did not pay me to make this video. But, for full transparency: Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link below.

    // Buy Hak5 coolness here (Affiliate Link): //
    Buy Hak5: https://davidbombal.wiki/gethak5

    WiFi hacking without opening your laptop? ‪@DarrenKitchen‬ from ‪@hak5‬ joins me to talk about the WiFi Pineapple Pager and what this little Linux device can actually do.

    Darren shares the story behind the Pager, explains its support for 2.4, 5, and 6 GHz WiFi, and walks us through features including wireless reconnaissance, eventtriggered alerts, and community-created payloads. We also discuss how Bash and DuckyScript helpers let users build their own functionality, and how Pager Portal makes it possible to download payloads directly onto the device.

    How does it compare with the WiFi Pineapple Mark VII and Enterprise? We look at the different use cases, from portable testing to remotely auditing a client’s wireless network.

    And yes, someone has already made it run Doom.

    This is an interview and feature overview with the creator, covering the ideas, technology, and community behind the WiFi Pineapple Pager.

    // Darren Kitchen SOCIAL //
    YouTube: / darrenkitchen
    Website: https://hak5.org/pages/hack-across-am...
    X: https://x.com/hak5darren

    // Hak5 WEBSITE //
    https://shop.hak5.org/

    // Previous YouTube video with Darren REFERENCE //
    Hacking Gadgets Every Cybersecurity Pro should know: • Hacking Gadgets Every Cybersecurity Pro Sh...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: /…

  10. #609: How Hackers Target Satellites Through Ground Control Systems

    1 oktober 2026 · 39 min

    Afspelen
    Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase. Lees meer

    How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit.

    At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Via sat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser.

    We cover:
    • Why satellite security extends to systems on the ground
    • How path traversal and XSS affect mission control software
    • Telemetry, telecommands, CCSDS and the SDLS security layer
    • How GPS supports timing as well as navigation
    • Python examples, a prepared lab VM and learning resources
    • The authors’ nine satellite cybersecurity challenges on Hack The Box
    • Skills and career opportunities in spacecraft cybersecurity

    The demonstration uses a spacecraft simulator. The vulnerabilities shown were disclosed to the vendor and patched.

    // Link to No Starch Website for Milenko and Andrzej’s Book//
    The Spacecraft Hacker’s Handbook: https://nostarch.com/spacecraft-hacke...
    Use Coupon Code SPACE25 for 25% off The Spacecraft Hacker’s Handbook.

    // Milenko Starcik’s SOCIALS //
    Website: https://visionspace.com/team/milenko-...
    Website 2: https://starcik.space/

    // Andrzej Olchawa’s SOCIALS //
    Website: https://visionspace.com/author/a-olch...
    Website 2: https://andy.codes/
    X: https://x.c…

  11. #608: Before You Deploy AI Agents, Understand These Attacks

    19 september 2026 · 53 min

    Afspelen
    Big thanks to Proton VPN for sponsoring this video. You can use my link: https://protonvpn.com/davidbombal to get 70% off your Proton VPN subscription Lees meer

    How do you hack an AI system? And what happens when one malicious instruction spreads between AI agents?

    I’m joined by Harriet, author of Practical AI Security, to explore how AI models and agents can be manipulated, with practical Python demonstrations. You'll see an image classifier misidentify a rifle, a demonstration of prompt injection spreading across five agents, and how memory poisoning can plant instructions that affect an agent later. We discuss why securing AI takes more than blocking prompt injection, how machine learning creates different security challenges, and what you need to understand before deploying agents in your organisation.

    Want to learn this yourself? Harriet explains how to get started with her collection of 30+ free Python notebooks, including examples you can explore in Google Colab. We also discuss the skills involved in AI security and how people from different backgrounds can contribute.

    Topics include:
    • Adversarial machine learning and image manipulation
    • Prompt injection and attacks spreading between agents
    • Memory poisoning and model backdoors
    • AI supply chain security
    • Learning AI security with Python
    • AI security careers, training and fundamentals

    // Link to No Starch Website for Harriet Farlow’s Book //
    Order Practical AI Security on No Starch: https://nostarch.com/practical-ai-sec...

    Use Coupon code FARLOW25 for 25% off Practical AI Security

    // HarrietHacks Labs REFERENCE //
    https://labs.harriethacks.com/

    // Harriet Farlow’s AI Security Fundamentals Course REFERENCE //
    https://aisecurityfundamentals.com/

    // Harriet Farlow’s SOCIALS //
    Website: https://harriethacks.com/about/
    LinkedIn: / harriet-farlow-654963b7
    Instagram: / harriethacks

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidb…

  12. #607: How Hackers Steal Your Accounts Even With 2FA Enabled

    19 september 2026 · 31 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    Is Microsoft Defender enough to protect your PC? Malware researcher Leo joins me at Black Hat to discuss antivirus, Windows security and how hackers steal your accounts.

    We explore how infostealers target saved passwords and session tokens, why two-factor authentication cannot prevent every account takeover, and how a message from a compromised friend’s account can lead to an infection.

    Leo shares practical starting points for investigating your computer, including Autoruns for startup entries, TCPView for linking connections to applications, and Wireshark for examining network traffic. We also discuss password managers, account recovery planning, Windows telemetry and why switching operating systems does not eliminate security risks.

    In this interview:
    • Microsoft Defender’s strengths and limitations
    • Free tools for investigating suspicious Windows activity
    • How infostealers and initial access brokers operate
    • Stolen session tokens and the limits of 2FA
    • Fake download sites, malicious ads and targeted phishing
    • Preparing recovery options before your accounts are compromised
    • Security and privacy trade-offs across Windows, Linux and macOS

    // Leo’s SOCIAL //
    YouTube: / @pcsecuritychannel
    X: https://x.com/leotday
    Discord: / discord

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my…

  13. #606: Is Cybersecurity Still Worth Learning in 2026?

    19 september 2026 · 31 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker, please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    Is cybersecurity still worth learning in 2026? AI agents are changing vulnerability research, but where does that leave you?

    At Black Hat, I’m joined by Arizona State University professor Yan Shoshitaishvili to discuss what AI can actually do, where it falls short, and why he would still choose a career in cybersecurity today.

    Yan shares how his lab used AI agents and human-designed workflows to find what he describes as over 1,000 Linux kernel vulnerabilities triggerable by an unprivileged local user. Running 128 agents was only part of the story. Understanding which vulnerabilities to look for and improving the research process proved critical.

    We discuss:
    • How AI agents test potential vulnerabilities instead of simply reporting suspected bugs
    • How agentic AI compares with fuzzing and static analysis
    • Why finding new bugs does not automatically prove one tool is better
    • Why human expertise still matters in security research
    • How to use AI as a learning assistant without skipping the learning
    • Free, hands-on cybersecurity training through pwn.college
    • Yan’s advice for anyone considering cybersecurity in 2026

    // Yan Shoshitaishvili SOCIAL //
    LinkedIn: / yan-shoshitaishvili-7024305
    ASU website: https://www.asu.edu/

    // ThreatLocker’s SOCIAL //
    LinkedIn: https://www.linkedin.com/company/thre...
    X: https://x.com/threatlocker
    Instagram: / threatlocker
    Website: https://www.threatlocker.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podc…

  14. #605: Flock Cameras: What They Can Reveal About Your Life

    12 september 2026 · 22 min

    Afspelen
    Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. Lees meer

    Your license plate could reveal more than you think. Flock cameras, vehicle tracking and OSINT can turn information about your car into clues about where you live and your daily routines.

    I’m joined by an OSINT expert to discuss how vehicle information can be connected with public records, why surveillance raises privacy concerns and what happens when people trust an incorrect license plate match.

    He shares his experiences of locating a missing car after a police search came up short and investigating a hit-and-run using a partial plate and publicly available
    information.

    We discuss:
    • Flock cameras and vehicle identification beyond license plates
    • How vehicle data can expose patterns in your movements
    • License plate recognition errors and the importance of verification
    • How public records can connect a vehicle to a person
    • The risks of surveillance access being abused
    • Privacy measures, their limitations and the need for accountability
    • DeFlock and community scrutiny of surveillance cameras

    How much can someone discover about you from the information you leave exposed?

    // Mishaal Kahn’s SOCIALS //
    LinkedIn: / mish-aal
    Website: https://www.mishaalkhan.com/
    Tool created: https://www.operationprivacy.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:47 - The Growing Flock Camera C…

  15. #604: How He Infiltrated LockBit and Helped Get Them Indicted

    12 september 2026 · 24 min

    Afspelen
    Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. Lees meer

    John DiMaggio created fake identities, profiled ransomware operators and spent approximately 18 months earning the trust of LockBit.

    In this interview, John explains how his investigation led to work with the FBI and the UK’s National Crime Agency, contributed to indictments and resulted in death threats against him. He also reveals how the work affected his mental health, relationships and everyday life.

    John shares the remarkable story of a young REvil hacker connected to the Kaseya ransomware attack and its $70 million ransom demand. He explains how ransomware operators are recruited, manipulated and sometimes controlled by intelligence agencies.

    You will also learn why stolen cryptocurrency is difficult to spend, how Bitcoin tracing and money-laundering mistakes expose cybercriminals and why technical hacking skills do not make someone good at hiding money. Finally, John warns aspiring researchers not to approach ransomware gangs without professional training and support. He discusses his new book, Owned, and how he plans to use his experience to help cybersecurity teams and business leaders prepare for ransomware attacks.

    // Link to No Starch Website for Jon DiMaggio’s Book //
    Order Owned on No Starch: https://nostarch.com/owned
    Use Coupon Code OWNED30 for 30% off Owned at NoStarch.com

    // Jon DiMaggio’s SOCIALS //
    Website: https://arkemcyber.com/
    X: https://x.com/Jon__DiMaggio
    LinkedIn: / jondimaggio

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF …

  16. #603: How Age Verification Threatens Your Online Privacy

    8 september 2026 · 48 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    Age verification is spreading across the internet. It promises to protect children, but what happens when accessing a website or using your own device requires facial recognition, identity documents or third-party verification?

    David speaks with Alexis Hancock from the Electronic Frontier Foundation about the growing privacy risks surrounding age verification and digital ID systems. They examine how these technologies could threaten online anonymity, create new surveillance infrastructure and expose sensitive personal information.

    Alexis explains why age verification alone does not teach children how to stay safe online, how data brokers and behavioral advertising contribute to the problem, and why banning VPNs or weakening encryption would make everyone less secure.

    They also discuss zero-knowledge proofs, facial recognition, encryption backdoors, government surveillance and the danger of building a digital identity system that could be abused by future governments.

    Finally, Alexis shares practical ways to protect your privacy, including using encrypted communication, learning from EFF’s Surveillance Self-Defense guides and contacting elected representatives when harmful legislation is proposed.

    // Alexis Hancock’ SOCIAL //
    LinkedIn: / alexishancock

    // EFF Website REFERENCE //
    https://www.eff.org/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    …

  17. #602: How Compilers Turn Secure C Code Into Vulnerable Binaries

    8 september 2026 · 31 min

    Afspelen
    Big thanks to ‪@ThreatLocker‬ for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    You can write secure C code, follow accepted best practices and still end up with a vulnerable binary. The reason is simple: the CPU does not run your source code. It runs whatever the compiler produces.

    David sits down with security researcher Chris Domas at Black Hat to examine how legal compiler optimizations can remove security protections, delete memory-clearing operations and introduce time-of-check to time-of-use vulnerabilities into code that appeared secure.

    Chris explains the C abstract machine, why compilers are allowed to transform code so dramatically and how register pressure, structure layout and even data size can affect whether a binary is vulnerable. In one striking example, 17 or 33 bytes can be safe while nearby sizes produce vulnerable code. They also discuss whether Rust solves the problem, why switching between GCC and Clang is not the answer and how AI helped analyse 500 million lines of open-source code to identify 300 potentially dangerous patterns.

    Most importantly, Chris explains what developers can do now, including enabling compiler warnings, using sanitizers, analysing optimized builds and testing the exact binary that will be shipped.

    // Christopher Domas’ SOCIAL //
    LinkedIn: / christopher-domas
    GitHub: https://github.com/xoreaxeaxeax
    X: https://x.com/xoreaxeaxeax

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    //…

  18. #601: Google Researchers Hacked the Pixel Phone using Audio Messages

    8 september 2026 · 39 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    A zero-click attack can compromise your phone without you opening a link, installing an application or even touching the device.

    David sits down with Natalie Silvanovich and Seth Jenkins from Google Project Zero to examine how specially crafted audio messages were used to remotely compromise the Pixel 9 and Pixel 10.

    The attack begins inside the Dolby Unified Decoder, where Android automatically processes incoming audio for transcription. The researchers explain how they exploited the decoder, escaped the media codec sandbox and targeted vulnerable Pixel hardware drivers to achieve kernel code execution and root access.

    They also discuss ASLR, SELinux, memory corruption, the eight-week exploit development process, how AI helped automate repetitive tasks and why Apple’s compiler protections prevented the same Dolby bug from affecting iPhones.

    Most importantly, they explain what manufacturers can do to reduce their attack surface and make commercial zero-click exploits significantly more expensive.

    These vulnerabilities were responsibly disclosed and patched. Pixel users running the latest security updates are protected.

    // Seth Jenkins SOCIAL //
    LinkedIn: https://www.linkedin.com/in/seth-jenkins-a20b914b/
    X: https://x.com/__sethJenkins

    // Natalie Silvanovich SOCIAL //
    X: https://x.com/natashenka?lang=en
    Website: https://natashenka.ca/

    // Website REFERENCE //
    Google Project Zero website: https://projectzero.google/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: …

  19. #600: This Free Tool Decodes Game Boy ROM From a Photograph

    2 september 2026 · 42 min

    Afspelen
    Can you recover working software from a photograph of a microchip? Lees meer

    Embedded systems reverse engineer Travis Goodspeed demonstrates how to extract the original Game Boy’s 256-byte boot ROM from a microscopic photograph of the mask ROM inside its CPU.

    The source image was created by combining 22 microscope photographs captured at 50x magnification. Using his free, open-source Mask ROM Tool, Travis marks 2,048 ROM bit locations, separates the ones from the zeros and checks for possible recognition errors. He then determines the logical order of the bits, disassembles the program and shows how it can be exported as a ROM file for use in an emulator.

    Travis also explains the Game Boy’s unusual copy-protection system. During startup, its boot ROM displays logo data supplied by the cartridge and compares it with Nintendo’s internal copy. If the logos do not match, the game does not boot. Requiring cartridges to contain Nintendo’s trademark gave the company legal leverage against unlicensed publishers.

    The video also explores techniques from Travis’s book, Microcontroller Exploits. These include extracting protected firmware from an access-control reader, chemically decapsulating chips while preserving their operation and using ultraviolet light with a nail-polish mask to remove memory protection without erasing the program.

    The Mask ROM Tool, Game Boy chip photograph and step-by-step tutorial are publicly available, allowing you to reproduce the ROM-decoding demonstration without owning a microscope or chemistry lab.

    // Sponsored SEGMENT //
    Big thank you to Proton Pass for sponsoring this video. Take your security to the next level by getting Proton Pass using the following be www.proton.me/davidbombal

    // Link to No Starch Website for Travis’ Book //
    Order Microcontroller Exploits and get the eBook free.
    https://nostarch.com/microcontroller-...

    Use Coupon Code GOODSPEED25 for 25% off Microcontroller Exploits at NoStarch.com

    // Travis Goodspeed SOCIAL //
    GitHub: h…

  20. #599: This Pocket Tool Diagnoses Wi-Fi in 45 Seconds

    2 september 2026 · 43 min

    Afspelen
    Your internet speed can look fine while your Wi-Fi is still failing. Packet loss, latency, congested channels, interference and poor configuration can all damage performance, but a normal speed test will not show you the full picture. Lees meer

    In this video, I test the Ookla Speedtest Pulse, a pocket-sized Wi-Fi 7 diagnostic tool that measures more than 25 network metrics in around 45 seconds. We test Wi-Fi at the Natural History Museum in London and examine results from an Airbnb to identify whether the problem comes from the Wi-Fi network, wired connection or internet service provider.

    Matt explains how the device tests 2.4, 5 and 6 GHz Wi-Fi, detects channel problems, measures signal quality and gives you practical recommendations in plain English.

    We also compare Speedtest Pulse with the normal Speedtest application, laptopbased tools and the Ekahau Sidekick 2. You will see its current limitations, upcoming continuous monitoring features and how it could help technicians finally capture intermittent Wi-Fi problems.

    Big thanks to OOKLA for sponsoring this video. To get your own Speedtest Pulse please use the following link: https://wifi.ekahau.com/david-bombal-...

    // Matt Starling’s SOCIAL //
    LinkedIn: / matt-starling-03913633
    X: https://x.com/mattstarling?s=21

    // Ookla’s SOCIAL //
    LinkedIn: / ookla

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:58 - Testing Public Wi-Fi in London
    01:40 - What Is the Speedtest Pulse?
    03:40 - Pulse vs Speed…

  21. #598: AI Can’t Understand Intent. That’s a Security Problem

    26 augustus 2026 · 26 min

    Afspelen
    Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    AI is changing cybersecurity, but simply using more AI to defend against AI attacks may not be the answer.

    David Bombal sits down with Danny Jenkins, CEO of ThreatLocker, to discuss the security risks created by AI, autonomous agents, zero-day vulnerabilities, ransomware, and the rapidly expanding attack surface businesses now have to deal with.

    Danny explains one of the fundamental problems with AI security: AI can understand what something does, but it may not understand the intent behind it. The same action could be performed legitimately by an administrator or maliciously by an attacker.

    They also discuss how AI is giving attackers capabilities that previously required significantly more expertise and resources, including vulnerability discovery and
    sophisticated phishing attacks.

    But AI creates another problem inside organizations. Autonomous agents can potentially access files, upload data, perform actions, and make mistakes extremely quickly. Every new piece of software adds attack surface, and powerful AI agents can dramatically increase that risk. Danny argues that the answer isn't simply AI versus AI.
    Instead, organizations need to rethink trust itself.

    The discussion covers deny by default, application control, restricting what software and AI agents are allowed to access, and why AI should be used as an additional
    security layer rather than becoming your primary defense.

    Topics include:
    • AI security risks
    • Autonomous and agentic AI
    • Why AI struggles with intent
    • How hackers are using AI
    • AI-powered vulnerability discovery
    • Zero-day vulnerabilities
    • Ransomware
    • AI attack surfaces
    • Application control
    • Deny by default security
    • Why AI alone can't solve AI security
    • Securing AI inside businesses

    // Danny Jenkins’ SOCI…

  22. #597: The Hacking Gadgets You Need to Know

    24 augustus 2026 · 43 min

    Afspelen
    Note: Hak5 did not pay me to make this video. But, I'm marking it as sponsored because Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link: https://davidbombal.wiki/gethak5 Lees meer

    // Darren Kitchen SOCIAL //
    YouTube: https://www.youtube.com/darrenkitchen
    Website: https://hak5.org/pages/hack-across-america
    X: https://x.com/hak5darren

    // Hak5 WEBSITE (affiliate) //
    https://davidbombal.wiki/gethak5

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU//
    0:00 - Coming up
    01:00 - 21 Years of Hak5 // Device overview
    05:30 - USB Rubber Ducky
    09:22 - Bash Bunny
    12:41 - Plunder Bug
    13:28 - Shark Jack & Shark Jack Display
    16:28 - Packet Squirrel
    18:51 - Key Croc
    21:51 - Screen Crab
    24:07 - Lan Turtle Hub
    28:14 - WiFi Pineapple
    33:16 - WiFi Pineapple Pager
    37:32 - Hak5 books
    39:15 - Darren's favourite tools
    41:27 - Future projects // Conclusion

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational purposes only.

    #hak5 #hackinggadgets #hacktool

  23. #596: This is the Real Cybersecurity Problem

    20 augustus 2026 · 28 min

    Afspelen
    Thank you to Threatlocker for sponsoring my trip to Black Hat so I can interview amazing people. Lees meer

    Jen Easterly joins David Bombal to discuss why today’s cybersecurity problem may actually be a software quality problem.

    For decades, users and organizations have been blamed for failing to patch systems, change default passwords, or enable MFA. Jen argues that the bigger question is whether software vendors should be held responsible for shipping insecure products in the first place.

    They discuss Secure by Design, software vulnerabilities, memory safety, AI security, zero-day attacks, rogue AI agents, critical infrastructure, vendor accountability, and how artificial intelligence could dramatically shorten the time between discovering a vulnerability and weaponizing it.

    Jen also shares lessons from her career at the NSA, the White House, CISA, Morgan Stanley, the U.S. Army, and now RSAC, including her advice for hackers, cybersecurity professionals, and future leaders.

    Topics include:
    Why cybersecurity may be a software quality problem
    Why users are blamed for insecure software
    CISA’s Secure by Design initiative
    Why default passwords should disappear
    AI agents behaving in unexpected ways
    AI and the future of zero-day attacks
    Memory safety, C, C++ and Rust
    Government regulation and vendor accountability
    The EU Cyber Resilience Act
    Why Patch Tuesday may eventually become unacceptable
    How AI could help defenders find and fix vulnerabilities
    Jen Easterly’s advice for cybersecurity professionals

    If you work in cybersecurity, ethical hacking, software development, networking, AI security, or critical infrastructure, this is a conversation you don’t want to miss.

    // Jen Easterly’s SOCIAL //
    LinkedIn: / jen-easterly

    // Website REFERENCE //
    https://www.cisa.gov/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidb…

  24. #595: How to Detect Fake Cell Towers Near You

    18 augustus 2026 · 1 uur 2 min

    Afspelen
    Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off. Lees meer

    Learn how fake cell towers and Stingray-style devices can be used to track phones, capture metadata, and monitor cellular activity.

    OTW joins David Bombal to demonstrate how SDR tools such as HackRF, RTL-SDR, DragonOS, and Falcon can be used to scan nearby cell towers and investigate suspicious signals. They look at how 4G and 5G networks work, why mobile networks still expose valuable metadata, how IMSI catchers operate, and what suspicious or rogue cell towers may look like.

    They also discuss SS7 vulnerabilities, mobile network attacks, Signal, GrapheneOS, and practical steps you can take to better protect your communications.

    Topics covered:
    How to scan for nearby cell towers
    How fake cell towers and Stingrays work
    Detecting suspicious cell towers with SDR
    HackRF and RTL-SDR
    DragonOS and Falcon
    IMSI catchers and phone tracking
    4G and 5G security
    SS7 vulnerabilities
    Mobile phone metadata
    Signal and GrapheneOS
    Mobile network security

    // Occupy The Web SOCIAL //
    X: / three_cube
    Website: https://hackers-arise.net/

    // Occupy The Web Books //
    Linux Basics for Hackers 2nd Ed
    US: https://amzn.to/3TscpxY
    UK: https://amzn.to/45XaF7j

    Linux Basics for Hackers:
    US: https://amzn.to/3wqukgC
    UK: https://amzn.to/43PHFev

    Getting Started Becoming a Master Hacker
    US: https://amzn.to/4bmGqX2
    UK: https://amzn.to/43JG2iA

    Network Basics for hackers:
    US: https://amzn.to/3yeYVyb
    UK: https://amzn.to/4aInbGK

    // OTW Discount //
    Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/…

  25. #594: How to Protect Your Network From Insecure IoT Devices

    30 juli 2026 · 32 min

    Afspelen
    Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware. Lees meer

    Philip Wylie explains how an outdated IP camera became a ransomware gateway, why default passwords and poor segmentation remain serious risks, and how to protect your network using separate VLANs, firmware updates, monitoring and zero-trust controls. The interview also explores medical devices, OT security, AI-enabled devices and the growing demand for IoT penetration-testing skills.

    Big thanks to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal

    // Philip Wylie’s SOCIAL //
    X: https://x.com/phillipwylie
    LinkedIn: / phillipwylie
    YouTube: / @phillipwylie
    Instagram: / phillipwylie

    // Book REFERENCE //
    The Pentester Blueprint Phillip Wylie:
    US: https://amzn.to/4jkigAa
    UK: https://amzn.to/42vShPB

    // YouTube video REFERENCE //
    Pentester Blueprint: Your Road to Success: • Pentester Blueprint: Your road to success
    How to hack IP Cameras (Ethically) and learn IoT hacking: • How to hack IP Cameras (Ethically) and lea...

    // Website REFERENCE //
    https://training.brownfinesecurity.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:56 - Intro
    03:08 - The Weakness in Pen-testing
    07:38 - How Do Hackers Get Access?
    11:30 - How To Protect IoT Devices
    14:36 - Dangers of M…

  26. #593: How to pass the CCNA exam (advice from two Cisco instructors)

    25 juli 2026 · 36 min

    Afspelen
    Two Cisco training veterans break down how to know you are ready for the CCNA exam, what changes in CCNA 2.0, and whether the CCNA is still worth it in 2026. Lees meer

    Brian Bays has been teaching official Cisco classes since 2000. Michael Aldridge has been writing practice exam content since 2001. In this interview they answer the questions I get asked constantly: how long should I study, do I need physical equipment, should I do Network Plus first, and is AI going to take these jobs away?

    Short answer on that last one: they have heard this before. Automation was going to end tech jobs. Then virtualization. Then cloud. Every time, it just made good engineers more productive. Junior engineers become senior engineers, and we cannot function without senior engineers.

    We also cover what is coming in CCNA 2.0, including more troubleshooting woven through every section, a dark mode option, a full screen CLI, and the ability to send a command to every device in a lab at once.

    This video is not sponsored. I have known Brian and Michael for years and I recommend them because I rate them, not because anyone paid for this.

    Get CCNA Certified with Boson’s comprehensive training solutions: https://boson.com/certifications/ccna/

    // Bryan Baize SOCIAL //
    LinkedIn: / bbaize

    // Michael Aldridge SOCIAL //
    LinkedIn: / michael-aldridge-48125338a
    Reddit: / bosonmichael

    // Boson LinkedIn //
    LinkedIn: / boson

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming up
    01:01 - I…

  27. #592: Why most enterprise AI fails (and how to succeed)

    15 juli 2026 · 38 min

    Afspelen
    Agentic AI is putting a 400x load on enterprise networks. Cisco and NTT Data experts reveal why only 13% of leaders successfully scale AI, the nightmare of quantum threats, and how to secure your infrastructure. Lees meer

    Big thank you to NTT DATA for sponsoring this video.

    Book an AI Infrastructure Readiness Assessment using one of the following links:
    https://services.global.ntt/en-us/cam...

    or

    https://services.global.ntt/en-us/cam...

    // Vikesh Gumpalli’s SOCIAL //
    LinkedIn: / vgumpalli

    // Vance Baran’s SOCIAL //
    LinkedIn: / vancebaran

    // Website REFERENCE //
    https://www.nttdata.com/global/en/
    https://www.nttdata.com/en-us/2026-gl...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    01:09 - Introduction
    03:04 - Enterprise AI Adoption: The Board-Level Challenge
    05:02 - How AI Agents Are Reshaping Network Infrastructure
    07:22 - AI Agent Access, Sensitive Data and Security Risks
    10:24 - Cybersecurity at Machine Speed and Modernising Security
    14:08 - AI Budgets, ROI and Business Readiness
    15:00 - AI’s Impact on Jobs and an Insurance Case Study
    19:08 - Data Sovereignty and Custom AI Models
    22:18 - AI Factories, Edge Deployment and Public-Sector Use Cases
    26:31 - Preparing for Quantum-Safe Security
    28:43 - Managing Multi-Vendor Environments and Security Readiness
    32:09 - Live Protect and Hybrid Mesh Firewalls
    34:04 - Splunk, Galileo, AI Observability
    36:33 - Where to Learn More

    Please note that links listed may be affiliate links and provide me with …

  28. #591: Inside the Cisco Live 2026 NOC (exclusive tour)

    15 juli 2026 · 26 min

    Afspelen
    Big thanks to Cisco for sponsoring my trip to Cisco Live EMEA and for changing my life and the lives of many other people. Lees meer

    // Joe Clarke SOCIAL //
    LinkedIn: / joeclarke2

    // YouTube video REFERENCE //
    MCP Demo using Python, AI and a self healing network (Model Context Protocol): • MCP Demo using Python, AI and a self heali...
    Do you know what this weird IP address is about? (192.0.0.2): • Do you know what this weird IP address is ...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    01:11 - Introduction
    02:34 - The Backup Network Operation Center (NOC)
    04:30 - The Security in the NOC
    07:38 - Joe Clark Shares a Story
    10:23 - Improvements with MCP
    12:50 - Equipment Demonstration
    16:16 - Physical Security & Physical Separation
    17:53 - IPv6 & Other Updates
    19:56 - Why IPv6?
    22:42 - The Interface Dashboard Monitors
    24:53 - Tips & Tricks
    25:49 - Conclusion & Outro

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational purposes only.

    #noc #network #cisco

  29. #590: CCNA 2.0: What did Cisco just remove from the exam?

    2 juli 2026 · 44 min

    Afspelen
    Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas. Lees meer

    Cisco has officially announced a major update to the CCNA, moving from version 1.1 to the new CCNA 2.0 blueprint. Recorded live at Cisco Live, David Bombal sits down with Cisco certification insiders Hank and Quinn to dissect exactly what these changes mean for your career, what entry-level networking topics have been completely removed, and how the test is shifting heavily toward hands-on performance-based testing lablets.

    Learn why traditional, shallow network automation topics were pulled to make room for 2026 enterprise priorities like Agentic AI, digital network assistants, and secure device management (including mandatory AAA, secure copy protocols, and client-side security). The team breaks down the structural consolidation from six domains down to five, including the revamped 25% weight on Switching and Network Access and the newly introduced AI Network Operations and Management domain. Whether you are currently studying for your exam or just beginning your networking journey, this comprehensive breakdown explains how to align your lab practice using free tools like Cisco Packet Tracer and Cisco Modeling Labs (CML) to become truly job-ready.

    // Hank Preston SOCIAL //
    LinkedIn: / hpreston

    // Quinn Snyder SOCIAL //
    LinkedIn: / qsnyder

    // Website REFERENCE //
    https://u.cisco.com/tutorials
    https://www.netacad.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    …

  30. #589: How to run an AI agent INSIDE your network CLI for 2026

    30 juni 2026 · 32 min

    Afspelen
    Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026. Lees meer

    Network engineers, are you ready for 2026? Learn how to deploy an AI agent directly into your CLI using Cisco MCP and Claude to automate network configurations safely. In this tutorial with Karim from Cisco, we explore how to build a custom AI skill (Iris) using Anthropic's Claude Code and Cisco's Model Context Protocol (MCP). Watch how an agent can live in your terminal to automatically read ServiceNow tickets, discover network topologies, propose BGP/firewall changes, and execute commands while keeping a "human in the loop" to prevent hallucinations. Perfect for CCNA/CCIE candidates and anyone looking to learn agentic AI without adopting complex Python programmability.

    // Kareem Iskander’s SOCIAL //
    LinkedIn: / kiskander
    X:Chttps://x.com/kareem_isk

    // Repo Link REFERENCE //
    https://github.com/kiskander/iris

    // Website REFERENCE //
    https://u.cisco.com/tutorials

    // David's SOCIAL //

    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:39 - Intro
    01:57 - Why Network Engineers Are Returning to the CLI
    03:24 - The Real Cost of AI Token Usage
    04:10 - What Is an Agent Skill?
    05:17 - Network Automation Use Case: AWS to On-Prem Connectivity
    07:40 - Building Iris, an AI Network Agent
    09:17 - Setting AI Safety Rules and Defining the Workflow
    12:17 - Security, Local Models and Private AI Environments
    15:16 - Using Existing Automation Playbooks with AI
    16:34 - Live Demo: Running…

  31. #588: Which is Ethernet? What's the difference?

    30 juni 2026 · 23 min

    Afspelen
    Big thank you to DeleteMe for sponsoring this video. Use my link https://joindeleteme.com/Bombal to receive a 20% discount or use the QR Code in the video. Lees meer

    Also, a Big thanks to Cisco for sponsoring my trip to Cisco Live Vegas 2026.

    Do you really need Cat 8 Ethernet for your home network in 2026? And what actually happens when you touch the end of a fiber optic cable? We break it all down with hands-on demos.

    At Cisco Live, I caught up with Jim from Fluke Networks to dive deep into the physical layer of networking. We strip away the marketing hype and look at the real-world performance of both copper and glass.

    In this video, we cover everything from the crucial safety reasons why you should never look into a fiber cable, to a microscope demonstration showing how a single speck of dirt or finger oil can cause frame errors and take down your SFP modules. We also run a live cable certification test on Cat 6 vs Cat 8 to show you exactly why Cat 6A is all you actually need for your home network, and how pros use an OTDR to find exact breaks in long fiber runs.

    If you want to build or troubleshoot networks effectively, you need to understand the physical layer.

    // Jim Davis from Fluke Networks SOCIAL //
    LinkedIn: / jimdavisflukenetworks
    Website: https://www.flukenetworks.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming up
    0:31 - Introduction
    1:31 - Don't touch fiber optic cables!
    04:53 - Single vs Multi-mode fiber
    08:04 - Don't look directl…

  32. #587: Agentic AI is attacking your network (how to defend it)

    24 juni 2026 · 17 min

    Afspelen
    Are your legacy network devices a ticking time bomb? In this deep dive, Cisco’s Head of Customer Experience reveals alarming statistics from the latest Talos report: 40% of top vulnerabilities directly target end-of-life devices, and 32% are over a decade old. We explore how older infrastructure has transitioned from a mere operational drag to ground zero for a new generation of agentic AI attacks, and why the looming threat of quantum computing breaking RSA encryption means you must assess your network now. Discover how the newly launched Cisco IQ provides real-time, dynamic visibility into hardware, software, and cryptographic assets. Learn how this powerful GPS for your network connects hidden operational trails, automates TAC troubleshooting, and ensures your enterprise is quantum-ready before post-Mythos era threats cause catastrophic downtime. Lees meer

    A big thank you to Cisco for sponsoring this video and for sponsoring my trip to Cisco Live Vegas 2026.

    // Liz Centoni SOCIAL//
    LinkedIn: / lizcentoni
    Blogs:
    https://blogs.cisco.com/customerexper...
    https://blog.talosintelligence.com/20...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    01:03 - Intro
    01:45 - Quantum Ready Assessments
    04:35 - Other Cyber Threats
    05:11 - Cisco IQ
    08:41 - Cisco Assisting Customers
    12:39 - Deploying Technolgy
    13:24 - Customers Using Cisco IQ
    16:18 - Conclusion

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback shoul…

  33. #586: Stop zero days without a patch: You need to learn eBPF

    24 juni 2026 · 22 min

    Afspelen
    How has AI changed cybersecurity and enterprise networks? In this interview, Michael (General Manager for Cisco's Campus Networking) joins David Bombal to discuss the real-world impact of agentic AI, physical AI, and modern security threats. Discover why the U.S. cybersecurity agency (CISA) reports that the mean time to exploit vulnerabilities has plummeted from 10 months to just 10 hours due to AI systems chaining CVEs together. Learn how autonomous agents are shifting campus and branch environments from traditional north-south traffic to massive east-west flows, creating up to 9x the bandwidth demand. Michael breaks down how network segmentation and "least agency" protect data, how Cisco Live Protect utilizes eBPF inside the Linux kernel to create a compensating shield before a patch is ready, and how line-rate encryption with post-quantum cryptography protects against "harvest now, decrypt later" threats. Finally, find out why network engineering remains an incredibly critical, high-demand career path in 2026. Lees meer

    Big thanks to ‪@Cisco‬ for sponsoring my trip to Cisco Live Vegas 2026

    // Michael Dickman SOCIAL //
    LinkedIn: / midickman

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:28 - Intro
    0:53 - Concerns about Agentic AI
    03:55 - Agent’s Impact on the Network
    05:25 - Agents and Cybersecurity
    07:05 - Prevalence of Agentic AI
    08:04 - Solving Cybersecurity in Your Enterprise
    11:29 - Agentic AI and Firewalls
    13:43 - Cisco’s Live Protect
    17:0…

  34. #585: Run Full WiFi Networks in your laptop 🤯

    24 juni 2026 · 20 min

    Afspelen
    In this episode, David Bombal sits down with Joe and Dalton from Cisco to break down the biggest Cisco Modeling Labs (CML) 2.10 release yet. Joe demos the new open source MCP server (model context protocol) that lets an AI model like Claude build a full CML lab from plain English. Just by asking for three IOL routers with a simple BGP config, the AI looks up the node definitions, invents the IP addresses, builds the topology, chooses eBGP on its own, and even starts the lab and waits for convergence. From there you will see the MCP server spin up a CCNA troubleshooting scenario from the official blueprint, quiz you, review your console history and final config, and hand back an honest evaluation with coaching tips. It can even turn a BGP packet capture into a ladder diagram to explain how the protocol works. Lees meer

    Dalton then shows off CML 2.10's new wireless fabric, which runs end to end WiFi simulations with no real radios or physical access points. Watch signal strength change as you drag a client across the canvas, simulate roaming between two APs, add link conditioning to mimic a concrete wall, and run wireless packet capture on the .11 frames. Finally, Joe walks through the upgraded breakout tool that streams live packet captures straight into Wireshark so you can troubleshoot BGP and other protocols in real time. Everything shown works in the free version of CML, making this a must watch for anyone studying for the CCNA or leveling up as a network engineer.

    Big thanks to Cisco for sponsoring my trip to Cisco Live Vegas.

    // Joe Clarke SOCIAL //
    LinkedIn: / joeclarke2

    // Dalton Ortega SOCIAL //
    LinkedIn: / dalton-ortega

    // Website REFERENCE //
    https://www.cisco.com/site/us/en/lear...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotif…

  35. #584: Will this replace PoE (Power over Ethernet)?

    24 juni 2026 · 24 min

    Afspelen
    Big thanks to NTT DATA for sponsoring this video and to Cisco for sponsoring my trip to Cisco Live Vegas. For more information about NTT DATA and Cisco’s partnership, click here https://services.global.ntt/en-us/abo... Lees meer

    1000W touch safe power sounds impossible, but Class 4 Fault Managed Power is changing how we think about power delivery for AI data centers, buildings, networking, and IT infrastructure.

    In this interview, we look at how Cisco, NTT, and Panduit are approaching the next generation of energy networking systems. Traditional Power over Ethernet is useful for endpoints like access points, cameras, sensors, and phones, but PoE tops out around 100 watts. Fault Managed Power introduces a new class of power delivery that can deliver much higher wattage while intelligently shutting down when it detects a fault, short circuit, or unsafe condition.

    The conversation explains why this matters now. AI is driving massive demand for data center compute, but that compute requires more power, more cooling, and more efficient infrastructure. The guests explain how AC-to-DC conversion losses add up across multiple power conversion stages, how transmission and distribution losses waste energy before it even reaches the building, and why many legacy data centers spend a large amount of energy on cooling and non-useful power.

    A key example from the discussion: an average 5 megawatt, air-cooled data center moving to direct liquid cooling and fault managed power could save 75% of its energy cost. That same energy profile could also translate into 2.3x the compute for the same amount of energy.

    We also discuss touch-safe DC power up to 400V, why DC-to-DC power matters for data centers, how this technology could reduce material and labor complexity, and why network engineers, electricians, data center operators, and IT professionals should understand Class 4 Fault Managed Power.

    This is not just about sustainability. It is about energy cost, AI infrastructure, safer power…

  36. #583: Shadow AI: What every network engineer must know

    16 juni 2026 · 31 min

    Afspelen
    Big thank you to Radware for sponsoring this video Lees meer

    In this interview, David Bombal sits down with Randy Wood, Head of North American Business at Radware, to break down the massive shift occurring in enterprise cybersecurity. They discuss why the rise of Agentic AI is a "1994 internet moment times a thousand," creating an environment where autonomous AI agents are rapidly outgrowing traditional security guardrails. Randy explains the critical connection between AI and API security, revealing how undiscovered "Shadow AI" tools and thousands of hidden enterprise API vulnerabilities leave organizations completely exposed to highly sophisticated, AI-driven DDoS attacks and flawless localized phishing campaigns. Learn how network engineers and security professionals can protect confidential data by pivoting from rigid rules to analyzing behavioral intent before execution, ensuring your network is ready for an autonomous tech stack. Visit radware.com for more deep-dive technical resources.

    // Randy Wood’s SOCIAL //
    LinkedIn: / rwoodiii

    // Website REFERENCE //
    https://www.radware.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:31 - Intro
    01:21 - The Reality of AI Today
    03:50 - Customer’s Concerns About AI
    07:12 - Deployment of AI Agents in Enterprise
    08:08 - AI Used to Attack Enterprise
    09:01 - AI as a Problem and a Solution
    13:43 - Agentic Security with Radware
    16:51 - Lack of Architecture and Policy
    18:06 - The Impact of Claude Mythos
    20:…

  37. #582: What is an Agentic SOC? (how to defend at machine speed)

    16 juni 2026 · 33 min

    Afspelen
    Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas Lees meer

    In this video, we sit down to discuss the rapidly evolving world of cybersecurity, AI, and how an Agentic SOC is becoming the standard for modern defense. We cover the massive opportunity in the industry with over 4 million open cyber jobs, why mastering Splunk is a critical career move in 2026, and how you can get started for free. We also unpack emerging threats like Mythos class attackers, vulnerabilities in LLMs and MCP servers, and how the integration of Cisco Data Fabric and Splunk is helping organizations defend critical infrastructure against automated exploits at machine speed.

    // John Morgan’s SOCIAL //
    LinkedIn: / johnmorganinc
    Guest Bio: https://newsroom.cisco.com/c/r/newsro...

    // Website REFERENCE //
    https://www.splunk.com/en_us/training...
    https://www.splunk.com/en_us/download...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //

    0:00 - Coming up
    01:00 - A new era
    01:54 - Top threat vectors
    03:14 - AI in cyber
    04:10 - Rise of zero days
    04:57 - What is Splunk?
    06:32 - Agentic SOC
    08:16 - Cyber roles in the future
    16:01 - How agentic SOC will help
    17:24 - Risks of AI agents // More attack surfaces
    21:49 - Services to protect customers
    25:36 - Data between Cisco and Splunk
    27:39 - "AI fatigue" // What Cisco is doing differently
    31:16 - Studying Splunk in 2026
    32:54 - Conclusion

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback shou…

  38. #581: AES Explained: How Encryption Protects Your Data

    13 juni 2026 · 28 min

    Afspelen
    Big thanks to TryHackMe for sponsoring this video. Learn Cyber Security with Practical Labs on TryHackMe:https://tryhackme.com/DavidBombalTech
    Use my code DAVIDTECH25 to get 25% OFF on Annual Subscription!
    Lees meer

    Dr. Mike Pound joins David Bombal to explain symmetric encryption, AES, secret keys, VPN encryption, TLS, block ciphers, stream ciphers and why encryption is one of the most important building blocks in modern cybersecurity.

    In this video, Mike explains what encryption actually does: it takes readable plaintext and turns it into unreadable ciphertext so that only someone with the correct secret key can decrypt it. He breaks down how symmetric encryption works, why the same key is used to encrypt and decrypt, and why algorithms like AES are used everywhere from secure websites and VPNs to BitLocker and full disk encryption.

    You’ll learn why AES is so fast on modern CPUs, how keys interact with encryption algorithms, and why AES uses rounds of substitution and permutation to scramble data. Mike also explains the difference between block ciphers and stream ciphers, including AES, DES, Triple DES, ChaCha20 and older algorithms like RC4 and A5/1.

    The discussion also covers why symmetric encryption is used for bulk encryption in protocols like TLS and IPsec, why asymmetric encryption is used differently, and why you should never write your own encryption algorithm or implement your own AES code for real-world security.

    If you want to understand how encryption protects your data, how VPNs and secure web traffic work, and why AES is still one of the most important algorithms in cybersecurity, this is a great place to start.

    // Mike SOCIAL //
    X: / _mikepound
    YouTube Channel: / computerphile

    // YouTube Video REFERENCE //Password Cracking: Can a Rainbow table reverse a hashed password?: • Password Cracking: Can a Rainbow table rev...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal…

  39. #580: Cisco's first Quantum Switch: What it means for you

    13 juni 2026 · 47 min

    Afspelen
    Big thanks to ‪@Cisco‬ for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026. Lees meer

    In this deep dive into the future of networking, we explore the reality of quantum networking and Cisco's groundbreaking announcement of the world's first Universal Quantum Switch. Quantum computing is no longer just a buzzword; it's moving into the mainstream, bringing massive implications for network engineers and cybersecurity professionals in 2026 and beyond.

    We discuss why a quantum switch is essential for scaling distributed quantum computers and how it translates different quantum modalities, acting as a universal fabric. We also break down the quantum stack, from entanglement sources generating 200 million photon pairs per second to nanosecond switching speeds.

    Beyond the hardware, we tackle the elephant in the room: Shor's algorithm and the imminent threat to classical encryption (RSA/Diffie-Hellman). With "harvest now, decrypt later" attacks already happening and the January 2027 CNSA 2.0 compliance deadline approaching, we cover exactly how you can prepare using post-quantum cryptography (PQC). Finally, we explore fascinating real-world applications, including high-frequency trading advantages, unbreakable eavesdropper detection using the no-cloning theorem, and secure position verification.

    // Ramana Kompella’s SOCIAL //
    LinkedIn: / rkompella

    // Website REFERENCE //
    https://outshift.cisco.com/

    // Videos REFERENCE //
    • Cisco Quantum Summit 2026 - Quantum Data C...
    https://event.on24.com/wcc/r/5305787/...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPON…

  40. #579: New CCNA Exam: Stop Memorizing and Start Labbing

    8 juni 2026 · 40 min

    Afspelen
    Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas Lees meer

    // Ryan Rose’s SOCIAL //
    LinkedIn: / ryanrose3
    Cisco Blogs: https://blogs.cisco.com/author/ryanrose
    X: https://x.com/RyanRose

    // Cisco Blogs //
    Cisco Announcement: https://blogs.cisco.com/learning/ai-u...
    CCNA 2.0 Blueprint: https://learningnetwork.cisco.com/s/c...

    // Websites and YouTube Channel links //
    Cisco U: https://u.cisco.com/
    Cisco Learning Network: https://learningnetwork.cisco.com/s/
    Netacad: https://www.netacad.com

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:18 - Intro
    0:25 - CCNA Update Announcement
    03:03 - Practical Skills/Troubleshooting as the Focus
    08:23 - Simlets/Lablets in the CCNA
    11:40 - AI in the CCNA
    15:24 - Biggest Changes in the New CCNA
    18:35 - Goals of the New CCNA
    20:58 - Transitioning to the New CCNA
    24:37 - CML, Packet Tracer and Other Free Tools
    26:25 - CCIE Update Announcement
    32:57 - Communication and Critical Thinking Tutorials
    35:29 - Free and Paid Training Resources
    38:24 - Final Thoughts

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    #ccna #cisco #ai

  41. #578: How Cisco Is Using AI to Fix Networks

    5 juni 2026 · 23 min

    Afspelen
    Cisco is bringing AI agents into network operations with Cisco Cloud Control, AI Canvas, and Agentic Ops. In this demo, David Bombal is joined by DJ Sampath (SVP and General Manager, AI Software and Platform) to look at how Cisco is using AI to simplify complex network troubleshooting, infrastructure management, agent security, and observability. Instead of jumping between multiple dashboards, tools, teams, and tickets, Cisco Cloud Control brings network, security, observability, and infrastructure context into one interface. Lees meer

    The demo starts with a simple real-world problem: why can’t a phone connect to the network? From there, Cisco AI Canvas investigates the topology, calls the right agents, checks the wireless environment, moves into the firewall/security domain, and identifies the root cause: a site-to-site VPN tunnel issue caused by missing OSPF route exchange.

    You will see how Cisco is using MCP servers, topology agents, troubleshooting agents, firewall agents, and purpose-built models to help network engineers understand what is happening across Meraki, Catalyst, Firepower, Intersight, Splunk, Security, and other Cisco platforms.

    The video also covers the Unified Cisco Fabric app, which connects campus and data center environments with a firewall in between, plus Cisco’s agentic security app for monitoring and controlling AI agents in the enterprise. DJ also shows how Cisco is thinking about token usage, runaway agents, agent observability, Splunk, Galileo, policy enforcement, and secure AI adoption.

    The interview also covers Cisco’s work with OpenAI and Codex, including how frontier models, purpose-built Cisco models, MCP servers, APIs, Cisco data fabric, and real network data are being used to reduce hallucinations and make AI more useful for infrastructure teams. If you are a network engineer, cybersecurity professional, infrastructure engineer, or someone trying to understand how AI will affect networking, this demo shows where things are going.

    Tha…

  42. #577: My Dream "home lab"

    22 mei 2026 · 28 min

    Afspelen
    Join me for an exclusive, behind-the-scenes tour of Cisco's purpose-built $20 million AI data center lab in San Jose. AI is revolutionizing the tech industry, but running massive 10,000 GPU clusters can cost up to $175 million a year—and a mere 5% network bottleneck can flush $8 million down the drain. In this video, we break down the hardware, software, and networking topologies required to build, secure, and scale massive AI data centers. Lees meer

    I sit down with Cisco engineers to explore scale-up domains with NVIDIA H200 and AMD MI350X servers, scale-out rail-optimized topologies, and the massive Cisco Silicon One G300 ASIC delivering 102.4 Terabits per second with innovative liquid cooling. We also dive into the Ethernet vs. InfiniBand debate for scaling to 100,000 GPUs, the power of Linear Pluggable Optics (LPO) to reduce power draw, and how Cisco used AI to safely refactor 500,000 lines of legacy code. Whether you are building
    an AI network today or upgrading your engineering skills for the future, this is video can help you learn.

    Big thanks to Cisco for sponsoring my trip to Cisco Data Center and Operational Control Center in San Jose.

    // Will Eatherton SOCIAL //
    LinkedIn: / willeatherton
    Newsroom: https://newsroom.cisco.com/c/r/newsro...

    // Rakesh Kumar SOCIAL //
    LinkedIn: / rakesh-kumar-78559b

    // Richard Licon SOCIAL //
    LinkedIn: / rlicon75

    // Ram Gandikota //
    LinkedIn: / ramgandikota

    // Faraz Taifehesmatian SOCIAL //
    LinkedIn: / faraztaifeh

    // YouTube video REFERENCE //
    • The 100Tbps AI Switch: Inside the Beast

    / David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // …

  43. #576: How to track dark ships using OSINT (with demos)

    23 april 2026 · 50 min

    Afspelen
    Big thank you to DeleteMe for sponsoring this video. Use my link https://joindeleteme.com/Bombal to receive a 20% discount or use the QR Code in the video. Lees meer

    In this OSINT deep dive, professional OSINT analyst Ray Baker joins David Bombal to explore the shadowy world of maritime cybersecurity and vessel tracking. Discover the critical differences between the dark fleet and shadow fleet, and learn the exact open-source intelligence methods used to track ships attempting to hide their identities on the open ocean. From manipulating AIS tracking data and repainting ship decks to the terrifying reality of hacking Chinese-made port cranes, this video uncovers the hidden cyber threats facing global supply chains. We also explore the tools used by professionals, such as MarineTraffic and Equasis, to investigate illicit maritime activities and track adversarial movements.

    // Rae Baker’s SOCIAL //
    Website: https://www.raebaker.net/
    LinkedIn: / raebakerosint
    X: https://x.com/wondersmith_rae

    // Amazon Books REFERENCE //
    Deep Dive: Exploring the Real-world Value of Open Source Intelligence

    US: https://amzn.to/4mw8Swo
    UK: https://amzn.to/4t6uhhQ

    // Website REFERENCE //
    https://www.marinetraffic.com/en/ais/...
    https://home.treasury.gov/
    https://tankertrackers.com/

    // Video REFERENCE //
    Deep Dive into OSINT: • Deep Dive OSINT (Hacking, Shodan and more!)

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:52 - Intro
    01:25 - About Deep Dive
    03:15 - Sponsor
    …

  44. #575: AI attackers are winning. Here is the SECRET to survive.

    14 april 2026 · 1 uur 1 min

    Afspelen
    Are AI attackers winning the cybersecurity war? In this video, I sit down with Daniel Miessler, a 25-year security veteran, to discuss the terrifying reality of AI-driven cyber attacks and the massive advantage hackers have today. But it is not all doom and gloom. Daniel introduces his open-source project, PAI (Personal AI Infrastructure), demonstrating how you can build a customized, local AI assistant to automate your workflow, defend your data, and level up your tech skills. We cover everything from AI agents conducting prompt injection CTFs (like Gandalf) in real-time, to the future of work and why the ultimate goal of many corporations is zero human employees. Whether you are worried about AI replacing your job or you want to learn how to leverage local LLMs, Linux, and agentic AI to become an unstoppable force, this conversation is your blueprint for surviving and thriving in the 2026 tech landscape. Lees meer

    Go here to get PAI for free: https://github.com/danielmiessler/Per...

    // Daniel’s SOCIAL //
    Twitter/X: / danielmiessler
    Website: https://danielmiessler.com/
    GitHub: https://github.com/danielmiessler
    LinkedIn: / danielmiessler
    YouTube: / @unsupervised-learning

    / David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    01:05 - Introduction
    02:06 - Daniel’s Background & His Predictions of The Future of AI
    05:52 - How Attackers use AI
    08:40 - Open Source SSL Vulnerability
    10:20 - Helping Businesses Scale using AI
    12:48 - Personal AI Infrastructure (PAI)
    …

  45. #574: Hacking Windows Active Directory in 10 minutes

    14 april 2026 · 25 min

    Afspelen
    Thank you ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    // Spencer Alessi’s SOCIAL //
    YouTube: / @techspence
    Website: https://spenceralessi.com/adsecuritykit/
    X: https://x.com/techspence
    LinkedIn: / spenceralessi
    Swag: https://www.etsy.com/shop/ethicalthre...

    // ThreatLocker’s SOCIAL //
    LinkedIn: https://www.linkedin.com/company/thre...
    X: https://x.com/threatlocker
    Instagram: / threatlocker
    Website: https://www.threatlocker.com/

    / David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming up
    0:54 - Spencer Alessi introduction & background
    02:20 - Pentesting demo // Active Directory
    03:34 - Control paths // Finding bad permissions with ADeleg
    06:04 - Finding bad permissions with NetTools
    06:52 - The most common issue
    08:15 - Certificate abuse
    12:20 - Quick recap
    12:30 - Certificate abuse continued
    15:10 - Pentesting summary
    15:09 - How to become a pentester
    18:48 - Recommended certifications
    20:54 - Advice for blue teamers
    22:15 - Overcoming being an introvert // Soft skills vs tech skills
    23:43 - Windows hacking in the real world
    24:54 - Conclusion

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational pu…

  46. #573: WhatsApp Hackers for Hire on the Dark Web (Surprisingly cheap)

    7 april 2026 · 28 min

    Afspelen
    Thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    // Colin Ellis’ SOCIAL //
    LinkedIn: / collinellis95

    // ThreatLocker’s SOCIAL //
    LinkedIn: https://www.linkedin.com/company/thre...
    X: https://x.com/threatlocker
    Instagram: / threatlocker
    Website: https://www.threatlocker.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming up
    01:00 - Intro
    02:24 - Demo Start - Clear Net
    03:37 - Tails and Tor
    04:55 - Navigating the Dark Web
    07:28 - Hire a Hacker
    14:30 - Script Kitties and We The North
    20:42 - Zero Trust World
    21:46 - Ransomware Group Clop
    23:35 - Digital Hygiene
    27:17 - Outro

    Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

    Disclaimer: This video is for educational purposes only.

    #darkweb #hacking #tor

  47. #572: How Cisco Protects AI Agents in Modern Data Centers

    31 maart 2026 · 14 min

    Afspelen
    Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Amsterdam 2026. Lees meer

    Join David as he sits down with Cisco's Dave West (SVP, Global Specialists), to unpack the technical reality behind the OneCisco platform. Dive deep into how Cisco is transitioning from traditional networking into a platform-centric powerhouse that seamlessly integrates secure networking, AI, and cybersecurity. This discussion explores the convergence of networking and security through the Splunk acquisition, the infrastructure of AI-ready data centers powered by NVIDIA's Spectrum X and NVLink, and the rollout of agentic operations. Discover how micro-segmentation, Zero Trust access, and hybrid cloud solutions are solving the
    complexities of modern, distributed workforces. Whether you are managing on-premise infrastructure, hybrid environments, or preparing your network for the AI revolution, this deep dive covers the essential reference architectures and visibility tools you need to secure your enterprise.

    // Dave West’s SOCIAL //
    LinkedIn: / dave-west1

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:14 - Introduction
    01:07 - Cisco as a Platform Company
    02:26 - Interest in AI
    03:14 - Cybersecurity Today
    04:18 - What is One Cisco?
    08:27 - The Workplaces of Tomorrow
    09:58 - Secure Networking as the Foundation
    12:38 - The Complexity of Secure Networking
    13:46 - A Journey of One Cisco
    14:23 - Outro

    Please note that links listed may be affiliat…

  48. #571: Google Big Sleep: The End of Human Hackers?

    31 maart 2026 · 1 uur 8 min

    Afspelen
    Big thank you to DeleteMe for sponsoring this video. Use my link http://jointdeleteme.com/Bombal to receive a 20% discount or use the QR code in the video. Lees meer

    Welcome back to the channel! In this deep dive, Stephen returns to break down the rapidly evolving landscape of AI in cybersecurity. We explore the critical differences between offensive AI (using AI to enhance attacks) and adversarial AI (attacking the AI models themselves). Learn the mechanics behind prompt injection, LLM jailbreaking, and how vector databases are structured. We also analyze real-world case studies, including Google Project Zero's Big Sleep autonomous zero-day agent, and demonstrate how new AI-driven tools are being used for patch diffing and root cause analysis. Finally, we tackle the massive industry question: will AI replace human penetration testers, and what steps should you take right now to futureproof your tech career? Plus, a quick look at how automated agents are tackling API vulnerabilities like BOLA.

    // Stephen's Social //
    Twitter: / steph3nsims
    YouTube: / @offbyonesecurity
    Discord: / discord

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    01:10 - DeleteMe Ad
    02:29 - Intro
    03:25 - About Stephen
    06:10 - AI Explained
    09:45 - Why You Should Study AI
    13:04 - The Different AI Defined
    22:10 - Vector Databases
    24:05 - How Are Red Teamers Using AI
    28:47 - Where Red Teamers Can Practice
    34:10 - How Chatbots Work
    36:14 - AI's Affect on Companies / Jobs
    42:51 - What A…

  49. #570: 100 Terabit Smart Switches: What You Need to Know

    31 maart 2026 · 36 min

    Afspelen
    Thank you to Cisco for sponsoring my trip to the Cisco AI Lab in San Jose. Lees meer

    In this deep dive into the future of data center networking, we sit down to explore the massive shifts happening in AI infrastructure. We discuss the rollout of new 100 terabit smart switches and firewalls powered by the Cisco Silicon One G300 chip, alongside the highly anticipated NVIDIA Spectrum 6. Discover the critical debate between Ethernet and InfiniBand for scaling AI clusters, the complexities of co-packaged optics (CPO) versus linear packaged optics (LPO), and how agentic AI and tools like Claude are revolutionizing legacy C code refactoring. From managing data center power
    constraints to enforcing security policies directly on DPUs, this conversation covers the hardware and software transformations you need to know to stay ahead in network engineering.

    // Will Eatherton SOCIAL //
    LinkedIn: / willeatherton
    Newsroom: https://newsroom.cisco.com/c/r/newsro...

    // YouTube video REFERENCE //
    • The 100Tbps AI Switch: Inside the Beast
    • Did Ethernet Just Win? Cisco’s 100Tbps AI ...

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY STUFF //
    https://www.amazon.com/shop/davidbombal

    // SPONSORS //
    Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

    // MENU //
    0:00 - Coming Up
    0:42 - Introduction
    01:05 - Recap of Announcements from Cisco Live
    03:19 - 1.6 Terabyts Client Optics
    04:27 - Hyperscalers and Neo-Clouds
    05:13 - Cisco and Nvidia working together
    05:39 - Scale Across
    06:43 - Announcements from Nvidia GTC 2026
    09:15 - Firewalls and AI Clusters
    10:36 - The Future, Growth and Innovation
    11:53 - Why have a Cis…

  50. #568: 5-Minute Cyber Hacks Everyone Should Know (2026)

    31 maart 2026 · 37 min

    Afspelen
    Big thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Lees meer

    Forget hot glue and paper clips. Here are 7 REAL 5-minute cybersecurity hacks everyone should know in 2026. Recorded live at Zero Trust World (ZTW26), David Bombal and a team of hackers demonstrate actual cyber attacks and how quickly your systems can be compromised.

    From forcing AI prompt injections to steal credentials, to hiding C2 servers
    in plain sight on a Steam profile, these are the real-world exploits threat actors are using right now. We're diving into the technical weeds to show you Windows LNK shortcut hijacking, Linux privilege escalation via sudo misconfigurations, and how to protect yourself from these exact attacks.

    // Guests’ SOCIAL //
    Alex Benton: Rename StickyKeys / alex-benton-b805065
    Kenneth Walker: Everthing is a C2 / kenneth-walker-527595109
    Jacob Meyer: Shortcut Hijack / jacob-meyer-165b8359
    David Smith: Alternate Data Streams / david-smith-sudo-wrestler
    Karla Abarca: The validity of an application before execution / karlaabarcacyber
    Ramsey Shaban: Prompt Injection / ramsey-shaban-390335205
    Tillman Hall Powershell Fake Logon / tillmanhall
    Rayton Li: Rooting Around Linux: Privilege Escalations / rayton-li
    Kieran Human: Network Hash Stealing / kieran-human-5495ab170

    // ThreatLocker’s SOCIAL //
    LinkedIn: https://www.linkedin.com/company/thre...

    X: https://x.com/threatlocker
    Instagram: / threatlocker
    Website: https://www.threatlocker.com/

    // David's SOCIAL //
    Discord: discord.com/invite/usKSyzb
    Twitter: www.twitter.com/davidbombal
    Instagram: www.instagram.com/davidbombal
    LinkedIn: www.linkedin.com/in/davidbombal
    Facebook: www.facebook.com/davidbombal.co
    TikTok: tiktok.com/@davidbombal
    YouTube: / @davidbombal
    Spotify: open.spotify.com/show/3f6k6gE...
    SoundCloud: / davidbombal
    Apple Podcast: podcasts.apple.com/us/podcast...

    // MY S…