David Bombal
David Bombal interviews people in the networking world to learn about life, hacks, technology and networking and ways to improve your life!
#618: Your Smart Device Is Tracking You More Than You Think
Big thanks to Proton Drive for sponsoring this video. You can use my link proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.
// Glen Sorensen’s SOCIAL //
LinkedIn: / glen-sorensen
DeleteMe LinkedIn: / deleteme
// Article REFERENCE //
protonvpn.com/blog/windows-is...
// David's SOCIAL //
Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal
YouTube: / @davidbombal
Spotify: open.spotify.com/show/3f6...
#617: This Is How NVIDIA's AI Mercedes Drives in Real Traffic
What happens when NVIDIA's AI drives a Mercedes-Benz CLA through Berlin traffic? David Bombal rides along to see how Alpamayo and the Halos safety stack work together.
At GTC Berlin, I ride in a Mercedes-Benz CLA running a development version of NVIDIA's Alpamayo driving software. We encounter cyclists, pedestrians, narrow roads, unusual junctions, parked cars and unpredictable drivers while the car handles much of the driving under human supervision.
We look at what is actually happening behind the scenes: an end-to-end AI model proposes a driving path, a separate...
#616: How Police Can Track Your Phone
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.
At Black Hat and...
#615: How is AI Changing Cybersecurity?
Big thanks to Cisco & Splunk for sponsoring my trip to .Conf 2026 and also for sponsoring this video.
// Kamal Hathi’s’ SOCIAL //
LinkedIn: / kamal-hathi
// Hanlin Fang’s SOCIAL //
LinkedIn: / hanlinfang
// Jessica Oppenheimer’s SOCIAL //
LinkedIn: / jessbair
// Craig Woolley’s SOCIAL //
LinkedIn: / craig-woolley-783059111
// Tom Smit’s SOCIAL //
LinkedIn: / tsmit50
// Bruce Snell’s SOCIAL //
LinkedIn: / brucesnell-security
// Heath Joh...
#614: Learn Malware Analysis with Ghidra and x64dbg (for free)
Want to learn how to reverse engineer malware? Lindsay Kaye joins me to demonstrate malware analysis using Ghidra and x64dbg, two free tools you can use to develop your skills.
Lindsay is the author of Dissecting the Dark Web. In this interview, we take apart a data theft tool used by LockBit affiliates and examine BlackMatter ransomware. You’ll see how malware detects a debugger, hides strings, and loads functions at runtime.
We also run ransomware in a lab VM to show what happens to the victim’s file...
#613: Think You’re Private Online? Watch This
Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off.
How private are the apps you use every day? I sit down with Thorin Klosowski from the Electronic Frontier Foundation (EFF) to discuss online privacy, secure messaging, VPNs and the data we share with AI tools.
We look at Signal, WhatsApp and Telegram, discuss privacy tradeoffs across Windows, Linux, Android and iPhone, and ask what you should assume about email and...
#612: How Hackers Trick AI Into Giving Up Secrets (Demos and free labs)
Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.
// Free AI labs //
Prompt Injection Taxonomy: https://arcanum-sec.github.io/arc_pi_...
AI Security Resource Hub: https://arcanum-sec.github.io/ai-sec-...
// Jason Haddix’s SOCIALS //
X: https://x.com/Jhaddix?lang=en
Github: https://github.com/Arcanum-Sec
Website: https://arcanum-sec.com/
// David's SOCIAL //
Discord: di...
#611: Building AI Agents? Set Up These Guardrails First
Big thanks to ‪@Cisco‬ & ‪@Splunkofficial‬ for sponsoring my trip to .Conf 2026 and also for sponsoring this video.
AI agents can do things you never intended. So how do you monitor their behavior, spot security problems and decide what they should be allowed to do? I’m joined by Splunk’s Kamal Hathi at .conf26 to discuss AI agent security, observability and what an agentic SOC means for the people working in cybersecurity.
Kamal explains why setting a goal isn’t enough. You need visibility into what your agents are actually doing...
#610: WiFi Pineapple Pager: What Can It Actually Do?
Big thank you to proton VPN for sponsoring the video. To get 70% off your Proton VPN subscription use the following link: https://protonvpn.com/davidbombal
Note: Hak5 did not pay me to make this video. But, for full transparency: Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link below.
// Buy Hak5 coolness here (Affiliate Link): //
Buy Hak5: https://davidbombal.wiki/gethak5
WiFi hacking without opening your laptop? ‪@DarrenKitchen‬ from ‪@hak5‬ joins me to talk about th...
#609: How Hackers Target Satellites Through Ground Control Systems
Big thanks to DeleteMe for sponsoring this video. Protect your business with DeleteMe by using the following Link: https://joindeleteme.com/bombal-biz You’ll also get a free year of social media protection for every seat you purchase.
How do you hack a satellite? The attack can start on the ground. Watch a mission control demo showing how web vulnerabilities can change a simulated spacecraft’s orbit.
At DEF CON, I meet Milenko and Andrzej, the authors of The Spacecraft Hackers Handbook, to explore spacecraft cybersecurity. They explain the infr...
#608: Before You Deploy AI Agents, Understand These Attacks
Big thanks to Proton VPN for sponsoring this video. You can use my link: https://protonvpn.com/davidbombal to get 70% off your Proton VPN subscription
How do you hack an AI system? And what happens when one malicious instruction spreads between AI agents?
I’m joined by Harriet, author of Practical AI Security, to explore how AI models and agents can be manipulated, with practical Python demonstrations. You'll see an image classifier misidentify a rifle, a demonstration of prompt injection spreading across five agents, and how memory poisoning can pl...
#607: How Hackers Steal Your Accounts Even With 2FA Enabled
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
Is Microsoft Defender enough to protect your PC? Malware researcher Leo joins me at Black Hat to discuss antivirus, Windows security and how hackers steal your accounts.
We explore how infostealers target saved passwords and session tokens, why two-factor authentication cannot prevent every account takeover, and how a message from a compromised friend’s ac...
#606: Is Cybersecurity Still Worth Learning in 2026?
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker, please use the following link: https://www.threatlocker.com/davidbombal
Is cybersecurity still worth learning in 2026? AI agents are changing vulnerability research, but where does that leave you?
At Black Hat, I’m joined by Arizona State University professor Yan Shoshitaishvili to discuss what AI can actually do, where it falls short, and why he would still choose a career in cybersecurity today.
...
#605: Flock Cameras: What They Can Reveal About Your Life
Big thank you to DeleteMe for sponsoring this video. Use my link join https://joindeleteme.com/Bombal or use the QR code in the video to get 20% off.
Your license plate could reveal more than you think. Flock cameras, vehicle tracking and OSINT can turn information about your car into clues about where you live and your daily routines.
I’m joined by an OSINT expert to discuss how vehicle information can be connected with public records, why surveillance raises privacy concerns and what happens when people trust an in...
#604: How He Infiltrated LockBit and Helped Get Them Indicted
Big thanks to Proton Drive for sponsoring this video. You can use my link http://proton.me/drive/davidbombal to sign up for Proton Drive and get 40% discount.
John DiMaggio created fake identities, profiled ransomware operators and spent approximately 18 months earning the trust of LockBit.
In this interview, John explains how his investigation led to work with the FBI and the UK’s National Crime Agency, contributed to indictments and resulted in death threats against him. He also reveals how the work affected his mental health, relationships and everyday li...
#603: How Age Verification Threatens Your Online Privacy
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link:Â www.threatlocker.com/davidbombal
Age verification is spreading across the internet. It promises to protect children, but what happens when accessing a website or using your own device requires facial recognition, identity documents or third-party verification?
David speaks with Alexis Hancock from the Electronic Frontier Foundation about the growing privacy risks surrounding age verification and digital ID systems. They examine how these technologies could threaten o...
#602: How Compilers Turn Secure C Code Into Vulnerable Binaries
Big thanks to ‪@ThreatLocker‬ for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
You can write secure C code, follow accepted best practices and still end up with a vulnerable binary. The reason is simple: the CPU does not run your source code. It runs whatever the compiler produces.
David sits down with security researcher Chris Domas at Black Hat to examine how legal compiler optimizations can remo...
#601: Google Researchers Hacked the Pixel Phone using Audio Messages
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
A zero-click attack can compromise your phone without you opening a link, installing an application or even touching the device.
David sits down with Natalie Silvanovich and Seth Jenkins from Google Project Zero to examine how specially crafted audio messages were used to remotely compromise the Pixel 9 and Pixel 10.
...
#600: This Free Tool Decodes Game Boy ROM From a Photograph
Can you recover working software from a photograph of a microchip?
Embedded systems reverse engineer Travis Goodspeed demonstrates how to extract the original Game Boy’s 256-byte boot ROM from a microscopic photograph of the mask ROM inside its CPU.
The source image was created by combining 22 microscope photographs captured at 50x magnification. Using his free, open-source Mask ROM Tool, Travis marks 2,048 ROM bit locations, separates the ones from the zeros and checks for possible recognition errors. He then determines the logical order of the bits, disassembles the program an...
#599: This Pocket Tool Diagnoses Wi-Fi in 45 Seconds
Your internet speed can look fine while your Wi-Fi is still failing. Packet loss, latency, congested channels, interference and poor configuration can all damage performance, but a normal speed test will not show you the full picture.
In this video, I test the Ookla Speedtest Pulse, a pocket-sized Wi-Fi 7 diagnostic tool that measures more than 25 network metrics in around 45 seconds. We test Wi-Fi at the Natural History Museum in London and examine results from an Airbnb to identify whether the problem comes from the Wi-Fi network, wired connection or internet service provider.
<...
#598: AI Can’t Understand Intent. That’s a Security Problem
Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal
AI is changing cybersecurity, but simply using more AI to defend against AI attacks may not be the answer.
David Bombal sits down with Danny Jenkins, CEO of ThreatLocker, to discuss the security risks created by AI, autonomous agents, zero-day vulnerabilities, ransomware, and the rapidly expanding attack surface businesses now have to deal with.<...
#597: The Hacking Gadgets You Need to Know
Note: Hak5 did not pay me to make this video. But, I'm marking it as sponsored because Darren was kind enough to give me some cool Hak5 gadgets. Get your own using my link: https://davidbombal.wiki/gethak5
// Darren Kitchen SOCIAL //
YouTube: https://www.youtube.com/darrenkitchen
Website: https://hak5.org/pages/hack-across-america
X: https://x.com/hak5darren
// Hak5 WEBSITE (affiliate) //
https://davidbombal.wiki/gethak5
// David's SOCIAL //
Discord: discord.com...
#596: This is the Real Cybersecurity Problem
Thank you to Threatlocker for sponsoring my trip to Black Hat so I can interview amazing people.
Jen Easterly joins David Bombal to discuss why today’s cybersecurity problem may actually be a software quality problem.
For decades, users and organizations have been blamed for failing to patch systems, change default passwords, or enable MFA. Jen argues that the bigger question is whether software vendors should be held responsible for shipping insecure products in the first place.
They discuss Secure by Design, software vulnerabilities, me...
#595: How to Detect Fake Cell Towers Near You
Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off.
Learn how fake cell towers and Stingray-style devices can be used to track phones, capture metadata, and monitor cellular activity.
OTW joins David Bombal to demonstrate how SDR tools such as HackRF, RTL-SDR, DragonOS, and Falcon can be used to scan nearby cell towers and investigate suspicious signals. They look at how 4G and 5G networks work, why mobile networks still expose...
#594: How to Protect Your Network From Insecure IoT Devices
Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware.
Philip Wylie explains how an outdated IP camera became a ransomware gateway, why default passwords and poor segmentation remain serious risks, and how to protect your network using separate VLANs, firmware updates, monitoring and zero-trust controls. The interview also explores medical devices, OT security, AI-enabled devices and the growing demand for IoT penetration-testing skills.
Big thanks to ThreatLocker for sponsoring my trip to ZTW26 and also for...
#593: How to pass the CCNA exam (advice from two Cisco instructors)
Two Cisco training veterans break down how to know you are ready for the CCNA exam, what changes in CCNA 2.0, and whether the CCNA is still worth it in 2026.
Brian Bays has been teaching official Cisco classes since 2000. Michael Aldridge has been writing practice exam content since 2001. In this interview they answer the questions I get asked constantly: how long should I study, do I need physical equipment, should I do Network Plus first, and is AI going to take these jobs away?
Short answer on that last one...
#592: Why most enterprise AI fails (and how to succeed)
Agentic AI is putting a 400x load on enterprise networks. Cisco and NTT Data experts reveal why only 13% of leaders successfully scale AI, the nightmare of quantum threats, and how to secure your infrastructure.
Big thank you to NTT DATA for sponsoring this video.
Book an AI Infrastructure Readiness Assessment using one of the following links:
https://services.global.ntt/en-us/cam...
or
https://services.global.ntt/en-us/cam...
// Vikesh Gumpalli’s SO...
#591: Inside the Cisco Live 2026 NOC (exclusive tour)
Big thanks to Cisco for sponsoring my trip to Cisco Live EMEA and for changing my life and the lives of many other people.
// Joe Clarke SOCIAL //
LinkedIn: / joeclarke2
// YouTube video REFERENCE //
MCP Demo using Python, AI and a self healing network (Model Context Protocol): • MCP Demo using Python, AI and a self heali...
Do you know what this weird IP address is about? (192.0.0.2): • Do you know what this weird IP address is ...
// David's SOCIAL //
Discord: disc...
#590: CCNA 2.0: What did Cisco just remove from the exam?
Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas.
Cisco has officially announced a major update to the CCNA, moving from version 1.1 to the new CCNA 2.0 blueprint. Recorded live at Cisco Live, David Bombal sits down with Cisco certification insiders Hank and Quinn to dissect exactly what these changes mean for your career, what entry-level networking topics have been completely removed, and how the test is shifting heavily toward hands-on performance-based testing lablets.
Learn why traditional, shallow network automation topics were pulled...
#589: How to run an AI agent INSIDE your network CLI for 2026
Big thanks to Cisco for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026.
Network engineers, are you ready for 2026? Learn how to deploy an AI agent directly into your CLI using Cisco MCP and Claude to automate network configurations safely. In this tutorial with Karim from Cisco, we explore how to build a custom AI skill (Iris) using Anthropic's Claude Code and Cisco's Model Context Protocol (MCP). Watch how an agent can live in your terminal to automatically read ServiceNow tickets, discover network topologies, propose BGP/firewall changes, and execute commands...
#588: Which is Ethernet? What's the difference?
Big thank you to DeleteMe for sponsoring this video. Use my link https://joindeleteme.com/Bombal to receive a 20% discount or use the QR Code in the video.
Also, a Big thanks to Cisco for sponsoring my trip to Cisco Live Vegas 2026.
Do you really need Cat 8 Ethernet for your home network in 2026? And what actually happens when you touch the end of a fiber optic cable? We break it all down with hands-on demos.
At Cisco Live, I caught up with Jim from...
#587: Agentic AI is attacking your network (how to defend it)
Are your legacy network devices a ticking time bomb? In this deep dive, Cisco’s Head of Customer Experience reveals alarming statistics from the latest Talos report: 40% of top vulnerabilities directly target end-of-life devices, and 32% are over a decade old. We explore how older infrastructure has transitioned from a mere operational drag to ground zero for a new generation of agentic AI attacks, and why the looming threat of quantum computing breaking RSA encryption means you must assess your network now. Discover how the newly launched Cisco IQ provides real-time, dynamic visibility into hardware, software, and cryptographic assets. Learn ho...
#586: Stop zero days without a patch: You need to learn eBPF
How has AI changed cybersecurity and enterprise networks? In this interview, Michael (General Manager for Cisco's Campus Networking) joins David Bombal to discuss the real-world impact of agentic AI, physical AI, and modern security threats. Discover why the U.S. cybersecurity agency (CISA) reports that the mean time to exploit vulnerabilities has plummeted from 10 months to just 10 hours due to AI systems chaining CVEs together. Learn how autonomous agents are shifting campus and branch environments from traditional north-south traffic to massive east-west flows, creating up to 9x the bandwidth demand. Michael breaks down how network segmentation and "least agency"...
#585: Run Full WiFi Networks in your laptop 🤯
In this episode, David Bombal sits down with Joe and Dalton from Cisco to break down the biggest Cisco Modeling Labs (CML) 2.10 release yet. Joe demos the new open source MCP server (model context protocol) that lets an AI model like Claude build a full CML lab from plain English. Just by asking for three IOL routers with a simple BGP config, the AI looks up the node definitions, invents the IP addresses, builds the topology, chooses eBGP on its own, and even starts the lab and waits for convergence. From there you will see the MCP server spin...
#584: Will this replace PoE (Power over Ethernet)?
Big thanks to NTT DATA for sponsoring this video and to Cisco for sponsoring my trip to Cisco Live Vegas. For more information about NTT DATA and Cisco’s partnership, click here https://services.global.ntt/en-us/abo...
1000W touch safe power sounds impossible, but Class 4 Fault Managed Power is changing how we think about power delivery for AI data centers, buildings, networking, and IT infrastructure.
In this interview, we look at how Cisco, NTT, and Panduit are approaching the next generation of energy networking systems. Traditional Power over Et...
#583: Shadow AI: What every network engineer must know
Big thank you to Radware for sponsoring this video
In this interview, David Bombal sits down with Randy Wood, Head of North American Business at Radware, to break down the massive shift occurring in enterprise cybersecurity. They discuss why the rise of Agentic AI is a "1994 internet moment times a thousand," creating an environment where autonomous AI agents are rapidly outgrowing traditional security guardrails. Randy explains the critical connection between AI and API security, revealing how undiscovered "Shadow AI" tools and thousands of hidden enterprise API vulnerabilities leave organizations completely exposed to highly sophisticated...
#582: What is an Agentic SOC? (how to defend at machine speed)
Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas
In this video, we sit down to discuss the rapidly evolving world of cybersecurity, AI, and how an Agentic SOC is becoming the standard for modern defense. We cover the massive opportunity in the industry with over 4 million open cyber jobs, why mastering Splunk is a critical career move in 2026, and how you can get started for free. We also unpack emerging threats like Mythos class attackers, vulnerabilities in LLMs and MCP servers, and how the integration of Cisco Data Fabric...
#581: AES Explained: How Encryption Protects Your Data
Big thanks to TryHackMe for sponsoring this video. Learn Cyber Security with Practical Labs on TryHackMe:https://tryhackme.com/DavidBombalTech
Use my code DAVIDTECH25 to get 25% OFF on Annual Subscription!
Dr. Mike Pound joins David Bombal to explain symmetric encryption, AES, secret keys, VPN encryption, TLS, block ciphers, stream ciphers and why encryption is one of the most important building blocks in modern cybersecurity.
In this video, Mike explains what encryption actually does: it takes readable plaintext and turns it into unreadable ciphertext so that only someone...
#580: Cisco's first Quantum Switch: What it means for you
Big thanks to ‪@Cisco‬ for sponsoring this video and sponsoring my trip to Cisco Live Vegas 2026.
In this deep dive into the future of networking, we explore the reality of quantum networking and Cisco's groundbreaking announcement of the world's first Universal Quantum Switch. Quantum computing is no longer just a buzzword; it's moving into the mainstream, bringing massive implications for network engineers and cybersecurity professionals in 2026 and beyond.
We discuss why a quantum switch is essential for scaling distributed quantum computers and how it translates different quantum modalities, acting as a...
#579: New CCNA Exam: Stop Memorizing and Start Labbing
Big thank you to Cisco for sponsoring my trip to Cisco Live Vegas
// Ryan Rose’s SOCIAL //
LinkedIn: / ryanrose3
Cisco Blogs: https://blogs.cisco.com/author/ryanrose
X: https://x.com/RyanRose
// Cisco Blogs //
Cisco Announcement: https://blogs.cisco.com/learning/ai-u...
CCNA 2.0 Blueprint: https://learningnetwork.cisco.com/s/c...
// Websites and YouTube Channel links //
Cisco U: https://u.cisco.com/
Cisco Learning Network: https://learningnetwork.cisco.com/s/
...
