Matt Toussain on Why the Hackers Might Be the Good Guys

Season 6 · Episode 73 · April 15, 2025

What if the hackers are actually the heroes? In this mind-blowing episode, host David Mauro sits down with Matt Toussain, elite military cyber warrior, DEF CON speaker, and Founder of Open Security, to reveal how offensive security and real-world hacking tactics are helping businesses reduce risk...

What if the hackers are actually the heroes?

In this mind-blowing episode, host David Mauro sits down with Matt Toussain, elite military cyber warrior, DEF CON speaker, and Founder of Open Security, to reveal how offensive security and real-world hacking tactics are helping businesses reduce risk, fight cybercrime, and stay ten steps ahead of threats.

🎖️ From serving in the U.S. Air Force as a Senior Cyber Tactics Lead, to becoming a NetWars Champion and SANS instructor, Matt shares battle-tested insights and introduces Sirius — the groundbreaking open-source vulnerability scanner that’s changing the game.

🚨 Whether you run a business or just want to finally get serious about cybersecurity, this episode is PACKED with unfiltered truth, practical strategies, and behind-the-scenes access to the front lines of cyber warfare.

Takeaways

•  Matt Toussaint's journey from military to cybersecurity is inspiring.

•  DEF CON is a great platform for new voices in cybersecurity.

•  Penetration testing is crucial for identifying vulnerabilities.

•  Real-world examples highlight the importance of cybersecurity.

•  Sirius is an open-source vulnerability scanning tool.

•  Organizations often overlook basic security practices like password management.

•  The Colonial Pipeline incident serves as a cautionary tale.

•  Effective remediation is key after penetration testing.

•  Cybersecurity is a constantly evolving field.

•  Networking at events like DEF CON can lead to valuable connections. Password management is a significant challenge for organizations.

•  MSPs often lack the resources to provide adequate security.

•  Outsourcing IT can lead to increased tech debt and security risks.

•  Incident response requires a deep understanding of the threat landscape.

•  Nation-state actors pose unique challenges in cybersecurity.

•  Prosecution of cybercriminals is complicated by international law.

•  Geopolitical factors influence the response to cyber attacks.

•  Vulnerability management is critical for organizations of all sizes.

•  AI can enhance cybersecurity but also introduces new vulnerabilities.

Questions? Text our Studio direct. We read these and when helpful we give a special shout out for those to contact us.

True crime enters our homes and businesses daily. Learn from actual people who fight it daily and show you how in a thriller story. The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.

Special Author pricing (30% off)

The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.

Special Author pricing (30% off)

Growth without Interruption. Get peace of mind. Stay Competitive-Get NetGain. Contact NetGain today at 844-777-6278 or reach out at DMauro@NetGainIT.com or find more at www.NETGAINIT.com  
 

Support the show

Want to Watch?

Subscribe and stop reading about it after it happens: https://www.youtube.com/@CyberCrimeJunkies?sub_confirmation=1

Hosted by David Dean Mauro. Former trial lawyer, AI Security Advisor, FBI InfraGard member, VP of Strategic Growth at NetGain Technologies, and author of the Moving Target Trilogy (#1 Amazon Hot New Release, 2026).

MOVING TARGET TRILOGY. Nonfiction cybercrime thrillers. 🔥 4 years. 400+ interviews.
Book 1, Art of Online Camouflage: https://shop.ingramspark.com/b/084?params=d0YQ1pYtxeBRmSQLHLb9uT4aOliPrEuDSfOjQgpXQP9

Book 2, Obedient Machine: https://shop.ingramspark.com/b/084?params=S3F9zWWMC2y2eYiTmUGP91Owy9AUVG4zbLa6NwuX3cl

Book 3, The Ghost and The Machine. Presale open now, releases September 22, 2026: https://a.co/d/027LCoh6

Special edition hardcover, $17.76 for subscribers (30% off).

Want To Read True Crime Stories?
Chaos Brief newsletter: https://www.linkedin.com/newsletters/the-chaos-brief-694145911...

Chapters

  • 0:00 Introduction To Cybersecurity And Matt Toussaint
  • 7:48 Behind The Scenes At DEF CON
  • 10:35 Security Best Practices For Small Businesses
  • 14:02 How Offensive Security Helps Business
  • 20:38 The Colonial Pipeline Incident: Lessons Learned
  • 25:39 The Role Of Vulnerability Scanning In Cybersecurity
  • 29:35 Common Security Pitfalls: Password Management
  • 33:46 How Hackers Help Business Reduce Risk
  • 36:28 Incident Response And Real-World Breaches
  • 40:10 The Complexity Of Cybercrime Prosecution
  • 45:55 The Role Of AI In Cybersecurity
  • 49:36 AI Risks To Small Business
  • 54:36 Challenges Of Detection
  • 58:13 Entitlements Management Vs. Access Control