Security talk from the working side.
Security Noise treats cybersecurity as work people actually do, not just headlines to react to. Episodes move from quick industry news into conversations about Azure logging gaps, AI-assisted exploit research, incident response, scams, conferences, and security culture.
PRESS PLAY
Security Noise is an information security show centered on the people doing the work: practitioners, researchers, responders, technical leaders, and the occasional guest with law enforcement experience. Its episodes mix current cyber news with long-form discussion, usually moving from an industry headline into a practical conversation about what defenders, administrators, and security teams should notice. The show is comfortable with technical detail. It talks about tokens, sign-in logs, proof-of-concept exploit code, cloud response playbooks, voice authentication, command-and-control servers, and test-driven AI workflows without sanding everything down for a general audience. Recent episodes have focused heavily on AI. Guests discuss frontier models finding vulnerabilities, generating exploit code, accelerating repetitive development tasks, and changing how both attackers and defenders operate. The show also treats AI as a social-engineering problem, looking at spam, real-time voice alteration, voice cloning, and the everyday flags that should make people slow down before acting. Incident response is another recurring lane. Ryan McFarland brings perspective on faster attack timelines, bulk data grabs, cloud-focused response, ransomware, attribution, and how hard coordinated investigations really are. Security Noise also pays attention to platform trust and policy, including TikTok, router bans, Microsoft patch news, data brokers, and the difference between what companies collect and what governments say they fear. The tone is informal and often irreverent. Jokes, side comments, conference stories, and internal TrustedSec banter sit beside serious claims about logging failures, exploit automation, and organizational risk. That combination gives the show a working-room feel rather than a staged panel feel. It can be loose, but it rarely feels abstract. The best moments come when practitioners explain how they tested something, what surprised them, and why the result matters to people responsible for keeping systems secure. Episodes also make room for community and culture, from conference interviews at Wild West Hackin' Fest and GrrCON to a security-themed game with TrustedSec managers. Security Noise is best for listeners who already care about cybersecurity and want a candid, technically literate show that tracks both the tools and the habits shaping modern defense.
Made for: Security practitioners, administrators, and technically curious listeners who want current cyber topics discussed by people close to the work. It is especially suited to listeners comfortable with practitioner jargon and informal shop talk.
What sets it apart: Security Noise stands out by mixing credible technical detail with loose, candid conversation from TrustedSec voices. It feels less like a scripted briefing and more like a recorded discussion among people comparing real findings, response lessons, tools, and tradeoffs.
In the security industry, it's easy to get overwhelmed by the constant barrage of information and buzzy trends. On Security Noise, we help you sort through the noise and identify the information that truly matters. Listen to hear from practitioners in the field who are using the latest tools and methodologies to stay ahead. Whether you're a seasoned security pro or an industry newcomer, our podcast has something for anyone in the business of making the world secure.Presented by TrustedSec, an end-to-end cybersecurity consulting company using our expertise, technical skills, and ethical character to secure what's important and achieve what matters.
A valid Azure token, no sign-in log: your 'all clear' could use another look.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
An Azure logging failure turns a fixed authentication bug into a longer question about trust.
Security Noise frames Azure authentication bugs around a blunt operational worry: what happens when security logs fail at the moment they are supposed to matter.
A grounded look at AI-assisted vulnerability research, protocol probing, proof-of-concept code, and automated testing's limits.
Security Noise gives AI-powered vulnerability research a grounded, practical frame. Justin Bollinger and Chris Passion of TrustedSec look at frontier models as tools for finding software flaws and producing proof-of-concept exploit code, with attention to protocol-level…
A grounded incident response discussion linking faster attacks, AI-enabled crime, and the hard art of attribution.
This Security Noise episode frames incident response as work that has moved well beyond after-the-fact cleanup. Faster attacks, bulk data theft, cloud response playbooks, and ransomware all shape the discussion, with Ryan McFarland bringing an operator's perspective from his…
A 10-year retrospective that ties TikTok's security debate to the history and personality of Security Noise.
Security Noise marks its 10-year point by circling back to TikTok, ByteDance, Meta, algorithms, data collection, and the uneasy question of children's attention. Dave Kennedy brings a skeptical read of the U.S.
A practical look at how AI can make familiar spam and phone scams harder to read quickly.
Security Noise frames AI-assisted deception as a problem of trust, pressure, and attention. It moves from spam sent through Microsoft Power BI and workflow automation to a phone call using a voice changer to soften a caller's accent, then considers how convincing that altered…
A loose security quiz lets TrustedSec managers turn Hacker Feud into funny, messy team banter.
Security Noise turns a TrustedSec management meetup into Hacker Feud, a loose Family Feud-style quiz built from questions sourced from the company's consulting staff.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
["Security Noise 8.13, \"A Goblin, a Ghost, and a Ninja Walk into the Azure Bar,\" centers on Nick from TrustedSec describing Azure sign-in logging bypasses.", "He says Microsoft Entrez ID can be authenticated with a full working token while leaving no sign-in log, and he now counts four separate paths.", "The conversation breaks down why admins treat sign-in logs as the source of truth, then walks through GraphNinja, GraphGhost, repeated `open id` scopes, and user-agent fuzzing.", "A separate front-half segment covers the FCC's ban on new foreign-made consumer routers, CPE equipment, and whether domestic manufacturing can fill the gap."]
["Microsoft's March 2026 Patch Tuesday fixed 79 vulnerabilities, including CVE-2026-26144 in Excel, which the hosts say could let Copilot agents exfiltrate data in a zero-click path.", "Justin Bollinger and Christopher Passion of TrustedSec argue that AI assistants can work around sandbox limits and command bans when they are trying to finish a task.", "Justin says a Telnet disclosure blog post became a working nuclei template after he supplied a vulnerable Docker target and let the model iterate.", "The episode's main claim is that AI compresses the time from patch release to proof of concept, but only when the operator gives it exact prompts, tests, and validation loops."]
Global Telnet traffic fell 65% within one hour on January 14, six days before CVE-2026-24061 went public on January 20, and the hosts ask whether port 23 filtering was already underway.
Security Noise's Ten Years: A Decade of Doing This opens with Microsoft adding Sysmon to Windows Insider builds, and Dave Kennedy calls it a major step for endpoint telemetry, credential-theft detection, and lateral-movement hunting.
Security Noise's "LLM = Love Language Model?!" ties Microsoft Power BI spam, catfishing, dead internet theory, and AI-driven business email compromise into one security episode.
Security Noise episode 8.8 has TrustedSec principal consultant Drew Kirkpatrick and host Jeff examine authorization risks in Microsoft Copilot agents and connectors.
Security Noise turns Episode 8.7, "Hacker Family Feud," into a survey game built from TrustedSec Consulting staff answers.
Security Noise episode 8.6 features Scott Lisbaum, an eight-year Trusted Sec researcher, explaining how ransomware crews, APTs, and red teams each choose command and control (C2) tooling differently.
Security Noise Season 8, Episode 4, "Con Men: Wild West Hackin' Fest + GrrCON," follows Skylar Tudor through conference interviews with David Boyd and Adam Compton.
Jeff Walton and Shane Jones discuss using generative AI to speed up troubleshooting during network penetration tests.
Jeff Walton hosts a discussion with Jason Lang and Justin Elsey on the evolution and differentiation of red teaming from traditional penetration testing.
A panel discussion on the evolution of application security from the blue team perspective, featuring experts from TrustedSec.
Host Jeff Walton introduces a mini-series on the changing nature of information security, starting with AppSec, and discusses how engagements have evolved with veteran consultants.