The Cybersecurity Institute Podcast, by Entrust

In this podcast, we'll delve into the key cybersecurity challenges associated with the arrival of Q-Day, what is needed to attain and maintain a Zero Trust strategy in the post quantum era and offer practical guidance on how to facilitate the cryptographic transition to post quantum cryptography (PQC). 

From energy and wastewater treatment to communications, banking, and beyond, critical infrastructure are those assets, systems, and networks that support our daily lives. Any compromise to these resources, whether malicious or unintended, could have debilitating national security, economic, and public safety consequences.   Yet, our critical infrastructure remains vulnerable. And in an era of rising geopolitical tensions, it is also an easy and attractive target for nation state attackers. Solar Winds and more recently Salt Typhoon are two of many examples.   In this podcast, we explore the where's and why's of critical infrastructure vulnerability and associated compliance concerns, along with some strategies and best practices to improve critical infrastructure security and resilience.

Driven by technology innovation, divergent regulatory philosophies across geographies, and different industry dynamics, the global regulatory landscape continues to complexify creating a compliance and governance challenge for organizations of all shapes and sizes.   At the outset of 2025, fast evolving areas of compliance legislation include AI, biometrics, privacy, cyber resilience, and data management.   In this podcast, we'll delve into some of the challenges facing organizations, CISOs, and compliance decision makers as they seek to navigate this ever-changing regulatory landscape, along with some of the strategies being applied to manage compliance.

At the outset of 2025, there is a natural convergence of payments and identity happening that is transforming the consumer and citizen experience. Central to both is trusted digital identity which has become the cornerstone of our digital universe. In this podcast, we'll delve into some of the opportunities, risks, and challenges facing payments and identity players including digital wallet adoption, fraud intensification, quantum computing, and biometrics.

Among many other milestones, 2024 was the year generative AI went mainstream, identity fraud went digital first, and the first post quantum cryptography (PQC) standards were issued by NIST. As we look ahead to 2025, which cyber trends will gain momentum? And which will fall to the wayside? In this podcast, we'll delve into our top cyber predictions for 2025 including the possible evolution of AI, quantum computing, digital identity, and regulation.

In this episode of the Entrust Cybersecurity Institute Podcast, we delve into the evolving landscape of cybercrime, highlighting how advancements in technology, particularly GenAI and biometrics, are ending the era of amateur cybercriminals. Drawing insights from the 2025 Identity Fraud Report, now in its 6th year, we explore the rise of cybercrime-as-a-service, the increasing sophistication of attacks, and strategies to combat these threats with a Zero Trust approach and AI-powered solutions.

Quantum computing will revolutionize industries and break conventional encryption threatening the world's digital economy and upending global power dynamics. With “harvest now, decrypt later” style attacks that target long life data and devices, along with the availability of new PQC standards from NIST, we are at the dawn of the PQ era. In this podcast, we delve into global PQ preparedness, post quantum cryptography, and how to start your PQC migration today.

Identity is essential to accessing education, employment, financial services, and much more. But, with disruptive technology forces like AI, biometrics, and quantum computing on the horizon, is it time to reimagine the future of trusted identity? This episode delves into the opportunities, risks, and differing approaches shaping the future of trusted identity including the impact of AI and quantum computing, along with the role of governments, standards bodies, and big tech.

In light of NIST's recent PQC standards, we revisit our conversation with Brian LaMacchia, a cryptography expert and former Microsoft engineer, on the history and evolution of PQC. Tune in to learn more about the challenges and opportunities of this emerging field.

What if you could ditch your passwords and still have a secure and seamless online experience? That's the vision of the FIDO Alliance, a group of industry leaders who are developing standards and certifications for passwordless and phishing-resistant authentication solutions. In this podcast, our host, Ken Kadet, talks to Andrew Shikiar, the executive director and CEO of the FIDO Alliance, about how these solutions work, why they are needed, and what the future of authentication looks like.

In this ‘boots to the ground' podcast Samantha Mabey is joined by Tom Patterson, quantum security global lead at Accenture, to discuss some of the key steps organizations should be thinking about, and actually taking, in order to prepare themselves in advance of the quantum threat.

In this podcast, we'll delve into some of the opportunities, risks, and differing approaches to digital government around the globe, including the role of AI, regulation, and big tech in the creation and protection of trusted citizen identities.

In this podcast we look at the dark side of generative AI, the destructive ways criminals are utilizing it to create deepfakes, optimizing phishing techniques and creating synthetic IDs at scale. We'll also take a look at new updated stats published today, in a special RSAC edition of Onfido's (an Entrust Company) Fraud Report and discuss how CISO/CROs can set their companies up for success in the fight against these new security threats.

The use of biometrics has become a flash point for discussion in efforts to regulate AI around the globe. While different biometric use cases present with different risk profiles, the use of biometrics to protect individual consumers and citizens from identity theft and fraud should be a core component of any organization's deep fake defense strategy. In this podcast, we'll delve into the legal, ethical, and even moral considerations for the continued safe development and use of AI-enabled biometrics.

This podcast examines the raging debate around not only if and how to regulate AI, but also when and by whom. Our experts cover such topics as the potential risks of AI, different regulatory approaches to AI, and the need for global AI governance. Guest experts include Jenny Carmichael, VP Compliance at Entrust and Stephanie Derdouri, VP Security, Governance, Risk and Compliance at Entrust.

In this episode, our guests Samantha Mabey, Entrust Director of Digital Security Solutions, and Tushar Tambay, VP of Product Development at Entrust, unravel the risks of misconfigured systems, interoperability gaps, and compliance lapses in IT security. Join us as we discuss the diverse array of cybersecurity tools and the necessity of routine discovery checks to avert breaches. We also dive into the Zero Trust journey, discovering how organizations can progressively bolster their security posture.

AI, quantum computing, digital identities, and regulation were hot topics in 2023 and will continue to evolve and increase in focus in the coming year. Join host Ken Kadet as he and guests Jordan Avnaim (CISO, Entrust) and Greg Wetmore (VP of Software Development, Entrust) look at the trends that we expect to shape the cybersecurity landscape in 2024.

Last year we made three predictions about what would happen in the world of cybersecurity. How did we do? Join host Ken Kadet and guests Anudeep Parhar, Greg Wetmore, and Mark Ruchie for a discussion on how 2023 took shape in both expected and surprising ways.

The world is relying more on artificial intelligence to improve the way we do business, serve citizens, and live our lives. How can we protect AI from itself and the forces that would put the potential benefits it creates at risk? Join host Ken Kadet and guests Greg Wetmore and Pali Surdhar to learn more.

Deepfakes and synthetic identities are posing a threat to banks and financial organizations – organizations that are required to “know your customer”. Join host Ken Kadet as he speaks with Jordan Avnaim, CISO at Entrust, and Greg Wetmore, VP of Product Development at Entrust about how you can protect customers in an increasingly AI-driven landscape.

AI has started an arms race in cybersecurity. Will this continue to escalate or is AI just the latest tool where winning requires an ongoing state of Zero Trust? Join host Ken Kadet as he speaks to Greg Wetmore (VP of  Software Development, Entrust) and Rishi Kaushal (CIO, Entrust) about AI from the enterprise security perspective.

CISA's (Cybersecurity and Infrastructure Security Agency's) strategic plan was just recently released and focuses on four key areas: cyber defense, risk reduction and resilience, operational collaboration, and agency unification. What can we learn from this work? Where does it fall short? How is this elevating or helping the practice of cybersecurity in the US, and around the world? Join our host, Ken Kadet, as he talks about this and more with Paul Calatayud, Co-Founder & Chief Strategy Officer at Onada, and former CSO at Palo Alto Networks and the CTO at Firemon.

What's next in the war for the wallet, and how do you win? What can big banks, big tech, and big financial institutions learn from each other? Join our hosts Ken Kadet as he discusses the rapidly changing banking and payments landscape with industry experts who provide their insights on the risks and opportunities.

In this podcast episode, host Samantha Mabey talks to Brian LaMacchia, President of FARCASTER Consulting Group and former Distinguised Engineer for Cryptography at Microsoft, about the decades of research that's gone into Post Quantum Cryptography (PQC), and how the pace and intensity of academic PQ research compares with previous eras of cryptography. They also discuss the standardization process of PQC, including the algorithms under review in the NIST competition today, and how PQC standards are likely to evolve in the future.

In this special post-quantum episode, guest host, Samantha Mabey, speaks with Dr. Sarah McCarthy, cryptographic strategist at evolutionQ and an affiliate of the University of Waterloo, and Anthony Hu, senior software developer at wolfSSL to discuss the impact of post-quantum on constrained devices from WIFI doorbells, to thermometers, to automotive tire pressure sensors and how these devices are going to manage algorithms that are at least 20x bigger and heavier than elliptic curve cryptography. 

Entrust experts Mark Ruchie, Rishi Kaushal, and Greg Wetmore take on the evolution of phishing in our June Cybersecurity Institute podcast, going deep on phishing-resistant MFA, the impact of AI and ChatGPT, and more.

Entrust experts Mark Ruchie, Rishi Kaushal and Greg Wetmore talk about the building blocks of a robust Zero Trust framework, the CISA maturity model and more. It's clear from the discussion that today we find ourselves at a turning point – zero trust is now a priority and focus for leaders at the highest level of organizations and governments alike.

In this special post-quantum episode, guest host, Samantha Mabey, speaks with Sandy Carielli, Principal Analyst at Forrester, for her insights on the recent uptick in government action that has been taking place – such as the Quantum Computing Cybersecurity Preparedness Act – and what that means non-federal agencies. She also discusses some of the challenges organizations will face when it comes to preparing for and migrating to post-quantum cryptography.

In today's digital age, identity has become a powerful and valuable commodity. But who owns it, and how can we protect it? Join us in this episode of the Entrust Cybersecurity Institute podcast as we explore the future of identity with our team of experts. From the challenges of authentication and password security to the role of biometrics and digital government IDs, we'll delve into the key issues facing companies today. We'll also discuss the pros and cons of centralized vs. decentralized identity solutions, and share our predictions for what's to come.

Has artificial intelligence (AI) finally arrived in software development? What are the implications for cybersecurity and the way organizations do business today? Join our host Ken Kadet as he discusses the future of AI with leaders in software development at Entrust who provide their insights on the present state of and future potential uses of AI.

The cybersecurity arms race is accelerating. That's the clear lesson of 2022 for those of us committed to protecting organizations from the perils of cyberattacks. But what about the year to come? Join our host Ken Kadet as he speaks to the experts to find out their predictions for cybersecurity in 2023.

We talk with renowned quantum academic Dr. Michele Mosca, deputy director of the Institute for Quantum Computing, and founder and CEO of evolutionQ, and Mike Ounsworth, software security architect at Entrust, on the future of post-quantum cryptography: from the NIST competition, post-quantum digital certificates, and what organizations should do to prepare for and use PQC algorithms. From our Entrust Engage podcast's Post Quantum Cryptography series, originally posted in September 2022.

What is the current state of quantum computers, and what developments can we expect in the coming years? We talk with Richard Moulds, General Manager of AWS Bracket on the applications of quantum computers in coming years as well as how organizations are tapping into their capabilities today.  He also shares how he sees quantum computing playing out, and how the democratization of the technology could make quantum computing available for all. From our Entrust Engage podcast's Post Quantum Cryptography series, originally posted in July 2022.

We interview Duncan Jones, head of cybersecurity at Cambridge Quantum Computing, part of Quantinum, on the potential of quantum computers today, cryptographic keys, and harnessing quantum randomness for the development of random number generators (RNGs). From the Entrust Engage podcast Post Quantum Cryptography series, originally posted in June 2022.

Every time you see a big cybersecurity crisis or incident -- like Colonial Pipeline, Solar Winds, log4j -- leaders and Boards rush out to invest more in monitoring and detection technologies … but are we neglecting the “roads and bridges” of data protection and access management? Why do investments in cryptography infrastructure and access and policy management that protect your organization and data remain a harder sell? Entrust CIO Anudeep Parhar and Dr. Pali Surdhar, Director of Product Security share their unique perspectives – and why enterprises must make the shift from rewarding the cybersecurity hero that saves the day to celebrating “no news is good news”.  Background reading for this episode:  Wired: A Year After the SolarWinds Hack, Supply Chain Threats Still Loom ZDNet: Ransomware: Hackers are using Log4j flaw as part of their attacks, warns Microsoft Forbes: Let Customers Know Their Data Is Safe: Cybersecurity As A Marketing Tool

How will quantum computing impact security of the blockchain? Blockchain expert Jon Geater, Chief Product & Technology Officer at RKVST and Pali Surdhar, Director of Product Security at Entrust break down the migration of today's distributed ledger technology to one that's quantum resistant, and address how blockchain technology will be affected in a post-quantum world. From the Entrust Engage podcast Post Quantum Cryptography series, originally posted in May 2022.

Host Samantha Mabey speaks with Greg Wetmore, Entrust VP of Software Development to offer a gentle introduction to quantum computing, the post-quantum threat to encryption, and what's being done to prepare for the post-quantum world. From the Entrust Engage podcast Post Quantum Cryptography series, originally posted in May 2022

Host Samantha Mabey interviews award-winning quantum physicist and CEO of Nu Quantum, Dr. Carmen Palacios-Berraquero on the science of quantum computing, the main technologies at play in the industry, and the opportunities our growing understanding of quantum physics will enable. From the Entrust Engage podcast Post Quantum Cryptography series, originally posted in May 2022.

There's no bigger story right now than the Russian war in Ukraine. And without putting aside the daily human tragedy … it's also a cyberwar…one that could have far-reaching implications for enterprises and governments around the world. Entrust CIO Anudeep Parhar and CISO Mark Ruchie to talk about what's happening, where we are today, and how you can help make your organization resilient in the face of attacks. SC Magazine: Microsoft details rampant cyber warfare corresponding to Russian invasion CISA's Shield Up page New York Times: U.S. Says It Secretly Removed Malware Worldwide, Pre-empting Russian Cyberattacks Florida International University: How Ukraine has defended itself against cyberattacks – lessons for the US The Free Press Journal: Russia-Ukraine conflict: 3 major types of cyber attacks detected so far