Loading...

PODCAST

AI Security Podcast

The #1 source for AI Security insights for CISOs and cybersecurity leaders. Hosted by two former CISOs, the AI Security Podcast provides expert, no-fluff discussions on the security of AI systems and the use of AI in Cybersecurity. Whether you"re a CISO, security architect, engineer, or cyber leader, you"ll find practical strategies, emerging risk analysis, and real-world implementations without the marketing noise. These conversations are helping cybersecurity leaders make informed decisions and

technology

All Episodes

00:47:18

How to Build an MCP Server to Inject Security Context...

AI Security Podcast ·

2026/10/07

When non-technical employees can spin up fully functioning apps in days and AI agents are running parallel workflows that babysit their own pull requests, the traditional SDLC is dead. In this episode, Ashish sits down with Prahathess Rengasamy, Senior Security Engineer at SpaceX AI, to discuss how the staggering compression of development time requires an entirely new approach to security engineering. Prahathess explains why legacy 10-minute PR wait times are incompatible with multi-agent

en-us

00:55:24

How Visa Secures Trillions Using AI Agents &...

AI Security Podcast ·

2026/10/02

How does a global financial engine moving trillions annually manage cyber risk in the age of AI?In this episode, Ashish sits down with Subra Kumaraswamy, CISO of Visa. Subra discusses Visa's journey as part of Anthropic's Glasswing Project testing the Mythos model, revealing why a majority of Mythos-discovered vulnerabilities were non-exploitable due to robust zero-trust architecture and micro-segmentation.Subra explains why Visa open-sourced VVAH (Visa Vulnerability Agentic Harness) to

en-us

00:48:59

Black Hat 2026: Why Threat Researchers Are Hoarding...

AI Security Podcast ·

2026/09/15

Is the AI "vulnpocalypse" already here? According to Casey Ellis, Founder of Bugcrowd and pioneer of Disclose.io, we aren't quite in an apocalypse yet, we're actually in a "slopdemic." The cost of discovering vulnerabilities has plummeted, flooding bug bounty and SOC triage queues with low-quality, noisy submissions. Because these queues are so overwhelmed, many highly skilled researchers are simply hoarding zero-days because reporting them has become too difficult. In

en-us

00:37:53

Why Prompt Filters Fail & How to Explain AI Risk to...

AI Security Podcast ·

2026/09/02

Is the cybersecurity industry repeating the same mistakes with prompt injection that it made with buffer overflows decades ago? As attackers iterate through 50 to 60 prompt filter bypasses daily, attempting to artificially separate instruction from data is becoming a futile effort. In this episode, Ashish sits down with Cezary Piekarski, Group CISO of Standard Chartered. Cezary shares his techno-optimist view on how AI will ultimately benefit defenders, while also unpacking the hard realities of

en-us

00:45:32

Why 95% of AI Projects Fail: Model Risk & AI...

AI Security Podcast ·

2026/08/27

Why do 95% of enterprise AI implementations fail? According to Sandip Wadje, Managing Director at BNP Paribas, many organizations attempt complex reasoning tasks on day one rather than building a mature foundation around data hygiene and simple summarization workflows. In this episode, Ashish sits down with Sandip to explore how global financial institutions navigate Model Risk Management (MRM), GenAI governance, and regulatory expectations across regions like the UK, EU, and US. Sandip breaks down

en-us

00:52:35

Why I Dont Trust Your AI Agent | Kane Narraway, Canva

AI Security Podcast ·

2026/08/20

With over 200 AI security vendors in the market, how does an enterprise CISO decide whether to build a custom solution, buy an off-the-shelf product, or just wait out the hype?In this episode of the AI Security Podcast, Ashish and Caleb are joined by Kane Narraway, Head of Enterprise Security at Canva, to debate the realities of AI security in modern enterprises. Kane breaks down why simply sandboxing AI agents doesn't work for workforce productivity, explaining that an overly restrictive

en-us

00:51:04

Baiting the Bot: How to Use Deception to Stop...

AI Security Podcast ·

2026/07/23

When AI agents start swarming your enterprise, they won't care about stealth. They will land a beachhead and instantly spawn 500 agents to crawl, probe, and exfiltrate data at machine speed. Is your detection stack ready? In this episode, Ashish and Caleb sit down with Andy Smith, CEO and co-founder of Tracebit, to completely rethink Deception Technology for the AI era. Forget the heavy, noisy "honeypots" of the 90s. We discuss the modern implementation of deception: lightweight,

en-us

00:51:35

Why AI Agents Are Forcing a Redesign of Application...

AI Security Podcast ·

2026/06/26

When the CEO of Anthropic declares that human coding will disappear within six months, followed quickly by the death of software engineering itself, what does that mean for the future of cybersecurity? In this episode, Ashish and Caleb break down the massive paradigm shift caused by AI coding assistants like Claude Code. Caleb shares his firsthand experience building and deploying software where he has never looked at a single line of the underlying code, arguing that while the need for security

en-us

00:42:47

Why Asset Intelligence is Replacing the CMDB & Static...

AI Security Podcast ·

2026/06/11

Why do CISOs still struggle with asset intelligence in 2026? Despite decades of security tooling, most organizations still have a massive 40% "dark matter" blind spot in their environment and the explosion of ephemeral AI agents is only making it worse.In this episode, Ashish and Caleb sit down with Joe Diamond, CEO, Axonius to discuss the evolution of the asset space. We explore why traditional CMDBs (which track business processes and IT hardware) fall short for cyber asset attack

en-us

00:47:42

The AI AuthZ Problem: Why Human Least Privilege Fails...

AI Security Podcast ·

2026/06/04

Why are security leaders terrified of connecting AI agents to production data? Because unlike humans, AI agents don't apply judgment, and they operate at machine speed, meaning they can relentlessly hunt down production credentials and do catastrophic damage before a human analyst even blinks.In this episode, Ashish and Caleb sit down with Graham Neray, CEO of Oso, to tackle the massive, unsolved problem of AuthZ (Authorization) for autonomous AI. We explore why the industry's reliance on

en-us

01:03:09

Securing AI at the Speed of Engineering | DoorDash |...

AI Security Podcast ·

2026/05/21

Is your security team moving at the speed of your engineering team? In this special live recording of the AI Security Podcast from San Francisco, Ashish is joined by Nick Reva (Global Director, Engineering Security, DoorDash) and Shivani Doke to tackle the two most critical conversations in AI right now: Proactive Offensive Security and the evolution of GRC .In the first half, Nick explains why traditional AppSec teams fail to keep up with AI development, and shares his strategy for building

en-us

01:10:14

Verification vs. Validation: How Autonomous AI is...

AI Security Podcast ·

2026/05/13

Are autonomous AI agents operating unchecked in your enterprise? With the release of open source frameworks like OpenClaw, deploying an AI agent is now as simple as texting, but it comes with massive, unprecedented security risks . In this episode, Ashish and Caleb sit down with Sounil Yu, CTO and Co-Founder of Knostic (and creator of the Cyber Defense Matrix), to discuss the other side of agentic AI . Sounil explains how OpenClaw dangerously violates Meta's "Agent Rule of Two" by

en-us

00:47:22

The Zero-Click AI Hack: How to Contain the Blast...

AI Security Podcast ·

2026/04/29

Is an AI agent's identity a workload or an action? Ashish spoke to Elie Bursztein, Distinguished Research Scientist and co-author of Google SAIF (Secure AI Framework) about how it is neither and that is exactly why our traditional security models no longer apply to the AI era . In this episode, Ashish sits down with Elie to explore the evolution of AI from a passive "brain in a jar" to an active agent that takes actions on your behalf . Elie breaks down the reality of Indirect Prompt

en-us

00:46:47

Buy vs. Build AI Security: Why...

AI Security Podcast ·

2026/04/22

If your AI solution is just helping humans process the same amount of alerts a little faster, you haven't transformed anything, you've just created a faster hamster wheel.In this episode, Ashish and Caleb speak with Heather Ceylan, CISO at Box.com, about how she is leading a true, developer-first AI transformation within her security organization . Heather reveals the five strategic "AI Bets" Box is making. We dive into the reality of building an AI SOC, discussing how Box achieved

en-us

01:03:22

Anthropic's Project Mythos: Why the "Zero-Day...

AI Security Podcast ·

2026/04/18

In this episode, Ashish and Caleb discuss the internet-breaking preview of Project Mythos, an unreleased AI model from Anthropic that has shown an unprecedented, terrifying ability to reason through code and automatically generate working zero-day exploits .We dive into the conversations surrounding Project Glasswing, Anthropic's initiative to share this model with select partners (like Palo Alto and CrowdStrike) before public release, allowing them a 100-day window to patch critical vulnerabilities

en-us

00:47:17

Are AI Security Startups Faking It? How to Separate...

AI Security Podcast ·

2026/04/15

With over 70 startups claiming to have built the perfect "AI SOC Analyst" or "AI Threat Hunter," how do you separate the real products from the vaporware? Recorded live at Decibel RSAC Founder Festival, Ashish and Caleb hosted a heated panel with Edward Wu (Founder & CEO, Dropzone AI) and Lou Manousos (Co-Founder & CEO, Ent AI). The group debates the controversial claim that AI can provide 100% threat prevention and exposes the dirty secret of the industry: Many AI

en-us

00:57:02

How Lovable Manages 100+ Daily Changes, Vibe Coding &...

AI Security Podcast ·

2026/04/02

What does it actually look like to run security inside one of Europe's fastest-growing AI companies? In this episode, recorded live at the Munich Cybersecurity Conference (MCSC), Ashish Rajan sat down with Igor Andriushchenko Head of Security at Lovable, the AI-native platform that lets anyone build and ship full applications without writing a line of code.Igor joined Lovable as employee #40. Six months later, the team had grown to 150+. Developers were running multi-agent workflows overnight,

en-us

00:50:35

Questions Every CISO Must Ask AI Security Vendors

AI Security Podcast ·

2026/03/18

RSA Conference 2026 is here and the AI agent hype machine is louder than ever. In this episode, Ashish and Caleb cut through the noise and arm CISOs, practitioners, and security teams with a clear-eyed view of what's actually happening in AI security this year.From the vendor floor at RSAC to the future of internal security automation, Caleb and Ashish speak about why 70% of "AI agent security" vendors can't even define what an agent is, why security team consolidation around 2–3

en-us

00:59:48

Will Foundation Models Kill Security Startups?

AI Security Podcast ·

2026/03/05

Did Anthropic just kill the AppSec industry? Following the announcement of Claude Code Security, a tool that finds, reasons about, and fixes code vulnerabilities, major security stocks dropped by 8% .In this episode of the AI Security Podcast, Ashish and Caleb break down the reality behind the hype. Caleb explains why using AI for SAST (Static Application Security Testing) is "a no-brainer," noting that many open-source projects and startups have already been doing exactly what Anthropic

en-us

00:47:23

How to Build Your Own AI Chief of Staff with Claude Code

AI Security Podcast ·

2026/02/11

What if you could automate your entire work life with a personal AI Chief of Staff? In this episode, Caleb Sima reveals "Pepper," his custom-built AI agent to Ashish that manages emails, schedules meetings, and even hires other AI experts to solve problems for him .Using Claude Code and a "vibe coding" approach, Caleb built a multi-agent system over a single holiday weekend, without writing a single line of Rust code himself . We discuss how he used this same method to build a

en-us

63 results

Similar Podcasts

Lead With AI

Tamara Nall

Double Tap

Steven Scott, Shaun Preece, Steven...

The Paul Barron Crypto Show

Paul Barron Network

BlockHash

BlockHash LLC

The Bitcoin Boomers

Gary Leland, Bob Burnett, Lawrence...