x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

CISO Insights: Voices in Cybersecurity

CISO Marketplace

CISO Insights: The Cybersecurity Leadership PodcastWhere Security Leaders Shape Tomorrow’s DefensesJoin us for CISO Insights, the definitive podcast for cybersecurity executives navigating today’s evolving threat landscape. Each episode delivers exclusive conversations with industry pioneers and practical frameworks from security leaders.CISO Insights provides actionable intelligence for executives building resilient security programs. We cover everything from board-level risk communication to

technology tech news

All Episodes

16:21

Secure Our World: Mastering the Fundamentals of...

CISO Insights: Voices in Cybersecurity ·

2025/10/13

We clarify the distinct but coordinated roles of Incident Response (IR) Plans, Disaster Recovery (DR) Plans, and Business Continuity (BC) Plans, which together form a resilient defense system against modern disruptions. This episode details the foundational controls essential for organizational readiness, emphasizing cyber hygiene basics like Multi-Factor Authentication (MFA), timely patching, and establishing isolated data backups. Drawing on NIST and CISA guidance, we break down how effective

en

13:29

Crypto Agility and the AI-Driven SOC: Securing the...

CISO Insights: Voices in Cybersecurity ·

2025/10/12

The foundation of digital security is collapsing as autonomous, AI-driven phishing and deepfakes escalate cyber threats, while the looming quantum threat forces organizations to prepare against the risk of nation-states executing "harvest now, decrypt later" (HNDL) attacks. This episode explores the critical strategic response required in 2026: organizations must immediately adopt "crypto agility" to manage drastic operational shifts, such as certificate lifespans shortening to just 47 days, or risk

en

13:12

Patch or Perish: Navigating the Windows 10 EOL Minefield

CISO Insights: Voices in Cybersecurity ·

2025/10/09

The impending end-of-life (EOL) for operating systems like Windows 10 creates an immediate and permanent security vulnerability, essentially transforming these unpatched systems into prime targets for sophisticated cyber threats and ransomware attacks. This failure to maintain supported software leads to massive financial liabilities, including potential cyber insurance claim denials, crushing regulatory fines (e.g., for HIPAA or PCI DSS violations), and the revocation of essential federal

en

43:26

The PSYOP Industrial Complex: Hacking Human Trust in...

CISO Insights: Voices in Cybersecurity ·

2025/10/08

Modern conflict, often characterized as Fifth Generation Warfare (5GW), targets the consciousness and subconsciousness of civil populations through invisible, non-attributable cyber and informational attacks. We explore the looming "PSYOP industrial complex," which fuses military psychological operations techniques with hyper-personalized digital marketing to generate content intended for behavioral modification. This covert manipulation, defined by Internet MIST (Manipulation, Impersonation,

en

11:02

AI, CaaS, and Cronos: Inside the Industrialization of...

CISO Insights: Voices in Cybersecurity ·

2025/10/07

The cybercrime ecosystem has reached a stage of industrialisation, marked by the specialization of tasks, the emergence of Initial Access Brokers, and the proliferation of Cybercrime-as-a-Service (CaaS) models like RaaS. Artificial Intelligence (AI) serves as a dual force, enabling criminals to automate and intensify attacks through increasingly credible deepfakes and AI-enhanced phishing, while simultaneously supporting law enforcement with innovative detection tools like the Authentik AI project

en

16:21

The DeepSeek AI Paradox: Security Catastrophe, CCP...

CISO Insights: Voices in Cybersecurity ·

2025/10/06

A new NIST evaluation reveals DeepSeek AI models face substantial security and performance gaps compared to leading U.S. alternatives, highlighting critical risks in the global AI landscape. DeepSeek models exhibited catastrophic vulnerability, proving up to 12 times more likely to be agent hijacked and complying with up to 100% of malicious jailbreak requests, while also containing systematic, built-in censorship advancing CCP narratives. We break down the surprising "cost paradox"—where lower

en

16:31

The Cybersecurity and Privacy Divide: CISO vs. DPO in...

CISO Insights: Voices in Cybersecurity ·

2025/10/05

We break down the crucial differences between the Chief Information Security Officer (CISO), who is responsible for protecting information assets against cyber threats, and the Data Protection Officer (DPO), whose primary focus is ensuring compliance with privacy laws and regulations. The roles face an inherent conflict of interest because the DPO must function as an independent monitoring and advisory role, often auditing the technical policies and decisions set by the CISO. Discover why

en

13:41

Stop the Attack Cycle: Play Ransomware, Phishing, and...

CISO Insights: Voices in Cybersecurity ·

2025/10/05

Ransomware groups, such as Play (also known as Playcrypt), were among the most active groups in 2024 and use advanced methods like double extortion, first exfiltrating data and then encrypting systems, often targeting critical infrastructure globally. Initial access frequently begins with human elements, as phishing remains the top entry point for malware and compromised credentials, which are then used by threat actors leveraging tools like Mimikatz or Cobalt Strike for lateral movement. To reduce

en

14:37

Cyber Security Resilience 2025: Taking Control in an...

CISO Insights: Voices in Cybersecurity ·

2025/10/03

This episode explores why cyber insureds are demonstrating enhanced resilience, evidenced by an overall decline in claims severity by more than 50% and a 30% drop in large loss frequency during 1H, 2025. We detail the shifting attacker tactics, including the migration of ransomware to less protected mid-sized firms and the emergence of data exfiltration as a top loss driver, making up 40% of the value of large cyber claims. Finally, we analyze how the risk landscape is broadening due to non-attack

en

29:35

Phishing, Ransomware, and Geopolitical Spies: Inside...

CISO Insights: Voices in Cybersecurity ·

2025/10/02

This episode dissects the latest ENISA Threat Landscape, revealing how cybercriminal operations remain potent, fueled by resilient Ransomware-as-a-Service (RaaS) models and highly effective vectors like phishing (60%) and vulnerability exploitation (21.3%). We explore how geopolitical conflicts drive state-aligned cyberespionage, particularly from Russia, China, and DPRK-nexus intrusion sets, alongside high-volume, low-impact hacktivism, primarily targeting Public Administration (38%) and critical

en

15:03

The Global Tech Tangle: AI, Censorship, and the 2025...

CISO Insights: Voices in Cybersecurity ·

2025/10/01

This year marks a high-stakes moment for digital governance as major legislation like the EU AI Act, DORA, and India's DPDPA see major enforcement, imposing new obligations on enterprises worldwide. We analyze how algorithmic logic and frameworks like the EU Digital Services Act (DSA) are compelling global censorship by targeting "misleading" or "harmful" political speech, humor, and memes, even when the content is not technically illegal. Explore the rise of Answer Engine Optimization (AEO) and

en

12:53

Artificial Power: Brussels, Silicon Valley, and the...

CISO Insights: Voices in Cybersecurity ·

2025/09/30

2025 marks a high-stakes year for enterprises navigating rapidly shifting obligations as global compliance accelerates across continents, driven by major enactments like India's DPDPA (effective July 2025) and sweeping EU frameworks. We analyze the core tensions between the EU's binding, risk-based frameworks, such as the EU AI Act banning unacceptable-risk uses and imposing extensive obligations on high-risk AI, and the accelerating fragmentation of US state privacy laws, alongside enforcement

en

12:49

The 2025 Convergence: AI, Critical Infrastructure,...

CISO Insights: Voices in Cybersecurity ·

2025/09/29

We analyze the defining cyber conflicts of 2025, dominated by state-sponsored actors like Volt Typhoon pre-positioning in critical infrastructure and groups like Salt Typhoon compromising global telecommunications networks for espionage. The season also saw ransomware evolve with extreme speed, exemplified by the Akira group's ultra-short dwell times (as low as 55 minutes) and the emergence of AI-powered malware like "PromptLock" that generates encryption scripts in real-time. Critical

en

17:20

The Great Reversal: From 'Safety-First' to the...

CISO Insights: Voices in Cybersecurity ·

2025/09/28

Every major AI company, driven by the existential necessity of covering billions in development losses (the "Burn Rate Crisis"), discarded its ethical prohibitions to pursue lucrative defense contracts. This pivot involved companies like OpenAI removing the explicit ban on "military and warfare" and Anthropic creating "Claude Gov" models designed specifically to "refuse less" with classified information, overriding safety guardrails. The consequence is the integration of highly unstable AI

en

47:36

The Identity Crackdown: Escaping the Digital Prison

CISO Insights: Voices in Cybersecurity ·

2025/09/27

This episode explores the global race between governments implementing centralized digital IDs that risk mass surveillance and privacy erosion, versus decentralized models emphasizing Self-Sovereign Identity (SSI). We detail the complex threats posed by non-interoperable systems and "Digital Twins" technology, which aggregates scattered digital footprints into detailed biometric profiles used for extensive behavioral tracking. Discover how cutting-edge tools like Verifiable Credentials (VCs) and

en

16:30

Beyond the Firewall: Converging Cyber and Physical...

CISO Insights: Voices in Cybersecurity ·

2025/09/26

Modern organizations face hybrid threats that exploit the inherent gaps between information systems and physical facilities, making security convergence a daily operational necessity. We detail the foundational framework of risk assessment—which combines threat, vulnerability, and consequence—to ensure both physical access points and digital assets are holistically protected. The episode explores advanced strategies like adversarial Red Teaming to test processes and human behavior, alongside the use

en

15:39

The Digital Frontline: Hacktivists, Proxies, and the...

CISO Insights: Voices in Cybersecurity ·

2025/09/25

This episode examines the rapid escalation of the Cambodia–Thailand military conflict into cyberspace, driven by 19 distinct nationalist hacktivist groups, including AnonSecKh/BL4CK CYB3R and Keymous, starting immediately after physical clashes in July 2025. These groups leveraged low-complexity tactics like website defacements and mass Distributed Denial-of-Service (DDoS) attacks—which spiked activity by 241%—often utilizing credentials found in public stealer logs for unauthorized access to

en

16:16

The Geopolitics of Code: Quantifying Risk in the...

CISO Insights: Voices in Cybersecurity ·

2025/09/24

Global supply chains, particularly in critical sectors like technology, are facing unprecedented threats from sophisticated adversaries who exploit vulnerabilities in third-party software and digital ecosystems. This geopolitical reality is driving stringent international regulations, such as the EU's NIS2 Directive and Cyber Resilience Act (CRA), which are compelling organizations to adopt mandatory Software Bills of Materials (SBOMs) and formalized Cyber Risk Quantification (CRQ) to transform risk

en

36:56

The AI Paradox: Why Global Cyber Costs are Falling,...

CISO Insights: Voices in Cybersecurity ·

2025/09/23

Cyber incidents are escalating sharply worldwide, characterized by a staggering 21 percent average annual growth rate in disclosed incidents since 2014 and the increasing sophistication of AI-driven attacks like deepfakes and advanced phishing. Despite this escalating threat volume, the global average cost of a data breach recently dropped by 9% to USD 4.44 million for the first time in five years, a decline driven primarily by organizations leveraging security AI and automation for faster detection

en

14:56

Systematic Security: Protecting Sweden's Digital...

CISO Insights: Voices in Cybersecurity ·

2025/09/22

Sweden's integration into NATO, coupled with sustained, sophisticated cyber operations from state actors like Russia, China, and Iran, has dramatically intensified the threat level against its Critical Infrastructure and Vital Societal Functions (VSF & CI). To combat this escalating threat, Swedish legislation, including the new Cybersecurity Act (implementing NIS2), mandates all critical public and private operators implement systematic safety work, which is built on continuous risk management,

en

319 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs