x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

The Security Repo

Mackenzie Jackson & Dwayne McDaniel

The security repo is a podcast that focuses on real world security issues we are all facing today. We will take deep dives into news events and have exclusive interviews with security leaders on the ground.

technology

All Episodes

00:42:50

AI, Automation, & Humans' Role In Security: A View...

The Security Repo ·

2026/04/01

In this episode of the Security Repo Podcast, Jeff Man and Dwayne McDaniel unpack the shift in cybersecurity from talking about AI as a future concept to confronting agentic AI as a present-day security reality. They explore what the industry is getting right and wrong, from automation’s potential to help close the skills gap to the ongoing danger of treating tools, compliance, and governance as substitutes for critical thinking. The conversation also turns personal, with reflections on security

en

00:19:43

Avoiding Operational Chaos While Defending A Credit...

The Security Repo ·

2026/03/25

In this episode of the Security Repo Podcast, IT Audit & Data Privacy Leader John Wallace joins Dwayne to talk about the importance of data classification, the cornerstone of data protection. They cover high levels of data tagging, using AI to help with the workload, and how, at the end of the day, governance really comes down to humans agreeing on definitions. John also talks a little about credit unions vs banks and shares his published poetry: "They Say Some Clouds Are Silver Lined,

en

00:20:01

OIDC And IAP In Production: Scaling Startup Security...

The Security Repo ·

2026/03/18

In this episode of the Security Repo Podcast, Dwayne McDaniel talks with Talia Smiley, CTO of Silversight, about why her startup chose workload identity, OIDC, and IAP instead of long-lived secrets and service account keys. Talia explains how secure-by-default design, just-in-time access, and thoughtful infrastructure choices can actually be faster and more sustainable than legacy approaches, especially for growing teams. They also touch on multi-cloud considerations, deepfake defense in the

en

00:22:23

The PCI Ultimatum -Thrift Store OSINT, and "Lost...

The Security Repo ·

2026/03/17

In this episode of the Security Repo Podcast, we uncover the wild and hilarious true story behind a forgotten piece of cybersecurity media history: “The PCI Ultimatum” and the world-building inside of it that gave us “Dwayne’s World of Security,” a DIY Cisco-era cult film rediscovered via a thrift store handbag. Guests Mike Radigan and Dwayne Edwards share how they disrupted corporate norms to create a storytelling-first, off-the-books PCI compliance movie that somehow still resonates today. Along

en

00:19:47

From Annual Checkbox To Continuous SDLC Testing:...

The Security Repo ·

2026/03/13

In this episode of the Security Repo Podcast, Dwayne catches up with returning guest Andy Dennis (Head of Field Engineering at XBOW) to unpack what it really means to run “AI-backed” penetration testing at scale, without turning red teaming into a gimmick. They dig into how XBOW approaches discovery, guardrails, and reporting beyond “scan results,” and why operationalizing LLM-driven testing in real enterprises still demands SaaS-grade controls and infrastructure. The conversation closes on where

en

00:37:45

Why Compliance Isn’t Governance & How GovOps Rebuilds...

The Security Repo ·

2026/03/11

Why Compliance Isn’t Governance & How GovOps Rebuilds Trust Boundaries – Mike SchwartzIn this episode of the Security Repo Podcast, Dwayne sits down with Mike Schwartz (CEO & founder of Gluu) to unpack GovOps as “next-gen governance” built to be declarative, provable, and continuous. They dig into why compliance ≠ governance, how formal reasoning can help prove policy outcomes, and why modern governance needs to shift from periodic audits to real-time visibility. The conversation closes with

en

00:18:46

Building AI Solutions with a Security-First Mindset:...

The Security Repo ·

2026/02/11

In this episode of the Security Repo Podcast, we talk with Henry Odibi, a data engineer who pivoted from chemical engineering into data and AI. Henry shares how he hacked his way into tech, built his own automation tools, and now integrates AI responsibly—always with a “security first” mindset. He also emphasizes the importance of treating data as if it were your own and offers practical steps for anyone starting in AI or data engineering to stay secure.https://www.linkedin.com/in/henryodibi/Henry

en

00:20:45

Link Safety, Lightweight AI & Operationalizing Threat...

The Security Repo ·

2026/02/04

In this episode of the Security Repo Podcast, Nathan Koester shares his path from reverse engineering for the Air Force to building practical security tools for real-world teams. He discusses *Pwnbook.io*, a platform for integrating and visualizing security tools and data, and *Charlemagne Labs*, a local-first browser extension using small language models to detect risky links. The conversation also explores the philosophy behind lightweight AI models, cognitive defense, and staying curious in a

en

00:25:48

Tackling the Root of Incidents: Culture, Credentials,...

The Security Repo ·

2026/01/28

In this episode of the Security Repo Podcast, we dive into the world of incident response with Robert Saul, General Manager of AWS Security Incident Response Services. Robert shares insights from decades of experience, emphasizing that over 70% of security incidents stem from credential loss and that these challenges are rooted more in people and process than technology. From governance and playbooks to building a culture of incremental improvement, this conversation is packed with hard-won advice

en

00:17:53

Hacking WebMethods: Legacy Systems, Modern Threats –...

The Security Repo ·

2026/01/21

In this episode of the Security Repo Podcast, Ryan Bonner dives into his exploration of legacy enterprise integration platform WebMethods, revealing alarming vulnerabilities that allow unauthenticated access and even system shutdowns. He discusses how collaboration with Iceland’s top bug bounty hunter led him into this niche area of research, and shares practical advice for responsible disclosure and improving enterprise security hygiene. The conversation also touches on broader security culture,

en

00:24:22

Why Attackers Don’t Care About Your Contracts: A Deep...

The Security Repo ·

2026/01/14

In this episode of the Security Repo Podcast, we dive into the world of zero-day exploits, marketplace dynamics for vulnerability research, and the evolving role of cybersecurity in boardroom decision-making. Guest Evan Dornbush, founder of Desired Effect, shares his journey from government cyber-ops to founding multiple security startups, and explains why attackers don’t care about compliance paperwork. We also explore the real-world consequences of hardware vulnerabilities, how a plug won’t save

en

00:23:16

Untangling Identity: From Active Directory to Entra...

The Security Repo ·

2026/01/07

In this episode of the Security Repo Podcast, Eric Woodruff dives deep into the complexities of identity and access management (IAM), from the evolution of Active Directory to the future of non-human identities. He explains the real-world challenges of hybrid environments, governance, and over-engineered identity solutions. Eric also highlights practical ways for newcomers to start learning IAM and emphasizes the importance of soft skills in security

en

00:00:47

A Special Holiday Message from The Security Repo Podcast

The Security Repo ·

2025/12/19

Hi everyone, It's Dwayne, host of the security repo podcast. The show is taking a 2-week break over the holidays to give you a chance to catch up on our backlog of security conversations. Our next new episode premieres January 7th, 2026. It's one to look forward to. And I wanted to say a huge thank you to each and every one of our listeners and subscribers. Thanks to you, in 2025, we gained 1300 new subscribers and crossed the 3500 mark on YouTube. Thank you. And I honestly hope you all are

en

00:23:50

The CISO Whisperer Approach: Security Leadership,...

The Security Repo ·

2025/12/17

In this episode of the Security Repo Podcast, Douglas Brush, digital forensics expert and self-proclaimed "CISO Whisperer," shares his journey from early IT consulting to guiding CISOs and boards through complex security decisions. He breaks down his “Dad Bod Security” framework, connecting personal health metrics to meaningful cybersecurity goals, and highlights the need to move beyond vanity KPIs to focus on sustainable security programs. With candid insights on executive communication,

en

00:26:56

Scaling Open Source Observability and Managing Risk...

The Security Repo ·

2025/12/10

Scaling Open Source Observability and Managing Risk in the Software Supply Chain – Avi PressIn this episode of the Security Repo Podcast, Avi Press, founder and CEO of Scarf, dives deep into the evolving world of open source observability and its intersection with security. He unpacks how better visibility into software usage can inform both defensive strategies and smarter commercialization, while raising concerns over the concentrated risk in critical open source dependencies. Avi also shares his

en

00:19:54

Decoding Threat Actor Names: Marketing, Confusion &...

The Security Repo ·

2025/12/03

In this episode of the Security Repo Podcast, Jeffrey Bell, Principal Security Engineer and founder of CatchingPhish.com, discusses the confusion surrounding the naming conventions of threat actor groups across different security vendors. He explains how companies like CrowdStrike, Palo Alto, and Mandiant label the same adversaries with different names due to marketing and commercialization pressures, creating challenges for threat intelligence. Jeffrey also introduces MITRE ATT&CK Groups as a

en

00:21:09

Why Technical CISOs Matter and How AI Is Shaping...

The Security Repo ·

2025/11/26

In this episode of the Security Repo Podcast, David Cross, CISO at Atlassian and former Microsoft, Google, and Oracle security leader, shares his journey from Navy electronic warfare to global cybersecurity leadership. He offers hard-won insights on breaking into the industry, the evolving demands of the CISO role, and the practical impacts of AI on security operations. David also delivers candid advice for aspiring professionals and emphasizes the value of veterans in the cybersecurity

en

00:24:18

Identity Risks in Email: Your Inbox Might Be Lying...

The Security Repo ·

2025/11/19

In this episode of the Security Repo Podcast, Dwayne McDaniel sits down with Amy Devine, a systems architect who transitioned from embedded wireless systems to cybersecurity. Amy shares the eye-opening story behind her Blue Team Con talk on how misdirected emails exposed sensitive personal data and what that means for digital identity. The conversation dives deep into privacy, data brokers, and what we sacrifice when companies prioritize convenience over

en

00:22:54

From Military Intel to CISO: Navigating Security...

The Security Repo ·

2025/11/12

In this episode of the Security Repo Podcast, we sit down with Darren Desmond, a seasoned CISO with a background in UK military intelligence, to unpack his unconventional journey from fish and chips to threat intelligence. He shares how his military forensics experience shaped his InfoSec leadership and dives deep into the evolving role of the CISO in a world increasingly driven by AI. Darren also gives candid insights into AI governance, red flags in hiring, and why the basics of cybersecurity

en

00:26:04

Mapping the InfoSec Community: Building InfoSecMap &...

The Security Repo ·

2025/11/05

In this episode of the Security Repo Podcast, we sit down with Martín Villalba, founder of InfoSecMap, to explore how his platform is transforming the way InfoSec professionals discover global events, communities, and CFPs. We dive into the origin story of InfoSecMap, its recent growth surge, and its strategic partnerships with organizations like OWASP. Martín also shares practical advice on building strong security cultures and the importance of addressing root causes over chasing

en

135 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs