Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Intel Chat with Matt Bromiley and Chris Luft. Stories covered: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Subscribe wherever you listen.

This week, we sit down with Euler Neto, a cybersecurity analyst at WatchGuard, to discuss his research into the ErrTraffic Malware-as-a-Service loader found targeting Portuguese-speaking users in recent months.

By the end of this hands-on workshop, you will have deployed a working detection pipeline, ingested a cloud log source, and shipped a bespoke dashboard app, all using Claude Code integrated with Grid by LimaCharlie. Along the way, you will see how Grid compresses the traditional SIEM/EDR/SOAR stack into a single automated workspace. We go well beyond standard EDR and SIEM use cases. What to expect.

Joshua Strickland from SECNAP shows how his team built a full agentic MDR platform on top of LimaCharlie. SECNAP layers its own customer portal and SOC workflows directly on LimaCharlie's API, giving AI agents the same access to telemetry and response actions as a human analyst. Joshua will walk you through the customer portal, the SOC dashboard, and a live attack simulation on a sandboxed machine, including how AI agents handle tier one and tier two triage with Sonnet and Opus, and how a human analyst reviews and approves response actions before anything ships.

This week on the podcast, we discuss a research post that defines a new attack technique against AI tools called Cryptographic Context Injection. Before that, we cover an authentication bypass vulnerability in CircleCI's MCP server after discussing 3.6 million records stolen from the Azure tenants of several large organziations.