Podcasts

This week, dive into the evolving threat of software supply chain attacks and the growing risks facing the open-source ecosystem. As developers increasingly rely on third-party packages and AI-powered coding tools, attackers are finding new ways to abuse trusted software to reach a wider range of targets.

In this Discarded episode, Selena is joined by Sean Farrell, Assistant General Counsel at Microsoft's Digital Crimes Unit (DCU), to pull back the curtain on how major cyber crime takedowns actually happen and how Microsoft uses civil lawsuits, criminal referrals, and global partnerships to disrupt some of the most damaging cyber crime operations in the world.

There's a lot to unpack in this year's Verizon Data Breach Investigations Report (DBIR). From vulnerabilities overtaking credential abuse as the leading initial access vector, to the sobering reality that organizations are patching more but getting worse outcomes, this year's DBIR paints a complex picture of a threat landscape under pressure.

What does it actually look like to bring AI into a threat intelligence program at one of the internet's most iconic companies?

This episode covers one of the fastest-growing threats in today’s cyber landscape: device code phishing. Proofpoint's threat research team breaks down how this technique works, why it’s suddenly everywhere, and how attackers are exploiting legitimate authentication flows to bypass traditional defenses.

It’s our 100th episode—and we’re raising a glass to celebrate. Join Selena Larson, Sarah Sabotka, Tim Kromphardt, and Daniel Blackford as they reflect on the journey so far, revisit standout moments, and look ahead to what’s next in cybersecurity.

This Discarded episode is all about the stealthy world of backdoors, malware detection, and the “secret signals” threat actors use to stay hidden. Our experts share how attackers design covert communication methods—and how defenders work to uncover them without overwhelming security teams with noise.

This Discarded episode unpacks one of the strangest malware investigations of the year: TrustConnect RAT. What started as a seemingly legitimate remote management tool quickly unraveled into a bizarre, fast-evolving ecosystem of “vibe-coded” malware.

This episode of Discarded features our expert malware researchers. As a team, they offer a balanced look at AI’s growing influence in cybersecurity—showing how intelligent tools can amplify analyst effectiveness while reinforcing that expertise and critical thinking remain central to effective malware defense.

This episode of Proofpoint Discarded features Dr. Bob Hausmann, Lead Cognitive Scientist of Human Risk Management at Proofpoint. He and the Discarded team discuss whether cybersecurity training truly changes behavior.