Tech Lounge Podcast Archive

29 Jul

DDos Attacks

In this episode of Ehsan’s Tech Lounge, we discuss modern DDoS attacks.
Your home modem may be online right now and, without your knowledge, could already be part of a massive cyber army.
The new generation of DDoS attacks no longer targets only a single server or a specific IP address. In Carpet Bombing attacks, malicious traffic is distributed across hundreds of IP addresses within the same prefix. This allows the attack to remain below the detection thresholds of traditional defense systems while ultimately overwhelming the router and all the services behind it.
On the other hand, Flash Attacks, also known as Pulse Attacks, are launched in extremely fast and short bursts. In some cases, the attack may already be over before traditional DDoS protection systems can detect it and respond.
In this video, we explore:
- How does Carpet Bombing work?
- Why are short and sudden attacks so difficult to detect?
- How do infected home modems become part of a botnet?
- How can outbound DDoS attacks cripple an ISP from inside its own network?
- Why are traditional defenses and volume-based thresholds no longer sufficient?
- What roles do FlowSpec and RTBH play in mitigating these attacks?
- How has artificial intelligence made cyberattacks faster and more intelligent?
When we talk about attacks reaching 14 or 31 terabits per second, the issue is no longer limited to a single website becoming unavailable. Traffic at this scale can affect routers, network links, and a significant portion of an Internet service provider’s infrastructure.
What do you think ISPs should do to identify infected modems and stop DDoS attacks as close to the source as possible?

View Episode Details →

13 Jul

Agentic AI Fundamental

Artificial intelligence is no longer limited to answering our questions. The new generation of AI can plan, use different tools, make decisions, and take action on our behalf.
In Episode 19 of the TechLounge podcast, we are joined by Dr. Alireza Yamghani, an expert in artificial intelligence, software, and automation with more than 30 years of academic and practical experience in Iran and Canada.
In this conversation, we explore Agentic AI from the ground up and examine how AI has evolved from Ask to Act—moving beyond simply asking questions and receiving answers to planning and completing tasks.
In this episode, you will learn about:
• The differences between chatbots, LLMs, and Agentic AI
• The evolution of AI from Ask to Act
• Why Agentic AI has become one of the most important technology trends in recent years
• The Goal, Plan, Act, Observe, and Evaluate cycle
• The core components of an AI agent, including the LLM, tools, memory, planner, and executor
• What a skill is and how it is used in AI agents
• What MCP is and why it is often compared to the USB port of the AI world
• Different types of AI agents, from task agents to coding and planning agents
• Applications of Agentic AI in programming, debugging, log analysis, and ticket management
• The risks of hallucination, prompt injection, and excessive access privileges
• The importance of guardrails, sandbox environments, and human oversight
• Whether AI will replace engineers and programmers
• The skills we need to learn for the future of artificial intelligence
This episode serves as an introduction to a series of hands-on Agentic AI workshops in which we will build skills, set up an MCP server, and implement practical AI agents.
If you are interested in artificial intelligence, programming, networking, automation, and the future of technology, subscribe to the TechLounge channel and turn on notifications so you do not miss the upcoming episodes in this series.
What do you think?
Will Agentic AI eliminate jobs, or will it replace people who do not use AI?

View Episode Details →

07 Jul

Extended Detection and Response - XDR

In this episode, we talk about XDR: what XDR actually is, why it was created, and what problems it solves for security teams.
We will also explore the XDR architecture, how it works, and some of the leading vendors in this area.
If you have never worked with XDR before, or if you want to learn this technology from scratch, this video is for you.

View Episode Details →

30 Jun

SASE Explained: Secure Access for the Cloud Era

In this episode we talk about SASE — Secure Access Service Edge — an architecture that plays an important role in the future of network security, remote user access, SaaS, Cloud, and Zero Trust.
As the IT world changes, users no longer connect to applications only from inside the company, and applications are no longer hosted only inside the data center. Today, users access services such as Microsoft 365, Google Workspace, Salesforce, Public Cloud, and internal business applications from home, branch offices, coffee shops, or anywhere else. This shift has made traditional models, such as VPN and backhauling all traffic to the data center, not always the best option.
In this video, we explain SASE in simple language and review how this architecture, by combining cloud-based security, Zero Trust, Secure Internet Access, Secure SaaS Access, and Secure Private Access, can make user access from anywhere more secure, smarter, and easier to control.
We also talk about concepts such as SWG, CASB, FWaaS, ZTNA, DLP, and Shadow IT, and explain the role each one plays in the SASE architecture.
If you work in Network, Cybersecurity, Cloud Security, or Infrastructure, this episode can give you a clear understanding of the SASE architecture and why it matters in modern security.

View Episode Details →

01 Jan

From Mainframe to Edge | Exploring Cisco Unified Edge Architecture and the Future of Intelligent Networks

In Episode 16 of the Tech Lounge podcast, we begin an architectural and historical journey together.
We start from the era of mainframes, move through cloud and fog computing, and then enter the world of edge computing—where processing, security, and decision-making are pushed to the edge of the network.
In this episode, we take an in-depth look at the Cisco Unified Edge architecture; a concept Cisco introduced this year as a unified vision for the edge. Its goal is to simplify, integrate, and intelligently orchestrate the network from the data center to the branch and the edge.
In this episode, you will learn:
- Why traditional architectures no longer meet today’s requirements
- What problem edge computing actually solves
- The real-world differences between cloud, fog, and edge
- How Cisco Unified Edge integrates networking, security, and compute at the edge
- How this architecture will impact the future of enterprise and industrial networks

View Episode Details →

21 Dec

What Is an Isolated Recovery Environment (IRE)? Secure Recovery After Ransomware

In Episode 15 of Ehsan’s Tech Lounge, we address one of today’s most critical cybersecurity scenarios:
After a ransomware attack, how can recovery be performed securely?
Having backups alone is not sufficient. Recovering directly into a production environment—or into an environment that was previously compromised—can lead to re-infection and a repeat of the attack. This is where the concept of an Isolated Recovery Environment (IRE) becomes essential.
In this episode, we examine:
Why traditional Backup and Disaster Recovery approaches fail after a ransomware attack
What an Isolated Recovery Environment (IRE) is, and how it differs from Incident Response and Disaster Recovery
Why isolation is the core pillar of cyber recovery after ransomware
How the VMware IRE approach helps address these challenges
This episode is intended for:
Security Engineers and SOC teams
Infrastructure and Virtualization Engineers

View Episode Details →