Podcast
Darnley's Cyber Café
Hosted by Darnley's Cyber Café · EN
Darnley's Cyber Café is your go-to cybersecurity and IT security podcast, available everywhere you listen. Each episode, we brew up fresh conversations on cybersecurity, IT security, business, technology, and the geopolitical forces shaping our digital world: from data breaches and ransomware to privacy, surveillance, and emerging threats.
Whether you're commuting, at your desk, or just unwinding after a long day, there's always a seat at the café. Pull up a chair, pour your java — not script — and join the conversation that keeps the digitally aware one step ahead. Follow and subscribe wherever you get your podcasts, and never miss an episode. The café is always open and knowledge is your power.
27episodes
Episodes
Newest firstAll episodes
Bitwarden CLI Hacked? The Supply Chain Attack That Targeted 250K Developers
Apr 2900:21:31Tap to summarizeOn April 22, 2026, the Bitwarden CLI, used in CI/CD pipelines at tens of thousands of organizations, was weaponized for exactly 93 minutes. In this episode, Darnley walks through the anatomy of the supply chain attack that compromised bitwarden cli version 2026.4.0: how the threat group exploited a compromised Checkmarx GitHub Action to inject credential-stealing malware into Bitwarden's npm publishing pipeline, what the worm actually stole, how it self-propagated by republishing victims own npm packages, and why the fact that "no vault data was compromised" misses the point...Packed with practical technical guidance on pipeline hardening, package pinning, least-privilege, and the one npm setting that could have blocked this attack entirely...this episode is essential listening for developers, IT security teams, and anyone responsible for a software supply chain who need to hear it. Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
Why Cybersecurity Startups Are Being Targeted? What That Means For Your Business?
Apr 2200:27:08Tap to summarizeThe company you hired to protect you just got hacked. That is not a hypothetical, it is the defining threat pattern of the past 18 months. In this episode Darnley breaks down why cybersecurity vendors, including some of the most recognized names in the space, have become the highest-value targets for threat actors, how a single vendor compromise translates directly into a supply chain breach affecting hundreds or thousands of downstream clients, and what every business needs to do before signing another security contract. Featuring real-world case vendors including SolarWinds, Okta, CrowdStrike, Sisense, and the 2026 eScan compromise, plus a practical vendor vetting playbook and a hard look at why infrastructure-level privacy matters more.Listen hereClick here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
Smart Weapons: How AI Is Rewriting the Attacker's Playbook
Apr 1500:19:44Tap to summarizeThe attacker's toolkit just got a significant upgrade, and most businesses haven't caught up. In this episode of Darnley's Cyber Café, Darnley breaks down how AI is reshaping offensive cyber operations across two fronts: AI-generated spear phishing and deepfake social engineering that bypasses conventional awareness training, and AI-assisted vulnerability discovery that is compressing the window between a flaw existing and a flaw being exploited. Featuring documented real-world cases including the 2024 Hong Kong deepfake video call fraud, the emergence of WormGPT and FraudGPT on dark web forums, and Google DeepMind's AI-discovered zero-day in SQLite. This episode grounds the conversation in what's actually happening in the wild. Plus five concrete defensive measures that move the needle against AI-powered threats, from updated security awareness training to zero trust architecture. If your security posture was built for the threat landscape of three years ago, this episode is a wake-up call. Tune in, and know what you're actually up against before its too late.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
Digital Exhaust: The Trail You Leave Online Without Knowing It
Apr 800:27:13Tap to summarizeYour digital footprint is bigger than you think, and most of it was never intentional.In this Episode of Darnley's Cyber Café, Darnley breaks down digital exhaust: the passive data trail generated by your everyday online activity, from browser fingerprinting and mobile advertising IDs to smart home surveillance and metadata exposure. This episode covers who's collecting your data, how it's being used against you, and why app-level privacy tools aren't enough. Whether you're a privacy-conscious individual, a small business owner, or an IT professional trying to justify a stronger security posture, this episode gives you the framework, and the actionable steps to start reducing your exposure today.Tune in, unwind, and stop leaving exhaust.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
The Deepfake Threat: Voice Cloning & Video Fraud Targeting Businesses
Mar 3100:16:26Tap to summarizeYour CEO sounds exactly right on that Zoom call...but is it actually them? In this episode of Darnley's Cyber Café, cybersecurity veteran Darnley breaks down the rapidly escalating threat of deepfake voice cloning and AI-generated video fraud targeting businesses. From the $25 million Arup incident to the 2025 Singapore case where attackers faked an entire executive video conference, this episode unpacks how these attacks work, who's being targeted, why finance teams are in the crosshairs, and what procedural defences actually hold up when your eyes and ears can't be trusted. If your organization moves money based on voice or video confirmation, this episode is worth the listen.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
Big Brother Goes Online: How Canada's Bill C-22 is Building the Surveillance Infrastructure of the Future
Mar 2500:19:50Tap to summarizeCanada's Bill C-22 is being presented as a modernisation of law enforcement tools. But beneath the legislative language lies an infrastructure architecture with implications that extend far beyond Canada's borders. In this episode, Darnley breaks down what the bill actually does, what it enables beyond its stated scope, how it connects to the broader Five Eyes intelligence agenda, and what ordinary Canadians, and citizens of all allied nations, can do to protect their privacy.Topics CoveredBill C-22 — The three pillars: metadata retention, warrantless confirmation demands, and compelled surveillance capabilities.Beyond the bill — How surveillance infrastructure expands beyond its stated purpose.The backdoor risk — Why compelled capabilities create vulnerabilities for everyone, including criminals and foreign states.The data broker loophole — How governments buy your data without warrants.Five Eyes — The multilateral coordination behind C-22 and similar legislation globally.Apple vs. Google — The architectural and corporate divide in resisting government access.The privacy defence stack — VPNs, E2E encryption, offshore hosting, encrypted DNS, and hardened devices.Key Legislation & Events ReferencedCanada Bill C-22 (Lawful Access, 2026)UK Government secret order to Apple for encryption backdoor (2025)India government tracking app mandate (2025)France 'ghost user' proposal (struck from final legislation)Snowden revelations on Five Eyes supra-national surveillance2010 Chinese hack of Google/Microsoft government warrant compliance systemsClick here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
You're the Target: What Every Business Owner Needs to Know About Cyber Threats Right Now
Mar 1800:08:29Tap to summarizeSmall businesses now account for over 70% of all data breaches, and if you think you're too small to be a target, attackers are counting on that. In this episode of Darnley's Cyber Café, cybersecurity veteran Darnley breaks down the three threats hitting small businesses and entrepreneurs hardest right now: AI-powered phishing attacks sophisticated enough, double-extortion ransomware that steals your data before locking you out, and credential theft that exploits the password habits your team probably still has. With over a decade of real-world incident response and security assessment experience, Darnley cuts through the noise and tells you exactly what you need to do, without the jargon, and without the six-figure budget. If you run a business and you're not thinking about cybersecurity, this episode is your wake-up call.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
The EU Digital Sovereignty Illusion: What No One Is Telling You About Your 'Secure' Infrastructure
Mar 1100:19:31Tap to summarizeIn this episode of Darnley's Cyber Café, Darnley cuts through the politics and exposes what EU digital sovereignty actually looks like beneath the surface...and it's not what policymakers are telling you. Drawing from years of hands-on security assessments, incident response, and working directly with compromised organizations globally. Darnley breaks down why moving your data to European servers is a compliance exercise, not a security strategy, and why the firmware, chips, CVEs, and bug bounty programmes keeping your "sovereign" infrastructure alive are overwhelmingly American. If you're a business owner, IT professional, or anyone following EU tech policy, this episode will change how you think about digital independence, data residency, and what genuine cybersecurity sovereignty would actually require. The cookie banners are real. The independence underneath them is not. Listen now. Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
Silent Breach: How Hackers Hide in Your Business Network
Mar 400:20:54Tap to summarizeIf your business was hacked today, would you know? Most companies discover cyber breaches 7 months after attackers infiltrate their networks. That's 207 days of undetected network intrusion, data theft, and security compromise.In this cybersecurity information episode, Darnley's reveals why silent data breaches happen, personal experience, how hackers remain undetected in business networks, and what signs indicate your company may already be compromised.Learn about:Average breach detection time and why dwell time matters for business securityHow cybercriminals use stealth tactics to evade network security toolsReal-world data breach examples: Target, Equifax, and Marriott hotel breach casesWarning signs of network compromise most IT security teams missThreat detection strategies to identify cyber attacks before massive data lossIncident response planning and cybersecurity monitoring best practicesDiscover how to detect network intrusions faster, reduce breach dwell time, and protect your business from silent cyber attacks. Whether you're a small business owner, IT professional, or security manager, this episode provides actionable cybersecurity advice.The silent breach is only silent if you're not listening. Learn how to protect your business network today.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →
The End of Private Thought: How Predictive Algorithms Reshape Privacy and Human Behavior
Feb 1800:10:43Tap to summarizeIn this episode of Darnley’s Cyber Café, we explore a deeper question about modern privacy: what happens when systems don’t need your words to understand you?From behavioural research to predictive algorithms, studies show that digital traces: clicks, pauses, search queries, and browsing patterns all can reveal personality traits, emotional states, and future behaviour with surprising accuracy. As artificial intelligence and data modelling improve, privacy may no longer end when we speak. It may narrow before we decide.This episode examines the documented research behind predictive systems, how they shape outcomes through ranking and nudging, and why awareness matters in a world where thought leaves a shadow.If you care about AI, digital privacy, algorithmic influence, or the future of human autonomy, this conversation is for you.Click here to send future episode recommendationSupport the showSubscribe now to Darnley's Cyber Cafe and stay informed on the latest developments in the ever-evolving digital landscape.
Transcribe →