Candid cybersecurity conversations with the people making the calls.
Every week, Damian Chung(D), Troy Wilkinson(T) and Fern Rojas(F) break down the biggest hacks, breaches and security news, plus what it actually means for your business, your team and you. Together they bring 50+ years of cyber experience: Damian as a longtime IT and security leader, Troy from nearly three decades across IT, law enforcement forensics and cyber investigations, and Fern as the everyday-tech voice with a deep network of security leaders.
Think of it as your phone-a-friend for cyber. No scripts, no vendor pitches, just real perspective from people who've been in the trenches, and CISOs and executives saying what they rarely say out loud.
New episodes every Monday(ideally)
When AI Agents Go Wild: The Hugging Face Breach #DTF054
Can we actually control autonomous AI agents once they leave the sandbox?
In Episode 54 of the DTF Cyber Podcast, Damian, Troy, and Fern dive into real-world instances of AI models breaking containment and acting beyond human control.
From an AI benchmark escaping its isolated test environment to laterally move and hack external infrastructure like Hugging Face, to the viral whistleblower tweet from former OpenAI and Anthropic safety researcher Jacob Coxon warning that labs are "racing straight to self-improving superintelligence", the crew breaks down what this shift means for real-world enterprise cybersecurity.
Timestamps:
00:00 – An AI model breaks out of its sandbox
00:36 – Intro: When the machines go wild, are we losing control?
00:54 – "AI Gone Wild" & retro tech memories
02:18 – The Hugging Face Incident: Breaking containment at machine speed
04:16 – Why traditional allowlists and denylists fail against autonomous agents
06:00 – Tech leadership culture: Do Dario and Sam prioritize security?
08:14 – The nation-state race: Can we afford to slow down?
11:30 – Media hype, FUD, and the battle over AI data centers & power
14:56 – Underwater data centers, cooling loops, and future infrastructure
16:13 – The Tweet Heard 'Round the World: The ex-OpenAI/Anthropic whistleblower
18:13 – Terminator theories & real-world threats to critical infrastructure
20:45 – Reading Jacob Coxon’s viral resignation tweet
23:49 – Whistleblower protections vs. walking away: What was the motivation?
28:02 – Leadership culture: Speaking up internally vs. venting publicly
30:45 – The trust dilemma: Transparency vs. catastrophic PR fallout
32:55 – Hugging Face detection: Why observability matters
34:30 – Autonomous agents in the real world (FinTech, payment rails, everyday apps)
36:55 – Hilarious automated messaging fails (and late-night work excuses)
43:18 – The weaponization of deepfakes and the erosion of digital trust
47:48 – Blue team reality: Why we need machine-on-machine governance
52:15 – Final thoughts, audience callout & wrap-up
53:48 – DTF Episode 54 Outro Song
Join the Conversation:
Has your organization started running autonomous AI agents, or are you keeping strict human-in-the-loop guardrails in place? Let us know your thoughts in the comments below!
🔔 Subscribe for weekly deep dives into technical cybersecurity, threat architecture, and modern application defense.
⭐ If you're listening on Apple Podcasts or Spotify, please leave us a 5-star review!
8 Sept 2026
153 Million Driver’s Licenses Leaked #DTF053
You can reset a password, but you can't reset your face. In this episode of the DTF Cyber Podcast, Damian, Troy, and Fern break down the massive Nexus / IDScan.net leak exposing over 153 million driver's licenses, travel documents, and medical cards. From rental car counters and Vegas dispensaries to third- and fourth-party vendor liability, we look at how raw UV/IR scans ended up on the dark web—and what consumers and enterprises need to do now.
TIMESTAMPS
* 00:00 - "You Can't Reset Your Face": The 153M ID Leak
* 01:18 - The Numbers: 170M Affected Across the US & Canada
* 03:08 - Why Ultraviolet & Infrared Scans Change the Game
* 05:30 - Nexus Marketplace & The Brian Krebs Discovery
* 07:13 - IDScan.net & The Third-Party Supply Chain Problem
* 09:30 - Car Rentals, Dispensaries & Fourth-Party Liability
* 12:03 - Barcode Swipes vs. Permanent Image Archiving
* 15:13 - Why Are Static Addresses Still Printed on Physical IDs?
* 17:10 - Facial Recognition, Meta Glasses & Law Enforcement Tech
* 20:00 - High Exposure States & Corporate Silence
* 22:30 - Data Breach Fatigue & Protecting Your Credit
* 24:18 - Holding Vendors Accountable: MSAs, Audits & Tort Law
* 26:33 - Brand Damage & The Hidden Cost of Lost Customers
* 30:13 - The Discord & 5CA Incident: A Repeating Vendor Pattern
* 32:48 - Sports Betting, Prediction Markets & Non-Credit Identity Theft
* 34:37 - Multi-Million Dollar Settlements vs. The $7 Payout
* 37:39 - SIM Swapping & Account Takeovers
* 38:24 - "Steve in Accounting" & The Reality of Phishing
* 39:04 - Vendor Security Theater & The Branded Sleep Mask
* 41:26 - Protecting Family: Grandmas, Wealth & Google Shortcuts
* 44:28 - Compliance Checklists vs. True Operational Security
* 45:56 - Will Threat Actors Use Public LLMs to Parse Stolen Data?
* 48:22 - Final Takeaways: Practical Guardrails for the New Normal
* 50:39 - Outro Track
KEY TAKEAWAYS
* Verification Doesn’t Require Retention: A real-time ID check only needs a binary pass/fail result, yet vendors continue to store high-res visible, UV, and IR scans long term.
* The Fourth-Party Blindspot: You might trust the brand on the rental counter, but your risk posture is actually dictated by the obscure downstream vendor processing their data behind the scenes.
* Non-Credit Attack Vectors: Identity theft isn't limited to credit bureaus—prediction markets, gaming sites, and sportsbooks verify identity via document scans without ever pinging credit monitoring. JOIN THE CONVERSATION
* Have you checked if your license or documents were compromised?
* Drop a comment below and let us know your take on vendor data retention policies.
* Don't forget to Like, Subscribe, and share this with someone who needs to freeze their credit! #Cybersecurity #DataBreach #IDScan #Privacy #IdentityTheft #DTFCyberPodcast #InfoSec
31 Aug 2026
Specialist vs. Generalist: The Ultimate Cyber Career Debate #DTF052
In Episode 52 of the DTF Cyber Podcast, Damian, Troy, and Fern debate the ultimate cybersecurity career question: should you build your path as a deep specialist or a broad generalist? The hosts discuss the harsh realities of aiming for penetration testing on day one, the difficult transition from hands-on keyboard roles to leadership, and why understanding the business is more important than your ego. They also dive into how artificial intelligence is changing the industry and why you need to "skate to where the puck is going" to future-proof your career.
Chapter Timestamps:
00:00 - Cold Open: Hackers in the kernel and the bigger risk picture
00:22 - Episode Intro: The Specialist vs. Generalist debate
01:23 - The rude awakening of wanting to be a pen tester on day one
03:00 - How internship programs are the real path to offensive security
05:25 - The Chef Analogy: Comparing cyber roles to a restaurant kitchen brigade
07:45 - The struggle of shifting from a technical specialist to people management
08:47 - Troy's journey from digital forensics to a broader CISO role
0:00 - Damian's story: Specializing in data resiliency after 9/11
13:40 - Why foundational networking knowledge is crucial for everyone
17:51 - The "AI Salt" analogy: MSG, tequila, and synthetic technology
22:02 - A controversial truth: Cyber exists to support the business, not run it
24:18 - When it makes sense to take a lesser title for a bigger opportunity
26:21 - Why ego and hubris are the ultimate career killers
31:33 - AI's future impact and the rise of autonomous pen testing
36:25 - The hunting and hockey metaphors: Skating to where the AI puck is going
40:27 - Uncovering the full "Jack of all trades" quote
48:24 - Do certifications actually get you jobs, or is it a business incentive?
53:03 - Outro Grunge Song: "AI Salt on the Table"
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
5.0 / 5
2 ratings
Spotify
5.0 / 5
1 ratings
Contact DTF Cyber Podcast
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of DTF Cyber Podcast?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
