All Episodes
Displaying 1 - 20 of 114 in total
Bare Metal Cyber Weekly Roll-Up — October 23, 2026
This partial-week edition covers a sharp collision between public-service disruption, trusted cloud access, and software supply-chain risk. Government agencies took vu...
Bare Metal Cyber Weekly Roll-Up — October 16, 2026
This week shows how trusted technology can become a direct route to physical damage and enterprise compromise. Attacks on supermarket refrigeration systems spoiled foo...
Bare Metal Cyber Weekly Roll-Up — October 9, 2026
This week’s roll-up opens with a cloud ransomware outage that disrupted hundreds of companies and local governments in Japan, showing how one provider incident can spr...
Bare Metal Cyber Weekly Roll-Up — September 25, 2026
This week’s roll-up opens with ransomware crews exploiting TeamCity servers, putting trusted software build pipelines and downstream customers at risk. It then turns t...
The Last Legacy System
Retiring a legacy system sounds simple until you realize one platform has quietly become the backbone of revenue, reporting, and regulatory history. In “The Last Legac...
Real-World Recovery
When a major incident hits, most organizations still cling to the promise of “getting back to normal.” In this narrated Headline, “Real-World Recovery: When ‘Return to...
Culture of Disclosure
In this narrated edition of “Culture of Disclosure: From ‘Don’t Tell Anyone’ to ‘Report Early, Fix Faster’”, we walk through what really decides whether your organizat...
Metrics That Move Money
Security budgets rarely shift because of bigger dashboards. They shift when leaders can see, in plain business terms, how specific security gaps shape financial exposu...
Citizen Developers Enterprise Risk
Citizen developers are no longer the exception in large enterprises; they are quietly building the workflows your business now depends on. In this narrated edition of ...
Post-Quantum Paralysis
In this narrated Headline, “Post-Quantum Paralysis: Preparing for a Crypto Shift Without Freezing Roadmaps,” we unpack what post-quantum cryptography (PQC) really mean...
Access Broker Auction House
This narrated episode, based on the Wednesday “Headline” feature in Bare Metal Cyber Magazine, takes you inside the underground market where initial access brokers (IA...
M&A Malware
Mergers and acquisitions are great for growth, but they can be brutal for your risk profile if you treat cyber as an afterthought. In this audio version of “M&A Malwar...
Timezones Timelines and Truth
In this narrated edition of “Timezones, Timelines, and Truth: Forensics in a Planet-Scale Company,” we dig into why so many major incidents are really arguments about ...
Sensitive by Default
This narrated edition of “Sensitive by Default: Designing Systems That Assume Everything Matters” walks through what happens when you stop pretending you can neatly se...
Shadow AI Projects
Shadow AI Projects: The Models Built in Corners of the Business explores the reality that many of your “AI initiatives” never went through an official roadmap. In this...
Digital Consequences
Hybrid threats are changing what it means to “handle an incident,” and this narrated episode walks through how that plays out when protests, outages, and digital campa...
The Great Unmanaged
When contractors, partners, and “temporary” staff never really leave your environment, their access quietly becomes part of your infrastructure. In this episode, we wa...
Zero Signal
This narrated edition of “Zero Signal: When Telemetry Costs More Than the Risk It Mitigates” walks leaders through the uncomfortable reality that security telemetry ha...
Purple Team Statecraft
Purple team exercises are showing up on more roadmaps, but many organizations still struggle to turn those war games into real movement on risk, architecture, and budg...
Making Alerts Great Again
When you look past the wall of dashboards in most security operations centers, a tougher reality appears: leaders can see alert volumes and colorful charts, but they c...