Podcasts about breaches

Kiwis are constantly wondering why their groceries are so expensive. The Green Party is the latest to promise a fix in the way of a members bill aimed at banning price gouging by the supermarket duopoly, which has a whopping 82% market share. New rules would aim to prohibit supermarkets from charging prices that are excessive when compared to the cost of supplying groceries. Breaches could see a company fined up to $10 million or 10% of turnover. But, what constitutes “excessive”? And how would it be policed? Today on The Front Page, Green Party co-leader Chlöe Swarbrick is with us to tell us how it would work. Follow The Front Page on iHeartRadio, Apple Podcasts, Spotify or wherever you get your podcasts. You can read more about this and other stories in the New Zealand Herald, online at nzherald.co.nz, or tune in to news bulletins across the NZME network. Host: Chelsea DanielsEditor/Producer: Richard MartinProducer: Jane YeeSee omnystudio.com/listener for privacy information.

Craig Unger: Craig Unger explores a sidetracked FBI counterintelligence investigation into Donald Trump's decades-long ties to Russian interests. Unlike criminal inquiries, counterintelligence investigations focus on national security breaches and the laundering of influence, even when no explicit crime is proven. Unger asserts that Russian mafia figures, acting as adjuncts to state intelligence, began bailing out Trump's failing real estate ventures as early as 1984. These transactions, often involving cash purchases of condominiums in Trump Tower, allegedly turned the former president into an asset of Russian intelligence. Unger argues that the Robert Mueller investigation was a dud because it focused narrowly on criminal acts rather than this broader compromise. The discussion concludes by noting Trump's consistent, long-standing hostility toward NATO, which Unger says mirrors Soviet-era talking points and raises ongoing concerns regarding US national security. (4)

Queensland Police Union representative Shane Prior joined Jason Matthews on 4BC Breakfast to slam the court system after an accused child sex offender walked free despite 30 bail breaches and attending crowded events like the Ekka. The segment balances this judicial outrage by celebrating a heroic moment where local officers safely delivered a baby outside the Browns Plains police station.See omnystudio.com/listener for privacy information.

Last week, Purchasing Manager's Index (“PMI”) mixed signals pointed to a modest UK economic recovery. Whilst UK business activity saw a first rise in three months, driving the broader economy up, manufacturing and construction remain laggards, meaning that sustainable growth will depend on whether supply chain and inflation pressures continue to moderate. However, the geopolitical reasons are threatening this, as EY points out that the prolonged closure of the Strait of Hormuz could cause inflation to double, risking a UK recession. The recent heatwaves are also a threat, hampering retail footfall in July and potentially disrupting supply chains and causing prices to spike. The Bank of England (“BoE”) is also facing some scrutiny over its active quantitative tightening (“QT”) strategy, as the market is getting anxious over the valuation losses which ultimately strain public finances, creating a headwind to rate expectations and overall market sentiment...Stocks featured:Fresnillo, Endeavour Mining and IG GroupTo find out more about the investment management services offered by Walker Crips, please visit our website:https://www.walkercrips.co.uk/This podcast is intended to be Walker Crips Investment Management's own commentary on markets. It is not investment research and should not be construed as an offer or solicitation to buy, sell or trade in any of the investments, sectors or asset classes mentioned. The value of any investment and the income arising from it is not guaranteed and can fall as well as rise, so that you may not get back the amount you originally invested. Past performance is not a reliable indicator of future results. Movements in exchange rates can have an adverse effect on the value, price or income of any non-sterling denominated investment. Nothing in this podcast constitutes advice to undertake a transaction, and if you require professional advice you should contact your financial adviser or your usual contact at Walker Crips. Walker Crips Investment Management Limited is authorised and regulated by the Financial Conduct Authority (FRN: 226344) and is a member of the London Stock Exchange. Hosted on Acast. See acast.com/privacy for more information.

Levi Strauss, Lucid Motors, OpenAI and a whole bunch more are all part of this week's fun...

The Cybercrime Magazine Podcast brings you daily cybercrime news on WCYB Digital Radio, the first and only 7x24x365 internet radio station devoted to cybersecurity. Stay updated on the latest cyberattacks, hacks, data breaches, and more with our host. Don't miss an episode, airing every half-hour on WCYB Digital Radio and daily on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news. Brought to you by our Partner, Evolution Equity Partners, an international venture capital investor partnering with exceptional entrepreneurs to develop market leading cyber-security and enterprise software companies. Learn more at https://evolutionequity.com

The 'Shadow Economy Taskforce' visited over 15 farms in Griffith to investigate allegations of worker underpayment, false reporting of business income and expenses, exploitation of migrant workers, and illegally providing immigration support, among other claims. - ਗ੍ਰਿਫਿਥ ਸਥਿੱਤ 15 ਤੋਂ ਵੱਧ ਫਾਰਮਾਂ ਉੱਤੇ 'ਸ਼ੈਡੋਅ ਇਕਾਨਮੀ ਟਾਸਕਫੋਰਸ' ਵਲੋਂ ਛਾਪੇਮਾਰੀ ਕੀਤੀ ਗਈ ਹੈ। ਇਸ ਟਾਸਕਫੋਰਸ ਵਿੱਚ ਆਸਟ੍ਰੇਲੀਅਨ ਟੈਕਸੇਸ਼ਨ ਆਫਿਸ (ATO), ਫੇਅਰ ਵਰਕ ਓਮਬਡਸਮੈਨ (FWO) ਅਤੇ ਡਿਪਾਰਟਮੈਂਟ ਆਫ ਹੋਮ ਅਫੇਅਰਜ਼ ਦੀ ਆਸਟ੍ਰੇਲੀਅਨ ਬਾਰਡਰ ਫੋਰਸ (ABF) ਦੇ ਅਧਿਕਾਰੀ ਸ਼ਾਮਲ ਹਨ। ਨਿਊ ਸਾਊਥ ਵੇਲਜ਼ ਦੇ ਰਿਵਰੀਨਾ ਦੇ 'ਫੂਡ ਬੋਊਲ' ਕਹਾਏ ਜਾਣ ਵਾਲੇ ਗ੍ਰਿਫਿਥ ਵਿੱਚ ਵਿਆਪਕ ਖੇਤੀਬਾੜੀ ਉਦਯੋਗ ਮੌਜੂਦ ਹੈ। ਇਸ ਟਾਸਕਫੋਰਸ ਮੁਤਾਬਕ ਖੇਤੀਬਾੜੀ ਵਿੱਚ ਕਈ ਮਾਲਕ ਅਤੇ ਫਾਰਮ ਕੌਨਟ੍ਰੈਕਟਰ ਕਾਮਿਆਂ ਨੂੰ ਘੱਟ ਤਨਖਾਹਾਂ ਉੱਤੇ ਮਜ਼ਦੂਰੀ, ਕਾਰੋਬਾਰੀ ਆਮਦਨ ਅਤੇ ਖਰਚਿਆਂ ਦੀ ਗਲਤ ਰਿਪੋਰਟਿੰਗ, ਪ੍ਰਵਾਸੀ ਕਾਮਿਆਂ ਦਾ ਸ਼ੋਸ਼ਣ ਅਤੇ ਇਮੀਗ੍ਰੇਸ਼ਨ ਸਹਾਇਤਾ ਦਾ ਗੈਰ-ਕਾਨੂੰਨੀ ਪ੍ਰਬੰਧ ਕਰ ਰਹੇ ਹਨ। ਪੂਰਾ ਮਾਮਲਾ ਜਾਨਣ ਲਈ ਇਹ ਪੌਡਕਾਸਟ ਸੁਣੋ।

Special Guest: Nikesh Arora, CEO @ Palo Alto Networks.  AGENDA: 04:50 Airtable Sold to Bending Spoons for $1.285B  17:00 Leo Aschenbrenner's Situational Awareness Blows Up as Citadel Buys His $16BN Book 22:30 Anthropic's AI Models Breach Three Companies as Cyber Threat Accelerates 33:35 Moonshot AI Raises $3.5B at $35B as Chinese Models Crush AI Prices 38:05 Valar Atomics Triples to $6B as Sequoia Bets on Nuclear Power for AI 42:50 OpenAI and Anthropic Could Trigger a Massive Public-Market Dislocation 52:55 Big Tech and Palantir Earnings Ignite the Next Phase of the AI Gold Rush 1:04:30 Procore Buys DroneDeploy for $900M in a High-Stakes 12x Revenue Bet 1:10:55 Scale AI Hits $1.5B ARR After the Meta Deal Left It for Dead  

Alex Pinto, who leads Verizon's DBIR team, joins me to break down the new Breach Impact Study and what data breaches actually cost organizations.For years the industry has argued past itself on breach costs. One camp says the market doesn't care, the other says a single breach ends your business. Alex and his team finally got their hands on roughly 70,000 cyber insurance claims through CyberAcuView, and the Breach Impact Study puts real numbers behind the question. In this conversation we dig into what the data shows, where it stops, and how a security leader should actually use it.Alex Pinto runs the Data Breach Investigations Report team at Verizon Business and has been building the report for close to a decade. The Breach Impact Study is the team's first focused spin-off from the DBIR.In this episode:- How the Breach Impact Study came together and why the DBIR team finally got cyber insurance claims data- Why the study measures insurable loss as a floor, not a ceiling, of real economic impact- The case for reporting medians over averages, and why the team refuses to publish the average- Business interruption versus contingent business interruption, and why downtime moves the needle- Whether an $83,000 median breach impact sends executives the wrong message- The SMB paradox, where the smallest companies take the hardest proportional hit- What the claims data does and does not show about AI on offense and defense- Third-party risk, coverage sub-limits, and the single biggest takeaway for security leadersChapters0:00 Intro0:24 Meet Alex Pinto and the DBIR team2:51 Launching the Breach Impact Study3:26 Getting cyber insurance claims data7:32 Why insurable loss is a floor, not a ceiling11:14 Medians over averages, and why the average is meaningless15:13 Business interruption vs contingent business interruption19:49 Does an $83K median send the wrong message?22:44 The SMB paradox and the cybersecurity poverty line26:05 Where AI shows up, offense vs defense34:48 The CVE explosion and marketing hype36:59 Third-party risk and coverage limits41:34 Wrap-upGuest linksAlex Pinto on LinkedIn: https://www.linkedin.com/in/alexcpsec/Alex Pinto on X: https://x.com/alexcpsecVerizon DBIR and Breach Impact Study: https://www.verizon.com/business/resources/reports/dbir/More from Resilient CyberSubstack: https://www.resilientcyber.ioSubscribe for more conversations with security practitioners and leaders.#cyberrisk #databreach #cyberinsurance #ransomware #aisecurity #dbir

A hacker breached Hungary's State Treasury, Russia will mandate 40 apps on all smartphones next year, hackers steal Liechtenstein's business database, and an AI agent got real CVEs for hallucinated vulnerability reports. Show notes Risky Bulletin: Hacker breaches Hungary's State Treasury

April Mardock, Chief Information Security Officer at WASIPC, joins the podcast to analyze the primary entry points targeted in K-12 ransomware incidents. The discussion offers actionable guidance on multi-factor authentication, vendor risk management, data retention policies, and using gamified tabletop exercises to prepare school leadership for cyber incidents.April's LinkedIn profile and email addressCybersecurity tabletop simulation game (Gemini Gem), step into the hot seat of a live cyber attack and lead your team to safetyI Asked 24 Ransomed School Districts How the Attackers Got In - There Were Only Three Answers, LinkedIn article that April authoredK-12 SIX (K-12 Security Information Sharing and Analysis Center), threat intelligence community providing free K-12 cybersecurity guidance, checklist guides, and standardsWISPC, public, non-profit agency in Washington state that provides technology solutions, data management, and cooperative purchasing services to K-12 schoolsCyberforce|Q service from WISPC, building and implementing cybersecurity programs for organizations of all sizesBluum service from WISPC, helping educators leverage technology to create a more effective and engaging student experienceCybersecurity & Infrastructure Security Agency (CISA), from the U.S. Department of Homeland Security; as the national coordinator for critical infrastructure security and resilience, CISA works with partners at every level to identify and manage risk to the cyber and physical infrastructure that Americans rely on every hour of every day. CISA works with partners to defend against today's threats and collaborate to build a more secure and resilient infrastructure for the future.Secure Cloud Business Application (SCuBA), CISA project providing tailored cloud solutions guidance and secure configuration baselines (SCBs) for Microsoft 365 and Google Workspace applications. SCuBA's guidance aims to protect information that organizations create, access, share, or store in cloud environments.Backdoors and Breaches, incident response card game

Everton lost 8 points. Nottingham Forest lost 4. Chelsea? Not a single point, despite admitting to 74 breaches of FA rules and getting hit by three separate regulators (UEFA, the Premier League, and the FA) over £47m in undisclosed historical payments. Les and Dave lay out the full timeline of all three cases - Everton's two separate PSR breaches, Forest's £34.5m overspend, and Chelsea's Abramovich-era disclosure scandal - and compare them point by point: what the breach actually was, who discovered it, who was punished for it, and what sanction followed. Are these cases really comparable? Have Chelsea been treated more leniently than the clubs who lost points? We go through the arguments on both sides before giving our verdict. Let us know your thoughts. A breakdown of each club's breaches: Everton • Case 1: 2021/22 period. Loss £124.5m vs £105m limit (breach ~£19.5m). Charged Mar 2023. • Sanction 1: 10-point deduction (Nov 2023) → reduced to 6 points on appeal (Feb 2024). • Case 2: 2022/23 period. Breach of £16.6m. Charged Jan 2024. • Sanction 2: 2-point deduction (Apr 2024). • Total: 8 points deducted, in-season, same campaign. Nottingham Forest • Case: 2022/23 period. Threshold £61m (reduced for Championship seasons). Breach of £34.5m. Charged Jan 2024. • Sanction: 6 points initial → reduced to 4-point deduction for early admission/cooperation. • Appeal: Rejected — 4 points stood. Chelsea • UEFA (2023): €10m (£8.6m) fine — incomplete financial reporting. • Premier League (Mar 2026): £10.75m fine + immediate 9-month academy transfer ban + 1-year first-team transfer ban suspended 2 years. PL found payments, even if disclosed, would not have breached PSR. • FA (Jul 2026): 74 admitted breaches (undisclosed agent/third-party payments, £47m, 2011–2018). £10m fine (halved from £20m for self-reporting). Original 6-point suspended deduction overturned on appeal, replaced with suspended two-window transfer ban. • Total: £0 points deducted. All penalties financial or suspended. Breaches self-reported by current owners about previous (Abramovich) regime. Want a little more from us? Try The Blue Room Extra for more than 20 hours extra content a month: www.patreon.com/theblueroomextra Learn more about your ad choices. Visit podcastchoices.com/adchoices

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-603

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News. Show Notes: https://securityweekly.com/swn-603

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-603

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News. Show Notes: https://securityweekly.com/swn-603

Chick-fil-A, Estée Lauder, Hugging Face, OpenAI and more are all part of this week's breaches!

It's Story Time, our weekly walk through cricket history. This week, this show has had many distant dreams, but this week we finally have sweet closure on what may be our dearest of them all. Also, a new rival for Jack Reacher brings a story about giant-killing, and a flame who burned so bright that he eventually burned away an era of national gloom. With Adam and Geoff. Your Nerd Pledge numbers this week: 4.27 - Anthony Brown 2.14 - Neil 3.74 - Jack Spyker Get tickets to TFW v Wisden @ Wormsley and support The Lord's Taverners ⁠⁠⁠uk.emma-live.com/TFWvsWisden⁠⁠⁠ Win two places to play in the game courtesy of Zeus Sleeps. ⁠⁠⁠Nominate the worst snorer at your cricket club. ⁠⁠ Support the show with a Nerd Pledge at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠patreon.com/thefinalword⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠and win a signed copy of Wisden, or a case of Stomping Ground: browse their range at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠stompingground.beer⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Get yourself 10% off lovely ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Duncan Fearnley ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠bats and kit with code TFW10 Stop snoring with 10% off a Zeus device: use code TFW2026 at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠zeussleeps.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Join England's Test tour of South Africa in 2026 with Gullivers Sports Travel. Learn more or book at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠gulliverstravel.co.uk⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠  With Morie Candles you can buy one item, get 30% off the next, with the offer code TFW5. At ⁠⁠⁠⁠⁠⁠⁠⁠⁠morie.com.au⁠⁠⁠⁠⁠⁠⁠⁠⁠ Check out the Lord's Performance Centre for activities and courses: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠lords.org/lords/performancecentre⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠  ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Get your big NordVPN discount: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠nordvpn.com/tfw⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ or 10% off ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Duncan Fearnley ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠bats and kit with code TFW10 or 15% off Step One clothes at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠uk.stepone.life/discount/TFW148⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ or 10% off BIG Boots UK boots and socks at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠bigboots.co.uk/?ref=thefinalword⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Find more at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠finalwordcricket.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Title track by ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Urthboy⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Learn more about your ad choices. Visit podcastchoices.com/adchoices

Coca-Cola, Frontier Airlines, Ernst & Young, & Abbott Laboratories are all why we can't have nice things...

Cyber hacks involving personal information have hit the headlines this year, however unauthorised employee browsing is a growing problem.

Can governments decide who gets access to advanced AI models? Are third-party breaches becoming impossible to control? And why are so many CISOs reaching burnout? In this special Cybersecurity Today Month in Review Panel, host Jim Love is joined by cybersecurity experts Laura Payne, David Shipley, and Mike Kim (Mycroft) to examine the biggest cybersecurity stories and trends from June 2026. The panel explores the controversy over U.S. export controls on Anthropic's Mythos and Fable AI models, what they reveal about digital sovereignty, and whether governments should be able to restrict access to frontier AI. They also discuss the continuing wave of third-party breaches, including Salesforce ecosystem compromises and the Clue breach, and why organizations must move beyond compliance toward practical risk management. The conversation examines FortiBleed, exposed administrator portals, credential reuse, and the difficult balance between software flaws, operational mistakes, and secure-by-default design. The panel also tackles one of cybersecurity's biggest human challenges: CISO burnout, executive accountability, organizational culture, and what separates successful security leaders from those set up to fail. The episode concludes with encouraging developments in international cybercrime enforcement, including Operation Riptide, and why better intelligence sharing and improved operational security are making it harder for cybercriminals to hide. Whether you're a CISO, security practitioner, IT leader, or simply interested in the rapidly changing cybersecurity landscape, this discussion offers practical insight into the trends shaping the industry. Panel Jim Love (Host) Laura Payne David Shipley Mike Kim (Mycroft) Topics covered AI export controls and digital sovereignty Anthropic Mythos and Fable Third-party and supply chain risk Salesforce ecosystem security FortiBleed and Fortinet security Secure-by-default strategies CISO burnout and executive accountability Operation Riptide Cybercrime investigations Security leadership and governance Chapters 00:00 Sponsor NordLayer 00:38 Meet the Panel 02:40 Author Scam Warning 04:51 Emotion Is the Target 08:47 AI Model Export Controls 10:01 Hype vs Real AI Security 15:01 Sovereignty and Dependency 20:35 Governments Push Back 24:14 AI Internal Voice Risks 26:12 Third Party Breach Fatigue 30:05 Compliance Limits on Risk 32:15 Blame Game to Risk Focus 33:18 Standards and Priorities 33:39 When Security Vendors Fail 34:35 FortiBleed Numbers Explained 35:44 Process Failures vs Bugs 37:32 Why Fortinet Gets Heat 39:05 Secure by Default Basics 41:04 Budget Reality and Culture 44:36 CISO Burnout and AI Pressure 46:16 Liability and Shared Ownership 50:12 What Great CISOs Do 53:07 Operation Riptide Wins 56:10 Deterrence and Due Process 58:14 Sharing Intel for ROI 59:09 Hopium and Wrap Up 01:00:46 Sponsor NordLayer Message

The head of Australia's first National Environmental Protection Agency (EPA) John Bradley says the agency will focus its efforts on deliberate breaches of new land clearing rules, not farmers trying to do the right thing. 

Kaikoura is under a State of Emergency, and a red heavy rain warning remains in place for Marlborough, parts of Canterbury and the Kaikoura Ranges until 6am tomorrow morning. Earlier, the Kowhai River breached its banks, forcing people to move to higher ground. Reporter Keiller MacDuff was in Kaikoura and spoke to Lisa Owen. 

Sapporo, Ford Motors, Nissan, Aflac, U.S. Department of Homeland Security are having a "great" week!

The National Cyber Security Centre's most recent report for the first quarter of this year has highlighted three incidents likely to impact key sensitive date or disrupt essential services.

Middle East correspondent Lou Browne spoke to Lisa Owen about a blame game breaking out over potential ceasefire breaches between the US and Iran. The fragile truce has faced more tests with the US carrying out a number of strikes on vessels in the Strait of Hormuz while Iran launched its own attacks across the Gulf.

Earlier this month, VRChat and Discord suffered data breaches…wait…or did they? Some are wondering! Welcome to the Identity Theft Resource Center's Weekly Breach Breakdown for June 26, 2026. I'm Alex Achten, Vice President of Media Relations for the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we review the latest events and trends in data security and privacy. Today, we are going to look at two data breaches that…well…weren't. Follow on LinkedIn: linkedin.com/company/idtheftcenter/ Follow on Instagram: instagram.com/idtheftcenter/ Follow on Facebook: facebook.com/IDTheftResourceCenter/ Follow on X: twitter.com/IDTheftCenter Follow on TikTok: www.tiktok.com/@idtheftcenter_ Follow on YouTube: www.youtube.com/@IDTheftCenter

As Ireland gets closer to hosting the EU presidency, concerns remain about the country's ability to provide adequate national security for such a high profile event.Dr Edward Burke, assistant professor of the history of war at UCD, joins The Last Word to discuss the security gaps that are leaving Ireland open to bad actors.Catch the full chat by pressing the 'Play' button on this page!

AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with Simon Biggs, Cyber Incident Response Specialist at Varonis, about how AI is accelerating the attack lifecycle. Simon explains how attackers are using AI kits to instantly set up ephemeral phishing portals, query SQL databases in minutes, and bypass AI guardrails to compile Remote Access Trojans (RATs). We also discuss the shift in ransomware tactics from "encryption-first" to "data-theft-first," and how AI empowers attackers to post-process terabytes of stolen data to monetize it in novel ways. For defenders, the message is clear: if your S3 access logs and SQL transaction logs aren't turned on before a breach, your forensics team won't be able to tell lawyers or regulators what data was actually lost. Discover why data classification and proactive logging are the ultimate lifelines for IR teams in the AI age. Guest Socials -⁠⁠ ⁠⁠⁠⁠Simon's Linkedin Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you are interested in AI Security, you can check out our sister podcast -⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ AI Security Podcast⁠Questions asked:(00:00) Introduction(02:00) Simon Biggs' Background in Law Enforcement and Varonis(03:10) Is There a Huge Volume of Sophisticated AI Attacks?(04:10) How AI Accelerates SQL Queries and Business Email Compromise (BEC)(05:15) Why AI Kits Are the New Metasploit and BloodHound(08:15) Varonis Threat Labs: Copilot Prompt Injection Vulnerability(09:20) The Forensic Challenge: Auditing Prompts vs. Understanding AI Output(10:30) Tricking AI Guardrails to Compile Malware(12:15) Defensive Strategies: Shadow AI, Permissions, and Logging(15:30) Using Defensive AI and BloodHound for Threat Hunting(17:30) Why Ransomware is Now "Data First, No Encryption"(20:50) The Legal Nightmare of Unclassified Stolen Data(23:20) Why Windows Forensics Can't Tell You What Data Was Stolen(31:20) The Crucial Importance of Enabling S3 and Cloud Audit Logs(35:10) How AI Allows Attackers to Post-Process Terabytes of Stolen DataResources spoken about during the episode:Simon's Research at VaronisArticle about SearchLeak Article about RepromptVaronis Threat LabsThank you to Varonis for sponsoring this episode of Cloud Security Podcast

Nintendo, Eastman Kodak, Madison Square Garden, Fortinet are all part of this week's fun!

ServiceNow, Nexstar, Meta, Instagram, Novo Nordisk and the Iranian Banking sector are all part of this week's breaches...

Daniel is joined by Dr. Andreas Kuehlmann, General Manager of Security Solutions at Arteris. He has over 35 years of experience in semiconductor design, software, and cybersecurity, including roles at IBM Research, UC Berkeley, Cadence, and Synopsys. Previously, he was CEO of Cycuity, which was acquired by Arteris. Dan explores… Read More

Living in poor conditions shouldn't be seen as a rite of passage for university students, according to the boss of MBIE's tenancy investigations team. The team inspected 14 rentals in North Dunedin last month and found several breaches of healthy homes standards. National Manager of MBIE's tenancy and compliance team, Brett Wilson spoke to Lisa Owen.

Send us Fan MailGabe and I dig into Shiny Hunters and why the scariest cyberattacks now look like ordinary logins instead of dramatic break-ins. We map how credential theft, social engineering, and SaaS data exports turn basic security hygiene into the difference between a close call and a headline. • Shiny Hunters' scale, loose structure, and why takedowns rarely stick • Why ransomware and extortion keep growing as a business model • How the tactics evolve from Microsoft 365 and developer creds to SaaS platforms like Salesforce • Credential stuffing, vishing, and smishing as “low-friction” intrusion paths • The Snowflake-style failure mode of missing MFA and weak password practices • Password reuse and how consumer breaches can cascade into enterprise access • Data retention and why old records increase privacy risk • Vendor risk and the shared responsibility model for identity and data • Practical steps that improve security without relying on perfect users If you guys have not been to our website, theproblemlounge.com, check it out. Got some new blogs up there. Sign up for the newsletter. Support us, follow us. Let's get this out to more people. Support the show

Episode 301: This week's episode dives into the tech stories that should keep you up at night. We start with the chilling reality of the 23andMe breach—proof that your genetic code, the one thing you can never change, can be stolen, sorted, and sold to the highest bidder. Then we move to smart‑city surveillance gone rogue, where police camera networks keep recording even after the city tries to shut them down, leaving officials resorting to trash bags and tape while the data quietly flows elsewhere. Add in AI-driven hardware shortages now hitting consumer devices, and the picture gets even more unsettling.But the unease doesn't stop there. We tease emerging tech that blurs the line between science and science fiction: Wi‑Fi systems that can identify you through walls, living neuron computers that learn, and AI models struggling to admit what they don't know. Finally, we ground it all with a space‑tech reality check—from Blue Origin delays to SpaceX's crypto holdings—reminding listeners that even the companies shaping the future aren't immune to chaos. If you want the stories that reveal how fragile our digital world really is, this is the episode you don't skip all coming up on TechTime Radio, with a little whiskey on the side.-- Full Episode Details:Your genetic code is now a commodity, and the scariest part is you can't cancel it, replace it, or reset it like a password. We open with the 23andMe breach and lawsuit, unpacking how credential stuffing can unlock deeply personal genetic data, why DNA privacy is permanent, and what it means when stolen data can be resold and targeted by group. If you've ever wondered whether consumer DNA testing is worth the risk, we lay out the tradeoffs in plain terms.Then we head straight into smart city surveillance with a story that's equal parts absurd and alarming: police camera networks that can't be shut off by the city that paid for them. When officials learn data is being shared beyond local law enforcement, the “solution” becomes literal black trash bags over the lenses. It's funny until you realize it exposes a bigger issue in public tech contracts, license plate reader systems, and who truly controls the technology embedded in daily life.We also connect the dots between AI infrastructure and your wallet, using the Steam Deck OLED price hike as a real-world signal of component shortages, supply chain pressure, and AI data centers consuming the same memory and compute ecosystem that powers consumer devices. Along the way, we play Two Truths and a Lie with stories about Wi-Fi based person identification and living neuron biocomputing, then talk AI reliability and the push for models that can finally say “I don't know” instead of hallucinating. We close with a space tech reality check from Blue Origin and a blunt conversation about SpaceX's Bitcoin holdings and why crypto still feels like speculation to a lot of people.If you like tech news that's practical, skeptical, and still fun, subscribe for weekly episodes, share this with a friend who loves debating privacy and AI, and leave us a review so more people can find the show.Send us Fan MailSupport the show

Trump Mobile, Charter Communications, Carnival, Zara, Signal, and more are all part of this week's breaches!

Caesars Entertainment, GitHub, Panasonic, 7-Eleven, NYC Health and a whole lot are all part of this week's insanity!

Interview with Dimitri Sirota from BigID Most organizations think AI risk lives in the model – or the identity. It doesn't. It lives in the data. In this episode, BigID's CEO reframes the conversation: why legacy access controls are breaking down, why visibility into sensitive data is the missing foundation, and what it takes to govern humans and machines under a single, accountable framework. Segment Resources: BigID's Agent Access Management Guide BigID's podcast, CTRL + ALT + AI This Week's Topic: Cascading Breaches We're seeing more and more 3rd and 4th party attacks that chain through multiple layers of compromised tools and services. In this topic segment, we discuss the two main aspects of this trend: How we can stop the chain of breaches from a third party library, vendor, or service provider How this might get handled at the legal, contractual, and organizational levels We discuss two big recent examples: Sonicwall's 2025 breach of their cloud firewall configuration backup service The compromise of Aqua Security's widely used Trivy open source tool The Weekly Enterprise News Finally, in the enterprise security news, Funding and M&A courtesy of the Security, Funded newsletter We have evidence that attackers are leveraging AI now (this sounds like old news, but there was little to no evidence before, when people were claiming this) The Angry admin problem emerges again Vulnerability information is getting crazy to keep up with Breach information is getting crazy to keep up with You can give your Agents an allowance now - don't spend it all in one place Are vulnerabilities sparse or dense? Mythos, as a model, isn't all that special Deploy your own deception sensors! Japan made something weird. Again. All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-459

Weekly update is up! Crime Pays: The Instructure Ransom; Another Week of Breaches; New Govs Onboarded: Costa Rica, Bangladesh and The Bahamas https://www.troyhunt.com/weekly-update-504/See omnystudio.com/listener for privacy information.

Interview with Dimitri Sirota from BigID Most organizations think AI risk lives in the model – or the identity. It doesn't. It lives in the data. In this episode, BigID's CEO reframes the conversation: why legacy access controls are breaking down, why visibility into sensitive data is the missing foundation, and what it takes to govern humans and machines under a single, accountable framework. Segment Resources: BigID's Agent Access Management Guide BigID's podcast, CTRL + ALT + AI This Week's Topic: Cascading Breaches We're seeing more and more 3rd and 4th party attacks that chain through multiple layers of compromised tools and services. In this topic segment, we discuss the two main aspects of this trend: How we can stop the chain of breaches from a third party library, vendor, or service provider How this might get handled at the legal, contractual, and organizational levels We discuss two big recent examples: Sonicwall's 2025 breach of their cloud firewall configuration backup service The compromise of Aqua Security's widely used Trivy open source tool The Weekly Enterprise News Finally, in the enterprise security news, Funding and M&A courtesy of the Security, Funded newsletter We have evidence that attackers are leveraging AI now (this sounds like old news, but there was little to no evidence before, when people were claiming this) The Angry admin problem emerges again Vulnerability information is getting crazy to keep up with Breach information is getting crazy to keep up with You can give your Agents an allowance now - don't spend it all in one place Are vulnerabilities sparse or dense? Mythos, as a model, isn't all that special Deploy your own deception sensors! Japan made something weird. Again. All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-459

Get featured on the show by leaving us a Voice Mail: https://bit.ly/MIPVM This episode explores how AI is accelerating both productivity and cyber risk. As attacks become faster and more automated, traditional perimeter security no longer holds. The conversation focuses on why organisations must assume compromise, adopt zero trust thinking, and build visibility before scaling AI. It highlights practical steps to govern AI use, reduce insider risk, and modernise access models beyond legacy VPNs. The core message is clear: embracing AI without security foundations can move your business backwards.

If you've ever wondered what happens when ransomware, bad decisions, cyber insurance confusion, and TikTok tech advice all collide in one spectacular dumpster fire… this episode is for you. The conversation dives into four fresh OCR enforcement actions that all share one painfully common theme: nobody did a proper risk analysis until after everything caught on fire. Add in cybersecurity "professionals" secretly helping ransomware gangs and business owners trying to replace enterprise security tools with AI-generated software from TikTok, and you've got an episode that somehow manages to be both educational and deeply concerning. More info at HelpMeWithHIPAA.com/559