A practical look at AI simplifying repetitive IT and security work.
7 Minute Security presents AI as a practical helper for IT and security work, and Brian Johnson supports that idea with a concrete lab workflow instead of a broad pitch.

Security field notes with a human pulse.
7 Minute Security follows Brian Johnson through the practical grind of security work, from internal pentests to AI-assisted lab work. The episodes feel like field notes with a heartbeat: technical, personal, funny, and willing to sit with hard tradeoffs.
PRESS PLAY
7 Minute Security is a security show with mud on its boots. Brian Johnson talks through the work as it happened, not as a clean slide deck. Recent episodes make that shape clear. One week he is explaining how AI helped him clear project backlog, rebuild student lab environments, and make Apache Guacamole access line up with Kali lab VMs. Another week he is walking through a family medical emergency in the Dominican and the uncomfortable privacy choice of uploading sensitive health information to Claude to understand care notes, labs, medications, and next steps. The show keeps returning to that kind of tension. Security best practice matters. So does the human situation that sometimes breaks the neat rulebook. Its pentest episodes are where the technical density really stacks up. Tales of Pentest Pwnage entries follow internal assessments, no-credential starts, packet captures, SNMP strings, Responder attempts, IPv6 checks, EDR blocks, registry hives, Axiom Secrets, obfuscated payloads, and the patient search for a path to domain admin. The details are specific enough for practitioners, but the delivery stays conversational and story-led. Johnson tends to narrate the false starts along with the wins, which gives the show a useful sense of proportion. It is not only about clever compromise. It is also about what did not work, what caused risk, what needed restraint, and what should be tried in shorter bursts next time. The community security episodes widen the lens. Operation Metro Surge, personal OPSEC, phone hardening, surveillance concerns, and helping neighbors appear beside more familiar consulting and training themes. That shift gives the show a more personal edge than many security programs. It can move from technical craft to family stress to political alarm without pretending those things live in separate worlds. The result is a fast, informal feed for people who want practical security thinking grounded in lived experience. It favors useful mess over studio polish. The best episodes feel like a skilled operator replaying the day while the lesson is still fresh.
Made for: For security engineers, pentesters, blue teamers, IT operators, and security-curious builders who like technical detail delivered through real stories. It also fits listeners interested in privacy, AI-assisted workflows, and community-level OPSEC.
What sets it apart: The show blends hands-on security tradecraft with unusually personal context, letting pentest tactics, AI experiments, family emergencies, and community safety concerns sit in the same frame. Its value comes from the messy decision-making around the tools, not just the tools themselves.
7 Minute Security is a weekly information security podcast focusing on penetration testing, blue teaming and building a career in security. The podcast also features in-depth interviews with industry leaders who share their insights, tools, tips and tricks for being a successful security engineer.
Based on 6 episodes we listened to · September 2026
Brian Johnson makes penetration testing useful by showing the failed attempts, defensive friction, and improvised decisions behind a successful assessment.
7 Minute Security turns Brian Johnson's working problems into candid accounts of how security decisions get made. Penetration tests supply much of the technical backbone: Johnson traces attempts to evade endpoint defenses, extract secrets, exploit weak passwords, and move…
An EDR deletes the copied hives, and Brian Johnson lets you stay for the frustrating part.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at AI simplifying repetitive IT and security work.
7 Minute Security presents AI as a practical helper for IT and security work, and Brian Johnson supports that idea with a concrete lab workflow instead of a broad pitch.
A privacy checklist meets a medical emergency, and the checklist loses.
Brian Johnson frames a family trip to the Dominican around a hard practical problem: when a sick spouse needs help fast, privacy rules can give way to whatever gets the job done.
A repeat target, a stubborn EDR, and one very patient tester.
Brian Johnson keeps this 7 Minute Security installment centered on a familiar target, and the appeal lies in seeing security maturity improve while a tester still has to earn each foothold.
A no-credentials internal pentest turns patient packet watching into a practical path toward domain-admin access.
7 Minute Security turns a no-credentials internal penetration test into a patient account-hunting case study. The host starts with a plugged-in system that phones home, then spends the first day or so collecting raw TCP dump captures, waiting to see whether clear-text…
A grounded pentest story about using Claude to turn a gated snippet into a guided DLL investigation.
7 Minute Security returns to penetration testing after three heavier episodes with a story that works best as a live troubleshooting trail. Brian Johnson brings Claude into a separate pentest, gives it an unfamiliar gated snippet, and follows its requests for the install…
A clear security-career autopsy about being named the expert before the training or preparation is there.
Security consulting goes wrong when confidence is allowed to stand in for expertise, and the episode turns that mismatch into a clear security-career lesson.
A New Year check-in on 7-Minute Security's business plans, beta testing, and a personal stress discovery.
The episode opens with a practical New Year check-in for 7-Minute Security, framing the year around projects in the hopper, a possible beta for listeners who want to help test the work, and a reminder to log issues in GitHub while putting in enough lab time to finish the…
A practical pen-test story built around password hygiene and weak-password auditing.
The episode leans into a pen-test pwnage story while keeping its eye on practical password control. Brian Johnson opens with a joke about getting pwned by noon and then by tonight, which sets a clear tone: the basics still matter.


Deeply researched narrative dives into hacking history and cyber-law cases, hosted by Ran Levi.

Reported narratives on hackers, spyware, and data crimes from Dina Temple-Raston.

Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.

IAPP's Jedidiah Bracy interviews the regulators and lawyers writing privacy and AI law.

A daily cybersecurity briefing hosted by Dave Bittner, pairing breaking incidents with a guest interview.
Brian Johnson introduces a series on securing your community, focusing on privacy and security when federal agents are present, and previews next week's technical OPSEC tips.
Brian Johnson shares his early impressions of Retype, a tool for quickly creating documentation sites, comparing it to Docusaurus.
Brian Johnson discusses 7MS's New Year's resolution to improve work-life balance by spacing client projects.
Brian Johnson shares a detailed tale from an internal penetration test where he discovered a critical misconfiguration: a default domain controller policy with an insecure LAN Manager setting.
Brian Johnson shares AI project ideas for IT and security that improve efficiency and save time.
Brian Johnson shares how a medical emergency in the Dominican Republic forced him to compromise his security and privacy practices to get his wife better healthcare.
Brian Johnson shares his favorite pen test pwnage tale from a multi-year network test, highlighting security improvements over time.
Brian Johnson shares a story about an internal penetration test starting with no credentials.
Brian Johnson introduces a pentest pwnage story and briefly discusses Operation Metro Surge before transitioning to the main content.
Brian Johnson discusses part three of securing your community, recaps previous episodes on Operation Metro Surge, and teases upcoming pen testing and personal stories.
Brian Johnson introduces a series on securing your community when federal agents are present, emphasizing privacy and security for helpers.
In this 7 Minute Security holiday and New Year episode, host Brian revisits a "tales of pentest fail" story from earlier in his career, when he ran an automated Acunetix scan against a customer's contact-us form.
Brian Johnson shares tips for presenting to diverse audiences as a small cybersecurity business owner.