mnemonic
169 episodes listed below
Cybersecurity conversations from the working edge.
Mnemonic Security Podcast is a cybersecurity interview show built around working security problems. Episodes move from Interpol data protection and cloud incident response to runtime controls, prompt engineering, autonomous attacks, penetration testing, and reverse engineering.
PRESS PLAY
Mnemonic Security Podcast is a cybersecurity interview show with a working-room feel. It is technical without becoming sealed off from the human side of security. Recent episodes move through Interpol, runtime security, cloud detection and response, prompt engineering, agentic AI, autonomous cyberattacks, penetration testing, and reverse engineering. The show is especially strong when a category name starts to sound too neat. Cloud detection becomes a conversation about attackers moving through Slack, Microsoft 365, tokens, credentials, and incomplete logs. Runtime security becomes less about model promises and more about the actions a system actually performs. AI security gets treated with urgency, but not with panic. Guests discuss prompt injection, coding agents, insecure production code, reward signals, and autonomous systems in terms that security teams can connect to real controls. The show also respects older disciplines. Reverse engineering is framed as curiosity, patience, tools, and puzzle-solving. Penetration testing is framed as creativity, attack chaining, and finding non-obvious paths when obvious ones are closed. There is a clear preference for practitioner detail over broad commentary. The conversations often begin with a lively setup, then settle into the mechanics of how systems fail and how defenders adapt. Interpol’s data custody requirements, cloud forensics, agent behavior, and prompt engineering all become ways to ask the same question: what can actually be trusted? The tone is personable, sometimes joking, and often direct. It does not sand off the complexity. It gives security professionals a place to hear peers think through the changing work in front of them.
Made for: Built for security practitioners, cloud defenders, red teamers, incident responders, and technical leaders tracking AI-era risk. It also fits curious technologists who can follow security vocabulary and want real operational context.
What sets it apart: The show connects high-level security shifts to concrete practitioner mechanics: logs, identities, runtime actions, prompt injection, SaaS movement, exploit chains, and reverse engineering. Its interview format keeps the tone human while staying close to technical reality.
The mnemonic security podcast is a place where IT Security professionals can go to obtain insight into what their peers are working with and thinking about.
Robbie Perelta keeps asking what happens after attackers get the keys, so you can plan accordingly.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A grounded look at how Interpol's neutrality and self hosted data posture shape its security.
The episode treats Interpol as a global law enforcement body with unusually tight limits: it covers 196 countries, holds to neutrality, and keeps the data it guards on its own systems instead of outside clouds.
Runtime is where AI security becomes concrete.
Mnemonic Security Podcast keeps the focus on runtime, where agent behavior turns into actual risk. Robbie Perelta and Sergey Epp frame AI agents like cloud workloads: assume compromise, expect a wider blast radius, and judge them by what they do in execution.
Cloud security, framed as an incident-response problem rather than a tidy category.
Cloud security is treated less like a product category and more like a live operational problem. Robbie Perelta and Brian Contos move from EDR and XDR into the cloud era, where identity, SaaS integrations, and real-time access matter more than the old server-centric playbook.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
Michael Vingoyd of mnemonic explains that NTP, built on a 2010 implementation that must stay backward compatible with 1995, has no owner and is rarely examined.
Robbie Perelta speaks with Björn Vatner, the Global Chief Information Security Officer for Interpol, about how the organization coordinates law enforcement in 196 countries from Oslo to Lyon.
Mnemonic Security Podcast episode “Runtime” centers on Robbie Perelta’s opening claim that “runtime, runtime, runtime” matters more than guardrails or promises, because “the truth lives in the execution.” Sergey Epp of Sysdig argues that runtime security is the ground truth for cloud and container environments, contrasting daily configuration snapshots with live telemetry and saying 60% of containers across customers are renewed every minute.
Brian Contos and Robbie Perelta frame Mnemonic Security Podcast episode "Cloud Detection and Response" around the shift from EDR and XDR to cloud-wide correlation.
This episode discusses attack chaining for zero days with a guest from Black Hat Europe, focusing on how AI is reshaping penetration testing and red teaming.
Mnemonic Security Podcast host Robbie Perelta and Joe Slowik examine Volt Typhoon, a China-based threat actor linked to persistent access in U.S.
An interview with Dan Cleary, co-organizer of the Prompt Engineering Conference, discussing the importance of prompt engineering for security teams.
A live podcast from a Norwegian security conference featuring an interview with an IT expert and award-winning technologist.
An interview with Brian Singer about LLMs and AI agents that autonomously hack networks.
An interview with reverse engineer Duncan Ogilvie discussing the technical and curious nature of reverse engineering in cybersecurity.
Discussion about cloud-native application protection (CNAP) tools and organizing security practices for cloud environments.
This episode discusses data privacy concerns and the option of using data removal services, featuring an interview with Darius Benuevas.
This episode discusses how IT security professionals can communicate cyber risk to management to secure budget and attention.
An episode discussing the ethics and practices of social engineering in penetration testing with guest Dag Nils Hågang.