Down the Security Rabbithole Podcast (DtSR)
This is Cybersecurity's premier podcast. Running strong since 2011 Rafal Los, James Jardine, and Jim Tiller bring a no-nonsense, non-commercial approach to our profession. DtSR brings interviews and discussion with people you want to meet, and stories you have to hear. So whether you're just starting out, or are decades deep into your career, you'll always learn something on this show.
On Twitter/X: https://twitter.com/@DtSR_Podcast
On YouTube: https://youtube.com/playlist?list=PLyo0dkKRvfVtWXjRxNISrhme1MgBj3C2U&si=scHDiTuLXSEQ9qHq
On LinkedIn: https://www.linkedin.com/company/down-the-security-rabbithole-podcast/
- Update frequency
- every 7 days
- Average duration
- 43 minutes
- Episodes
- 708
- Years Active
- 2011 - 2025
DtSR Episode 455 - TPA All The Reminiscing
Prologue
It's been a long time, maybe forever, since James and I sat down and just chatted on the podcast. With all these amazing guests we have on the show it's easy to get caught up in the fun and …
DtSR Episode 454 - TPA Cyber Insurance Fact vs Fiction
Prologue
Sean Scranton joins Shawn Tuma and myself to talk about cyber insurance, specifically, as it is a massive topic of discussion lately. Building on top of the "does cyber insurance even pay ou…
DtSR Episode 453 - TPA On Prioritizing Enterprise Vulnerabilities
Prologue
Vulnerability Management has been a bit of a soapbox for me lately, and this episode brings in two experts on the topic directly from the enterprise to talk about how we prioritization, spre…
DtSR Episode 452 - TPA Burning It At Both Ends
Prologue
On this episode of the podcast I have the pleasure of hosting one of my long-time friends and industry titan - Dawn-Marie "Rie" Hutchinson. She's fresh off of a stint as a CISO, and talking …
DtSR Episode 451 - TPA Rockin It
Prologue
My pal Rock has ventured off on his own, so I wanted to catch up with him and get a quick update on the state of business, but also get a sense for what he's seeing in the industry as he's a…
DtSR Episode 450 - TPA 3rd Party Risk Shitshow
Prolgue
Ladies and Gentlemen - we've hit ** 450 ** episodes.
Let me just take a moment and reflect on the number of awesome guests, long hours recording and editing, and all of you phenomenal fans an…
DtSR Episode 449 - TPA Tuma on A Watershed Moment for US Cyber
Prologue
In this episode, our legal eagle Shawn Tuma is back to discuss the Colonial Pipeline incident and whether it could be a watershed moment for US Cyber interests. As Toby Keith's "Courtesy of …
DtSR Episode 448 - YGHT Knock Knock Who's There
Prologue
You've GOT to hear this!
This week on the podcast, I invited Martin Zizi of Aerendir, to talk about how we can use technology to not only distinguish between humans and non-humans (bots?) bu…
DtSR Episode 447 - TPA Software Security Liability and Insurance
Prologue
I don't know about you, but I have Jeremiah in a list on Twitter that allows me to read/think about some of the things he posts without the noise of the rest of Twitter.
Should a company tha…
DtSR Episode 446 - TPA AppSec Philosophy
Prologue
When in Austin, TX ... meet up with some friends right? This week I have the pleasure of sitting down in-person with Joel whom has been doing the "AppSec thing" for longer than many of you w…
DtSR Episode 445 - TPA Non-Random Cyber Thoughts with Dave Marcus
Prologue
I honestly am having a difficult time understanding how this show has gone so long, so many episodes, without sitting down with Dave Marcus 1:1. It hurts my brain. So I rectified this situat…
DtSR Episode 444 - TPA Gary is Awful at Retirement
Prologue
I'm honored to have Gary McGraw on with James and myself on this episode. I hadn't realized, but Gary retired from (what was formerly) Cigital - and by retired I mean "started something new"…
DtSR Episode 443 - TPA Addressing AppSec Tech Debt
Prologue
Chris Eng has been elbows deep in software security for a very long time. Times have changed over the last 20 years, as have tools, methods, and outcomes - what hasn't changed is how much se…
DtSR Episode 442 - S11E15 - TPA Fighting the Good Fight
Prologue
This week, the show is back after a brief spring break, and we have with us Dmitri Alperovitch - who has taken on a new venture in his latest role. We discuss cybersecurity policy, governmen…
DtSR Episode 441 - TPA State Secrets and Diplomatic Protection
Prologue
** First, before I say anything else, I want to thank Lonnie and his staff for their service to our country. Protecting diplomats is not an easy task I imagine, and being the most powerful n…
DtSR Episode 440 - TPA Fighting Back Against ATO
Prologue
Account Take-Over (ATO). You've probably not given this too much thought, unless you've had your account jacked. Whether it was someone stealing your Twitter account, or your bank account, o…
DtSR Episode 439 - TPA Open Source Endpoint Defense
Prologue
OK, say it with me, defender tools suck. They all have their own dashboards, data formats, ways to look at what's going on...and that wouldn't be bad if they even remotely worked together.
O…
DtSR Episode 438 - TPA Implementing Zero Trust Principles
Prologue
This week on a very cool conversation, Rafal snags a chance to do a virtual sit-down with Yuri all the way from the Netherlands. Yuri is one of the quintessential experts on Zero Trust (not …
DtSR Episode 437 - TPA Healthcare IT Under Siege
Prologue
This week, DJ McArthur joins James and Rafal to talk shop about his career in defending healthcare IT. The Cliff's Notes version is that it's more complex, more under siege, and more critica…
DtSR Episode 436 - TPA A Dev Perspective on AppSec
Prologue
Continuing what accidentally became a series of AppSec or Software Security focused episodes, #436 takes it from yet another direction. Rey joins us to talk about AppSec from his perspective…