PODCAST

Security Insights

securityinsights

A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.

technology

All Episodes

28:56

CISO Interview: Mike Baker, DXC Technologies

Security Insights ·

2026/03/19

In this CISO interview, we discuss the role of a CISO in a global technology services business, the changing threat landscape -- from geopolitics to the growth of AI -- and the importance of skills, learning and cybersecurity education.Our guest is Mike Baker, vice president and global chief information officer at DXC Technologies. Above all, he says, the CISO's role is to build a resilient team. Interview by Stephen Pritchard.

29:55

Insights Interview: Haider Pasha, CSO EMEA and LATAM,...

Security Insights ·

2026/03/05

Over the last few years, we’ve seen the resurgence of geopolitics as a driver for cybersecurity, especially in Europe. But the return of war to the continent is just one factor changing CISOs’ views of risk.In this Insights Interview, we discuss developments in the threat landscape with Haider Pasha, CSO for EMEA and Latin America at Palo Alto Networks, following the company’s recent Ignite event in London. As he describes it, Europe faces its own pressures, as malicious actors exploit differences

29:16

Inside threat intelligence: Rafe Pilling, Sophos

Security Insights ·

2026/02/19

What, exactly, is threat intelligence? And how do CISOs use it?Security teams now have access to multiple sources of information on threats and threat actors. These come from industry, from law enforcement, and even their own networks and SOCs. But how effective is it against an ever-changing roster of adversaries? And how do CISOs become informed consumers of intelligence? We invited Rafe Pilling, director of threat intelligence at Sophos, to discuss how threat intelligence has developed, in the

31:25

Sovereignty, resilience and data: Keepit CISO Kim Larsen

Security Insights ·

2026/02/05

What is digital sovereignty, how does it relate to data sovereignty, and to resilience?In this CISO Interview, we speak to Kim Larsen, CISO at Keepit, a service provider specialising in protecting data for SaaS applications. With a career spanning policing, government and the private sector, he has witnessed the growing influence of geopolitics on cybersecurity. And he suggests both businesses and public sector bodies need to think about not just where their data are, but how to guarantee access to

29:55

Cybersecurity skills: a people shortage, or a skills...

Security Insights ·

2026/01/22

The cybersecurity skills gap might be narrowing. According to the latest Cybersecurity Workforce Study, from ISC2, CISOs are less concerned about the number of cyber professionals in their organisations. Instead, the focus is on whether they have the right mix of skills, to take on an increasingly complex threat landscape.We go through the results of the research, and what it might mean for cybersecurity professionals at all points in their careers, with ISC2's COO, Casey Marks. Interview by

29:50

Politics, geography, AI and cyber threats: 2026 and...

Security Insights ·

2026/01/08

In the first episode of Series 7 of Security Insights,we welcome back Charl van der Walt, head of security research at Orange Cyber Defense.We discuss the key findings of his team's 2026 Security Navigator report, how AI is tipping the balance of power in favour of malicious actors, and why resilience and agility should be on the CISO's agenda for this year.

29:55

Resilience in cyber: an agony aunt's view

Security Insights ·

2025/12/18

Cybersecurity is about building resilient organisations. But this is impossible without resilient people.Cyber defence is often a highly pressured working environment. And it can be lonely too. But if teams are unable to function at their best, attackers will exploit this. In the second of our two episodes on cyber resilience, we look at its human side. Our guests are Rebecca Taylor, threat intelligence knowledge manager and human intelligence researcher at Sophos, and Amelia Hewitt director of

29:55

Calm under fire: the importance of cyber resilience

Security Insights ·

2025/11/26

Cybersecurity is changing its focus.Increasingly, it is less about defence and more about resilience. Organisations have to be able to withstand and recover from an attack. It's no longer about preventing breaches: the sheer volume of cyberattacks means that is no longer possible. Instead, security teams and boards should assume an attack will happen, prepare keep the organisation operating during an incident, and aim to recover as quickly as possible. Our guest is James Blake, VP of global cyber

29:55

Insights Interview: Chris Dimitriadis, ISACA

Security Insights ·

2025/11/13

This year has not been easy for cybersecurity teams.Businesses continue to face cybercrime and state-sponsored attacks, especially ransomware. AI is proving to be a double-edged sword, helping both defenders and malicious actors. And there are the ongoing issues of skills, recruitment and retention. How, then, do cybersecurity professionals navigate their way through all these challanges? And what should they prioritise for 2026? For this episode, we're pleased to welcome back Chris Dimitriadis,

29:55

Ukraine, cyberwar and CNI

Security Insights ·

2025/10/30

Critical infrastructure is on the front line of the war in Ukraine.And as the conflict approaches its fourth year, there is little sign of that changing. Strikes against infrastructure, though, are only part of the picture. Since Russia’s full-scale invasion, and even before, Ukraine’s defenders have waged an equally intense, but less visible, cyber war. What lessons can we draw from Ukraine’s experience? And how can states and businesses protect their critical national infrastructure during war

29:55

Bug bounties: risks and rewards

Security Insights ·

2025/10/16

A growing number of organisations now offer "bug bounties", paying hackers or security researchers rewards for finding vulnerabilities.But how do these programmes operate, and how do CISOs ensure that they are run ethically? What are the risks of inviting researchers to hack your organisation? How do bug bounties stack up against other methods of security testing? And what are the benefits to security researchers themselves, as the programmes cannot work without hackers? We cover the pros and cons

29:55

DDoS, geopolitics and AI

Security Insights ·

2025/10/02

DDoS – or distributed denial of service attacks – remain a serious source of disruption across the internet.DDoS attacks continue to grow in their frequency and volume. And increasingly, they’re aligned to geopolitical events. A driver is sites offering “DDoS for hire”. The groups behind these sites even offer DDoS as a service attacks for free. But cybercrime groups are making use of AI too. This is leading to what researchers at NETSCOUT describe as a “digital battlefield", with DDoS attacks

29:55

Cyber skills: a crisis of our own making?

Security Insights ·

2025/09/18

Is cybersecurity's skills crisis one of its own making?And why have initiatives to close the skills gap made relatively little impact? In this episode, our guests Thom Langford, of Rapid7, and Lee Munson, of the ISF, discuss career changes, hiring practices, certifications and what needs to change with editor Stephen Pritchard

29:55

Defending education: countering the cyber threat

Security Insights ·

2025/09/04

Education is increasingly in the crosshairs for malicous actors. Along with other public sector bodies, schools, colleges and universities are being targeted for the information they hold, as well as for extortion and ransom.What, then, can leaders in the sector do to bolster their defences, especially when budgets are under pressure? Our guest is Joe Rooke, director of risk insights at Recorded Future’s Insikt Group.

31:07

Vulnerabilities, CVEs and the attack surface

Security Insights ·

2025/08/21

In this episode, we discuss whether vulnerability scores are still a viable tool when it comes to measuring cyber threats.Both CVEs and CVSS are core security tools. But, our guest this week argues, they are often misused. In a worst case scenario, they add little to effective defence, and can divert security teams from the real threats. Tod Beardsley is VP of security research at runZero, is on the board of the CVE Project, and is a former official at CISA.

29:55

Human risk factors: cybersecurity's weak spot

Security Insights ·

2025/08/07

More than three quarters of security breaches result from human behaviour.But as an industry, we focus far more on technical security measures, than on the human element. Human risk management sets out to change this. Its proponents aruge that by measuring what people do on networks and systems, we create a much clearer picture of risk. In fact, they say, the risks posed by people should be on the business' risk register. And it's only with that picture that we can implement the controls, and

29:55

AI, Testing and Red Teaming, with Peter Garraghan

Security Insights ·

2025/07/24

Artificial intelligence is often described as a "black box". We can see what we put in, and what comes out. But not how the model comes to its results.And, unlike conventional software, large language models are non-deterministic. The same inputs can produce different results. This makes it hard to secure AI systems, and to assure their users that they are secure. There is already growing evidence that malicious actors are using AI to find vulnerabilities, carry out reconnaissance, and fine-tune

29:20

Non-human identities: the rise of the machines

Security Insights ·

2025/07/03

Non-human identities now vastly outnumber human actors on the internet, perhaps by as many as 50 to one.APIs, online devices and service calls now dominate internet traffic, and access requests. And this is only set to increase, with the rise of AI and AI agents. Could we even see "robot wars" as AI agents take on AI defenders? A lack of visibility, and a lack of control over machine identities is not just putting systems and networks at risk. It is changing the whole concept of identity. Now, it's

29:55

Balancing risk and security: Rich Seiersen

Security Insights ·

2025/06/19

Managing cybersecurity is increasingly about managing risk.It's not possible to stop every attack or prevent every breach. So CISOs need to link the likelihood and impact of an incident to the damage it does to the organisation. But do security teams understand business risk? And do business leaders fully appreciate the threat from cyber attacks? Our guest is Richard Seiersen, chief risk technology officer at Qualys, as well as a researcher, author, entrepreneur and former CISO.

35:25

Cyber Security Foundations: security by the book

Security Insights ·

2025/06/05

Can a book hold the answers to our cybersecurity challenges?Perhaps not. But a new book from the Information Security Group at Royal Holloway, University of London, sets out to act as a primer on cybersecurity. The target audience is both those setting out on a career in the sector, or general readers who want to understand the core principles of cybersecurity. The book is called Cyber Security Foundations: Fundamentals, Technology and Society, published by Kogan Page. In this episode, we ask three

149 results

Security Insights

All Episodes

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs