x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

CISO Insights: Voices in Cybersecurity

CISO Marketplace

CISO Insights: The Cybersecurity Leadership PodcastWhere Security Leaders Shape Tomorrow’s DefensesJoin us for CISO Insights, the definitive podcast for cybersecurity executives navigating today’s evolving threat landscape. Each episode delivers exclusive conversations with industry pioneers and practical frameworks from security leaders.CISO Insights provides actionable intelligence for executives building resilient security programs. We cover everything from board-level risk communication to

technology tech news

All Episodes

12:18

The 90% Attack: Inside the First AI-Orchestrated...

CISO Insights: Voices in Cybersecurity ·

2025/11/16

Anthropic revealed on November 13, 2025, that Chinese state-sponsored hackers successfully weaponized its Claude AI system to conduct the first documented AI-orchestrated cyber espionage campaign. The sophisticated operation, which targeted approximately 30 global organizations including technology companies, financial institutions, and government agencies, was executed with alarming efficiency, as the AI systems performed 80–90% of the campaign autonomously. This unprecedented automation signals a

en

17:09

Beyond the First Lie: Building Communication...

CISO Insights: Voices in Cybersecurity ·

2025/11/15

Explore the systematic RESIST 3 framework, which guides government communicators through six sequential steps designed to build resilience against the impacts of manipulated, false, and misleading information (MDM). This episode details the crucial "Recognise" stage, where communicators use the FIRST indicators (Fabrication, Identity, Rhetoric, Symbolism, Technology) to identify the components of compromised messages and coordinated behavior. We show how utilizing Impact Analysis and structured

en

13:33

From Perimeter to Pipeline: Securing the OWASP Top 10...

CISO Insights: Voices in Cybersecurity ·

2025/11/13

The 2025 OWASP Top 10 reveals a fundamental shift in application security, showing how threats have transformed from simple code flaws like buffer overflows to exploiting the systemic complexity of cloud-native and microservices architectures. This newest list confirms the continued dominance of Broken Access Control (A01) and spotlights the critical surge of Security Misconfiguration (A02) to the number two spot, reflecting that infrastructure has become the primary attack surface. We examine why

en

40:03

From BOLA to Bots: Building a Layered API Defense...

CISO Insights: Voices in Cybersecurity ·

2025/11/12

APIs are the "nervous system" of modern applications, making them the number one attack vector, with flaws like Broken Object Level Authorization (BOLA), Broken Object Property Level Authorization (BOPLA), and Broken Function Level Authorization (BFLA) accounting for a high percentage of breaches. This episode delves into the multi-layered "defense-in-depth" strategies required to mitigate these threats, focusing on input validation, rate limiting, and centralized enforcement via API Gateways We

en

36:08

Orchestrating Security: The DevSecOps Blueprint for 2025

CISO Insights: Voices in Cybersecurity ·

2025/11/11

Driven by a market anticipated to exceed USD 40.6 billion by 2030, DevSecOps Engineers are crucial experts who bridge the gaps between software development, security protocols, and operational efficiency. Successful implementation relies on a socio-technical work system that emphasizes cultural transformation, shared security responsibility, and procedural excellence by embedding security ("shifting left") into the Software Development Lifecycle. This episode delves into the key requirements for

en

15:36

The Algorithmic Adversary: Tracking the Shift to...

CISO Insights: Voices in Cybersecurity ·

2025/11/11

The Google Threat Intelligence Group (GTIG) has identified a significant shift where adversaries are now deploying novel AI-enabled malware in active operations, moving beyond simple productivity gains observed in 2024. This new operational phase includes "Just-in-Time" AI malware, such as PROMPTFLUX and PROMPTSTEAL, that utilize Large Language Models (LLMs) during execution to dynamically obfuscate code, regenerate themselves, or generate malicious commands, representing a significant step toward

en

43:17

The Scorched Earth CISO: Extinguishing Burnout with...

CISO Insights: Voices in Cybersecurity ·

2025/11/08

Cybersecurity leaders, including CISOs, face overwhelming job demands and chronic stress, with up to 80% classifying themselves as “highly stressed” due to resource limitations and the ceaseless evolution of threats. This pressure is compounded by alert fatigue—where the relentless influx of noisy, often false-positive alerts causes mental and operational exhaustion—and a lack of formal support, leading to high attrition and cognitive symptoms like difficulty concentrating. We explore how Agentic AI

en

31:33

Hybrid Resilience: Mastering Digital Tech and...

CISO Insights: Voices in Cybersecurity ·

2025/11/07

The COVID-19 pandemic introduced unprecedented volatility and uncertainty (VUCA) to global supply chains, forcing retailers to rapidly pivot their operational strategies to manage severe disruption. This episode explores interview findings revealing how supply chain professionals effectively utilized a blend of proactive strategies, such as digital technology adoption and supplier collaboration, with reactive contingency planning to maintain business continuity. We detail the critical importance of

en

33:42

Warding the Walls: Ransomware, Zero Trust, and the...

CISO Insights: Voices in Cybersecurity ·

2025/11/06

Municipalities face escalating cyber threats like devastating ransomware attacks, which have cost cities like Atlanta millions of dollars in recovery and disrupted essential public services. This vulnerability is amplified by the mass deployment of interconnected IoT devices and the convergence of traditional IT with sensitive Operational Technology (OT), blurring security boundaries and expanding the potential attack surface. We explore essential strategies, from embracing Zero Trust Architecture

en

13:18

Compliance Convergence: Harmonizing DORA, NIS2, and...

CISO Insights: Voices in Cybersecurity ·

2025/11/05

The simultaneous enforcement of the EU’s DORA (January 2025 deadline) and NIS2, alongside the U.S. SEC’s four-day disclosure rule (effective late 2023), has created an increasingly fragmented and high-stakes compliance landscape for global enterprises. This episode details how organizations can move beyond segregated checklists to build a unified compliance strategy by centralizing governance, implementing continuous third-party risk monitoring, and using integrated response plans to meet varying

en

15:45

Guardrails and Attack Vectors: Securing the...

CISO Insights: Voices in Cybersecurity ·

2025/11/04

This episode dissects critical risks specific to Large Language Models (LLMs), focusing on vulnerabilities such as Prompt Injection and the potential for Sensitive Information Disclosure. It explores how CISOs must establish internal AI security standards and adopt a programmatic, offensive security approach using established governance frameworks like the NIST AI RMF and MITRE ATLAS. We discuss the essential role of robust governance, including mechanisms for establishing content provenance and

en

45:32

Trick or Threat: Your Personal Cybersecurity Survival...

CISO Insights: Voices in Cybersecurity ·

2025/11/01

Artificial intelligence has fundamentally reshaped the threat landscape, enabling attackers to deploy flawless, context-specific phishing emails and clone the voices of executives, leading to massive losses like the Hong Kong multinational firm that lost $25 million during a deepfake video call scam. With ransomware back on the rise and 77% of CISOs identifying AI-generated phishing as a growing concern, cybercriminals are trading generic lures for high-quality, persistence-based payloads that

en

40:05

The Digital Hustle: RaaS, EDR Killers, and the...

CISO Insights: Voices in Cybersecurity ·

2025/10/30

RaaS (Ransomware-as-a-Service) has professionalized cybercrime, turning digital extortion into a resilient business where affiliates leverage sophisticated toolkits for high-stakes attacks on critical sectors. This episode details how threat actors circumvent defenses by compromising high-value systems like VMware ESXi hypervisors and Managed File Transfer solutions, and by utilizing EDR Killers to execute malicious actions undetected. We explore the necessary response, which involves employing

en

25:24

Speaking 'Boardish': A CISO's Guide to Risk,...

CISO Insights: Voices in Cybersecurity ·

2025/10/29

The modern Chief Information Security Officer (CISO) role is evolving from a purely technical function to an enterprise risk leadership position, yet many leaders struggle to secure necessary resources due to a fundamental communication gap with the board. This podcast explores how security executives can master "Boardish"—the language of finance, strategy, and governance—by translating critical threats like ransomware and AI exposure into clear, actionable, financial, and business consequences. We

en

36:35

When Trust Breaks: Auditing the $300M Third-Party...

CISO Insights: Voices in Cybersecurity ·

2025/10/28

Third-party relationships expose organizations to major threats across operational, strategic, and legal risk areas, including the significant danger of reputational damage and the potential for loss of intellectual property. Recent managed service provider (MSP) cyberattacks have resulted in catastrophic financial devastation, demonstrating that an organization cannot escape blame when a vendor fails. We analyze essential contractual controls—such as clear termination conditions, robust

en

26:25

Resilience in an AI-Accelerated World: The CISO's...

CISO Insights: Voices in Cybersecurity ·

2025/10/27

This episode tackles the CISO's strategic mandate: moving beyond subjective assessments, as "Security without true adversarial testing is just an illusion," to achieve objective measurement and resilience. We analyze key vulnerability trends, including the significant surge in hardware, API, and broken access control flaws, recognizing that every AI advance makes the security landscape exponentially more complex for attackers still targeting foundational layers. Learn how continuous,

en

41:45

The Hybrid SOC Revolution: AI, ATT&CK, and Fortifying...

CISO Insights: Voices in Cybersecurity ·

2025/10/26

Cyber threats are evolving at an unprecedented pace, with sophisticated ransomware and supply chain breaches on the rise, contributing to cybercrime costs estimated to exceed $10.5 trillion per year by 2025. We delve into the optimal hybrid SOC model, discussing how organizations leverage AI-driven automation to reduce Mean Time to Detect (MTTD) by up to 40% and align defenses using the MITRE ATT&CK framework. Learn why critical gaps in lateral movement and impact detection, coupled with

en

39:27

The Trust Trap: Why Employees Turn Malicious and How...

CISO Insights: Voices in Cybersecurity ·

2025/10/25

Insider threats are not just technical breaches but fundamentally human failures, where employees exploit their legitimate access due to a complex mix of financial stress, revenge, and unmet expectations. This episode explores how personality traits like narcissism and organizational shortcomings create a "Trust Trap," allowing behavioral precursors to escalate unnoticed into full-blown attacks. We examine the shift toward proactive defense, where integrating User and Entity Behavior Analytics

en

37:36

Smart Cities, Critical Failures: Unpacking the IoT...

CISO Insights: Voices in Cybersecurity ·

2025/10/24

Modern municipalities rely heavily on interconnected IoT devices and sensors to optimize services, creating urban environments that utilize cloud computing and AI for enhanced quality of life. However, this expanded complexity significantly increases the attack surface, making cities attractive targets for cybercriminals executing ransomware and destructive attacks. This episode investigates why a lack of security planning in IoT development leaves critical infrastructure—from smart water management

en

31:20

The Digital Crossroads: Identity, Encryption, and the...

CISO Insights: Voices in Cybersecurity ·

2025/10/20

We analyze how global Digital ID systems, mandatory age verification laws (like the UK Online Safety Act and Texas SB2420), and anti-encryption pushes (such as EU Chat Control) are converging to form an unprecedented architecture for monitoring human behavior. This convergence is systematically destroying online anonymity by necessitating the collection of sensitive biometric data by private firms like AU10TIX, risking millions of wrongful investigations due to catastrophic false positive rates in

en

325 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs