mnemonic security podcast

The speed of threat: Threat intelligence and detection engineering in the age of AI
How can security teams shorten the time from identifying a cyber threat to having detection code live in production?
In this episode of the mnemonic security podcast, Robby is joined by Nick Maeckelberghe, Co-Founder and Managing Director at Crimson7, which empowers organizations to find and fix their security weaknesses before attackers do, combining purpose-built platforms with expert-led managed services. Robby also welcomes Jeff Schiemann back to the podcast, now a Board Advisor at Crimson7.
Nick and Jeff discuss how security teams can shorten the OODA loop, the time it takes to observe, orient, decide and act on a threat, with the ambition of going from understanding what an attacker is doing to having detection code live in production in a matter of hours.
They explore what it takes to keep pace with attackers as new tools and techniques emerge, and how cyber threat intelligence (CTI) and detection engineering can work together to identify and stop threats at different stages of an attack campaign. They also discuss how LLMs and other forms of AI are changing cybersecurity on both sides of the equation, as attackers move faster and defenders look for ways to analyse threats and turn what they learn into detections at the same speed.
The conversation also turns to some future-gazing: the rise of neoclouds, the concept of "headless security services" increasingly delivered by AI, and a potential shift from identity as the attack surface to trust as the attack surface. They discuss what these developments could mean for the security industry, and how customers will distinguish between good and average security vendors as AI takes on more of the work.
Send us Fan Mail

Live episode: Why is Norway investing in space? (In Norwegian)
This week, we’re bringing you a live recording of the mnemonic security podcast from Arendalsuka, Norway’s largest political gathering held every year in the town of Arendal. Here, Robby was joined by Ole Morten Olsen from the Norwegian Space Agency to discuss why Norway is investing in space from a strategic, security and economic perspective.
What do we actually "sell from space", and which companies are involved? How dependent are we on satellites in our daily lives, and how will technologies like Starlink influence Norway's national preparedness in the years ahead?
Check out this episode if you want to understand what Norway is actually doing in space, and why it matters. And perhaps we'll even get an answer to whether data centres in space are a realistic prospect!
Send us Fan Mail

With or without agents, the cost of failure is asymmetric for attackers and defenders.
An attacking agent that fails risks getting caught. A defending agent that fails risks taking down its own business.
In this episode of the mnemonic security podcast, Robby is joined by Matteo Strada, a cybersecurity engineer and researcher specialising in AI security.
Drawing on his blog post, The Asymmetric Future of AI and Cybersecurity, they explore the guardrail paradox exposed by the recent OpenAI–Hugging Face incident, the growing case for local and open-source models in the enterprise, and how much control companies are giving up when they build critical workflows on top of frontier AI models.
https://mstrada.me/posts/aicybersec
Send us Fan Mail

In a world where images can be manipulated, eyewitnesses dismissed, and official accounts contradicted by what happened on the ground, proving what is real has never been more important.

In this episode, Robby speaks with Vladimir Zaha, a threat intelligence researcher and volunteer contributor to the Bellingcat community, about the growing role of open-source intelligence in journalism, cybersecurity, conflict monitoring, and democratic accountability.

Vladimir explains how OSINT investigators verify images and videos, geolocate events using seemingly insignificant details, monitor activity in active conflicts, and challenge false or misleading official narratives. He also discusses his work documenting civilian harm in Ukraine, investigating the actions of enforcement agencies in the United States, and helping analyse information that may eventually support legal proceedings.

The conversation explores how OSINT can help cybersecurity professionals understand their threat environment, how artificial intelligence is changing the investigative process, and why human verification remains essential even as collection and analysis become increasingly automated.
Send us Fan Mail

Why did the security industry stop talking about deception technology? And why should we start paying attention again?
In this episode, Robby is joined by Andy Smith, CEO and Co-Founder of Tracebit, to discuss the evolution of deception technology and its role in modern security.
Andy explains how organisations can deploy canaries, honey tokens and other deceptive resources in their environments to generate high-fidelity alerts when attackers move laterally, escalate privileges or attempt to access credentials and sensitive data. These alerts are designed to be both simple and highly reliable: if someone touches a fake resource, something suspicious is happening.
The conversation explores modern deception techniques, what these look like when customers deploy them in their SOCs, how realistic decoys can be customised for different environments and the next generation of deception technology.
Send us Fan Mail