Legitimate Cybersecurity Podcasts

Leonardo da Vinci Had Better Wi-Fi: The $100M Louvre Heist #cybersecurity

10 Nov 2025

Audio

Description

What happens when the most secure museum on Earth has a Wi-Fi password that’s literally “louvre”? 💎 $100 million in jewels disappear, and the world’s best art collection learns what Defense in Dumb really means. In this episode of Legitimate Cybersecurity, Frank Downs and Dr. Dustin Brewer unpack how the Louvre Museum was robbed in broad daylight — not just by thieves, but by bad passwords, unpatched servers, and leadership that never took cybersecurity seriously. 👉 Topics include: The Windows Server 2003 still guarding priceless art “Defense in Dumb” vs. real defense in depth Why pen tests without remediation are a waste of money How boredom and bureaucracy kill security programs The Rosetta Stone irony: stolen artifacts complaining about theft What NIST CSF, GRC, and governance diffusion all have to do with it Why multi-factor authentication isn’t two French guards and a shrug And yes — Leonardo da Vinci had better wireless security. 📩 Media & Interview Requests: [email protected] 🎧 Audio listeners: Subscribe on any platform → https://legitimatecybersecurity.podbean.com/ 👇 Comment below: What’s the dumbest password or security setup you’ve seen in the wild? We might feature your story in a future episode. Chapters 00:00 – Cold Open: “Imagine robbing the most secure museum on Earth…” 01:00 – Defense in Dumb: Louvre’s password was literally “louvre” 02:10 – British & French museums suddenly hate theft 03:45 – The Cyber Audit That Nobody Fixed 05:30 – Pen Testing vs. Actually Doing the Work 07:00 – Roof access, open windows, and Netflix-level stupidity 09:00 – Boring but critical: why remediation never happens 11:00 – Framework fails: ISO, NIST, GDPR, and no one enforces them 13:30 – Cyber careers, boredom, and the “borification” of information 16:00 – “It really HUMPS your packets”: why GRC isn’t sexy but matters 18:30 – Leadership without packets: Steve Jobs, Woz, and cyber blind spots 20:00 – How the Louvre failed every NIST CSF function 23:00 – MDR myths: detection ≠ protection 25:00 – APTs, insurance loopholes, and cyber blame games 29:00 – Governance diffusion: when everyone assumes someone else did it 31:00 – Legacy tech, no funding, and free open-source fixes 33:00 – PFSense, Security Onion & AI helping broke orgs 35:00 – Final Takeaway: “Leonardo da Vinci had better Wi-Fi security.” #LegitimateCybersecurity #LouvreHeist #CyberFail #DataBreach #cybersecurity #Hackers #PenTesting #InfoSec #NISTCSF #GRC #MDR #APT #CyberRisk #MuseumHeist #DefenseInDumb #WindowsServer2003

Transcription

This episode hasn't been transcribed yet

Help us prioritize this episode for transcription by upvoting it.

0 upvotes

🗳️ Sign in to Upvote

Popular episodes get transcribed faster

Other recent transcribed episodes

Transcribed and ready to explore now

13:00H | 21 DIC 2025 | Fin de Semana

01 Jan 1970

Fin de Semana

10:00H | 21 DIC 2025 | Fin de Semana

01 Jan 1970

Fin de Semana

12:00H | 20 DIC 2025 | Fin de Semana

01 Jan 1970

Fin de Semana

2ª PARTE | 06 ENE 2026 | EL PARTIDAZO DE COPE

01 Jan 1970

El Partidazo de COPE

3ª PARTE | 22 ENE 2026 | EL PARTIDAZO DE COPE

01 Jan 1970

El Partidazo de COPE

3ª PARTE | 04 MAR 2026 | EL PARTIDAZO DE COPE

01 Jan 1970

El Partidazo de COPE

Comments

There are no comments yet.

Please log in to write the first comment.

Report any issue

Legitimate Cybersecurity Podcasts

Leonardo da Vinci Had Better Wi-Fi: The $100M Louvre Heist #cybersecurity

This episode hasn't been transcribed yet

Other recent transcribed episodes

13:00H | 21 DIC 2025 | Fin de Semana

10:00H | 21 DIC 2025 | Fin de Semana

12:00H | 20 DIC 2025 | Fin de Semana

2ª PARTE | 06 ENE 2026 | EL PARTIDAZO DE COPE

3ª PARTE | 22 ENE 2026 | EL PARTIDAZO DE COPE

3ª PARTE | 04 MAR 2026 | EL PARTIDAZO DE COPE

Sign in to Audioscrape

Share this moment