Reimagining Cyber - real world perspectives on cybersecurity
Jun 23, 2026 · 13 min · 8 segments
Every week brings another breach headline. A retailer is compromised. An airline suffers a cyberattack. A ransomware gang claims another victim. A cryptocurrency company loses sensitive data. The…
Tyler MoffittGuestBenHost
You see these headlines, people read the headlines, you know, and they actually focus on what's different.

Who was hit this time? What were the attackers, right? Scattered spider or what? Like different industry, what industry was hit? But honestly, there's patterns that emerge, right? You look at the breaches, you focus on what's the same.

And honestly, what's interesting to me is that today's biggest incidents are like the same, the same patterns.

Sure, the details change on the company and the attacker and the industry, but the attack chain itself really doesn't.
Why do you think people are seeing these incidents as completely separate events?

Well, I can get it because it is a separate attack, but the headlines focus on the victim, right? And that's understandable.

But that's what grabs attention, right? And that's their job, to grab attention, get the clicks, get the views.

But attackers don't organize themselves around industries, right? They organize around techniques, vulnerabilities.

Which begs the question then, what are those techniques? So I would simplify most modern breaches into a sequence.

Initial access, identity compromise, privilege escalation, and then moving laterally to get data access, data exfiltration, extortion, maybe ransomware, maybe not.

We're seeing some... you know, crews there decide whether they want to have ransomware or not.

But that's basically it, right? Get the access, identity compromise, escalate the privilege, move laterally, get the data, and then extort them, you know, with ransomware or not.

You see these headlines, people read the headlines, you know, and they actually focus on what's different.

Who was hit this time? What were the attackers, right? Scattered spider or what? Like different industry, what industry was hit? But honestly, there's patterns that emerge, right? You look at the breaches, you focus on what's the same.

And honestly, what's interesting to me is that today's biggest incidents are like the same, the same patterns.

Sure, the details change on the company and the attacker and the industry, but the attack chain itself really doesn't.
Why do you think people are seeing these incidents as completely separate events?

Well, I can get it because it is a separate attack, but the headlines focus on the victim, right? And that's understandable.

But that's what grabs attention, right? And that's their job, to grab attention, get the clicks, get the views.

But attackers don't organize themselves around industries, right? They organize around techniques, vulnerabilities.

Which begs the question then, what are those techniques? So I would simplify most modern breaches into a sequence.

Initial access, identity compromise, privilege escalation, and then moving laterally to get data access, data exfiltration, extortion, maybe ransomware, maybe not.

We're seeing some... you know, crews there decide whether they want to have ransomware or not.

But that's basically it, right? Get the access, identity compromise, escalate the privilege, move laterally, get the data, and then extort them, you know, with ransomware or not.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.