The Defender’s Log Podcast

Is your company's most critical blind spot hiding in plain sight? While most security teams focus on firewalls and web traffic, attackers are increasingly using the internet's phonebook—the Domain Name System (DNS)—as a secret backdoor for malware delivery, data theft, and command and control.In this episode of The Defenders Log, host David Redekop sits down with cybersecurity educator Josh Kuo from Infoblox to uncover the shocking ways DNS is weaponized. Josh shares jaw-dropping stories from the field, explaining complex threats in a way that anyone can understand. Learn how a simple DNS query can be used to exfiltrate your most sensitive data and how Protective DNS is becoming an essential layer of defense for modern organizations.Whether you're a CISO, a network admin, or just passionate about security, this is a conversation you can't afford to miss.Learn More About Our Guest:Josh Kuo is a leading cybersecurity educator at Infoblox, specializing in DNS security and threat intelligence. Infoblox is a leader in managing and securing DNS, DHCP, and IP address management (DDI) for enterprise networks. Find out more at https://www.infoblox.com00:00 - Intro: The Secret Battles of Cybersecurity00:45 - Welcoming Josh Kuo, Educator at Infoblox01:40 - Josh's Origin Story: From Aspiring Dentist to Network Engineer05:15 - Who Owns DNS? The Ponytail Guy, the Windows Team, or the Network Team?07:30 - "If DNS Works, Everything Works": DNS as the Ultimate Network Health Check10:05 - From the Field to the Classroom: Why Josh Became an Educator12:45 - The First Jaw-Dropping Moment: Discovering Data Theft via DNS13:20 - How DNS Tunneling Works to Exfiltrate Data16:10 - Explained: DNS for Covert Command and Control (C2) Attacks18:00 - When Good Websites Go Bad: Domain Hijacking and Cache Poisoning20:15 - The Immense Challenge of Scaling DNS Security Monitoring21:10 - The Power of Protective DNS and Threat Intelligence Platforms22:00 - Final Thoughts & Outro

"Am I going to spend my life trying to get the thing that I need, or am I going to spend my lifedoing the thing that I want?"In this deeply insightful episode of The Defender's Log, host David Redekop sits down with WillEarp, a veteran developer whose career journey began with an Amiga 600 in 1998. Theyexplore the profound philosophy that has guided Will's path from a freelance web developer to alead engineer at a charity dedicated to online child safety.Will shares his belief that a career isn't a clear path but a "foggy staircase," where you can onlysee one or two steps ahead. He explains how choosing to follow passion over apaycheck—whether running his own business for a decade or contributing to open-sourceprojects—led to unexpected doors opening, including his involvement with the prestigiousInternet Engineering Task Force (IETF).This conversation goes beyond code and cyber defense, touching on the importance of legacy,the unique challenges of protecting children in the digital age, and the simple but powerfuladvice to find what you love and go do it.In this discussion, you will learn about:● The "Foggy Staircase" approach to navigating your career path.● Pivoting from general web development to a mission-driven role in cybersecurity.● The profound choice between pursuing passion versus financial security.● How open-source work and personal projects can become your greatest career assets.● The unique challenges and responsibilities of protecting children vs. adults online.● Key insights on modern defense, including Zero Trust in DNS.● Invaluable advice for the next generation of cybersecurity defenders.● Why the ultimate goal is building a life and a legacy you can be proud of.Join us for a conversation that will inspire you to think differently about your own career, thechoices you make, and the impact you want to have on the world.Chapters00:00 - Intro01:18 - Welcome & How Will Herp Got Started in Tech05:09 - The "Foggy Staircase" of a Tech Career07:25 - Finding a Mission-Driven Career in Child Safety09:28 - The Difference Between Protecting Kids vs. Adults Online13:27 - Philosophy, Human Nature, and Long-Term Thinking18:44 - Choosing Passion Over Money: The Journey to Open Source21:20 - The British Perspective on Policy and Culture28:18 - Innovations in Cyber Defense: Zero Trust in DNS31:48 - Advice for the Next Generation of Defenders36:07 - Finding Balance in Markets, Technology, and Bitcoin41:34 - Final Message: Find What You Love and Go Do It44:20 - Outro#CareerAdvice #Cybersecurity #SoftwareDevelopment #OpenSource #TechPhilosophy#PassionVsMoney #DeveloperLife #TechCareer #IETF #ZeroTrust #WillEarp #DavidRedekop#adamone #adamnetworks

In this episode of the Defenders Log, we have Aditi Patange from Microsoft alongside our hosts, David Redekop and Francois from Adam Networks, for an in-depth discussion on Zero Trust DNS, a new enterprise security feature within Windows 11. Aditi shares her background in computer engineering and product management and how his work contributes to cybersecurity. The conversation delves into the origins and motivations behind Zero Trust DNS, its implementation challenges, and its impact on network security. Aditi also emphasizes the importance of infrastructure in modern cybersecurity and the need for organizations to move towards encrypted DNS. The episode concludes with a discussion on the collaboration between Microsoft and Adam Networks to enhance security solutions.Timestamps - 00:00 Introduction and Guest Welcome00:47 Aditi's Background and Journey into Cybersecurity01:58 The Importance of Network Security03:13 Challenges and Benefits of Zero Trust DNS07:33 Real-World Applications and Feedback13:50 Government and Enterprise Adoption19:43 Unexpected Benefits of Zero Trust DNS21:59 First Principles Approach to Problem Solving23:22 The Evolution of Technology and Security24:37 Challenges and Integration with Endpoint Protection27:02 Kernel Mode Drivers and Security35:23 The Importance of Infrastructure in Modern Technology36:50 Personal Journey into Technology40:12 The Mission of Zero Trust DNS43:27 Final Thoughts and Future Directions

In today's episode of the Defender's Log, we welcome special guest Tommy Jensen, an internet technologist with expertise in IPv6, Zero Trust, and standards. The episode covers Jensen's career journey from an AppleCare contractor to a pivotal role in advancing internet technologies. The discussion delves into the importance and challenges of migrating to IPv6, and the need to overcome legacy systems in enterprise networks. Jensen shares insights into his focus on DNS and Zero Trust, stressing the balance between privacy and security. The episode also explores the benefits of encrypted DNS, the drawbacks of TLS termination, and the broader implications for the future of the internet. Finally, Jensen emphasizes the significance of using the internet to connect and understand diverse cultures and circumstances.00:00 Introduction and Guest Introduction02:18 Tommy Jensen's Background and Career Path07:09 The Importance of IPv608:00 Challenges and Benefits of IPv6 Adoption18:08 DNS and Zero Trust39:21 The Future of the Internet and Final Thoughts

In this episode of 'The Defender's Log,' host David engages in a comprehensive discussion with John Todd, an influential figure in the defense technology space and a key player at Quad9. The conversation covers John's career journey, starting from the early days of commercial internet services to his current role at Quad9. They delve into the importance of DNS in cybersecurity, Quad9's unique approach to protecting users, and the challenges and strategies involved in maintaining a global DNS infrastructure. Key topics include the implementation of zero-trust DNS, the legal hurdles faced by DNS providers, and the innovative protocols aimed at enhancing internet security and privacy. The episode also highlights the vital role of partnerships and the challenges of operating in regions with restrictive import tariffs. Todd emphasizes the importance of privacy and the legal measures in place to protect user data, concluding with a call to potential sponsors to support Quad9's ongoing mission to secure the internet.Timestamps - 00:00 Introduction and Guest Welcome01:14 John Todd's Journey in Technology03:14 The Birth of Quad905:08 IBM's Role and Quad9's Growth06:40 Threat Intelligence and Data Sharing11:11 Challenges with False Positives18:46 Global Network Expansion21:46 Difficulties in Equipment Importation26:14 Exploring Early Motivations and Interests27:42 The Evolution of Communication Technologies29:01 Defensive Posture in Communication30:56 Balancing Privacy and Security35:18 Challenges in Network Security40:09 Innovations in DNS and Network Management48:17 Legal and Privacy Considerations51:16 Conclusion and Final Thoughts

In the inaugural episode of 'The Defender’s Log,' host David Redekop converses with cybersecurity veteran Chester Wisniewski to explore the dynamic field of cybersecurity. They discuss the differentiation between privacy and security, the evolution of hacking from the 1980s to the present, and pivotal moments that reshaped information security. Chet shares anecdotes from his extensive career, offering a deep dive into the challenges and successes of defending against cyber threats. Listeners will learn about the importance of defense-in-depth, the impact of pivotal virus outbreaks, and the emergence of profitable cybercrime. Chet also provides valuable advice on navigating a career in cybersecurity, emphasizing the significance of practical problem-solving and mentorship. Tune in to gain actionable insights and a positive perspective on securing the digital world.Timestamps - 00:00 Introduction01:08 Welcome to the Defender's Log01:47 Guest Introduction: Chet Wisniewski05:21 Early Days of Cybersecurity09:05 Evolution of Cyber Threats15:10 Challenges in Cybersecurity21:08 Personal Stories and Sacrifices25:33 Advice for Aspiring Cyber Defenders33:08 Closing Thoughts and Future Events#Cybersecurity #Infosec #AIethics #HackingHistory #VR #ChetWisniewski #DigitalDefense #PrivacyVsSecurity #TechPodcast #DefendersLog #Cyberwarfare #CyberCrime #FutureOfTech #CyberEthics #EthicalHacking