David Bombal

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal

Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.

At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter.

Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware.

In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments.

We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have.

Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video.
#CyberSecurity #Privacy #Hacking

// Cooper Quintin’s SOCIAL //
EFF Website: https://www.eff.org/about/staff/coope...
LinkedIn: / cooper-quintin-932029125
Website: https://cooperq.com/

// Web Page REFERENCE //
https://www.eff.org/deeplinks/2025/03...
https://www.eff.org/
https://ssd.eff.org/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Intro
0:52 - Cooper Quintin introduction
01:18 - Rayhunter tool by EFF
02:45 - Stingrays used by law enforcement
05:05 - How the Rayhunter works
08:44 - Threatlocker sponsor segment
09:59 - Rayhunter results
12:06 - Concerns of Stingrays
14:02 - Why should people care
15:17 - Concerns of mobile forensic extraction tools
17:17 - Password vs biometric
18:04 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#cybersecurity #bhusa26 #privacy

Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video.

// Kamal Hathi’s’ SOCIAL //
LinkedIn: / kamal-hathi

// Hanlin Fang’s SOCIAL //
LinkedIn: / hanlinfang

// Jessica Oppenheimer’s SOCIAL //
LinkedIn: / jessbair

// Craig Woolley’s SOCIAL //
LinkedIn: / craig-woolley-783059111

// Tom Smit’s SOCIAL //
LinkedIn: / tsmit50

// Bruce Snell’s SOCIAL //
LinkedIn: / brucesnell-security

// Heath Johnson’s SOCIAL //
LinkedIn: / heathjohnsonvm

// Paul Bannister’s SOCIAL //
LinkedIn: / paul-bannister

// Hao Yang’s SOCIAL //
LinkedIn: / hao-yang-bb6ab429

// Robert Castley’s SOCIAL //
LinkedIn: / robertcastley

// Leila Reyhani’s SOCIAL //
LinkedIn: / leila-reyhani

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - How to stay in control in the world of AI
00:38 - Visualizing data with Splunk
02:24 - Born observable // Observability for AI
04:36 - Cisco Data Fabric
06:43 - Hunt and investigation // Security threats
08:10 - Data foundation
09:08 - The cost of AI and the ROIs
09:41 - Red vs blue team with AI
11:46 - Visualizing AI security
13:00 - Targeted autonomy
14:02 - .conf26 summary
15:26 - Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#splunk #cybersecurity #ai

Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills.

Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime.

We also run ransomware in a lab VM to show what happens to the victim’s files.

We discuss:
• How ransomware gangs steal data before encrypting it
• How static and dynamic analysis work together
• Finding malware indicators in Sysmon logs
• Why ransomware can print physical ransom notes
• How reputation and trust work in criminal forums
• How to start reverse engineering by compiling your own C programs and examining them in Ghidra

If you have some programming knowledge and want to understand how malware works, this is a practical look at the skills involved.

// Sponsored SEGMENT //
Big thank you to Proton Pass for sponsoring this video. To sign up for Proton Pass, please use the following link https://proton.me/davidbombal to get Proton Pass free.

// Link to No Starch Website for Lindsay Kaye’s Book //
Order Dissecting the Dark Web on No Starch: https://nostarch.com/dissecting-the-d...
Use Coupon Code KAYE25 for 25% off Dissecting the Dark Web at NoStarch.com

// Lindsay Kaye’s SOCIALS //
Website: https://www.lindsaymkaye.com/
LinkedIn: / lindsaymkaye
Human Security Website: https://www.humansecurity.com/people/...

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00- Coming Up
0:40 - Intro (Lindsey's Book)
02:49 - Lindsey's Background
03:30 - Proton Ad
05:44 - Interesting Book Topics
07:18 - Demo Starts
10:57 - How To Follow Along With The Book
14:12 - x64 Debuggng
20:21 - Writing Rules With Stealbit
23:27 - Analysing Ransomware
28:10 - Building Your Ransomware
31:05 - Reputations On The Dark Web
32:52 - Analysing Dark Web Malware
37:30 - Running The Ransomware
41:00 – Questions to Lindsay
42:17 – How to Connect with Lindsay
42:39 – Final thoughts

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#defcon #reverseengineering #darkweb

Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off.

How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools.

We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and cloud storage. Thorin also walks through EFF’s free Surveillance Self-Defense guides to help you create a security plan and decide what to focus on first.

If you work in cybersecurity, or you simply want to help your family protect their privacy, this conversation gives you a starting point without assuming everyone needs the same tools.
In this interview:

Why “I have nothing to hide” misses the point
How to think about passwords, two-factor authentication and security planning

Why messaging defaults and privacy settings matter
What a VPN can and cannot do for your privacy
AI features, cloud storage and questions to ask about your data
Phone and computer privacy tradeoffs, email and encryption

Which privacy setting or app are you going to review first? Let me know in the comments, and subscribe for more cybersecurity and privacy conversations.

// Thorin Klosowski’s SOCIALS //
Website: https://www.eff.org/about/staff/thori...
EFF LinkedIn: https://www.linkedin.com/company/eff?...

// Web page REFERENCE //
https://ssd.eff.org/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 - Coming Up
0:40 – Intro & about the EFF
02:50 – DeleteMe Sponsored Section
05:08 – Surveillance & Self-Defence Tools
08:41 – Tool Guides, AI Privacy & Cloud Storage
13:29 – Messaging Apps to use
16:27 – Operating Systems to use
21:16 – How Secure is Email & Encryption
23:22 – Security Tips for Activists & Protestors
26:53 – Closing & Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.

#Privacy #CyberSecurity #EFF

Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.

// Free AI labs //
Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_...
AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-...

// Jason Haddix’s SOCIALS //
X: https://x.com/Jhaddix?lang=en
Github: https://github.com/Arcanum-Sec
Website: https://arcanum-sec.com/

// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6k6gE...
SoundCloud: / davidbombal
Apple Podcast: podcasts.apple.com/us/podcast...

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 -Coming Up
0:48 - Jason Haddix at DEF CON
01:36 - Sponsor – Proton Drive
03:31 - AI Chatbot Penetration Testing
04:11 - The Prompt Injection Taxonomy
06:19 - Bypassing AI Guardrails & Classifiers
07:15 - DEF CON AI Hacking CTF
08:31 - Why AI Security Testing Is Different
10:18 - Instagram AI Account Takeover Demo
14:39 - AI Meeting Transcript Prompt Injection Demo
17:28 - How to Start Learning AI Security
18:18 - Final Thoughts

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#ai #aihacking #promptinjection