David Bombal

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video.

// Kamal Hathi’s’ SOCIAL //
LinkedIn: / kamal-hathi

// Hanlin Fang’s SOCIAL //
LinkedIn: / hanlinfang

// Jessica Oppenheimer’s SOCIAL //
LinkedIn: / jessbair

// Craig Woolley’s SOCIAL //
LinkedIn: / craig-woolley-783059111

// Tom Smit’s SOCIAL //
LinkedIn: / tsmit50

// Bruce Snell’s SOCIAL //
LinkedIn: / brucesnell-security

// Heath Johnson’s SOCIAL //
LinkedIn: / heathjohnsonvm

// Paul Bannister’s SOCIAL //
LinkedIn: / paul-bannister

// Hao Yang’s SOCIAL //
LinkedIn: / hao-yang-bb6ab429

// Robert Castley’s SOCIAL //
LinkedIn: / robertcastley

// Leila Reyhani’s SOCIAL //
LinkedIn: / leila-reyhani

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - How to stay in control in the world of AI
00:38 - Visualizing data with Splunk
02:24 - Born observable // Observability for AI
04:36 - Cisco Data Fabric
06:43 - Hunt and investigation // Security threats
08:10 - Data foundation
09:08 - The cost of AI and the ROIs
09:41 - Red vs blue team with AI
11:46 - Visualizing AI security
13:00 - Targeted autonomy
14:02 - .conf26 summary
15:26 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#splunk #cybersecurity #ai

Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills.

Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime.

We also run ransomware in a lab VM to show what happens to the victim’s files.

We discuss:
• How ransomware gangs steal data before encrypting it
• How static and dynamic analysis work together
• Finding malware indicators in Sysmon logs
• Why ransomware can print physical ransom notes
• How reputation and trust work in criminal forums
• How to start reverse engineering by compiling your own C programs and examining them in Ghidra

If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved.

// Sponsored SEGMENT //
Big thank you to Proton Pass for sponsoring this video. To sign up for Proton Pass, please use the following link https://proton.me/davidbombal to get Proton Pass free.

// Link to No Starch Website for Lindsay Kaye’s Book //
Order Dissecting the Dark Web on No Starch: https://nostarch.com/dissecting-the-d...
Use Coupon Code KAYE25 for 25% off Dissecting the Dark Web at NoStarch.com

// Lindsay Kaye’s SOCIALS //
Website: https://www.lindsaymkaye.com/
LinkedIn: / lindsaymkaye
Human Security Website: https://www.humansecurity.com/people/...

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00- Coming Up
0:40 - Intro (Lindsey's Book)
02:49 - Lindsey's Background
03:30 - Proton Ad
05:44 - Interesting Book Topics
07:18 - Demo Starts
10:57 - How To Follow Along With The Book
14:12 - x64 Debuggng
20:21 - Writing Rules With Stealbit
23:27 - Analysing Ransomware
28:10 - Building Your Ransomware
31:05 - Reputations On The Dark Web
32:52 - Analysing Dark Web Malware
37:30 - Running The Ransomware
41:00 – Questions to Lindsay
42:17 – How to Connect with Lindsay
42:39 – Final thoughts

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#defcon #reverseengineering #darkweb

Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off.

How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools.

We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first.

If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools.
In this interview:

Why “I have nothing to hide” misses the point
How to think about passwords, two-factor authentication and security planning

Why messaging defaults and privacy settings matter
What a VPN can and cannot do for your privacy
AI features, cloud storage and questions to ask about your data
Phone and computer privacy tradeoffs, email and encryption

Which privacy setting or app are you going to review first? Let me know in the comments, and subscribe for more cybersecurity and privacy conversations.

// Thorin Klosowski’s SOCIALS //
Website: https://www.eff.org/about/staff/thori...
EFF LinkedIn: https://www.linkedin.com/company/eff?...

// Web page REFERENCE //
https://ssd.eff.org/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming Up
0:40 – Intro & about the EFF
02:50 – DeleteMe Sponsored Section
05:08 – Surveillance & Self-Defence Tools
08:41 – Tool Guides, AI Privacy & Cloud Storage
13:29 – Messaging Apps to use
16:27 – Operating Systems to use
21:16 – How Secure is Email & Encryption
23:22 – Security Tips for Activists & Protestors
26:53 – Closing & Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#Privacy #CyberSecurity #EFF

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.

// Free AI labs //
Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_...
AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-...

// Jason Haddix’s SOCIALS //
X: https://x.com/Jhaddix?lang=en
Github: https://github.com/Arcanum-Sec
Website: https://arcanum-sec.com/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 -Coming Up
0:48 - Jason Haddix at DEF CON
01:36 - Sponsor – Proton Drive
03:31 - AI Chatbot Penetration Testing
04:11 - The Prompt Injection Taxonomy
06:19 - Bypassing AI Guardrails & Classifiers
07:15 - DEF CON AI Hacking CTF
08:31 - Why AI Security Testing Is Different
10:18 - Instagram AI Account Takeover Demo
14:39 - AI Meeting Transcript Prompt Injection Demo
17:28 - How to Start Learning AI Security
18:18 - Final Thoughts

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#ai #aihacking #promptinjection

Big thanks to ‪@Cisco‬ & ‪@Splunkofficial‬ for sponsoring my trip to .Conf 2026 and also for sponsoring this video.

AI agents can do things you never intended. So how do you monitor their behavior, spot security problems and decide what they should be allowed to do? I’m joined by Splunk’s Kamal Hathi at .conf26 to discuss AI agent security, observability and what an agentic SOC means for the people working in cybersecurity.

Kamal explains why setting a goal isn’t enough. You need visibility into what your agents are actually doing, clear guardrails and human oversight for important decisions. We also discuss why monitoring only a sample of agent activity can leave gaps, and how focused small language models could help reduce evaluation costs.

In this interview, we cover:
• Known agents, unregistered agents and unexpected behavior
• AI evaluations, guardrails and zero trust
• Automating SOC alert triage while keeping humans in control
• Using AI to create SOAR playbooks
• Running models locally for privacy, cost and control
• Choosing between local models and cloud models
• Whether you should still study computer science in 2027
If you’re building AI agents, working in cybersecurity or deciding what to learn next, this conversation will give you plenty to think about.

// Kamal Hathi’s’ SOCIAL //
LinkedIn: / kamal-hathi

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming Up
0:43 - Intro
02:25 - Security Against AI
06:26 - Collecting Data on your AI
08:33 - AI Hallucinations
10:48 - Is Life Like Sci-Fi?
14:09 - Will AI Replace You?
17:16 - Not Giving Your Information to AI
18:50 - Kamal's Prediction for the Future of AI
20:20 - Final Thoughts
21:29 - What Should you Study in 2027?
22:00 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#SplunkConf26 #Splunk #Cisco