Stories from the SOC is brought to you by North Star Cyber Group, the coaching and advisory firm for ambitious cybersecurity professionals. Each episode dives into real-world incidents and investigations from the security operations center, from wire fraud cases to malware outbreaks, showing how defenders uncover the clues, follow the logs, and respond under pressure. More than just war stories, these episodes highlight lessons that help you grow in your career, sharpen your instincts, and step into the next leadership level.
Stories From the SOC by North Star Cyber Group - The Alert That Cried Wolf
A SOC analyst ignores an alert they’ve seen a hundred times before, except this time it wasn’t a false positive.
In today’s episode of Stories From the SOC, Randy breaks down a real-world example of alert fatigue, how detection noise blinds even the best teams, and why tuning and automation are leadership responsibilities, not just technical ones.
You’ll learn:
How “noisy” alerts create blind spots
Why attackers intentionally blend into known false positives
The moment a SOC realized they missed the initial intrusion
What leaders must do to reduce alert fatigue
How smarter tuning improves both morale and security outcomes
If your SOC or security program struggles with too many alerts, this episode will hit home.
Visit NorthStarCyberGroup.com for coaching, advisory services, and leadership insights for cybersecurity professionals.
10 Nov 2025
Stories from the SOC by North Star Cyber Group – The Fax That Fooled Finance
A single fax led to a six-figure loss.
In this episode of Stories from the SOC, Randy Breault unpacks a real-world Business Email Compromise that didn’t even start with email.
A finance employee receives what appears to be a legitimate vendor banking update, the logo, the signature, and the domain all perfect. Except that “w” in the email address wasn’t a “w.” It was two v’s.
This story reveals how attackers exploit human trust and small process gaps to bypass even good security programs.
You’ll learn:
How a simple domain trick triggered a major wire fraud
Why layered controls beat technical controls alone
And what every organization should change today to prevent the same mistake
Learn more or schedule a discovery call at northstarcybergroup.com (https://northstarcybergroup.com)
Subscribe, rate, and share to help more cybersecurity leaders hear stories that drive real change.
5 Nov 2025
Stories From the SOC by North Star Cyber Group – Career GPS: Finding Direction in Cybersecurity
Feeling stuck mid-career? You’re not alone. In this episode, Randy Breault explains why so many cybersecurity professionals lose their sense of direction after years of hard work and how to realign their goals, values, and growth path to find their North Star again.
3 Nov 2025
Stories From the SOC by North Star Cyber Group – The Illusion of Readiness
Everyone loves a good tabletop exercise until the real incident hits and the plan falls apart. In this episode, Randy Breault breaks down why many organizations mistake familiarity for preparedness, how to build real stress into your incident simulations, and what separates confidence from true readiness.
30 Oct 2025
Stories From the SOC by North Star Cyber Group – When the Tools Lie
Sometimes the scariest incidents aren’t real at all; they’re false positives that send an entire SOC spiraling down a rabbit hole.
In this episode, Randy shares a familiar story of chasing phantom alerts, the emotional rollercoaster of “critical” false alarms, and the real danger that follows when tools cry wolf too often.
You’ll learn how to build digital intuition, spot the difference between noise and signal, and keep your sense of humor when your SIEM insists the sky is falling.
Takeaway: your tools might lie, your instincts won’t, if you keep them sharp.
29 Oct 2025
Stories from the SOC by North Star Cyber Group — When the Factory Stops: Lessons from the Jaguar Land Rover Breach
When Jaguar Land Rover was hit by a cyberattack in late 2025, production lines across the world went silent.
Factories shut down, suppliers were left waiting, and the company faced hundreds of millions in losses.
But through it all, customer trust barely wavered.
In this episode of Stories from the SOC, Randy Breault breaks down one of the year’s most significant breaches, exploring where the real costs occurred, how reputation was preserved, and why business continuity and leadership under pressure matter more than ever.
You’ll learn:
• The true cost breakdown of a large scale operational cyberattack
• Why strong communication and continuity planning preserve trust
• How tabletop testing and disaster recovery drills create calm in chaos
• And what cybersecurity leaders can do now to build resilience before it’s tested
Because when the factory stops, everything stops.
28 Oct 2025
Stories from the SOC by North Star Cyber Group – AI Fatigue and Cyber Brain Rot: Staying Sharp in a Hype Driven Industry
Every day brings a new AI headline, new copilots, new models, new promises to change everything. But for cybersecurity professionals, it’s starting to feel like mental overload.
In this episode, Randy Breault from North Star Cyber Group breaks down AI fatigue, explores how “cyber brain rot” sneaks in through the hype cycle, and shares how leaders can stay sharp, focused, and resilient in a world that won’t slow down.
Stay curious, not exhausted.
27 Oct 2025
Stories From the SOC by North Star Cyber Group - The Power of Mentorship in Cybersecurity
In this episode, Randy Breault, founder of North Star Cyber Group, shares how mentors shaped his 27-year cybersecurity career and why mentorship is the key to clarity, confidence, and long-term success in this field.
You’ll hear:
Why every cybersecurity professional needs a mentor
What makes a strong mentor–mentee relationship
How mentoring accelerates leadership and trust in security teams and in the sales side of the industry
How you can start mentoring others today
Whether you’re looking for direction in your cybersecurity career or ready to guide the next generation, this episode will remind you that none of us get there alone.
🔗 Learn more or schedule a discovery call at northstarcybergroup.com
#Cybersecurity #Mentorship #Leadership #CareerGrowth #StoriesFromTheSOC
23 Oct 2025
Stories From the SOC by North Star Cyber Group - Shadow AI: The New Shadow IT
Every organization is experimenting with AI, whether security knows it or not.
Employees quietly use tools like ChatGPT, Sora, and Copilot to move faster, create more, solve problems, and move data outside the company’s control.
In this episode, Randy Breault explores Shadow AI, the new evolution of shadow IT, and how the speed of innovation collides with the slower pace of security and compliance.
You’ll hear why blocking AI tools doesn’t work, how to manage AI usage safely, and what CISOs and security leaders can do today to protect curiosity without killing it.
Stories from the SOC is where real-world cybersecurity meets human decision-making.
If this episode helps you think differently about AI risk, share it with your team or schedule a discovery call at northstarcybergroup.com to talk strategy.
21 Oct 2025
Stories From the SOC by North Star Cyber Group - The Employee Who Clicked Twice: A Story About Fatigue, Not Failure
Not every security incident starts with a hacker.
Sometimes, it starts with someone who’s simply exhausted.
In this episode of Stories from the SOC, Randy Breault shares the story of one employee who kept failing phishing tests and what he discovered when he looked beyond the click.
It’s a reminder that cybersecurity isn’t just about tools or training. It’s about people and the culture we create around them.
If you’ve ever wondered why awareness programs don’t always work, this one’s for you.
20 Oct 2025
Stories From the SOC by North Star Cyber Group - When Everything Breaks: Curiosity in the Face of Outages
When AWS goes dark or a massive update like CrowdStrike’s takes systems offline, the internet erupts with theories:
cyberattack?
breach?
insider threat?
In this episode of Stories from the SOC, Randy Breault unpacks why not every outage is a cybersecurity event and why curiosity, not panic, should be your default.
You’ll hear why operational failures can look like security incidents, how to stay grounded in your analysis, and what great cybersecurity professionals do differently when everything around them is breaking.
Key takeaway: Don’t jump to conclusions. Stay curious. Stay steady.
For more cybersecurity insights and career growth resources, visit NorthStarCyberGroup.com (https://northstarcybergroup.com).
14 Oct 2025
Stories From the SOC by North Star Cyber Group - Signed, Sealed, Compromised
In this episode of Stories from the SOC, Randy Breault shares a story that starts with a signature, a trusted vendor’s digital certificate, and ends with a sobering truth about software supply chain attacks. Everything looked safe when an application appeared legitimate, even verified by the vendor’s signing key. But under the surface, the attacker wasn’t breaking trust; they were borrowing it. Randy unpacks how a single compromised code-signing certificate turned a trusted build into a delivery vehicle for compromise, what lessons his team learned, and how security leaders can verify trust every time.
If you’re building a cybersecurity career and want to move from reacting to alerts to shaping strategy, schedule a discovery call at northstarcybergroup.com (https://northstarcybergroup.com).
7 Oct 2025
Stories From the SOC by North Star Cyber Group Episode 2 The Ghost in the Server Room
A forgotten Linux server. An unpatched vulnerability. A crypto miner that crashed the system instead of profiting from it. In this Stories from the SOC episode, I share how one outdated system taught lessons in asset management, visibility, and leadership.
30 Sept 2025
Stories From the SOC by North Star Cyber Group Episode 1
In the very first episode of Stories from the SOC, Randy Breault, founder of North Star Cyber Group, takes you inside a real-world battle against a foreign adversary. What started as a six-figure wire fraud quickly turned into an international chase through the SWIFT banking system, late night calls to China, and a lesson in why curiosity and persistence can change the outcome of an entire company’s future.
This isn’t just another breach story. It’s about how incident response playbooks, relentless digging in the logs, and refusing to take “no” for an answer helped recover stolen funds that everyone else had written off as gone.
For ambitious cybersecurity professionals ready to take the next step in their career, North Star Cyber Group offers coaching to help you grow your career and influence. Schedule your discovery call at northstarcybergroup.com (https://northstarcybergroup.com).
Contact Stories From the SOC
Guest appearances
Does not typically book guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Stories From the SOC?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
