Reimagining Cyber - real world perspectives on cybersecurity

Federal prosecutors have charged an alleged member of the Scattered Spider cybercrime group in a case that highlights how modern cyber investigations are evolving. While the arrest itself made headlines, one detail stood out: investigators reportedly used Microsoft's Global Device ID (GDID), alongside other forensic evidence, to help connect the dots.
In this episode of Reimagining Cyber, Tyler Moffitt unpacks what makes this investigation so significant.
The conversation explores:
Who Scattered Spider is and how the group gains initial access
What Microsoft's Global Device ID (GDID) is and how it factored into the investigation
Why device identity is becoming just as important as user identity
What this case reveals about modern digital investigations
Why VPNs don't guarantee anonymity
The importance of logging, endpoint visibility, and identity monitoring for defenders
Practical steps organizations can take to strengthen identity security and help desk processes
The biggest takeaway? Cybersecurity is no longer just about protecting user accounts. As attackers become more effective at impersonating people, defenders—and investigators—are increasingly relying on device identity, telemetry, and data correlation to uncover malicious activity.
If you enjoyed this episode, please rate, review, and share Reimagining Cyber. New episodes are released every Wednesday.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

For years, cybersecurity assumed attackers had to break into organizations.
Today, they increasingly just log in.
Valid credentials, stolen browser sessions, OAuth tokens, help desk social engineering,and underground marketplaces have fundamentally changed how attacks unfold.
So why are organizations still thinking about identity the same way they did five years ago?
In this episode, Tyler Moffitt discusses the biggest misconceptions around identity
security, why trust has become a commodity, and why cyber resilience requires more than prevention alone.
Relevant links:
'What defenders are still getting wrong' webcast series with Tyler Moffitt
https://www.brighttalk.com/webcast/8241/646699?utm_source=LinkedIn&utm_medium=brighttalk&utm_campaign=646699
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Every week brings another breach headline. A retailer is compromised. An airline suffers a cyberattack. A ransomware gang claims another victim. A cryptocurrency company loses sensitive data.
The victims change, the industries change, and the attackers sometimes change—but many of today's most significant breaches follow a remarkably similar pattern.
In this episode of Reimagining Cyber, Tyler Moffitt breaks down the common attack chain behind modern cyberattacks and explains why threat actors continue to rely on the same core tactics year after year. From phishing, social engineering, and credential theft to identity compromise, privilege escalation, data access, and extortion, the conversation explores the techniques that repeatedly appear across major incidents.
The episode examines why identity has become the primary target for attackers, how groups such as Scattered Spider have demonstrated the power of identity-based attacks, and why data theft and extortion are increasingly replacing traditional ransomware operations.
Rather than focusing on the company named in the latest headline, security leaders and practitioners should focus on the attack path itself. Understanding how attackers gain access, move through environments, and monetize breaches reveals the patterns that matter most—and the defensive strategies that can make the greatest difference.
Key topics include:
Why many major breaches follow the same attack chain
The continued effectiveness of phishing and social engineering
How attackers exploit identities, credentials, and privileged access
The rise of data extortion and extortion-first operations
Why cybercriminal groups operate more like businesses than hackers
Practical lessons organizations can apply to strengthen security defenses
Whether you're a CISO, security practitioner, IT leader, or simply interested in the evolving threat landscape, this episode provides valuable insight into the techniques driving today's most impactful breaches—and why understanding the playbook is critical for defending against tomorrow's attacks.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

For years, cybersecurity leaders have focused on identity as the new perimeter. MFA, Zero Trust, SSO, and identity protection became the center of modern security strategies.
But while everyone was focused on identity, attackers never stopped targeting something much older: internet-facing infrastructure.
VPNs. Firewalls. Remote access appliances.
Recent attacks involving Check Point, Fortinet, Ivanti, SonicWall, and others show that the perimeter never really disappeared.
In this episode, Tyler Moffitt discusses why edge devices remain prime ransomware targets, why patch windows matter more than ever, and why vulnerability management remains one of cybersecurity's most important fundamentals.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Scattered Spider has become one of the most disruptive cybercrime groups in the world—not because of advanced malware or zero-day exploits, but because of its mastery of social engineering and identity attacks.
In this episode, Tyler Moffitt explores how the group is evolving its tactics. Rather than targeting organizations at random, Scattered Spider appears to be moving industry by industry, reusing successful playbooks across sectors including casinos, retail, insurance, and airlines. Once they understand how one organization handles identity verification, help desk requests, and MFA resets, they can apply those same techniques across an entire industry.
Tyler reveals:
How Scattered Spider rose to prominence through high-profile attacks
Why identity has become the primary attack surface
The shift from software vulnerabilities to business process vulnerabilities
How attackers exploit trust, urgency, and help desk workflows
Why industry-specific attack campaigns are so effective
What organizations of all sizes can do to defend against identity-based threats
The key takeaway: modern attackers don't always need to hack their way in—they can simply convince someone to open the door. As Scattered Spider continues to refine its approach, organizations must rethink not just how they secure systems, but how they verify trust.
Identity is the new perimeter—and Scattered Spider may be proving it better than anyone else.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com