<![CDATA[Threat Aware]]>Threat Aware is a cybersecurity podcast network for security practitioners, business leaders, and anyone trying to make sense of a threat landscape that never stops moving. Hosted by Galactic's security team, dedicated shows cover attacker tactics, AI risk, security leadership and honest conversations on what good security actually requires. New episodes drop weekly.

]]>https://www.galacticadvisors.com/Riverside.fm (https://riverside.com)Mon, 12 Oct 2026 22:20:13 GMTWed, 08 Jul 2026 15:08:02 GMT60Max Kurek, Cody Kretsinger, Seth Loe, Aidan Brown<p>Threat Aware is a cybersecurity podcast network for security practitioners, business leaders, and anyone trying to make sense of a threat landscape that never stops moving. Hosted by Galactic's security team, dedicated shows cover attacker tactics, AI risk, security leadership and honest conversations on what good security actually requires. New episodes drop weekly.</p>episodicMax Kurek, Cody Kretsinger, Seth Loe, Aidan Brownmax.kurek@galacticadvisors.comno<![CDATA[Privilege Escalation 03: How Hackers Walk Into Your Cloud]]>An attacker pastes a link into an ordinary web form and walks away with the keys to the company's whole cloud. No password, no malware. Cody Kretsinger breaks down how that kind of attack works, why it's still effective today, and the fix that's been around for years.

]]>3eb202fb-4ee3-400c-95a2-060ae5a4416eWed, 07 Oct 2026 14:00:00 GMT<p>An attacker pastes a link into an ordinary web form and walks away with the keys to the company's whole cloud. No password, no malware. Cody Kretsinger breaks down how that kind of attack works, why it's still effective today, and the fix that's been around for years.</p>no00:14:433Privilege Escalation 03: How Hackers Walk Into Your Cloudfull<![CDATA[The Risky Bit 03: The AI Panic Filter]]>The news says AI agents have broken loose and infected the internet. Some of that deserves your attention, and a lot of it will send you chasing ghosts. Seth Loe breaks down how to tell the difference with a quick test he calls SCAM.

New episodes of Threat Aware drop weekly. Subscribe so you never miss one.

]]>3aeebf65-3d20-4f18-bf68-33e6425c5f29Wed, 30 Sep 2026 14:30:00 GMT<p>The news says AI agents have broken loose and infected the internet. Some of that deserves your attention, and a lot of it will send you chasing ghosts. Seth Loe breaks down how to tell the difference with a quick test he calls SCAM.<br /><br />New episodes of Threat Aware drop weekly. Subscribe so you never miss one.</p>no00:15:443The Risky Bit 03: The AI Panic Filterfull<![CDATA[ Unauthorized Opinions 04: The AI Security Window Is Closing]]>AI-enabled cyberattacks are already here, and the window for defenders to respond is short. That's the claim in the OpenAI open letter signed by hundreds of organizations, including direct competitors. Max, Seth, and Cody get into why you should treat this as a capital-I Incident, why technical debt bites first, whether the defender's window is real or a very good sales frame, and what Dario Amodei's subsequent pacing essay changes.

Read the open letter: https://openai.com/collective-cyberdefense/

Unauthorized Opinions is part of the Threat Aware podcast network. New episodes weekly. Subscribe and never miss one.

]]>557b183e-05c3-40b6-8231-0033d62c1462Wed, 23 Sep 2026 15:38:54 GMT<p>AI-enabled cyberattacks are already here, and the window for defenders to respond is short. That's the claim in the OpenAI open letter signed by hundreds of organizations, including direct competitors. Max, Seth, and Cody get into why you should treat this as a capital-I Incident, why technical debt bites first, whether the defender's window is real or a very good sales frame, and what Dario Amodei's subsequent pacing essay changes.</p><p>Read the open letter: <a href="https://openai.com/collective-cyberdefense/" rel="noopener noreferrer nofollow" target="_blank">https://openai.com/collective-cyberdefense/</a></p><p>Unauthorized Opinions is part of the Threat Aware podcast network. New episodes weekly. Subscribe and never miss one.</p>no00:59:494 Unauthorized Opinions 04: The AI Security Window Is Closingfull<![CDATA[Beyond Intelligence 02: Why AI Governance Won't Save You]]>There's a pile of AI frameworks out there, and they're not built to compete. Some govern how you run AI, others secure the systems you ship. Aidan Brown untangles the two, shows which question each one answers, and why passing an AI audit and stopping an attack are two different jobs.

Beyond Intelligence is part of the Threat Aware podcast network. New episodes weekly. Subscribe and never miss one.

]]>0a0916be-3a69-41c2-99df-dcea406136c4Wed, 16 Sep 2026 18:13:28 GMT<p>There's a pile of AI frameworks out there, and they're not built to compete. Some govern how you run AI, others secure the systems you ship. Aidan Brown untangles the two, shows which question each one answers, and why passing an AI audit and stopping an attack are two different jobs.<br /></p><p>Beyond Intelligence is part of the Threat Aware podcast network. New episodes weekly. Subscribe and never miss one.</p>no00:20:262Beyond Intelligence 02: Why AI Governance Won't Save Youfull<![CDATA[Privilege Escalation 02: Your MFA Is a Speed Bump (How Attackers Walk Right Past It) ]]>There are two kinds of MFA. One, attackers beat before breakfast. The other, they can't touch. Almost everyone's running the first one and calling it done. Cody Kretsinger pulls from his red team years to show you which is which... and how an attacker got into the account before the phone even buzzed.

]]>2c718b44-c379-4709-9c67-4077756a5cf6Wed, 09 Sep 2026 17:58:34 GMT<p>There are two kinds of MFA. One, attackers beat before breakfast. The other, they can't touch. Almost everyone's running the first one and calling it done. Cody Kretsinger pulls from his red team years to show you which is which... and how an attacker got into the account before the phone even buzzed.</p>no00:14:042Privilege Escalation 02: Your MFA Is a Speed Bump (How Attackers Walk Right Past It) full<![CDATA[The Risky Bit 02: The Warning from OpenAI and Anthropic]]>OpenAI put out a letter warning that AI-enabled attacks get far worse in the coming months, not years, and hundreds of companies signed on, Anthropic and Microsoft among them. Seth Loe on why your business continuity plan is worthless the moment it assumes the water, power, and internet stay on.

]]>b3fe8513-f880-4c67-a404-9f9435d578a1Wed, 02 Sep 2026 16:00:43 GMT<p>OpenAI put out a letter warning that AI-enabled attacks get far worse in the coming months, not years, and hundreds of companies signed on, Anthropic and Microsoft among them. Seth Loe on why your business continuity plan is worthless the moment it assumes the water, power, and internet stay on.</p>no00:10:042The Risky Bit 02: The Warning from OpenAI and Anthropicfull<![CDATA[Privilege Escalation 01: Half a Second From Disaster]]>In the inaugural episode of Privilege Escalation, Galactic's Director of Security Research, Cody Kretsinger, details a backdoor that came within days of reaching nearly every Linux computer on earth. One engineer caught it by accident, when he noticed his logins were half a second slow. The attacker spent three years volunteering on the project, earning the trust he needed to plant the backdoor.

 

Subscribe to the Threat Aware podcast network. New episodes drop every week.

]]>0506b7a8-abc7-4061-89f5-89a0573e6396Wed, 26 Aug 2026 22:30:03 GMT<p>In the inaugural episode of Privilege Escalation, Galactic's Director of Security Research, Cody Kretsinger, details a backdoor that came within days of reaching nearly every Linux computer on earth. One engineer caught it by accident, when he noticed his logins were half a second slow. The attacker spent three years volunteering on the project, earning the trust he needed to plant the backdoor.</p><p> </p><p>Subscribe to the Threat Aware podcast network. New episodes drop every week.</p>no00:15:061Privilege Escalation 01: Half a Second From Disasterfull<![CDATA[Unauthorized Opinions 03: Cost of a Data Breach 2026]]>IBM's Cost of a Data Breach report just dropped. Attackers now go undetected for 183 days, ransomware crews would rather torch your reputation than encrypt your files, and Cody doesn't buy the AI-blamed stats for a second. Max, Seth, and Cody on why the fix is still the basics, 21 editions later. Get access to the Cost of a Data Breach Report 2026 here: https://www.ibm.com/reports/data-breach

]]>d9deb802-eb6e-45b0-a12b-93b456430e13Wed, 19 Aug 2026 14:21:53 GMT<p>IBM's Cost of a Data Breach report just dropped. Attackers now go undetected for 183 days, ransomware crews would rather torch your reputation than encrypt your files, and Cody doesn't buy the AI-blamed stats for a second. Max, Seth, and Cody on why the fix is still the basics, 21 editions later. Get access to the Cost of a Data Breach Report 2026 here: <a rel="noopener noreferrer nofollow" href="https://www.ibm.com/reports/data-breach" target="_blank">https://www.ibm.com/reports/data-breach</a></p>no01:08:463Unauthorized Opinions 03: Cost of a Data Breach 2026full<![CDATA[The Risky Bit 01: Wars Without Bombs]]>An Iran-linked group breached a California water utility, said it could've shut the water off, and called it a warning. Two weeks later twelve states were hit through internet-facing PLCs. Seth Loe on how little it takes, why your grid and factory are next, and the Stuxnet irony underneath it all.

]]>b67bdb0e-9964-436e-8bec-a4ce1f2ed8ccWed, 12 Aug 2026 14:37:00 GMT<p>An Iran-linked group breached a California water utility, said it could've shut the water off, and called it a warning. Two weeks later twelve states were hit through internet-facing PLCs. Seth Loe on how little it takes, why your grid and factory are next, and the Stuxnet irony underneath it all.</p>no00:14:351The Risky Bit 01: Wars Without Bombsfull<![CDATA[Beyond Intelligence 01: Your AI Agent Didn't Go Rogue]]>In this episode, Aidan digs into two recent cases where AI agents slipped out of environments everyone believed were sealed and reached systems they were never meant to touch. Every headline called it going rogue. He argues the word is wrong, and that getting it wrong has you shopping for a better model when all you needed was a sentence telling the agent where to stop. Also in this episode: the ten-year-old boat racing game that explains the whole thing, and the two boundaries that are always wider than your diagram.

Beyond Intelligence is part of the Threat Aware podcast network, which also brings you Unauthorized Opinions, Privilege Escalation, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode.

]]>51b5cba6-3bcf-45d5-b2f2-97d5f02f618eWed, 05 Aug 2026 14:41:02 GMT<p>In this episode, Aidan digs into two recent cases where AI agents slipped out of environments everyone believed were sealed and reached systems they were never meant to touch. Every headline called it going rogue. He argues the word is wrong, and that getting it wrong has you shopping for a better model when all you needed was a sentence telling the agent where to stop. Also in this episode: the ten-year-old boat racing game that explains the whole thing, and the two boundaries that are always wider than your diagram.</p><p></p><p>Beyond Intelligence is part of the Threat Aware podcast network, which also brings you Unauthorized Opinions, Privilege Escalation, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode.</p>no00:26:461Beyond Intelligence 01: Your AI Agent Didn't Go Roguefull<![CDATA[Unauthorized Opinions 02: When Critical AI Functions Suddenly Disappear]]>Earlier this year, a US export-control directive took Claude Fable 5 and Mythos 5 offline for every customer worldwide, with no warning and no transition window. Access returned 19 days later, but the chats and tokens lost in between did not. Max, Cody, Seth and Aidan work through what that means for anyone whose daily workflow now runs through a single AI vendor. Also in this episode: the AI exclusions that are quietly starting to appear in commercial security policies, plus a high-profile data breach that impacted nearly 7 million people.  

Unauthorized Opinions is part of the Threat Aware podcast network, which also brings you Privilege Escalation, Beyond Intelligence, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode.

]]>d40002a8-34b8-433c-ba43-985c9167482eTue, 28 Jul 2026 18:52:19 GMT<p>Earlier this year, a US export-control directive took Claude Fable 5 and Mythos 5 offline for every customer worldwide, with no warning and no transition window. Access returned 19 days later, but the chats and tokens lost in between did not. Max, Cody, Seth and Aidan work through what that means for anyone whose daily workflow now runs through a single AI vendor. Also in this episode: the AI exclusions that are quietly starting to appear in commercial security policies, plus a high-profile data breach that impacted nearly 7 million people.  </p><p></p><p>Unauthorized Opinions is part of the Threat Aware podcast network, which also brings you Privilege Escalation, Beyond Intelligence, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode.</p>no01:02:0612Unauthorized Opinions 02: When Critical AI Functions Suddenly Disappearfull<![CDATA[Unauthorized Opinions 01: What's the Deal with CMMC?]]>In this episode, Max, Cody, Seth and Aidan discuss the Pentagon’s suspension of CMMC Phase 2 that puts third-party assessments on hold and gives a reform task force 60 days to report back. They also tell their “welcome to cybersecurity” stories and make some inaugural inductions into the Cybersecurity Hall of Fame and Hall of Shame.   

Unauthorized Opinions is part of the Threat Aware podcast network, which also brings you Privilege Escalation, Beyond Intelligence, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode. 

]]>2e4e4d7e-24c5-488a-b5ac-60158bcac0ffTue, 28 Jul 2026 18:49:03 GMT<p>In this episode, Max, Cody, Seth and Aidan discuss the Pentagon’s suspension of CMMC Phase 2 that puts third-party assessments on hold and gives a reform task force 60 days to report back. They also tell their “welcome to cybersecurity” stories and make some inaugural inductions into the Cybersecurity Hall of Fame and Hall of Shame.   </p><p></p><p>Unauthorized Opinions is part of the Threat Aware podcast network, which also brings you Privilege Escalation, Beyond Intelligence, and The Risky Bit. New episodes drop weekly. Subscribe so you never miss an episode. </p>no01:05:0811Unauthorized Opinions 01: What's the Deal with CMMC?full