- 17
- Episodes
- 5
- Ratings
- 2021
- First episode
- 303
- YouTube views
About Ephemeral Security
Interviews and fun with professionals, hackers, and everything in between.
- Publisher
- Steve Stonebraker
- Category
- technology
- Language
- en
- Explicit
- No
- First episode
- 4 Aug 2021
- Latest episode
- 26 Mar 2025
Latest episodes
17 episodes in the feed.

26 Mar 2025
Jason Costain - Fraud Defense with Javloc
Jason Costain, founder of Javloc, joins us to discuss his 30 years of experience in fraud prevention and bank defense systems. Jason shares insights into the evolution of fraud, from early check scams to modern-day threats like voice deepfakes and machine learning-driven credit card fraud. He also highlights the UK's regulatory responses, the importance of customer education, and the role of technology in combating scams. Jason introduces Javloc's mission to help banks and companies enhance their scam defenses. Highlights Include: Early experiences with fraud and the evolution of scam tactics. The impact of real-time payments and internet banking on global fraud. UK regulatory measures like the voluntary refund code and consumer protection reforms. Advanced scam techniques, including voice deepfakes and machine learning. The role of banks in educating customers and implementing biometric security measures. Javloc's approach to advising organizations on fraud prevention. Pick of the Week: Steve Stonebraker - Real Dictators (https://www.noiser.com/real-dictators) podcast. Jason Costain - Surrounded by Psychopaths (https://www.amazon.com/Surrounded-Psychopaths-Yourself-Manipulated-Exploited/dp/1250763886) by Thomas Erikson. Guest: Jason Costain - https://www.linkedin.com/in/jason-costain-b529746/ (https://www.linkedin.com/in/jason-costain-b529746/) Javloc - https://www.javloc.com/ (https://www.javloc.com/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Steve's Other Podcast: https://aolunderground.com/ (https://aolunderground.com/) Brakertech LLC: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Audio Editing by Sam Fox - sam.fox.london@gmail.com (mailto:sam.fox.london@gmail.com) Intro music by Margo Stonebraker

24 Jan 2025
Dr. Ethan Heilman - Enhancing Security with Bastion Zero and Exploring AI Ethics
Dr. Ethan Heilman, CTO of Bastion Zero, joins us to discuss the latest advancements in secure access technology and the ethical implications of AI systems. Dr. Heilman explains how Bastion Zero provides secure, passwordless access to servers, databases, and Kubernetes clusters without the need for VPNs or SSH keys. Key features include session recording, multi-factor authentication (MFA), and short-lived credentials to ensure robust security. Highlights include: Bastion Zero’s Approach to Secure Access: Eliminates shared credentials by using SSL identities and MFA. Enables real-time session monitoring and auditing. Supports secure access for on-premises and cloud environments (AWS, GCP, etc.). Introduces Split Cert, a multi-party computation (MPC) technique for generating secure, short-lived database credentials without single points of compromise. Remote Desktop Protocol (RDP) and Kubernetes Access: Pick of the Week: Steve Stonebraker - The man who broke into Windsor Castle to assassinate the late Queen with a crossbow had discussed his plans with his AI chatbot girlfriend (https://www.insider.com/man-assassinate-queen-elizabeth-confided-plans-ai-chatbot-girlfriend-2023-7) Man Dies by Suicide After Talking with AI Chatbot, Widow Says (https://www.vice.com/en/article/pkadgm/man-dies-by-suicide-after-talking-with-ai-chatbot-widow-says) Ethan Heilman - A Collection of Unmitigated Pedantry – A history blog offering in-depth, approachable explorations of historical topics. (https://acoup.blog/) Guest: Dr. Ethan Heilman - (https://www.linkedin.com/in/rigney/)https://www.linkedin.com/in/ethan-heilman-39896934/ (https://www.linkedin.com/in/ethan-heilman-39896934/) BastionZero's website - https://www.bastionzero.com/ (https://www.bastionzero.com/ ) Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/ (https://brakertech.com/aws-systems-manager-session-manager-on-steroids/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Steve's Other Podcast: https://aolunderground.com/ (https://aolunderground.com/) Brakertech LLC: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Audio Editing by Sam Fox - sam.fox.london@gmail.com (mailto:sam.fox.london@gmail.com) Intro music by Margo Stonebraker

5 Jan 2024
Jim Rigney - Senior Director - InfoSec Architecture, Engineering, Operations
We dive deep into the evolution of neworks and security from early internet to today. Mentioned in the show:Cyber Trust Mark (https://www.whitehouse.gov/briefing-room/statements-releases/2023/07/18/biden-harris-administration-announces-cybersecurity-labeling-program-for-smart-devices-to-protect-american-consumers/#:~:text=The%20new%20%E2%80%9CU.S.%20Cyber%20Trust,smart%20fitness%20trackers%2C%20and%20more.) Pick of the Week: Steve Stonebraker - The Artifice Girl (https://www.rottentomatoes.com/m/the_artifice_girl) Jim Rigney - Healthy Gamer GG - "You Are Burned Out And Don't Even Know It" (https://youtu.be/jqONINYF17M?si=m6TshcP5KmjF2Z6B) Episode Show Notes: Jim Rigney - https://www.linkedin.com/in/rigney/ (https://www.linkedin.com/in/rigney/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Steve's Other Podcast: https://aolunderground.com/ (https://aolunderground.com/) Brakertech LLC: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Audio Editing by Sam Fox - sam.fox.london@gmail.com (mailto:sam.fox.london@gmail.com) Intro music by Margo Stonebraker

19 Aug 2023
Dan Nowak - Threat Intelligence, Insider/Nation State Threats, and Beyond
Chat with Dan Nowak about threat intelligence, insider threats, deception techniques, intellectual property theft, Made in China 2025, Unlimited Warfare, the future of ransomware, and Defcon. Pick of the Week: Steve - The Americans (https://en.wikipedia.org/wiki/The_Americans) Dan - Meat Church Guys - The Whisky Bent Barbecue (https://youtu.be/WR1kmYzTz1Y) Episode Show Notes: Dan Nowak - https://www.linkedin.com/in/nowakdaniel/ (https://www.linkedin.com/in/nowakdaniel/) Website: www.celsus.io (http://www.celsus.io/) Substack: https://archetypesandobjectives.substack.com (https://archetypesandobjectives.substack.com/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Steve's Other Podcast: https://aolunderground.com/ (https://aolunderground.com/) Brakertech LLC: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Audio Editing by Sam Fox - sam.fox.london@gmail.com (mailto:sam.fox.london@gmail.com) Intro music by Margo Stonebraker

28 Jun 2023
Matt Wright - Senior Security Engineer
Chat with Matt Wright, Senior Security Engineer on Cloud Security Posture Management (CSPM), Attack Surface Management (ASM), Artificial Intelligence. We also cover some news, talk about zero days, and responsible disclosure Episode Show Notes: Matt Wright - https://www.linkedin.com/in/matt1337/ (https://www.linkedin.com/in/matt1337/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Brakertech LLC: https://brakertech.com (https://brakertech.com/) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Audio Editing by Sam Fox - sam.fox.london@gmail.com (mailto:sam.fox.london@gmail.com) Intro music by Margo Stonebraker

5 Oct 2022
Presenting: AOL Underground "AOL History from the people that lived it - Erci Stern"
Erci Stern tells us her origin story. We review in depth how she battled users that were uploading Warez on a customer's Anonymous FTP site and also hear a funny story about Slingo. She takes us through her entire career at AOL where she started in Site Reliability (Systems Administration/Operations), moving to Information Security/QA, and then went into project management. We also cover her life after AOL where she went back to System Administration and has been a champion of security along the way throughout her career. Other topics include Configuration Management, Security Certifications, passion projects, etc.. Erici also shares with us her experience mentoring at "Girls who Code" and advice for girls that want to go into IT. Guest: Erci Stern Host: Steve Stonebraker CoverArt: Created by Broast (https://broast.org (https://www.broast.org/)), original idea by LampGold. -- AOL Underground Podcast Follow us on twitter - @AOLUnderground (https://twitter.com/AOLUnderground) @brakertech (https://twitter.com/brakertech/) Merch - https://www.redbubble.com/people/AOL-Underground/shop (https://www.redbubble.com/people/AOL-Underground/shop) Donate - https://www.buymeacoffee.com/AOLUnderground (https://www.buymeacoffee.com/AOLUnderground) Contact the Host - https://aolunderground.com/contact-host/ (https://aolunderground.com/contact-host/) Reconnect with old AOLers - https://discord.gg/reaol (https://discord.gg/reaol) https://aolunderground.com/community/ (https://aolunderground.com/community/)

28 Jul 2022
Presenting: AOL Underground "Origin story of a Digital Forensic Incident Responder (DFIR)"
Surf Kahuna (Ryan Chapman) shares his origin story about a series of events that occurred on AOL that rocked his world and led him down the path of digital forensics. Then Steve and Ryan talk espionage, multiple Advanced Persistent Threats, retro gaming, password spraying, ransomware, and what has helped Ryan be successful in Infosec. Guest: Surf Kahuna/Mac Diablo (Ryan Chapman) Host: Steve Stonebraker CoverArt: Created by Broast (https://broast.org (https://www.broast.org/)), original idea by LampGold. -- Ryan Chapman Follow Ryan on Twitter - @rj_chap (https://twitter.com/rj_chap) Ryan's Blog - https://incidentresponse.training/ (https://incidentresponse.training/) Author of SANS FOR528 "Ransomware for Incident Responders" - for528.com/course (https://t.co/MgifMtw1gG) Instructor of SANS FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques - https://www.sans.org/cyber-security-courses/reverse-engineering-malware-malware-analysis-tools-techniques/ (https://www.sans.org/cyber-security-courses/reverse-engineering-malware-malware-analysis-tools-techniques/) Part of the @CactusCon (https://twitter.com/CactusCon) crew - https://www.cactuscon.com/ (https://www.cactuscon.com/) -- AOL Underground Podcast Follow us on twitter - @AOLUnderground (https://twitter.com/AOLUnderground) @brakertech (https://twitter.com/brakertech/) Merch - https://www.redbubble.com/people/AOL-Underground/shop (https://www.redbubble.com/people/AOL-Underground/shop) Donate - https://www.buymeacoffee.com/AOLUnderground (https://www.buymeacoffee.com/AOLUnderground) Contact the Host - https://aolunderground.com/contact-host/ (https://aolunderground.com/contact-host/) Reconnect with old AOLers - https://discord.gg/reaol (https://discord.gg/reaol) https://aolunderground.com/community/ (https://aolunderground.com/community/)

15 Jun 2022
Sandeep Lahane - Deepfence
Chat with Sandeep Lahane, CEO of Deepfence, on how ThreatStryker is changing the game for Cloud Workload Protection. We go deep in to the product's unique full SSL decryption and packet capture capability, identification of an organizations most vulnerable endpoints, and automated workflows to remediate compromised systems. Episode Show Notes: Sandeep Lahane - https://www.linkedin.com/in/sandeep-lahane-b9520a4/ (https://www.linkedin.com/in/sandeep-lahane-b9520a4/) Deepfence - https://deepfence.io/ (https://deepfence.io/) Review of Deepfence's sandbox environment - https://brakertech.com/deepfence-cloud-native-workload-protection-for-infosec-pros/ (https://brakertech.com/deepfence-cloud-native-workload-protection-for-infosec-pros/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Blog: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Intro music by Margo Stonebraker

8 Jun 2022
Ryan Fried - Senior Security Engineer & Adjunct Professor
Chat with Ryan Fried (https://www.linkedin.com/in/ryan-fried-65747938/) about being and adjunct professor in the Cyber Security space, being a virtual CISO and talking to executives, purple teaming, true positive security incidents, validating your controls and what you think you know, and Atomic Red Team (https://github.com/redcanaryco/atomic-red-team). Episode Show Notes: Ryan Fried - https://www.linkedin.com/in/ryan-fried-65747938/ (https://www.linkedin.com/in/ryan-fried-65747938/) Atomic Red Team - https://github.com/redcanaryco/atomic-red-team (https://github.com/redcanaryco/atomic-red-team) Bloodhound - https://github.com/BloodHoundAD/BloodHound (https://github.com/BloodHoundAD/BloodHound) Checkov - https://www.checkov.io/ (https://www.checkov.io/) Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com/) Blog: https://brakertech.com (https://brakertech.com/) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech) Credits: Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio (https://www.fiverr.com/chuckaudio) Intro music by Margo Stonebraker

16 May 2022
Lisa Falzone and Michael Green - Athena Security
Chat with Lisa Falzone and Michael Green of Athena Security Athena Security focuses on Entryway Security - https://www.athena-security.com/ (https://www.athena-security.com/) Guests Michael Green, CEO and Co-Founder Lisa Falzone, President and Co-Founder Show Notes https://ephemeralsecuritypodcast.com/athena-security/ (https://ephemeralsecuritypodcast.com/athena-security/) Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio Intro music by Margo Stonebraker

8 May 2022
Ethan Heilman – BastionZero
Chat with @Ethan_Heilman, CTO of @getBastionZero on how they are adding additional security when accessing remote infrastructure. BastionZero adds an additional separate Multi Factor Authentication into the authentication process and has a unique multi-root security model. Ethan can be found at: LinkedIn: https://www.linkedin.com/in/ethan-heilman-39896934/ (https://www.linkedin.com/in/ethan-heilman-39896934/) Twitter: https://twitter.com/Ethan_Heilman (https://twitter.com/Ethan_Heilman ) //Show Notes// BastionZero's website - https://www.bastionzero.com/ (https://www.bastionzero.com/ ) Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/ (https://brakertech.com/aws-systems-manager-session-manager-on-steroids/) Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio (https://www.fiverr.com/chuckaudio) Intro music by Margo Stonebraker //Chapter Timestamps// 00:00:41 Meet Ethan Heilman 00:01:10 When did you first use a computer? 00:01:29 How did you get into Information Security 00:02:42 Crypto Company to Bastion Zero 00:05:08 Multiparty Computation 00:06:07 Certificate Authorities 00:08:13 AWS PrivateLink/VPC Endpoints 00:10:38 How does Bastion Zero Work? 00:14:55 Shared Responsibility 00:16:50 Dynamic Targets 00:19:46 What does the term "Zero Trust" mean to you? 00:21:01 Proxying HTTP 00:23:17 SELinux 00:23:45 Privileged Access Management 00:27:35 AWS Root Account 00:33:26 Separate Admin Accounts 00:36:12 API Keys 00:40:58 Response for product in the wild? 00:45:11 Stopping Ransomware 00:52:26 Phishing 01:01:21 Modifying Linux Pluggable Authentication Module 01:06:18 Goodbye

5 May 2022
Devin Casadey – Global Red Team Lead
Chat with @DevinCasadey (https://twitter.com/DevinCasadey), Managing Principal / Global Red Team Lead. Devin's Certifications: OSCE3 (OSWE, OSEP, OSED), OSCP, OSCE, OSEE, OSWP, eCTHP, GCPN Devin can be found at: Hack the Box: https://www.hackthebox.eu/profile/28293 (https://www.hackthebox.eu/profile/28293) HTB & CTF Team: https://www.hackthebox.eu/teams/profile/1685 (https://www.hackthebox.eu/teams/profile/1685) Github: https://keramas.github.io/about.html (https://keramas.github.io/about.html) LinkedIn: https://www.linkedin.com/in/devin-casadey-198117b/ (https://www.linkedin.com/in/devin-casadey-198117b/) Twitter: https://twitter.com/DevinCasadey (https://twitter.com/DevinCasadey ) Show Notes Don't Roll Your Own: Devin's Writeup for how he decoded the database (referenced in the episode) - https://keramas.github.io/2022/05/03/dont-roll-your-own.html (https://keramas.github.io/2022/05/03/dont-roll-your-own.html) EvilGinx: Man in the Middle Two Factor Auth - https://github.com/kgretzky/evilginx2 (https://github.com/kgretzky/evilginx2) Chapter Timestamps 01:09 -- Why are you passionate about Infosec? 02:17 -- First use a computer? 05:31 -- What are you doing now? 06:16 -- Best way to hone skills? 07:54 -- Difference between Redteaming and Pentesting 09:12 -- Are Pentesters ever asked to emulate APTs? 11:51 -- Do you test different EDR Vendors? 16:18 -- Test Scenario 17:42 -- Do you have to write custom exploits for engagements? 23:31 -- Do you tell vendors you can bypass their EDR product? 26:02 -- Trying to get caught by Security Team 27:21 -- What can customers do to get the most out of a pentesitng engagement? 32:09 -- Pentest Client Behavior 35:56 -- Linux Boxes 37:11 -- Windows Security 40:30 -- Found Machine Already Compromised? 41:44 -- Pentest Planning 43:46 -- Memorable Engagements 47:07 -- Zero Trust 53:44 -- Initial Point of Entry 58:55 -- Okta Breach 01:01:27 -- Triple MFA 01:02:53 -- Avoid Burnout? 01:05:00 -- Joining a Redteam 01:09:44 -- Any Passion Projects? 01:10:21 -- Goodbye Links: Podcast Website: https://ephemeralsecuritypodcast.com (https://ephemeralsecuritypodcast.com) Blog: https://brakertech.com (https://brakertech.com) Github: https://github.com/ssstonebraker (https://github.com/ssstonebraker) Social: LinkedIn: https://www.linkedin.com/in/stevestonebraker (https://www.linkedin.com/in/stevestonebraker) Twitter: https://twitter.com/brakertech (https://twitter.com/brakertech)

22 Apr 2022
Mike Wyatt: CYDERES
Chat with Mike Wyatt, Chief Security Officer at CYDERES Mike can be found at: https://twitter.com/cleverexploit https://www.linkedin.com/in/cleverexploit/ Note: This episode has chapters embedded in the file!

12 Apr 2022
Cyclops Blink
The Cyclops Blink botnet is explained (how it worked) and a question is posed to the guests if this should be considered an act of Cyber War Guests: Matt Wright and Brad Lindsley Episode Extras: https://ephemeralsecuritypodcast.com/cyclops-blink/ (includes diagram of botnet, link to the court order to disrupt the botnet, and more)

9 Dec 2021
Iman Joshua: Vimeo
Guest: Iman Joshua - Head of Information Security at Vimeo Host: Steve Stonebraker stevestonebraker.com Special Thanks Audio Editing and Sound - Adam Joesph - https://www.adamjosephsounds.com/ Theme music - Margo Stonebraker - codewithmargo.com

16 Aug 2021
Deidre Diamond: CyberSN
Interview with CyberSN founder Deidre Diamond, who is redefining passive recruiting for cybersecurity professionals and throwing the resume out the window. Guest: Deidre Diamond, Founder and CEO CyberSN.com Host: Steve Stonebraker brakertech.com Special Thanks: Theme music - Margo Stonebraker - codewithmargo.com

4 Aug 2021
Information Security Career Do-over: Joe South, Jason Thorn, Shane Armbrister
What would you do differently if you could start your Information Security career over again? Special Thanks: Audio Editing and Sound - Adam Joesph - daseinazam.wixsite.com/website Theme music - Margo Stonebraker - codewithmargo.com Host: Steve Stonebraker Information Security Manager, Architecture & Engineering OSCP (Offensive Security Certified Professional) AWS Certified Security - Specialty AWS Certified Solutions Architect - Associate AWS Certified SysOps Administrator - Associate AWS Certified Cloud Practitioner https://brakertech.com https://ephemeralsecuritypodcast.com https://aolunderground.com Guests: Joe South Senior Cloud Security Engineer CISSP AWS Certified Security - Specialty AWS Certified Cloud Practicioner Host of the "Security Unfiltered" Podcast https://securityunfiltered.buzzsprout.com/ Jason Thorn Information Security Manager GIAC Advisory Board GIAC Penetration Tester GIAC Certified Incident Handler GIAC Certified Forensic Analyst Shane Armbrister IT Security Analyst - Team lead Splunk Certified Admin GIAC Security Essentials Certification Sound used in the episode: Alice In the City by Jeris (c) copyright 2013 Licensed under a Creative Commons Attribution (3.0) license. http://dig.ccmixter.org/files/VJ_Memes/43424 Ft: Orrisroot To See The Past by Hayden Folker | https://soundcloud.com/hayden-folker Music promoted by https://www.free-stock-music.com Creative Commons Attribution 3.0 Unported License https://creativecommons.org/licenses/by/3.0/deed.en_US
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
- YouTube views
- 303
- Score snapshot 15 Sept 2025
- Apple Podcasts (US)
- 5.0 / 5
- 4 ratings
- Spotify
- 5.0 / 5
- 1 ratings
Podcast Authority Score: 48 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
- Quality
- 58
- Social presence
- 0
- YouTube
- 66
- Engagement
- 32
Contact Ephemeral Security
- Guest appearances
- Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Ephemeral Security?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show
Podcast research with Pod Engine