#328 Kevin Mandia - The Man Who Exposed China's Military Hackers
Aug 6, 2026 · 3h 17m
Summary
Shawn Ryan interviews cybersecurity expert Kevin Mandia, who details the emotional toll of cyberattacks and distinguishes between state-sponsored espionage and criminal ransomware. They discuss the nuances of paying ransoms, noting that extortionists often honor agreements to maintain their business model. Mandia also shares his background, from growing up in Pittsburgh to serving in the Air Force, and reviews a new privacy-focused iOS app.
Topics discussed
Introduction: Cyber threats, data brokers, and Aura security
The reality of cyber warfare and ransomware economics
Kevin Mandia's background in Air Force and DoD cyber ops
Early days of cyber forensics and identifying threat actors
Fingerprinting Russian and Chinese hacking groups
The APT1 report and exposing Chinese espionage
Geopolitics: China, Taiwan, and cognitive warfare
Views on Edward Snowden and NSA oversight
The Mandiant breach: A personal cyberattack story
Colonial Pipeline, Signal encryption, and quantum risks
Social media manipulation and foreign influence campaigns
Profiles of global hackers: Russia, North Korea, Iran
AI in cybersecurity: Automated attacks and defense
Conclusion and final thoughts on digital privacy
Listen ad-free on Castria