Reimagining Cyber - real world perspectives on cybersecurity

Cl0p is back — and once again, the ransomware group is showing why attacking the technology that connects organisations can be far more powerful than attacking them one at a time.
This episode examines Cl0p’s latest campaign targeting vulnerabilities in PTC Windchill and Flex PLM, enterprise software used across engineering, manufacturing and other industries.
The conversation explores Cl0p’s “one-to-many” approach: find a widely deployed piece of enterprise software, exploit a vulnerability, and use it as a gateway into potentially hundreds of organisations. It’s a strategy the group has used before, most notably in the MOVEit campaign, which ultimately affected thousands of organisations.
The episode looks at why data theft and extortion can now be more valuable than traditional ransomware encryption, why attackers are increasingly targeting the “multiplier” in an organisation’s technology ecosystem, and why simply patching a vulnerability may not be enough if an attacker has already gained access.
It also explores the risks posed by MSPs, remote management platforms and trusted third parties — and what security teams should be doing to identify their own potential multipliers.
The key lesson? Don’t just ask what happens if this system is compromised. Ask: if this system is compromised, what else does the attacker get?
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Ransomware recovery doesn’t end when the malware is removed and the servers come back online.
In this episode of Reimagining Cyber, Tyler Moffitt is joined by Keelin Conant, a cybersecurity professional with firsthand experience of ransomware restoration, to explore what happens after the immediate crisis is over.
They look beyond restoring systems to the human and business consequences that can linger for weeks, months and even years. Keelin shares stories of exhausted IT teams, leadership pressure, employee trauma, reputational damage and the danger of falling back into old habits once the immediate crisis has passed.
The conversation also examines why organizations can be more vulnerable to another attack after the first one, the importance of fixing the vulnerabilities that allowed attackers in, and why backups and incident response plans aren't enough if they aren't regularly tested.
From ransomware-as-a-service and repeat attacks to communication, leadership and the psychological impact on the people involved, this episode asks a fundamental question: when has an organization really recovered from a cyberattack?
The answer may have less to do with getting the technology running again—and much more to do with whether the business and its people can genuinely move forward.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Hotel Wi-Fi has long been considered a cybersecurity risk—but what if you're connected to the correct network? In this episode of Reimagining Cyber, Tyler Moffitt examines CaptiveCrunch, a sophisticated campaign that compromises legitimate hotel and conference Wi-Fi infrastructure to intercept users before they ever reach the internet.
Discover how attackers manipulate DNS traffic, abuse device code authentication, bypass traditional phishing defenses, and deploy malware such as Cornflake and CocoShell to steal credentials, OAuth tokens, and corporate access. Tyler explains why familiar security signals—including genuine Wi-Fi networks, legitimate Microsoft login pages, and even multi-factor authentication—may no longer be enough to protect travellers.
Whether you're a business traveller, security leader, or IT professional, this episode offers practical guidance on reducing risk, securing remote connections, and adapting to a new generation of identity-based attacks.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Nearly 19,000 files reportedly connected to India’s Kudankulam Nuclear Power Plant appeared on a ransomware group’s leak site. The files allegedly included engineering drawings, facility layouts, supplier details, inspection records, project correspondence, and equipment photographs.

The plant’s operator says nuclear safety and security systems were not compromised. That distinction matters, but it does not make the exposed information worthless.

Ben interviews Tyler Moffitt about how attackers can collect intelligence without
penetrating a reactor, why contractors become attractive targets, and how individually mundane documents can combine into an operational map of critical infrastructure.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

A ransomware attack against Coca-Cola-owned Fairlife forced the company to temporarily suspend production across the United States. Product safety was not affected, but production-related systems were.
How does a cyberattack stop a physical product from being manufactured? Why would a company shut down production when there is no evidence that the product itself was compromised? And what does this tell us about the difference between restoring technology and restoring a business?
Ben interviews Tyler Moffitt about operational ransomware, manufacturing dependencies, containment decisions, and what organizations should learn from Fairlife’s response.
As featured on Million Podcasts' 
Best 100 Cybersecurity Podcasts  
Top 50 Chief Information Security Officer CISO Podcasts 
Top 70 Security Hacking Podcasts
This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!
Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com