David Bombal

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video. // Kamal Hathi’s’ SOCIAL // LinkedIn: / kamal-hathi // Hanlin Fang’s SOCIAL // LinkedIn: / hanlinfang // Jessica Oppenheimer’s SOCIAL // LinkedIn: / jessbair // Craig Woolley’s SOCIAL // LinkedIn: / craig-woolley-783059111 // Tom Smit’s SOCIAL // LinkedIn: / tsmit50 // Bruce Snell’s SOCIAL // LinkedIn: / brucesnell-security // Heath Johnson’s SOCIAL // LinkedIn: / heathjohnsonvm // Paul Bannister’s SOCIAL // LinkedIn: / paul-bannister // Hao Yang’s SOCIAL // LinkedIn: / hao-yang-bb6ab429 // Robert Castley’s SOCIAL // LinkedIn: / robertcastley // Leila Reyhani’s SOCIAL // LinkedIn: / leila-reyhani // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE...…

Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills. Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime. We also run ransomware in a lab VM to show what happens to the victim’s files. We discuss: • How ransomware gangs steal data before encrypting it • How static and dynamic analysis work together • Finding malware indicators in Sysmon logs • Why ransomware can print physical ransom notes • How reputation and trust work in criminal forums • How to start reverse engineering by compiling your own C programs and examining them in Ghidra If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved. // Sponsored SEGMENT // Big…

Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools. We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first. If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools. In this interview: Why “I have nothing to hide” misses the point How to think about passwords, two-factor authentication and security planning Why messaging defaults…

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. // Free AI labs // Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_... AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-... // Jason Haddix’s SOCIALS // X: https://x.com/Jhaddix?lang=en Github: https://github.com/Arcanum-Sec Website: https://arcanum-sec.com/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 -Coming Up…

Big thanks to ‪@Cisco‬ & ‪@Splunkofficial‬ for sponsoring my trip to .Conf 2026 and also for sponsoring this video. AI agents can do things you never intended. So how do you monitor their behavior, spot security problems and decide what they should be allowed to do? I’m joined by Splunk’s Kamal Hathi at .conf26 to discuss AI agent security, observability and what an agentic SOC means for the people working in cybersecurity. Kamal explains why setting a goal isn’t enough. You need visibility into what your agents are actually doing, clear guardrails and human oversight for important decisions. We also discuss why monitoring only a sample of agent activity can leave gaps, and how focused small language models could help reduce evaluation costs. In this interview, we cover: • Known agents, unregistered agents and unexpected behavior • AI evaluations, guardrails and zero trust • Automating SOC alert triage while keeping humans in control • Using AI to create SOAR playbooks • Running models locally for privacy,…

Big thank you to proton VPN for sponsoring the video. To get 70% off your Proton VPN subscription use the following link: https://protonvpn.com/davidbombal Note: Hak5 did not pay me to make this video. But, for full transparency: Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link below. // Buy Hak5 coolness here (Affiliate Link): // Buy Hak5: https://davidbombal.wiki/gethak5 WiFi hacking without opening your laptop? ‪@DarrenKitchen‬ from ‪@hak5‬ joins me to talk about the WiFi Pineapple Pager and what this little Linux device can actually do. Darren shares the story behind the Pager, explains its support for 2.4, 5, and 6 GHz WiFi, and walks us through features including wireless reconnaissance, eventtriggered alerts, and community-created payloads. We also discuss how Bash and DuckyScript helpers let users build their own functionality, and how Pager Portal makes it possible to download payloads directly onto the device. How does it compare with the WiFi Pineapple Mark VII…

Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase. How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit. At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infrastructure behind satellite operations, what the Via sat attack actually targeted, and why protecting spacecraft requires both security and space engineering knowledge. Then Andrzej demonstrates previously patched vulnerabilities in an older version of mission control software. Using Burp Suite, he shows how path traversal exposes configuration files and how cross-site scripting can trigger a spacecraft command through an operator’s browser. We cover: • Why satellite…

Big thanks to Proton VPN for sponsoring this video. You can use my link: https://protonvpn.com/davidbombal to get 70% off your Proton VPN subscription How do you hack an AI system? And what happens when one malicious instruction spreads between AI agents? I’m joined by Harriet, author of Practical AI Security, to explore how AI models and agents can be manipulated, with practical Python demonstrations. You'll see an image classifier misidentify a rifle, a demonstration of prompt injection spreading across five agents, and how memory poisoning can plant instructions that affect an agent later. We discuss why securing AI takes more than blocking prompt injection, how machine learning creates different security challenges, and what you need to understand before deploying agents in your organisation. Want to learn this yourself? Harriet explains how to get started with her collection of 30+ free Python notebooks, including examples you can explore in Google Colab. We also discuss the skills involved in AI…

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Is Microsoft Defender enough to protect your PC? Malware researcher Leo joins me at Black Hat to discuss antivirus, Windows security and how hackers steal your accounts. We explore how infostealers target saved passwords and session tokens, why two-factor authentication cannot prevent every account takeover, and how a message from a compromised friend’s account can lead to an infection. Leo shares practical starting points for investigating your computer, including Autoruns for startup entries, TCPView for linking connections to applications, and Wireshark for examining network traffic. We also discuss password managers, account recovery planning, Windows telemetry and why switching operating systems does not eliminate security risks. In this interview: • Microsoft Defender’s strengths and…

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker, please use the following link: https://www.threatlocker.com/davidbombal Is cybersecurity still worth learning in 2026? AI agents are changing vulnerability research, but where does that leave you? At Black Hat, I’m joined by Arizona State University professor Yan Shoshitaishvili to discuss what AI can actually do, where it falls short, and why he would still choose a career in cybersecurity today. Yan shares how his lab used AI agents and human-designed workflows to find what he describes as over 1,000 Linux kernel vulnerabilities triggerable by an unprivileged local user. Running 128 agents was only part of the story. Understanding which vulnerabilities to look for and improving the research process proved critical. We discuss: • How AI agents test potential vulnerabilities instead of simply reporting suspected bugs • How agentic AI compares with fuzzing and…

Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off. Your license plate could reveal more than you think. Flock cameras, vehicle tracking and OSINT can turn information about your car into clues about where you live and your daily routines. I’m joined by an OSINT expert to discuss how vehicle information can be connected with public records, why surveillance raises privacy concerns and what happens when people trust an incorrect license plate match. He shares his experiences of locating a missing car after a police search came up short and investigating a hit-and-run using a partial plate and publicly available information. We discuss: • Flock cameras and vehicle identification beyond license plates • How vehicle data can expose patterns in your movements • License plate recognition errors and the importance of verification • How public records can connect a vehicle to a person • The risks of surveillance access…

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount. John DiMaggio created fake identities, profiled ransomware operators and spent approximately 18 months earning the trust of LockBit. In this interview, John explains how his investigation led to work with the FBI and the UK’s National Crime Agency, contributed to indictments and resulted in death threats against him. He also reveals how the work affected his mental health, relationships and everyday life. John shares the remarkable story of a young REvil hacker connected to the Kaseya ransomware attack and its $70 million ransom demand. He explains how ransomware operators are recruited, manipulated and sometimes controlled by intelligence agencies. You will also learn why stolen cryptocurrency is difficult to spend, how Bitcoin tracing and money-laundering mistakes expose cybercriminals and why technical hacking skills do not make someone good at…

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Age verification is spreading across the internet. It promises to protect children, but what happens when accessing a website or using your own device requires facial recognition, identity documents or third-party verification? David speaks with Alexis Hancock from the Electronic Frontier Foundation about the growing privacy risks surrounding age verification and digital ID systems. They examine how these technologies could threaten online anonymity, create new surveillance infrastructure and expose sensitive personal information. Alexis explains why age verification alone does not teach children how to stay safe online, how data brokers and behavioral advertising contribute to the problem, and why banning VPNs or weakening encryption would make everyone less secure. They also discuss…

Big thanks to ‪@ThreatLocker‬ for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal You can write secure C code, follow accepted best practices and still end up with a vulnerable binary. The reason is simple: the CPU does not run your source code. It runs whatever the compiler produces. David sits down with security researcher Chris Domas at Black Hat to examine how legal compiler optimizations can remove security protections, delete memory-clearing operations and introduce time-of-check to time-of-use vulnerabilities into code that appeared secure. Chris explains the C abstract machine, why compilers are allowed to transform code so dramatically and how register pressure, structure layout and even data size can affect whether a binary is vulnerable. In one striking example, 17 or 33 bytes can be safe while nearby sizes produce vulnerable code. They also discuss…

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal A zero-click attack can compromise your phone without you opening a link, installing an application or even touching the device. David sits down with Natalie Silvanovich and Seth Jenkins from Google Project Zero to examine how specially crafted audio messages were used to remotely compromise the Pixel 9 and Pixel 10. The attack begins inside the Dolby Unified Decoder, where Android automatically processes incoming audio for transcription. The researchers explain how they exploited the decoder, escaped the media codec sandbox and targeted vulnerable Pixel hardware drivers to achieve kernel code execution and root access. They also discuss ASLR, SELinux, memory corruption, the eight-week exploit development process, how AI helped automate repetitive tasks and why Apple’s compiler protections…

Can you recover working software from a photograph of a microchip? Embedded systems reverse engineer Travis Goodspeed demonstrates how to extract the original Game Boy’s 256-byte boot ROM from a microscopic photograph of the mask ROM inside its CPU. The source image was created by combining 22 microscope photographs captured at 50x magnification. Using his free, open-source Mask ROM Tool, Travis marks 2,048 ROM bit locations, separates the ones from the zeros and checks for possible recognition errors. He then determines the logical order of the bits, disassembles the program and shows how it can be exported as a ROM file for use in an emulator. Travis also explains the Game Boy’s unusual copy-protection system. During startup, its boot ROM displays logo data supplied by the cartridge and compares it with Nintendo’s internal copy. If the logos do not match, the game does not boot. Requiring cartridges to contain Nintendo’s trademark gave the company legal leverage against unlicensed publishers. The video…

Your internet speed can look fine while your Wi-Fi is still failing. Packet loss, latency, congested channels, interference and poor configuration can all damage performance, but a normal speed test will not show you the full picture. In this video, I test the Ookla Speedtest Pulse, a pocket-sized Wi-Fi 7 diagnostic tool that measures more than 25 network metrics in around 45 seconds. We test Wi-Fi at the Natural History Museum in London and examine results from an Airbnb to identify whether the problem comes from the Wi-Fi network, wired connection or internet service provider. Matt explains how the device tests 2.4, 5 and 6 GHz Wi-Fi, detects channel problems, measures signal quality and gives you practical recommendations in plain English. We also compare Speedtest Pulse with the normal Speedtest application, laptopbased tools and the Ekahau Sidekick 2. You will see its current limitations, upcoming continuous monitoring features and how it could help technicians finally capture intermittent Wi-Fi…

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal AI is changing cybersecurity, but simply using more AI to defend against AI attacks may not be the answer. David Bombal sits down with Danny Jenkins, CEO of ThreatLocker, to discuss the security risks created by AI, autonomous agents, zero-day vulnerabilities, ransomware, and the rapidly expanding attack surface businesses now have to deal with. Danny explains one of the fundamental problems with AI security: AI can understand what something does, but it may not understand the intent behind it. The same action could be performed legitimately by an administrator or maliciously by an attacker. They also discuss how AI is giving attackers capabilities that previously required significantly more expertise and resources, including vulnerability discovery and sophisticated phishing attacks. But…

Note: Hak5 did not pay me to make this video. But, I'm marking it as sponsored because Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link: https://davidbombal.wiki/gethak5 // Darren Kitchen SOCIAL // YouTube: https://www.youtube.com/darrenkitchen Website: https://hak5.org/pages/hack-across-america X: https://x.com/hak5darren // Hak5 WEBSITE (affiliate) // https://davidbombal.wiki/gethak5 // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU// 0:00 - Coming up 01:00 - 21 Years of…

Thank you to Threatlocker for sponsoring my trip to Black Hat so I can interview amazing people. Jen Easterly joins David Bombal to discuss why today’s cybersecurity problem may actually be a software quality problem. For decades, users and organizations have been blamed for failing to patch systems, change default passwords, or enable MFA. Jen argues that the bigger question is whether software vendors should be held responsible for shipping insecure products in the first place. They discuss Secure by Design, software vulnerabilities, memory safety, AI security, zero-day attacks, rogue AI agents, critical infrastructure, vendor accountability, and how artificial intelligence could dramatically shorten the time between discovering a vulnerability and weaponizing it. Jen also shares lessons from her career at the NSA, the White House, CISA, Morgan Stanley, the U.S. Army, and now RSAC, including her advice for hackers, cybersecurity professionals, and future leaders. Topics include: Why cybersecurity may be a…

Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off. Learn how fake cell towers and Stingray-style devices can be used to track phones, capture metadata, and monitor cellular activity. OTW joins David Bombal to demonstrate how SDR tools such as HackRF, RTL-SDR, DragonOS, and Falcon can be used to scan nearby cell towers and investigate suspicious signals. They look at how 4G and 5G networks work, why mobile networks still expose valuable metadata, how IMSI catchers operate, and what suspicious or rogue cell towers may look like. They also discuss SS7 vulnerabilities, mobile network attacks, Signal, GrapheneOS, and practical steps you can take to better protect your communications. Topics covered: How to scan for nearby cell towers How fake cell towers and Stingrays work Detecting suspicious cell towers with SDR HackRF and RTL-SDR DragonOS and Falcon IMSI catchers and phone tracking 4G and 5G security SS7…

Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware. Philip Wylie explains how an outdated IP camera became a ransomware gateway, why default passwords and poor segmentation remain serious risks, and how to protect your network using separate VLANs, firmware updates, monitoring and zero-trust controls. The interview also explores medical devices, OT security, AI-enabled devices and the growing demand for IoT penetration-testing skills. Big thanks to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal // Philip Wylie’s SOCIAL // X: https://x.com/phillipwylie LinkedIn: / phillipwylie YouTube: / @phillipwylie Instagram: / phillipwylie // Book REFERENCE // The Pentester Blueprint Phillip Wylie: US: https://amzn.to/4jkigAa UK: https://amzn.to/42vShPB // YouTube video REFERENCE //…

Two Cisco training veterans break down how to know you are ready for the CCNA exam, what changes in CCNA 2.0, and whether the CCNA is still worth it in 2026. Brian Bays has been teaching official Cisco classes since 2000. Michael Aldridge has been writing practice exam content since 2001. In this interview they answer the questions I get asked constantly: how long should I study, do I need physical equipment, should I do Network Plus first, and is AI going to take these jobs away? Short answer on that last one: they have heard this before. Automation was going to end tech jobs. Then virtualization. Then cloud. Every time, it just made good engineers more productive. Junior engineers become senior engineers, and we cannot function without senior engineers. We also cover what is coming in CCNA 2.0, including more troubleshooting woven through every section, a dark mode option, a full screen CLI, and the ability to send a command to every device in a lab at once. This video is not sponsored. I have known Brian…

Agentic AI is putting a 400x load on enterprise networks. Cisco and NTT Data experts reveal why only 13% of leaders successfully scale AI, the nightmare of quantum threats, and how to secure your infrastructure. Big thank you to NTT DATA for sponsoring this video. Book an AI Infrastructure Readiness Assessment using one of the following links: https://services.global.ntt/en-us/cam... or https://services.global.ntt/en-us/cam... // Vikesh Gumpalli’s SOCIAL // LinkedIn: / vgumpalli // Vance Baran’s SOCIAL // LinkedIn: / vancebaran // Website REFERENCE // https://www.nttdata.com/global/en/ https://www.nttdata.com/en-us/2026-gl... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast:…

Big thanks to Cisco for sponsoring my trip to Cisco Live EMEA and for changing my life and the lives of many other people. // Joe Clarke SOCIAL // LinkedIn: / joeclarke2 // YouTube video REFERENCE // MCP Demo using Python, AI and a self healing network (Model Context Protocol): • MCP Demo using Python, AI and a self heali... Do you know what this weird IP address is about? (192.0.0.2): • Do you know what this weird IP address is ... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming Up 01:11 -…

Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas. Cisco has officially announced a major update to the CCNA, moving from version 1.1 to the new CCNA 2.0 blueprint. Recorded live at Cisco Live, David Bombal sits down with Cisco certification insiders Hank and Quinn to dissect exactly what these changes mean for your career, what entry-level networking topics have been completely removed, and how the test is shifting heavily toward hands-on performance-based testing lablets. Learn why traditional, shallow network automation topics were pulled to make room for 2026 enterprise priorities like Agentic AI, digital network assistants, and secure device management (including mandatory AAA, secure copy protocols, and client-side security). The team breaks down the structural consolidation from six domains down to five, including the revamped 25% weight on Switching and Network Access and the newly introduced AI Network Operations and Management domain. Whether you are currently…

Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026. Network engineers, are you ready for 2026? Learn how to deploy an AI agent directly into your CLI using Cisco MCP and Claude to automate network configurations safely. In this tutorial with Karim from Cisco, we explore how to build a custom AI skill (Iris) using Anthropic's Claude Code and Cisco's Model Context Protocol (MCP). Watch how an agent can live in your terminal to automatically read ServiceNow tickets, discover network topologies, propose BGP/firewall changes, and execute commands while keeping a "human in the loop" to prevent hallucinations. Perfect for CCNA/CCIE candidates and anyone looking to learn agentic AI without adopting complex Python programmability. // Kareem Iskander’s SOCIAL // LinkedIn: / kiskander X:Chttps://x.com/kareem_isk // Repo Link REFERENCE // https://github.com/kiskander/iris // Website REFERENCE // https://u.cisco.com/tutorials // David's SOCIAL // Discord:…

Big thank you to DeleteMe for sponsoring this video. Use my link https://joindeleteme.com/Bombal to receive a 20% discount or use the QR Code in the video. Also, a Big thanks to Cisco for sponsoring my trip to Cisco Live Vegas 2026. Do you really need Cat 8 Ethernet for your home network in 2026? And what actually happens when you touch the end of a fiber optic cable? We break it all down with hands-on demos. At Cisco Live, I caught up with Jim from Fluke Networks to dive deep into the physical layer of networking. We strip away the marketing hype and look at the real-world performance of both copper and glass. In this video, we cover everything from the crucial safety reasons why you should never look into a fiber cable, to a microscope demonstration showing how a single speck of dirt or finger oil can cause frame errors and take down your SFP modules. We also run a live cable certification test on Cat 6 vs Cat 8 to show you exactly why Cat 6A is all you actually need for your home network, and how pros use…

Are your legacy network devices a ticking time bomb? In this deep dive, Cisco’s Head of Customer Experience reveals alarming statistics from the latest Talos report: 40% of top vulnerabilities directly target end-of-life devices, and 32% are over a decade old. We explore how older infrastructure has transitioned from a mere operational drag to ground zero for a new generation of agentic AI attacks, and why the looming threat of quantum computing breaking RSA encryption means you must assess your network now. Discover how the newly launched Cisco IQ provides real-time, dynamic visibility into hardware, software, and cryptographic assets. Learn how this powerful GPS for your network connects hidden operational trails, automates TAC troubleshooting, and ensures your enterprise is quantum-ready before post-Mythos era threats cause catastrophic downtime. A big thank you to Cisco for sponsoring this video and for sponsoring my trip to Cisco Live Vegas 2026. // Liz Centoni SOCIAL// LinkedIn: / lizcentoni Blogs:…

How has AI changed cybersecurity and enterprise networks? In this interview, Michael (General Manager for Cisco's Campus Networking) joins David Bombal to discuss the real-world impact of agentic AI, physical AI, and modern security threats. Discover why the U.S. cybersecurity agency (CISA) reports that the mean time to exploit vulnerabilities has plummeted from 10 months to just 10 hours due to AI systems chaining CVEs together. Learn how autonomous agents are shifting campus and branch environments from traditional north-south traffic to massive east-west flows, creating up to 9x the bandwidth demand. Michael breaks down how network segmentation and "least agency" protect data, how Cisco Live Protect utilizes eBPF inside the Linux kernel to create a compensating shield before a patch is ready, and how line-rate encryption with post-quantum cryptography protects against "harvest now, decrypt later" threats. Finally, find out why network engineering remains an incredibly critical, high-demand career path in…

In this episode, David Bombal sits down with Joe and Dalton from Cisco to break down the biggest Cisco Modeling Labs (CML) 2.10 release yet. Joe demos the new open source MCP server (model context protocol) that lets an AI model like Claude build a full CML lab from plain English. Just by asking for three IOL routers with a simple BGP config, the AI looks up the node definitions, invents the IP addresses, builds the topology, chooses eBGP on its own, and even starts the lab and waits for convergence. From there you will see the MCP server spin up a CCNA troubleshooting scenario from the official blueprint, quiz you, review your console history and final config, and hand back an honest evaluation with coaching tips. It can even turn a BGP packet capture into a ladder diagram to explain how the protocol works. Dalton then shows off CML 2.10's new wireless fabric, which runs end to end WiFi simulations with no real radios or physical access points. Watch signal strength change as you drag a client across the…

Big thanks to NTT DATA for sponsoring this video and to Cisco for sponsoring my trip to Cisco Live Vegas. For more information about NTT DATA and Cisco’s partnership, click here https://services.global.ntt/en-us/abo... 1000W touch safe power sounds impossible, but Class 4 Fault Managed Power is changing how we think about power delivery for AI data centers, buildings, networking, and IT infrastructure. In this interview, we look at how Cisco, NTT, and Panduit are approaching the next generation of energy networking systems. Traditional Power over Ethernet is useful for endpoints like access points, cameras, sensors, and phones, but PoE tops out around 100 watts. Fault Managed Power introduces a new class of power delivery that can deliver much higher wattage while intelligently shutting down when it detects a fault, short circuit, or unsafe condition. The conversation explains why this matters now. AI is driving massive demand for data center compute, but that compute requires more power, more cooling, and…

Big thank you to Radware for sponsoring this video In this interview, David Bombal sits down with Randy Wood, Head of North American Business at Radware, to break down the massive shift occurring in enterprise cybersecurity. They discuss why the rise of Agentic AI is a "1994 internet moment times a thousand," creating an environment where autonomous AI agents are rapidly outgrowing traditional security guardrails. Randy explains the critical connection between AI and API security, revealing how undiscovered "Shadow AI" tools and thousands of hidden enterprise API vulnerabilities leave organizations completely exposed to highly sophisticated, AI-driven DDoS attacks and flawless localized phishing campaigns. Learn how network engineers and security professionals can protect confidential data by pivoting from rigid rules to analyzing behavioral intent before execution, ensuring your network is ready for an autonomous tech stack. Visit radware.com for more deep-dive technical resources. // Randy Wood’s SOCIAL //…

Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas In this video, we sit down to discuss the rapidly evolving world of cybersecurity, AI, and how an Agentic SOC is becoming the standard for modern defense. We cover the massive opportunity in the industry with over 4 million open cyber jobs, why mastering Splunk is a critical career move in 2026, and how you can get started for free. We also unpack emerging threats like Mythos class attackers, vulnerabilities in LLMs and MCP servers, and how the integration of Cisco Data Fabric and Splunk is helping organizations defend critical infrastructure against automated exploits at machine speed. // John Morgan’s SOCIAL // LinkedIn: / johnmorganinc Guest Bio: https://newsroom.cisco.com/c/r/newsro... // Website REFERENCE // https://www.splunk.com/en_us/training... https://www.splunk.com/en_us/download... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn:…

Big thanks to TryHackMe for sponsoring this video. Learn Cyber Security with Practical Labs on TryHackMe:https://tryhackme.com/DavidBombalTech Use my code DAVIDTECH25 to get 25% OFF on Annual Subscription! Dr. Mike Pound joins David Bombal to explain symmetric encryption, AES, secret keys, VPN encryption, TLS, block ciphers, stream ciphers and why encryption is one of the most important building blocks in modern cybersecurity. In this video, Mike explains what encryption actually does: it takes readable plaintext and turns it into unreadable ciphertext so that only someone with the correct secret key can decrypt it. He breaks down how symmetric encryption works, why the same key is used to encrypt and decrypt, and why algorithms like AES are used everywhere from secure websites and VPNs to BitLocker and full disk encryption. You’ll learn why AES is so fast on modern CPUs, how keys interact with encryption algorithms, and why AES uses rounds of substitution and permutation to scramble data. Mike also explains…

Big thanks to ‪@Cisco‬ for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026. In this deep dive into the future of networking, we explore the reality of quantum networking and Cisco's groundbreaking announcement of the world's first Universal Quantum Switch. Quantum computing is no longer just a buzzword; it's moving into the mainstream, bringing massive implications for network engineers and cybersecurity professionals in 2026 and beyond. We discuss why a quantum switch is essential for scaling distributed quantum computers and how it translates different quantum modalities, acting as a universal fabric. We also break down the quantum stack, from entanglement sources generating 200 million photon pairs per second to nanosecond switching speeds. Beyond the hardware, we tackle the elephant in the room: Shor's algorithm and the imminent threat to classical encryption (RSA/Diffie-Hellman). With "harvest now, decrypt later" attacks already happening and the January 2027 CNSA 2.0 compliance…

Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas // Ryan Rose’s SOCIAL // LinkedIn: / ryanrose3 Cisco Blogs: https://blogs.cisco.com/author/ryanrose X: https://x.com/RyanRose // Cisco Blogs // Cisco Announcement: https://blogs.cisco.com/learning/ai-u... CCNA 2.0 Blueprint: https://learningnetwork.cisco.com/s/c... // Websites and YouTube Channel links // Cisco U: https://u.cisco.com/ Cisco Learning Network: https://learningnetwork.cisco.com/s/ Netacad: https://www.netacad.com // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here:…

Cisco is bringing AI agents into network operations with Cisco Cloud Control, AI Canvas, and Agentic Ops. In this demo, David Bombal is joined by DJ Sampath (SVP and General Manager, AI Software and Platform) to look at how Cisco is using AI to simplify complex network troubleshooting, infrastructure management, agent security, and observability. Instead of jumping between multiple dashboards, tools, teams, and tickets, Cisco Cloud Control brings network, security, observability, and infrastructure context into one interface. The demo starts with a simple real-world problem: why can’t a phone connect to the network? From there, Cisco AI Canvas investigates the topology, calls the right agents, checks the wireless environment, moves into the firewall/security domain, and identifies the root cause: a site-to-site VPN tunnel issue caused by missing OSPF route exchange. You will see how Cisco is using MCP servers, topology agents, troubleshooting agents, firewall agents, and purpose-built models to help network…

Join me for an exclusive, behind-the-scenes tour of Cisco's purpose-built $20 million AI data center lab in San Jose. AI is revolutionizing the tech industry, but running massive 10,000 GPU clusters can cost up to $175 million a year—and a mere 5% network bottleneck can flush $8 million down the drain. In this video, we break down the hardware, software, and networking topologies required to build, secure, and scale massive AI data centers. I sit down with Cisco engineers to explore scale-up domains with NVIDIA H200 and AMD MI350X servers, scale-out rail-optimized topologies, and the massive Cisco Silicon One G300 ASIC delivering 102.4 Terabits per second with innovative liquid cooling. We also dive into the Ethernet vs. InfiniBand debate for scaling to 100,000 GPUs, the power of Linear Pluggable Optics (LPO) to reduce power draw, and how Cisco used AI to safely refactor 500,000 lines of legacy code. Whether you are building an AI network today or upgrading your engineering skills for the future, this is…

Big thank you to DeleteMe for sponsoring this video. Use my link https://joindeleteme.com/Bombal to receive a 20% discount or use the QR Code in the video. In this OSINT deep dive, professional OSINT analyst Ray Baker joins David Bombal to explore the shadowy world of maritime cybersecurity and vessel tracking. Discover the critical differences between the dark fleet and shadow fleet, and learn the exact open-source intelligence methods used to track ships attempting to hide their identities on the open ocean. From manipulating AIS tracking data and repainting ship decks to the terrifying reality of hacking Chinese-made port cranes, this video uncovers the hidden cyber threats facing global supply chains. We also explore the tools used by professionals, such as MarineTraffic and Equasis, to investigate illicit maritime activities and track adversarial movements. // Rae Baker’s SOCIAL // Website: https://www.raebaker.net/ LinkedIn: / raebakerosint X: https://x.com/wondersmith_rae // Amazon Books REFERENCE //…

Are AI attackers winning the cybersecurity war? In this video, I sit down with Daniel Miessler, a 25-year security veteran, to discuss the terrifying reality of AI-driven cyber attacks and the massive advantage hackers have today. But it is not all doom and gloom. Daniel introduces his open-source project, PAI (Personal AI Infrastructure), demonstrating how you can build a customized, local AI assistant to automate your workflow, defend your data, and level up your tech skills. We cover everything from AI agents conducting prompt injection CTFs (like Gandalf) in real-time, to the future of work and why the ultimate goal of many corporations is zero human employees. Whether you are worried about AI replacing your job or you want to learn how to leverage local LLMs, Linux, and agentic AI to become an unstoppable force, this conversation is your blueprint for surviving and thriving in the 2026 tech landscape. Go here to get PAI for free: https://github.com/danielmiessler/Per... // Daniel’s SOCIAL // Twitter/X:…

Thank you ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal // Spencer Alessi’s SOCIAL // YouTube: / @techspence Website: https://spenceralessi.com/adsecuritykit/ X: https://x.com/techspence LinkedIn: / spenceralessi Swag: https://www.etsy.com/shop/ethicalthre... // ThreatLocker’s SOCIAL // LinkedIn: https://www.linkedin.com/company/thre... X: https://x.com/threatlocker Instagram: / threatlocker Website: https://www.threatlocker.com/ / David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF //…

Thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal // Colin Ellis’ SOCIAL // LinkedIn: / collinellis95 // ThreatLocker’s SOCIAL // LinkedIn: https://www.linkedin.com/company/thre... X: https://x.com/threatlocker Instagram: / threatlocker Website: https://www.threatlocker.com/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming up 01:00 -…

Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Amsterdam 2026. Join David as he sits down with Cisco's Dave West (SVP, Global Specialists), to unpack the technical reality behind the OneCisco platform. Dive deep into how Cisco is transitioning from traditional networking into a platform-centric powerhouse that seamlessly integrates secure networking, AI, and cybersecurity. This discussion explores the convergence of networking and security through the Splunk acquisition, the infrastructure of AI-ready data centers powered by NVIDIA's Spectrum X and NVLink, and the rollout of agentic operations. Discover how micro-segmentation, Zero Trust access, and hybrid cloud solutions are solving the complexities of modern, distributed workforces. Whether you are managing on-premise infrastructure, hybrid environments, or preparing your network for the AI revolution, this deep dive covers the essential reference architectures and visibility tools you need to secure your enterprise. //…

Big thank you to DeleteMe for sponsoring this video. Use my link http://jointdeleteme.com/Bombal to receive a 20% discount or use the QR code in the video. Welcome back to the channel! In this deep dive, Stephen returns to break down the rapidly evolving landscape of AI in cybersecurity. We explore the critical differences between offensive AI (using AI to enhance attacks) and adversarial AI (attacking the AI models themselves). Learn the mechanics behind prompt injection, LLM jailbreaking, and how vector databases are structured. We also analyze real-world case studies, including Google Project Zero's Big Sleep autonomous zero-day agent, and demonstrate how new AI-driven tools are being used for patch diffing and root cause analysis. Finally, we tackle the massive industry question: will AI replace human penetration testers, and what steps should you take right now to futureproof your tech career? Plus, a quick look at how automated agents are tackling API vulnerabilities like BOLA. // Stephen's Social //…

Thank you to Cisco for sponsoring my trip to the Cisco AI Lab in San Jose. In this deep dive into the future of data center networking, we sit down to explore the massive shifts happening in AI infrastructure. We discuss the rollout of new 100 terabit smart switches and firewalls powered by the Cisco Silicon One G300 chip, alongside the highly anticipated NVIDIA Spectrum 6. Discover the critical debate between Ethernet and InfiniBand for scaling AI clusters, the complexities of co-packaged optics (CPO) versus linear packaged optics (LPO), and how agentic AI and tools like Claude are revolutionizing legacy C code refactoring. From managing data center power constraints to enforcing security policies directly on DPUs, this conversation covers the hardware and software transformations you need to know to stay ahead in network engineering. // Will Eatherton SOCIAL // LinkedIn: / willeatherton Newsroom: https://newsroom.cisco.com/c/r/newsro... // YouTube video REFERENCE // • The 100Tbps AI Switch: Inside the…

Big thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal Forget hot glue and paper clips. Here are 7 REAL 5-minute cybersecurity hacks everyone should know in 2026. Recorded live at Zero Trust World (ZTW26), David Bombal and a team of hackers demonstrate actual cyber attacks and how quickly your systems can be compromised. From forcing AI prompt injections to steal credentials, to hiding C2 servers in plain sight on a Steam profile, these are the real-world exploits threat actors are using right now. We're diving into the technical weeds to show you Windows LNK shortcut hijacking, Linux privilege escalation via sudo misconfigurations, and how to protect yourself from these exact attacks. // Guests’ SOCIAL // Alex Benton: Rename StickyKeys / alex-benton-b805065 Kenneth Walker: Everthing is a C2 / kenneth-walker-527595109 Jacob Meyer: Shortcut Hijack /…

Big thank you to Radware for sponsoring this video. Download the Radware Global Threat Analysis Report 2026 here: https://www.radware.com/threat-analys... In this interview, David Bombal sits down with Radware's Pascal Geenens to unpack the realities of the latest global threat report. The cybersecurity landscape has experienced a major paradigm shift: the era of "Vibe Hacking" is here. Pascal explains how Agentic AI, the Model Context Protocol (MCP), and uncensored offline models (like DeepSeek-R1) have created a "digital garden of Eden" for adversaries. Discover how novice script kiddies are now use the power of AI hacking which once strictly reserved for nation-state actors. We dive deep into the automation of cyber attacks, the rise of AI-driven tools like Xantarox AI, the critical dangers of AI-generated code vulnerabilities, and why traditional defense mechanisms are struggling to keep up with non-deterministic AI threats. // Pascal Geenens’ SOCIAL // LinkedIn: / Website: https://www.radware.com/ //…

Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Amsterdam 2026. In this deep dive, Cisco’s Head of Corporate Strategy, Nathan Jokel, joins David Bombal to unpack the future of AI data centers and the groundbreaking Cisco and NVIDIA partnership. Discover how 1.6T networking speeds and the new 100T G300 silicon are solving massive infrastructure bottlenecks to keep GPUs running at full capacity. We explore the critical role of network security in the AI era, detailing the Splunk acquisition, HyperShield, and eBPF technology. Plus, get an insider's look at the looming power constraints facing data centers in 2025, and how Cisco is preparing for the future with post-quantum cryptography and distributed quantum networking. // Nathan Jokel’s SOCIAL // LinkedIn: / nathanjokel // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook:…

Thank you to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal AI isn't the magic cybersecurity cure the industry wants you to believe it is Danny Jenkins tells us in this interview. He cuts through the marketing hype and explains why relying solely on AI to block attacks is not a solution to all our cyber problems. We also discuss modern threats—including the rise of Agentic AI—and why determining the "intent" of software is practically impossible for artificial intelligence. Instead of chasing the latest buzzwords, learn the foundational, proven strategies to actually secure your network. We dive deep into Zero Trust Network Access (ZTNA), the power of default deny, and the specific, tangible controls you need to block ransomware, prevent Office 365 phishing, and stop bad actors. Whether you're an IT admin, SOC analyst, or CISO, this video outlines exactly what…