Free Daily Podcast Summary
Safe Mode Podcast: Daily Summaries Delivered
by Safe Mode Podcast
Podcast by Safe Mode Podcast
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 5 days ago28 min
Was "Black October" really that bad?
October’s wave of vulnerabilities and attacks earned a stark nickname: “Black October.” But was it an unprecedented crisis—or a glimpse of what’s becoming normal? On this episode of CyberScoop’s Safe Mode, Greg discusses the month’s events with Tom Hagel, distinguished threat researcher and research lead at SentinelOne’s SentinelLabs. Hagel explains why many incidents that surfaced in October began months earlier, how automation and AI tools are lowering the barrier to large-scale attacks, and why defenders may have only minutes to respond once a patch is released. The conversation also examines the risks of relying on patches alone, the need to assess what an attacker could do after gaining access, and how security teams can avoid letting high-profile vulnerabilities distract from other threats.
- 1 weeks ago40 min
Patch and move on? Why vulnerability response doesn't end there
Fresh off the PHP2Shell advisory, former DHS CISO and acting deputy CIO Hemant Baidwan — now executive CISO at Knox Systems, the largest federal managed cloud — joins Safe Mode to break down what actually happens in the hours after a high-severity vulnerability drops. He walks through why "patch it and move on" gives teams a false sense of security, how to map internet reachability in environments that change by the hour, and what a CISA KEV listing really signals to defenders. Baidwan also reflects on writing DHS's first-ever AI cybersecurity guidance, what he'd add to that playbook today — starting with AI agent identity — and why he thinks compliance has drifted into security theater.
- 2 weeks ago32 min
Even safe mode can't save PHP this time
Two critical PHP bugs, found by AI before attackers, leaked before the embargo, patched a day early. Cisco Talos' Matt Olney joins Safe Mode — the show, not PHP's deprecated directive, though neither has ever stopped an exploit — for the part the headlines skipped and what the future holds for the vulns moving forward
- 3 weeks ago32 min
The messy middle of AI-powered bug disclosure
AI is making vulnerabilities easier to find, but who’s going to fix them? On this episode, Greg Otto talks with Josh Bressers, VulnCheck’s director of coordinated vulnerability disclosure about the growing flood of AI-generated security reports. Bressers explains why those findings are increasingly legitimate, how VulnCheck uses AI to streamline incoming reports, and why coordinating fixes still requires a human touch. They also explore the pressure on open-source maintainers, the risks of AI-generated patches, and the widening gap between the cost of discovering vulnerabilities and fixing them. The conversation turns to a fundamental question: What would it take to fund and maintain open-source software like the essential infrastructure it is?
- Oct 8, 202637 min
Which nation-sate should worry us most
What has changed in the cyber threat landscape—and what should defenders do about it? On this episode of Safe Mode, CyberScoop’s Greg Otto speaks with retired U.S. Air Force Lt. Gen. Robert Skinner, former director of DISA and current chairman of Axonius Federal Systems’ board. Skinner assesses the risks posed by China, Russia, Iran and North Korea, arguing that adversaries are increasingly prepositioning in critical infrastructure for potential disruption at a time of their choosing. He explains why China remains the top strategic cyber threat, how AI is shifting the advantage between offense and defense, and why visibility, context and continuous validation are central to protecting both IT and operational technology environments. They also discuss the security of telecommunications and water systems, supply-chain risk, botnet disruptions, Zero Trust as a continuous-improvement journey, and why cybersecurity must become inseparable from military operations.
- Oct 1, 202633 min
What AI alignment means for cybersecurity
The debate over AI alignment often centers on guardrails, model behavior, and whether increasingly capable systems could act in unexpected ways. But what does that conversation look like through a cybersecurity lens? In this episode of Safe Mode, Greg speaks with Adam Meyers, CrowdStrike’s head of counter-adversary operations, about the security implications of goal-driven AI agents, open-weight models, and guardrails that can be removed or bypassed. Meyers argues that systems described as “rogue” may instead be pursuing their assigned objectives in ways their operators failed to anticipate—making containment, monitoring, and clearly defined permissions central cybersecurity concerns. The conversation examines how AI-enabled adversaries are accelerating operations, why open-weight models complicate alignment and safety debates, and how defenders can use AI to keep pace with faster exploitation and shrinking patch windows. Meyers also shares what CISOs and policymakers should focus on: visibility into how AI is being used, controls over what agents can access, and practical safeguards that match the technology’s real-world risks.
- Sep 24, 202637 min
Jailbreaks, sandboxes, and the limits of AI safeguards
Matt Fredrikson, associate professor at Carnegie Mellon and CEO and co-founder of Gray Swan AI, built the world's largest AI red teaming arena, with more than 15,000 people breaking AI systems for prize money. He walks us through how the attacks actually work, from jailbreaks found on small open weights models that transferred straight to frontier systems, to training AI attackers with reinforcement learning. Matt also explains why the recent sandbox escapes didn't happen during safety testing but during cybersecurity capability evals with the guardrails off, what the Agent Harm benchmark revealed about models that refuse harmful requests in text but comply once handed tools, and why the bare minimum of best practices has changed whenever a capable model runs on your infrastructure. In our reporter chat, Greg talks with Matt Kapko about the ShinyHunters-FBI hack.
- Sep 17, 202636 min
ClickFix and the social engineering of routine
It starts with a fake error message. It ends with a pasted command. ClickFix has become one of the most reliable ways for attackers to get an initial foothold — first adopted by criminal groups, now used by state-linked actors like APT28 and Lazarus Group. This week, Greg is joined by John Hammond, Principal Security Researcher at Huntress, who helped identify and name the technique and has tracked its evolution for the past three years. They dig into why ClickFix still drives an estimated 20+ incidents a day at Huntress even after law enforcement disrupted major infostealer infrastructure like LumaStealer, how the technique has splintered into variants like FileFix and "consent fix" targeting Microsoft 365 and browser-stored credentials, and how attackers are now smuggling payloads inside images to slip past endpoint defenses. John walks through a real incident where a single pasted command led to 11 compromised devices, explains why he still believes security awareness training — not just tooling — is the best defense, and makes the case that the browser itself has become the blurriest and most under-protected boundary between endpoint and identity security. The conversation also turns to the npm/Axios supply chain attacks, where operators built fake Slack communities and fabricated employee personas to earn open-source maintainers' trust before compromising their packages — and what, if anything, can technically guard against a threat that's fundamentally social. In our reporter chat, Greg talks with Derek Johnson about the Supreme Court deciding against the Trump administration’s push for changes to mail-in ballots. Follow John on Youtube: https://www.youtube.com/@_JohnHammond
Get Safe Mode Podcast summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
The Low Down
A podcast about hacking.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
Internet Hate Machine
Cool Zone Media and iHeartPodcasts
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Security Now (Video)
A weekly deep dive into cybersecurity news, threats, and defenses with Steve Gibson and Leo Laporte.
Better Offline
Ed Zitron and guests explore how the tech industry’s power players shape society, for better or worse.
The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.
Accidental Tech Podcast
Three nerds discuss technology, Apple, programming, and related topics.
Smashing Security
Weekly episodes explore cybercrime, hacking, privacy failures, and tech disasters with insight and humor.
Interconnects
Exploring AI advancements through in-depth interviews with scientists and critical analysis of the technology beyond the hype.
Phoenix Cast
Discusses cybersecurity, technology, and innovation issues in the military.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Safe Mode Podcast in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Safe Mode Podcast daily summary?
It's a free AI-powered email that summarizes new episodes of Safe Mode Podcast as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Safe Mode Podcast podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Safe Mode Podcast product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Safe Mode Podcast.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does Safe Mode Podcast release new episodes?
Safe Mode Podcast publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does Safe Mode Podcast cover?
Safe Mode Podcast covers topics including News. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Safe Mode Podcast summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.