The Defender’s Log Podcast

Cybercriminals operate at the speed of the internet. Can defenders keep up?
David Redekop sits down with Michael Roberts, veteran private cybercrime investigator, victims' advocate, and founder of Rexxfield, to discuss organized cybercrime, threat intelligence, fraud investigations, and the need for “justice at scale.”
Michael shares firsthand investigative experiences and explains how better collaboration, intelligence sharing, and AI could help defenders disrupt cybercrime faster.
 
Key Discussion Points
01:30—How cybercrime has evolved
05:45—Finding organized crime infrastructure
10:30—The intelligence hidden in WhatsApp
14:00—Investigating online predators
22:00—Mapping scam infrastructure
24:30—How sophisticated crypto scams work
27:00—Disrupting criminal infrastructure
29:00—Scaling threat hunting with AI
30:00—Holding platforms accountable
33:00—Protecting families from online scams
 
Don’t forget to:👍 Like this episode if you found Michael’s insights valuable🔔 Subscribe for more real-world cybersecurity conversations💬 Comment with the biggest security lesson you took away🔗 Share this episode with someone who needs to rethink their digital security
 
#Cybersecurity #Cybercrime #ThreatIntelligence #DigitalInvestigation #FraudPrevention #AI #LawEnforcement #TheDefendersLog

David Redekop sits down with Mark Kreitzman, a cybersecurity entrepreneur with more than 20 years of experience building and leading security companies.
Mark shares his personal experience that changed the direction of his career: becoming the victim of a sophisticated SIM swap despite having an extremely strong security posture. That experience led him to focus on mobile security and ultimately help build Efani, a secure mobile service designed to protect against carrier-level social engineering, unauthorized port-outs, and mobile identity theft.
The conversation goes far beyond SIM swapping. Mark explains why SS7 vulnerabilities still matter, how attackers can use AI to automate reconnaissance, why abandoned phone numbers can remain a security risk for years, and what individuals and organizations can do to reduce their digital attack surface.
Key Discussion Points
00:05—Why SS7 Still Won’t Disappear
00:08—The Security Risks That Remain in Mobile Networks
00:10—Mark’s Experience Being SIM Swapped
00:13—Turning a Personal Attack Into a Cybersecurity Mission
00:16—How Carrier Economics Create Security Vulnerabilities
00:22—How Attackers Use AI for Reconnaissance
00:24—Why Your Email Addresses Can Become an Attack Surface
00:27—The Enterprise Risks of BYOD and Mobile Devices
00:28—How a SIM Swap Can Become a $350 Million Business Problem
00:31—How Efani Rebuilt Mobile Security Around Human Verification
00:35—Decoupling Digital Identity From Cellular Networks
00:39—Why Attackers Can Wait Years to Reclaim Old Phone Numbers
00:43—Mark’s Advice on Information Sharing and Reducing Your Attack Surface
00:45—The Growing Challenge of AI-Generated Identity
If you work in cybersecurity, enterprise security, or simply want to better understand the risks surrounding your mobile identity, this conversation offers practical lessons from someone who experienced the threat firsthand.
Don’t forget to:👍 Like this episode if you found Mark’s insights valuable🔔 Subscribe for more real-world cybersecurity conversations💬 Comment with the biggest security lesson you took away🔗 Share this episode with someone who needs to rethink their mobile security
#Cybersecurity #SIMSwap #MobileSecurity #InformationSecurity #CyberDefense #AI #CyberThreats #DataPrivacy #CISO #TheDefendersLog #Podcast #Security

Privacy and security don’t always have to be opposing forces.
Andrew Campling, Director of 419 Consulting, brings more than three decades of experience across telecom, technology, public policy, and internet standards to a conversation about what happens when technical decisions have real-world consequences.
David and Andrew explore fragmented online safety controls, encrypted metadata, the role of defenders in standards development, and why more diverse perspectives are needed when shaping the future of the internet.
Andrew also shares how AI can help defenders navigate complex standards work and accelerate the learning curve.
Key Discussion Points
00:02:35 – Andrew’s transition from telecom to internet policy00:08:20 – Why parental controls have become so fragmented00:15:50 – The tension between privacy and protection00:22:35 – Why standards need more diverse perspectives00:25:30 – Preparing for increasing encryption and reduced visibility00:28:25 – What it takes to influence internet standards00:31:15 – Using AI to accelerate the learning curve00:37:25 – Andrew’s advice for current and future defenders
👍 Like the video if you found the conversation valuable🔔 Subscribe for more real-world cybersecurity conversations💬 Share your biggest takeaway in the comments🔗 Share this episode with someone who should hear it
#Cybersecurity #CyberDefense #InternetSecurity #Privacy #IETF #CISO #OnlineSafety #AIinCybersecurity #CybersecurityLeadership #TheDefendersLog

Most organizations spend millions protecting what comes in—but what about what goes out?
Cloud environments have transformed the way applications are built, yet outbound security is still one of the most overlooked areas of cybersecurity. In this conversation, David Redekop sits down with Dhruv Ahuja, Founder and Chief Engineer at Chaser Systems, to explore why traditional approaches are falling short, how allowlisting changes the conversation, and why AI is raising the bar for both attackers and defenders.
From building infrastructure in the early days of the internet to developing cloud-native security solutions, Dhruv shares practical lessons on entrepreneurship, engineering, Zero Trust, defence-in-depth, and the future of protecting cloud workloads.
Key Discussion Points
01:00 – Dhruv's path into technology
05:00 – Early lessons from infrastructure and networking
09:45 – From engineer to cybersecurity founder
15:05 – Why outbound security matters
16:00 – How allowlisting stops malware communication
19:00 – The challenge of adopting Zero Trust
23:00 – Designing products around customer problems
25:00 – AI, SNI spoofing, and modern attack techniques
31:00 – Building layered cloud security
39:00 – Wildcards, risk, and secure defaults
43:00 – What's next for cloud security
45:00 – Advice every defender should hear
If you found this conversation valuable:
👍 Like this episode to support more conversations on practical cybersecurity.🔔 Subscribe for more discussions with security leaders and builders.💬 Share your biggest takeaway in the comments.📤 Send this to someone responsible for securing cloud infrastructure.
#CyberSecurity #ZeroTrust #CloudSecurity #InformationSecurity #NetworkSecurity #CyberDefense #CloudComputing #AI #CyberResilience #TheDefendersLog

How do you use AI to uncover facts instead of amplifying opinions?
David Redekop sits down with Matthew Dufresne to discuss the evolution of the internet, the growing challenge of misinformation, and why trustworthy AI must be grounded in verifiable data. They also explore CanadaGPT, an AI platform designed to help Canadians access public information with transparency and source-backed answers.
 
Key Discussion Points
00:40—Meet Matthew Dufresne & The Early Internet
05:20—From ISPs to the AI Era
09:00—Matthew's Journey into Technology
13:40—What is CanadaGPT?
19:30—Fighting Misinformation with Source-Based AI
24:00—Social Media, Marketing & Critical Thinking
29:00—Why Nuance Matters in Politics
34:00—Educating the Next Generation
39:00—Canada's Future, Innovation & Brain Drain
43:30—AI, Healthcare & Opportunities for Canada
47:10—Final Advice: Talk to People, Not Just AI
If this conversation challenged the way you think about AI and information:
👍 Like this video if you value fact-based conversations🔔 Subscribe for more discussions on cybersecurity, AI, and digital trust💬 What role should AI play in helping people make informed decisions? Share your thoughts below.📤 Share this episode with someone passionate about cybersecurity, AI, or the future of trustworthy information.
#CyberSecurity #ArtificialIntelligence #CanadaGPT #DigitalTrust #CyberDefense #AI #Technology #TheDefendersLog

Cybersecurity is no longer just a technology challenge. It's a policy challenge.
In this episode of The Defender's Log, David Redekop sits down with Dr. Amit Elazari, Co-Founder and CEO of OpenPolicy, former Head of Global Cybersecurity Policy at Intel, and Co-Founder of Disclose.io.
They explore why policy is becoming one of the most important signals for cybersecurity leaders, how AI is changing both attack and defense strategies, and why organizations that ignore policy risk may find themselves falling behind.
From cyber incident reporting and public-private collaboration to AI regulation and policy-as-code, this conversation offers a unique look at the forces shaping the future of cybersecurity.
Key Discussion Points
01:02 Meet Dr. Amit Elazari03:07 Building coalitions that shape cybersecurity policy06:08 Is policy really lagging behind technology?08:17 Policy as intelligence for future market requirements09:00 Public-private collaboration in cybersecurity12:02 The consequences of moving too slowly in the AI era13:03 Why cyber incident reporting is becoming critical15:02 How policy is actually crafted today18:14 Why every defender should pay attention to policy19:01 Policy as a strategic planning advantage21:11 The rise of policy exposure management23:35 Preemptive security and the future of regulation27:01 Building OpenPolicy and democratizing policy intelligence29:05 Why AI adoption can no longer wait31:08 Amit's advice for founders, students, and defenders34:00 Policy as your power move
 
If this conversation gave you a new perspective:
👍 Like this video🔔 Subscribe for more cybersecurity leadership conversations💬 Share your biggest takeaway in the comments📤 Send this episode to someone navigating cybersecurity, compliance, or AI risk
 
#CyberSecurity #AI #CyberPolicy #CyberDefense #OpenPolicy #CISO #RiskManagement #Compliance #ArtificialIntelligence #TheDefendersLog

Cybersecurity leaders have spent years building stronger detection and response capabilities. But is that enough?
In this episode of The Defender's Log, David Redekop sits down with former CIO, CTO, and cybersecurity executive Phil Johnston to discuss what changes when you've personally led an organization through a major cyber incident.
Drawing on decades of experience spanning military communications, government cybersecurity, and executive leadership, Phil shares why cybersecurity should never be viewed as just an IT problem, how organizations can improve resilience, and why prevention, containment, and operational simplicity may be the future of cyber defense.
They also explore AI, business risk, executive accountability, incident recovery, intellectual property protection, and what cybersecurity leaders should prioritize over the next five years.
 
Key Discussion Points
00:00 — Introduction
00:55 — Phil's journey from military communications to cybersecurity leadership
02:26 — Living through a major cyber incident
06:15 — Why cybersecurity is a business problem, not an IT problem
08:12 — What separates successful recoveries from failed recoveries
11:08 — Detection vs prevention: where organizations should focus
16:52 — Why Phil joined ADAM Networks
23:12 — The future of cybersecurity and AI-driven attacks
27:24 — Advice for today's CIOs and security leaders
30:20 — AI, innovation, and empowering employees securely
34:40 — The business impact of intellectual property theft
36:07 — Joining ADAM Networks as Field CIO
38:12 — Leadership, experience, and protecting people
 
If this conversation challenged your thinking:
👍 Like this episode
🔔 Follow for more conversations with cybersecurity leaders, CISOs, and technology executives
💬 Share your biggest takeaway in the comments
🔗 Send this episode to a leader responsible for security, risk, or technology strategy
 
#CyberSecurity #CyberLeadership #CISO #CyberRisk #ZeroTrust #CyberDefense #AI #BusinessLeadership #DigitalTransformation #TheDefendersLog #ADAMNetworks

What if the biggest threats on the internet are the ones nobody can fully measure?
In this special episode of The Defender’s Log, host David Redekop sits down with John Todd, Andreas Taudte, and Andrew Campling for a deep conversation about the hidden realities shaping cybersecurity today.
From Zero Trust DNS and encrypted traffic to malicious domain “dark matter” and the growing complexity of enterprise security, this discussion pulls back the curtain on what security leaders are actually seeing behind the scenes. The panel explores how attackers quietly evolve their tactics, why modern privacy technologies sometimes create entirely new security problems, and how organizations struggle to balance visibility, compliance, protection, and personal privacy in an increasingly connected world.
The conversation also dives into DNS as the internet’s control plane, the risks hiding inside IoT and OT environments, the challenge of securing legacy infrastructure, and why the future of cybersecurity may depend less on perimeter defense and more on understanding behavior patterns at scale.
This is the kind of conversation that changes how you look at the internet after the episode ends.
Key Discussion Points
02:58 — Why malicious domains keep growing instead of shrinking04:35 — The case for Zero Trust DNS in enterprises and homes05:30 — The scale of harmful content online and why it keeps increasing07:40 — Why protective DNS should be the default10:00 — Enterprise visibility, DNS logging, and encrypted DNS challenges12:00 — Privacy vs security: where the debate gets messy16:00 — How encryption can unintentionally protect bad actors20:00 — Why modern privacy tools can force companies to inspect everything23:30 — Moving security controls closer to the endpoint25:00 — DNS challenges in schools, factories, OT, and IoT environments29:15 — “We’re solving one problem by creating another”31:00 — Why DNS is becoming the internet’s true control plane33:00 — The reality of securing legacy infrastructure35:00 — Making Zero Trust DNS practical for real-world users36:00 — Extended DNS Errors (EDE) and making security visible40:00 — How attackers hide malicious domains in plain sight42:00 — The rise of “aged” domains and stealthy phishing operations43:20 — Detecting attacks through DNS behavior patterns
Don’t forget to:• Subscribe for more conversations with cybersecurity leaders and innovators• Share this episode with someone working in IT, security, or network infrastructure• Leave a review to help more people discover The Defender’s Log• Follow along for future episodes exploring the technologies shaping the modern internet
#CyberSecurity #DNS #ZeroTrust #ThreatIntelligence #CISO #InfoSec #CyberDefense #NetworkSecurity #Privacy #EnterpriseSecurity #ThreatDetection #DNSSecurity #CyberThreats #DigitalInfrastructure #TechPodcast

What happens when a childhood curiosity for computers turns into a mission to protect the next generation online?
Tom Newton shares the path from experimenting with modems and BBS systems in the early days of computing to defending schools and students against modern cyber threats. The discussion goes deep into digital safety, BYOD risks, VPN abuse, AI-generated evasion techniques, and why protecting young people online requires more than just technology.
The conversation also explores the human side of cybersecurity— curiosity, mentorship, freedom, responsibility, and the challenge of balancing privacy with protection in a permanently recorded world.
Whether you're in cybersecurity, education, parenting, or technology leadership, this discussion highlights why digital defense today is ultimately about people.
 
Key Discussion Points
02:06 – How Tom got into technology04:26 – Early hacking culture, modems & BBS systems06:40 – Switching from chemistry to computer science10:45 – Discovering cybersecurity through a worm outbreak13:26 – Finding Smoothwall & becoming a defender16:41 – The importance of mentors and “Johnnys” in life19:22 – Growing up before everything was permanently recorded23:21 – The challenge of protecting kids online24:45 – Peer-to-peer abuse inside productivity tools26:00 – How students bypass filters and hide games28:00 – Why content filtering matters more than URL filtering29:27 – Why keeping kids safe takes a community32:00 – Balancing exploration, freedom, and protection33:24 – Privacy vs child safety online37:33 – UNDERMINR and the discovery process39:00 – Free VPNs, malware, and harmful advertising42:00 – Sexualized ads and harmful online ecosystems44:24 – Why UNDERMINR changes defensive assumptions48:35 – How Smoothwall and Linewize defend against it49:37 – The future of privacy, trust, and visibility online
Don’t forget to:👍 Like this video🔔 Subscribe for more conversations on cybersecurity, technology, and digital defense💬 Comment with your biggest takeaway from the discussion🔗 Share this with someone working in tech, education, or online safety
#CyberSecurity #OnlineSafety #DigitalDefense #CyberDefense #Privacy #EducationTechnology #InfoSec #AI #Networking #TechnologyLeadership #Podcast #CyberAwareness

What started as the “phonebook of the internet” is now one of the most critical layers in cybersecurity.
In this episode of The Defender’s Log, David Redekop sits down with Cricket Liu—often called the godfather of DNS—to unpack how DNS evolved from a trusted utility into a frontline security control. From the early days of DNS and BIND to the rise of protective DNS, threat intelligence, and zero trust architectures, this conversation traces the real story behind modern network defense.
 
Key Discussion Points
00:00 From “phonebook” to frontline defense: why DNS became critical to security02:20 The origins of protective DNS and response policy zones (RPZ)05:00 Why many organizations still run DNS “wide open”06:30 The evolution of threat intelligence: from feeds to analytics-driven detection09:00 How passive DNS data powers modern security insights12:30 AI’s impact on attackers: customized malware and evasion tactics13:30 DNS encryption (DoT, DoH, DoQ): privacy vs. visibility tradeoffs16:00 Where encryption matters most (and where it may not)20:40 Why protective DNS is still the most overlooked security layer23:30 The risks of “log-only” mode and missed prevention opportunities25:20 Zero Trust DNS and controlling where devices can connect29:50 DNSSEC adoption: why it’s uneven and what it really protects34:00 What we’d change about DNS if we could redesign it today37:00 Why DNS still works 40+ years later40:10 Advice for the next generation: no gatekeepers, no excuses42:20 AI vs. human curiosity: what actually creates breakthroughs
 
At its core, this episode is about one idea: there’s no secret sauce. The tools, the knowledge, and the mechanisms are already available. The difference comes down to how we use them.
If you work in security, networking, or IT leadership, this is a grounded, practical look at where DNS fits in the fight—and why it matters more than ever.
Don’t forget to:👍 Like this video if it changed how you think about DNS security🔔 Subscribe for more real conversations with leaders shaping cybersecurity💬 Comment: What’s your biggest takeaway—or where is your DNS strategy falling short?🔗 Share this with someone responsible for network or security architecture
#CyberSecurity #DNS #NetworkSecurity #ZeroTrust #ThreatIntelligence #InfoSec #AI #CyberDefense #DataSecurity #SecurityArchitecture #TheDefendersLog