Cybersecurity Dungeon Master | SANS Author/Instructor

North Carolina
Joined November 2022
Episode Two of Last Seen is live. A parent's search for Leah leads through rumors and signs. Listen to "The Rumor": sith2.com/podcast
44
The first chapter of Last Seen is live. This month, Plaintext is exploring cybersecurity through a four part spoken word story about ordinary people living with the consequences of technology suddenly going quiet. sith2.com/podcast
2
37
Would you use a selfie to recover your Google Account? Google's option adds a useful route back in, along with a biometric privacy decision. Hear how it works, who Google said could use it at launch, and why one recovery method is never enough. Then check your own recovery plan.
2
47
An AI security test crossed into real Hugging Face infrastructure while chasing benchmark answers. The management lesson: test boundaries need layered containment, minimal permissions, and monitoring of the route. Hear the full story on Plaintext with Rich.
1
38
Your product blueprints can be stolen without an encrypted laptop or broken lock. This episode explains attacks on PTC Windchill and FlexPLM, why CVE-2026-12569 matters, and why patching must be followed by a compromise hunt. Listen and check who owns your PLM platform.
1
97
Patching CVE-2026-50522 closes a critical SharePoint flaw. It cannot remove malware, reveal earlier intrusion, or replace stolen secrets. The response has three jobs: patch, hunt, rotate. Hear what leaders should ask next on Plaintext with Rich.
87
Your AI agent booked the trip and executed code you never approved. AutoJack is prompt injection through the browser, ending in RCE. Episode 36 covers the attack chain and five steps to reduce risk. Sandboxes, approvals, domain locks, and logs.
1
59
August on Plaintext with Rich: 1.) SharePoint patching 2.) Product blueprint theft 3.) AI agent containment 4.) Selfie-based account recovery Four Fridays. Four new episodes. One Topic. Ten minutes. No panic. sith2.com/podcast #Cybersecurity #TechPodcast
28
Install finishes, tests pass, nothing looks wrong. By dinner your machine ran someone else's code. New episode covers the Mastra npm supply chain attack Microsoft tied to North Korea, why 88 minutes still matters, and controls that protect your dependencies.
47
206 patches in one Patch Tuesday. June 2026 set a record. AI is accelerating bug discovery faster than most teams can remediate. The new episode covers how to triage under pressure and close the gap. Plaintext with Rich drops wherever you listen to podcasts.
40
20k+ Instagram accounts taken over in 2026. Attackers persuaded Meta's AI support bot to approve resets. No phishing, no malware, just manipulation of an automated system. If AI can change account state, it's part of your security boundary. Act accordingly.
1
94
86,644 stolen credentials. 194 countries. One very trusted piece of security gear. FortiBleed is the episode where the firewall is the front door. Patch closes the window. Rotation changes the locks. New ep of Plaintext with Rich is live.
47
You don't inventory your house the morning of the move. So why are most orgs still treating post-quantum crypto as a 2035 problem? Google just moved their own deadline to 2029. Episode 31 of Plaintext with Rich is live now. sith2.com/podcast
1
29
Someone pulled me aside at a conference last month. Six years in IT, ready to break into security. "Should I even bother right now?" Here's what the data actually says. Episode 30 of Plaintext with Rich is live. sith2.com/podcast
21
An OpenAI engineer ran a routine update on May 11. Two devices ended up compromised. The engineer did nothing wrong. The trusted library did. New episode of Plaintext with Rich is live. sith2.com/podcast
24
Monday. You open the third email. Nothing visible happens. A piece of JavaScript just grabbed the proof you were logged in. That's CVE-2026-42897. The Microsoft Exchange zero-day under active attack. New Plaintext with Rich is live. sith2.com/podcast
61
You finish at 6:00. By 6:47 you're back on the laptop. By 9:00 the evening is gone. The boundary didn't fail. It was never there. Episode 27 closes the Month of Mindfulness with work-life balance as infrastructure, not willpower. sith2.com/podcast
23
You're reading the third breach report this month. Years ago it would've lit something in you. Today you scroll past. That's not you. That's the bill. Episode 26 on why cybersecurity burnout is a system problem wearing your name. sith2.com/podcast
14
Systems are up and running smoothly. Your body hasn't gotten the memo. Episode 25 on the physical toll cybersecurity work quietly collects. Plus an invite to my LinkedIn group, Desk to Deadlifts, for folks fitting fitness into real life. sith2.com/podcast
24
We didn't pick cybersecurity for the paycheck (I hope). But the raises came, and lifestyles changed. Episode 24 of Plaintext with Rich digs into the values that drive us, and what happens when your income outpaces your purpose. Listen now: sith2.com/podcast
12