Dark Reading Confidential

Pen Test Arrest: 5 Years Later

Dark Reading Confidential

Show Notes

<p>Episode 3: On September 11, 2019, two cybersecurity professionals were arrested in Dallas County, Iowa and forced to spend the night in jail -- just for doing their jobs. Gary De Mercurio and Justin Wynn ultimately found themselves used as pawns in a very public and ugly power dispute between the local county Sheriff's office and the state, forced to justify the physical penetration test that the state of Iowa had hired them to conduct. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire's CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole. </p>

More from Dark Reading Confidential

Sep 16, 2026

Cybersecurity industry veteran Hal Pomeranz gives us all a pep talk on career anxiety, self-doubt, and shares how to build meaningful connections during historical tech industry downturns.

Jul 28, 2026

Expert Rich Mogull explains how the OpenAI agent's attack on Hugging Face exposes fresh risks for every cyber team.

Jun 24, 2026

Kickbacks, no-show jobs, "dirty" VCs, and shelf ware — industry expert Robert "RSnake" Hansen explains why he thinks its time for a CISO code of ethics to ensure cybersecurity bosses aren't engaged in self-dealing that could risk enterprise, and even national, security.

May 5, 2026

Two decades ago Dark Reading posted its first blockbuster — a story from a pen tester who sprinkled rigged thumb drives around a credit union parking lot and let curious employees do the rest. This episode looks back at the history-making column with its author Steve Stasiukonis and Dark Reading's editor-in-chief Kelly Jackson Higgins.

Apr 28, 2026

Chris Inglis was the head civilian in charge at the NSA when the Snowden leak exploded. He gets candid about mistakes the organization made, and what CISOs need to know about spotting potential threats, media disclosures, and 'enculturation.'

See all episodes →