Bare Metal Cyber

byDr. Jason Edwards

EducationTechnology

Welcome to Bare Metal Cyber, the podcast that bridges cybersecurity and education in a way that’s engaging, informative, and practical. Hosted by Dr. Jason Edwards, a seasoned cybersecurity expert and educator, this weekly podcast brings to life the insights, tips, and stories from his widely-read LinkedIn articles. Each episode dives into pressing cybersecurity topics, real-world challenges, and actionable advice to empower professionals, educators, and learners alike. Whether navigating the complexities of cyber defense or looking for ways to integrate cybersecurity into education, Bare Metal Cyber delivers valuable perspectives to help you stay ahead in an ever-evolving digital world. Subscribe an...

Episodes(40 episodes)

Season 2 - Episode 56

Data Gravity Wells

In this narrated edition of “Data Gravity Wells: Where Sensitive Information Inevitably Sinks,” we walk through why your most critical data rarely stays inside the neat boxes on your architecture diagram. Sensitive records drift into logs, analytics environments, collaboration suites, and emerging AI stores, quietly forming a handful of platforms that now define your real exposure. You will hear how data gravity wells emerge from integration decisions, analytics demands, and vendor ecosystems, and why they often sit outside the traditional list of “crown jewel” systems security programs are built around. This episode is based on my Wednesday “Headline” feature from Bare Me...

Published: Jul 16, 2026Duration: 16m 49s

Season 2 - Episode 55

The API Gold Rush

In this audio edition of “The API Gold Rush: Security When Everything Becomes a Service,” you get a guided walk through what happens when APIs become the default interface for everything your organization does. The narration unpacks how an ever-expanding API surface quietly turns into the business surface, why “just one more endpoint” keeps creating new seams of risk, and where ownership tends to fall apart between product, platform, security, and partners. It is built from my Wednesday “Headline” feature in Bare Metal Cyber Magazine and is designed for leaders who need to see the whole landscape, not just the latest i...

Published: Jul 16, 2026Duration: 21m 13s

Season 2 - Episode 54

Controls Without Context

Compliance checklists promise clarity, but they can also turn into a parallel universe that has little to do with how your environment really works. In this narrated audio version of “Controls Without Context: When Compliance Checklists Backfire,” we walk through why control catalogs feel so comforting to leaders and how they gradually drift away from modern architectures, cloud-native services, SaaS sprawl, and AI-driven workflows. You will hear how “green” status on dashboards can coexist with real attack paths that were never modeled, and why incidents so often expose gaps that compliance paperwork never even contemplated. The focus stays squarely on senio...

Published: Jul 16, 2026Duration: 16m 8s

Season 2 - Episode 53

Third-Party Truth Serum

When a vendor says “trust us,” what are you actually trusting? In this audio edition of Third-Party Truth Serum: Getting Real Answers from Vendors Who Say “Trust Us” — From Questionnaires to Continuous Validation and Shared Fate, we walk through why traditional third-party assurance feels so polished on paper yet so fragile in practice. You will hear how questionnaires, certifications, and audit reports became the default currency of vendor risk, why they routinely create an illusion of assurance, and what a more grounded definition of “evidence” looks like for relationships that sit in your real blast radius.From there, the epi...

Published: Jul 16, 2026Duration: 19m 53s

Season 2 - Episode 52

Regulation Whiplash

Regulation whiplash is becoming a familiar feeling for leaders caught between the Digital Operational Resilience Act (DORA), the NIS2 Directive, and new SEC cybersecurity disclosure rules. In this episode, we walk through how a single incident can trigger three different sets of expectations, each with its own timelines, definitions, and pressures. You will hear how these regimes quietly converge on a core set of questions about operational resilience, governance, incident transparency, and third-party risk, and why treating them as separate projects only amplifies the pain when things go wrong.From there, the episode follows the structure of...

Published: Jul 16, 2026Duration: 17m 59s

Season 2 - Episode 51

Resilience over Perfection

In this narrated edition of “Resilience over Perfection: Leading When ‘Secure’ Is Never Done,” we walk through why the old promise of being “secure enough” no longer matches how modern digital businesses actually operate. You will hear how familiar tools like maturity models drift into theater, why green dashboards quietly undermine trust, and how to shift board conversations toward what really matters: how the organization bends under stress and recovers from a serious hit. This episode is drawn from the Wednesday “Headline” feature in Bare Metal Cyber Magazine and is designed for senior leaders who want a more honest, usable picture o...

Published: Jul 16, 2026Duration: 16m 4s

Season 2 - Episode 50

Autonomous Agents Unattended Risk

Autonomous agents are quietly shifting from helpful copilots to operational actors, and that shift becomes very real the moment a bot starts opening tickets for you. In this narrated edition of “Autonomous Agents, Unattended Risk: When Bots Start Opening Tickets for You,” we unpack why ticketing is not a low-stakes sandbox, but a high-privilege interface into your systems of record. You will hear how autonomous agents move from suggestion to participation, how their tickets shape perception of risk and work, and why leaders need to see these bots as semi-privileged identities instead of clever experiments. This episode is based on m...

Published: Jul 16, 2026Duration: 14m 36s

Season 2 - Episode 49

Deepfake Governance

When deepfakes become cheap and convincing, the hardest question inside an enterprise is no longer “Was this compromised?” but “Did this ever really happen?” In this narrated audio version of “Deepfake Governance: Policy, Evidence, and the New ‘I Didn’t Say That’ Defense,” we explore how synthetic media erodes trust in real recordings, chats, and logs. You will hear how the liar’s dividend plays out in executive disputes, harassment claims, incident narratives, and market-moving conversations, and why security and technology leaders need to think about evidence integrity as seriously as they think about endpoint security or identity. This episode is based on...

Published: Jul 16, 2026Duration: 14m 47s

Season 2 - Episode 48

Red Team Blue Models

In this narrated edition of “Red Team, Blue Models: Adversarial Testing in an AI-First World,” we walk through what happens when “we did a red team” becomes a comforting slogan instead of real assurance. You’ll hear how AI-first systems create a new attack surface that extends far beyond jailbreak demos, into the messy intersection of models, prompts, plugins, data, and identity. We break down why adversarial testing has to focus on attacker goals, long-lived systems, and cross-layer behaviors if you want a risk picture that actually matches the stakes for your organization. This episode is based on my Wednesday...

Published: Jul 15, 2026Duration: 18m 24s

Season 2 - Episode 47

Prompt Leaks and Side Channels

In this audio edition of “Prompt Leaks and Side Channels: When ‘Internal Only’ Isn’t,” we walk through why hidden prompts, routing logic, and subtle model behaviors are rapidly becoming part of your exposed attack surface. You’ll hear how prompt leaks actually unfold in production systems, why side channels show up in ordinary UX and error handling decisions, and what that means for AI-enabled security programs over the next few years. The focus stays on leader-level decisions: where you encode policy, how you treat prompts as assets, and how much inadvertent transparency you are comfortable living with. This narration is...

Published: Jul 8, 2026Duration: 14m 0s

Season 2 - Episode 46

LLM Roulette: When Every Employee Has a Different AI in Their Browser

This audio edition of “LLM Roulette: When Every Employee Has a Different AI in Their Browser” walks through what really happens when large language models (LLMs) arrive one browser tab at a time instead of through a formal program. You will hear how shadow AI tools quietly become a decision layer across sales, engineering, marketing, finance, and legal, shaping tone, risk appetite, and customer experience without ever showing up on an architecture diagram. The episode explains why this is not just a data loss issue, but a deeper question of who effectively owns your organization’s decision engine. It is bas...

Published: Jul 1, 2026Duration: 15m 29s

Season 2 - Episode 45

Bios, Chips, and Implants: Cybersecurity When the Endpoint Is a Human

When the “endpoint” is part of a person’s body, the stakes of cybersecurity change. In this narrated audio version of Bios, Chips, and Implants: Cybersecurity When the Endpoint Is a Human, we walk through how pacemakers, insulin pumps, exoskeletons, augmented reality headsets, and other bio-digital devices are already intersecting with your networks and decisions. You will hear how threat models evolve when attackers can seek leverage through harm, coercion, or intimate exposure, and why traditional endpoint thinking breaks down when devices cannot simply be reimaged or replaced. This episode is based on my Wednesday “Headline” feature from Bare Metal Cybe...

Published: Jun 24, 2026Duration: 13m 13s

Season 2 - Episode 44

Spaceborne Security: Defending Satellites, Ground Stations, and the Links Between

Spaceborne Security: Defending Satellites, Ground Stations, and the Links Between explores how satellites, ground stations, and the radio and network links between them have quietly become critical digital infrastructure. In this narrated Wednesday “Headline” feature from Bare Metal Cyber Magazine, we walk through why spaceborne systems are no longer a niche concern, how familiar enterprise weaknesses show up in orbit, and what realistic failure actually looks like when you cannot roll a truck to the data center. The episode focuses on the integrated attack surface across the space segment, the ground segment, and the communications links that adversaries can chai...

Published: Jun 17, 2026Duration: 18m 34s

Season 2 - Episode 43

Privacy Promises vs. Product Reality: When Growth Outruns Governance

When growth teams move fast and products evolve weekly, privacy stories written a year ago can quietly drift away from what actually happens in production. This narrated episode, based on the Wednesday “Headline” feature in Bare Metal Cyber Magazine, explores that drift as a leadership problem rather than a purely legal one. You will hear how shadow data, consent drift, and hidden flows emerge from normal product decisions, and why the gap between privacy promises and product reality has become one of the most important trust risks for modern digital businesses.

Published: Jun 10, 2026Duration: 17m 20s

Season 2 - Episode 42

Secrets Everywhere: Managing the Credential Sprawl in Dev, Ops, and AI

Secrets used to mean a few privileged accounts and maybe a shared root password. Now they are everywhere: in CI/CD pipelines, SaaS connectors, infrastructure automation, and AI prompts. In this narrated edition of “Secrets Everywhere: Managing the Credential Sprawl in Dev, Ops, and AI,” we walk through how normal development, operations, and AI workflows quietly generate a tangle of keys, tokens, and passwords that no vault dashboard really captures. You’ll hear how this sprawl emerges, why “we have a secrets manager” is not enough, and where the real blast radius hides in everyday work. This episode is based on m...

Published: Jun 3, 2026Duration: 18m 13s

Season 2 - Episode 41

Service Accounts Never Die: Cleaning Up the Immortal Infrastructure Users

In this narrated edition of “Service Accounts Never Die: Cleaning Up the Immortal Infrastructure Users,” we walk through the long, boring, critical work that quietly defines your real risk surface. You will hear how non-human identities pile up across cloud platforms, directories, Kubernetes clusters, and CI pipelines, and why they are so hard to question once they are in place. The episode explains why immortal service accounts are not a tooling glitch but the predictable output of incentives that make creation easy, retirement scary, and ownership fuzzy. It is based on my Wednesday “Headline” feature in Bare Metal Cyber Magazine

Published: May 27, 2026Duration: 17m 11s

Season 2 - Episode 40

Crime-as-a-Service Nation: Inside the Cybercrime Franchise Economy

This narrated edition of “Crime-as-a-Service Nation: Inside the Cybercrime Franchise Economy” takes you inside the modern Cybercrime-as-a-Service (CaaS) landscape and treats it like what it has become: a franchise-style industry with brands, affiliates, and repeatable revenue. Across the episode, we unpack how cybercrime evolved from lone operators and small crews into a structured economy with tool developers, infrastructure providers, initial access brokers, and money-movers all playing defined roles. You’ll hear why understanding those roles, incentives, and dependencies gives security and technology leaders far better levers than simply chasing the latest gang name or malware family.

Published: May 20, 2026Duration: 17m 42s

Season 2 - Episode 39

Shadow Security: The Unofficial Defenders Fixing Things After Hours

The unofficial defenders in your organization are already hard at work: senior engineers, platform specialists, and security leads quietly fixing real risks after hours. In this narrated edition of Shadow Security: The Unofficial Defenders Fixing Things After Hours, we unpack why that shadow security layer exists and what it means for your leadership decisions. The episode walks through the lived reality of midnight hotfixes, off-calendar changes, and undocumented scripts, and explains how structures like the change advisory board (CAB) and the security operations center (SOC) unintentionally push smart people off the official path. It is based on my Wednesday “He...

Published: May 19, 2026Duration: 15m 12s

Season 2 - Episode 38

Security Talent Reboot: Building Teams in a Burnout Era

In this narrated edition of “Security Talent Reboot: Building Teams in a Burnout Era,” we explore why so many security organizations look healthy on slides while feeling exhausted in real life. You will hear how burnout shows up long before resignations, why “fully staffed” can still mean functionally underpowered, and how architecture, process, and tooling quietly tax the people you depend on most. The focus stays squarely on decisions leaders control: what you reward, how you design work, and which trade-offs you are willing to make to protect your team’s ability to think clearly.

Published: May 19, 2026Duration: 18m 22s

Season 2 - Episode 37

Backup Betrayal: Ransomware vs. Recovery Plans No One Tested

This narrated edition of “Backup Betrayal: Ransomware vs. Recovery Plans No One Tested” walks you through the moment every security leader fears: when “we have backups” collides with a real ransomware incident. You will hear how seemingly healthy backup dashboards hide untested assumptions, why modern attackers deliberately aim at backup and recovery infrastructure, and how that changes the real risk picture for your organization. The narration is based on my Wednesday “Headline” feature from Bare Metal Cyber Magazine and is designed for leaders who own both resilience promises and board expectations.

Published: May 19, 2026Duration: 15m 31s