Free Daily Podcast Summary
7 Minute Security: Daily Summaries Delivered
by Brian Johnson
7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- Today28 min
7MS #747: Tales of Pentest Pwnage – Part 92
Today's tale of pentest pwnage is about a GPO escalation path I'd seen before but could never get working, until a bloodhoundcli update introduced me to GroupPolicyBackdoor. I'll cover how it let me target one specific server, how it cleans up after itself, and the little gotcha that confused me in the lab. Spoiler: all this hard work ended with a 2 a.m. domain admin victory dance and a well-earned mint hot cocoa. Added bonus: I've got a short video about GroupPolicyBackdoor over at 7MinSec.club.
- 1 weeks ago34 min
7MS #746: Claude is Really Good at PowerPoint
Hey friends, today I'm sharing something that might be obvious, but really helped save my bacon this week: Claude is very good at PowerPoint. I was working on a presentation with my friends at Netwrix (go catch the replay!), and was suffering some creative designer's/writer's block. Claude got my juices flowing by taking raw recordings of pentest attacks and then Frankenstein-ing them to look like they came from a completely different (and cool!) Halloween-themed domain called HALLOWEEN.LOCAL. I think today's episode is a great example of how you can use AI to bring a vision to life while staying in charge of the project's overall vision and not letting AI do all the thinking and creative work for you.
- 2 weeks ago23 min
7MS #745: Securing Your Family During and After a Disaster – Part 10
This episode is a downer, but asks some important topics related to losing a loved one: Do you know what their wishes are for their funeral, their money, cremation vs. burial vs. other? Do you know all the places they do business so you can adjust/takeover/cancel services as necessary? Do you know all the places the have checking/saving/investment accounts? Can you access all the important accounts this person used to manage?
- 2 weeks ago26 min
7MS #744: Using n8n to Automate the Security Dog Food
Hey friends! Today I'm mashing two of our mini-series — eating the security dog food and my new obsession with n8n — into one big automation sandwich. I'll walk you through how Claude and a bunch of JSON files helped me build a self-updating asset inventory in Notion, firewall rule reviews, patch-ticket automation, and a push-button external pentesting and OSINT sweep. Basically, imagine I've cornered you at a party and won't stop talking about n8n.
- 4 weeks ago25 min
7MS #743: Eating the Security Dog Food - Part 9
Hey friends, it has been a long time since we talked about eating our own security dog food. However, I couldn't be more excited about some big ways we've moved the 7MinSec security program forward, including the release of our shiny new trust center. Enjoy!
- Oct 2, 202626 min
7MS #742: Baby's First n8n
Hey friends! I've got some personal and work travel this week, so I'm skipping the tangents (mostly) and jumping straight into something I'm nerdily excited about: Baby's First n8n. If you're not familiar, n8n is a platform for chaining together and automating just about anything your heart desires – and naturally, my heart desires automating away the boring parts of pentesting. In this episode I cover how I finally got hip to n8n (late to the party, as always), the Black Hills webcast that nudged me into it, how I fed Claude my Frankenstein "Swiss Army" pentest script and asked it to turn push-lots-of-buttons into push-one-button, the clever workaround for firing nmap, EyeWitness, and other tools like it (plus the safety gate I built so my automation can't go rogue and get me in trouble), a full OSINT recon fork powered by Project Discovery Neo that lands report-ready in SysReptor, and the many minutes of my life I get back from each OSINT run – and why that's the whole point. By the way, n8n is not a sponsor or partner – just something I like in case you like it too. Got cool n8n workflows of your own? I'd love to hear 'em!
- Sep 25, 202636 min
7MS #741: Tales of Pentest Pwnage - Part 91
Hey friends! Today's tale of pentest pwnage is brought to you by four hours of sleep, a large mint hot cocoa, and unhealthy levels of giggity. There's a very good reason for all three, but you'll have to hang out to the end of the episode to hear it. First, let's talk about an escalation path I've never walked before: A really tight network is a beautiful and terrible thing — this client went from a C-minus-ish environment in past years to one where I could find basically nothing. No local admin creds laying around, no poisonable protocols, no juicy file shares. Straight into "well, try harder" mode I went. Two new-to-me tools join the arsenal — one that gives you a second opinion on a big pile of pilfered files (Titus), and a one-shot PowerShell command (GPOZaurr) that hands you a report card for everything that's wrong with your GPOs (plus how to fix it). The finding I almost walked right past — an ADCS issue where only a tiny handful of objects could enroll. I said "all right, I'll move on." Then I came back to it, and saw I had missed the (kind of) obvious attack path. A certificate I couldn't authenticate with — and the 0xdf write-up that rescued me from my own gap in knowledge. Machine account quota was set to zero — so of course I tried to add a computer object anyway. Spoiler: it worked like a dirty shirt. The scheduled task trick rides again — my favorite "this is not going to get fixed" Windows behavior. I had a client push back on this one hard: "You had to know the password of the DA you abused, right? You stole the TGT, right?" Nope and nope. How to actually defend against all of this — some ADCS tightening, a checkbox on your high-privilege accounts that a lot of folks don't have ticked, and my new mantra: RDP with purpose. And then it's personal time — my oldest son Cam passed his national paramedic exam, and I am busting my buttons. Stick around for the whole story, including the 4 a.m. potty break that changed everything, the two health care professionals I'd like to hand a party invitation to in person (and why my wife says "I don't know about that, dude").
- Sep 18, 202633 min
7MS #740: Tales of Pentest Pwnage - Part 90
Hey friends! We've been on a bit of a Tales of Pentest Pwnage bender lately, so let's keep it rolling with Part 90. (And Mom, relax — this is not one pentest story chopped into 90 parts.) Today is less of an A-to-Z story and more a pile of tips and tricks pulled from a recent string of SCCM-flavored internals — plus a tangent about a video game and a little robot Claude and I built to get my life back. Multi-tier SCCM is having a moment — I've never administered SCCM a day in my life, but 2026 keeps dropping me into these split-role environments. Here's where I go to figure out my attack surface when all I've got is a low-priv cred. SMB signing on? Cool, I'll go around it — relaying from one SCCM box to the one with SQL on it, and the easy-button tool that vacuums the good stuff out of the database once you're there. (NAA creds, clear-text local admin passwords, install scripts with creds baked in…yes please.) Then relay the other direction — when the loot came back stale, a nudge from a Slack channel had me pointing the relay backwards, and I giggled like a little schoolboy at what popped out. Adding yourself to the local admin group: still weirdly undetected — an old episode of ours reminded me of an Impacket tool I don't see written up on many pentest blogs, and it slipped right by. My favorite cheat code hit a snag — the evil-scheduled-task-under-a-logged-in-DA trick kept coughing up permission errors, so I had to get creative. Plus the defensive recs I'm still trying to sharpen up — if you've got a better way to close this loophole, I'm all ears! Tangent: Halloween (the video game) and the lobby watcher — a million players and I'm still staring into the lobby abyss for 10 minutes at a time. So Claude and I built something that watches the screen and texts me when it's time to sprint back to the keyboard. It's not cheating. It's not! (The Texas Chainsaw crowd disagreed, loudly.)
Get 7 Minute Security summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Security Now (Video)
A weekly deep dive into cybersecurity news, threats, and defenses with Steve Gibson and Leo Laporte.
Smashing Security
Weekly episodes explore cybercrime, hacking, privacy failures, and tech disasters with insight and humor.
Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.
NatSec Matters
Former national security officials interview top leaders on critical security challenges and U.S. policy responses.
The Low Down
A podcast about hacking.
Plaintext with Rich
Explains cybersecurity topics in simple terms to help listeners stay safer online.
Sources & Methods
A weekly deep dive into national security news with NPR correspondents and interviews with military, intelligence, and diplomatic leaders.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
Hacker And The Fed
A former FBI agent and a reformed hacker analyze cybersecurity threats and cybercrime investigations from opposing but informed viewpoints.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
The Peterman Pod
Career stories from a former Instagram Staff engineer to help software developers grow.
About 7 Minute Security
7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from 7 Minute Security in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's 7 Minute Security daily summary?
It's a free AI-powered email that summarizes new episodes of 7 Minute Security as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the 7 Minute Security podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official 7 Minute Security product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Brian Johnson.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does 7 Minute Security release new episodes?
7 Minute Security publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does 7 Minute Security cover?
7 Minute Security covers topics including News, Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting 7 Minute Security summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.