Reimagining Cyber - real world perspectives on cybersecurity

Hotel Wi-Fi has long been considered a cybersecurity risk—but what if you're connected to the correct network? In this episode of Reimagining Cyber, Tyler Moffitt examines CaptiveCrunch, a sophisticated campaign that compromises legitimate hotel and conference Wi-Fi infrastructure to intercept users before they ever reach the internet.
Discover how attackers manipulate DNS traffic, abuse device code authentication, bypass traditional phishing defenses, and deploy malware such as Cornflake and CocoShell to steal credentials, OAuth tokens, and corporate access. Tyler explains why familiar security signals—including genuine Wi-Fi networks, legitimate Microsoft login pages, and even multi-factor authentication—may no longer be enough to protect travellers.
Whether you're a business traveller, security leader, or IT professional, this episode offers practical guidance on reducing risk, securing remote connections, and adapting to a new generation of identity-based attacks.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Nearly 19,000 files reportedly connected to India’s Kudankulam Nuclear Power Plant appeared on a ransomware group’s leak site. The files allegedly included engineering drawings, facility layouts, supplier details, inspection records, project correspondence, and equipment photographs.

The plant’s operator says nuclear safety and security systems were not compromised. That distinction matters, but it does not make the exposed information worthless.

Ben interviews Tyler Moffitt about how attackers can collect intelligence without
penetrating a reactor, why contractors become attractive targets, and how individually mundane documents can combine into an operational map of critical infrastructure.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

A ransomware attack against Coca-Cola-owned Fairlife forced the company to temporarily suspend production across the United States. Product safety was not affected, but production-related systems were.
How does a cyberattack stop a physical product from being manufactured? Why would a company shut down production when there is no evidence that the product itself was compromised? And what does this tell us about the difference between restoring technology and restoring a business?
Ben interviews Tyler Moffitt about operational ransomware, manufacturing dependencies, containment decisions, and what organizations should learn from Fairlife’s response.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

What happens when a trusted ransomware negotiator secretly works for the very hackers he's supposed to stop?
In this episode of Reimagining Cyber, Tyler Moffitt unpacks one of the most shocking insider threat cases in recent cybersecurity history. A ransomware negotiator admitted to providing confidential victim information—including insurance limits and negotiation strategies—to the BlackCat (ALPHV) ransomware gang while representing organizations during active ransomware attacks.
Learn how ransomware negotiations really work, why information is the most valuable asset during a cyber incident, and what this case reveals about ransomware-as-a-service, cyber insurance, incident response, and insider threats. Whether you're a CISO, security leader, IT professional, or simply interested in cybersecurity, this episode offers practical lessons on trust, risk, and protecting sensitive information when every decision matters.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Federal prosecutors have charged an alleged member of the Scattered Spider cybercrime group in a case that highlights how modern cyber investigations are evolving. While the arrest itself made headlines, one detail stood out: investigators reportedly used Microsoft's Global Device ID (GDID), alongside other forensic evidence, to help connect the dots.
In this episode of Reimagining Cyber, Tyler Moffitt unpacks what makes this investigation so significant.
The conversation explores:
Who Scattered Spider is and how the group gains initial access
What Microsoft's Global Device ID (GDID) is and how it factored into the investigation
Why device identity is becoming just as important as user identity
What this case reveals about modern digital investigations
Why VPNs don't guarantee anonymity
The importance of logging, endpoint visibility, and identity monitoring for defenders
Practical steps organizations can take to strengthen identity security and help desk processes
The biggest takeaway? Cybersecurity is no longer just about protecting user accounts. As attackers become more effective at impersonating people, defenders—and investigators—are increasingly relying on device identity, telemetry, and data correlation to uncover malicious activity.
If you enjoyed this episode, please rate, review, and share Reimagining Cyber. New episodes are released every Wednesday.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com