In this episode of Hack Dissection, Mike Lisi sits down with Spencer Alessi, senior penetration tester at SecureIT360 and host of the Cyber Threat Perspective podcast, to talk through the world of internal penetration testing, assume-breach assessments, and what it really takes to break into — and secure — modern networks.

Spencer shares how his background as a systems administrator shaped the way he approaches offensive security, why help desk and IT experience can be so valuable for aspiring pen testers, and how real-world environments often expose assumptions that organizations do not realize they are making. From passwords sitting in file shares to misconfigured Active Directory permissions, Spencer explains why testing an environment is often the only way to understand what can actually go wrong.

The conversation also explores practical training paths, certifications like PNPT and CRTO, the importance of knowing your tools, and how intuition develops through hands-on experience. Mike and Spencer dig into the role of AI in penetration testing, the value of open-source security tools, lessons from real engagements, and Spencer’s DEF CON Red Team Village lab built around kiosk breakouts and Active Directory attack paths.

Along the way, they also discuss burnout, responsible research, the importance of community, and why offensive security is about much more than running tools — it is about curiosity, troubleshooting, and understanding how systems fail in the real world.

In this episode of Hack Dissection, Mike Lisi sits down with Donna Grindle, CEO and founder of Kardon and host of the long-running Help Me With HIPAA podcast, to unpack the complex world of healthcare cybersecurity, HIPAA, privacy, and patient data protection.

Donna breaks down what HIPAA actually covers, why compliance alone is not enough, and how the real financial and operational risks often come from ransomware, business disruption, failed mergers, insurance requirements, and poor preparation — not just regulatory fines.

The conversation also explores why healthcare data should never be thought of as just “records,” but as real people whose care, privacy, and safety can be impacted when systems fail. From real-world privacy violations to ransomware events affecting patient treatment, Donna shares why security in healthcare is deeply personal.

Mike and Donna also discuss the future of healthcare technology, including AI, bias in large language models, telehealth, electronic medical records, volunteer work through the Health Sector Coordinating Council, and why organizations need practical, reasonable, and appropriate security programs before the next wave of HIPAA changes arrives.

In this episode of Hack Dissection, Mike Lisi sits down with Wayne Koback from NRECA to talk about the cybersecurity challenges facing electric cooperatives and rural utilities across the country.

Wayne shares what makes the co-op utility space so unique, from massive organizations with nuclear assets to small-town teams where one person may be handling IT, utility operations, and town management all at once. Mike and Wayne dig into the realities of protecting critical infrastructure with limited resources, the importance of practical cyber goals, and why collaboration across co-ops matters when facing threats to the grid.

They also explore how data center growth is impacting rural utilities, why vendor security needs more accountability, and how SCADA knowledge can open doors for cybersecurity professionals in industries far beyond electric power.

For anyone interested in cybersecurity, critical infrastructure, rural utilities, or building a stable and meaningful career in tech, this episode offers a grounded look at where cyber work has real-world consequences.