Podcasts about cisos

In 2026, the competitive advantage in AI will no longer come from model speed or scale—it will come from trust. As Southeast Asia and Korea accelerate enterprise AI adoption amid fragmented regulatory landscapes (from Singapore's FEAT to Korea's AI Basic Act), the CIO's mandate has shifted from deployment to defense. “AI integrity”—the convergence of data provenance, bias mitigation, explainability, and ethical resilience—is now a board-level risk. For heads of compliance and data science, the question is no longer “Can we scale AI?” but “Can we certify its integrity?” Without it, you face regulatory fines, model drift, and reputational collapse.  In this PodChats for FutureCIO, we are joined by Lee Anstiss, Regional Director, Southeast Asia and Korea at Infoblox, to hopefully get insights and tips on how to safeguard AI integrity.1.       Do Asia's CIOs and CISOs know exactly which AI models are running across all our business units—or is shadow AI already creating integrity risks we cannot see?2.       Given the fragmented state of each model's regulatory status, what options are there for CIOs as they navigate fragmented rules with fragmented data?3.       In your view, are enterprises in Asia prioritizing raw accuracy over an “integrity scorecard” that includes bias, explainability, and robustness—and if so, are CIOs trusting models that are fast but not fair?4.       Based on current technologies and practices, can CIOs trace every piece of training data, including synthetic data, back to its source? Do organisations have blind spots where hidden bias or poisoned inputs could enter?5.       Can CIOs test their production AI for bias against local languages and cultural norms in each market? Can they produce an audit trail for any regulator who asks?6.       If a regulator demands proof of real-time bias disclosure tomorrow, is there a way for enterprises to have automated logs mapped to specific legal articles?7.       Should organisations maintain a human-in-the-loop for high-stakes decisions, with override logs that feed back into retraining? How risky is using the discipline of oversight as a checkbox?8.       Our topic is “tips on how to safeguard AI integrity” Can you share some of the most common or practical tips for CIOs, heads of AI, for ensuring or safeguarding AI integrity.

Artificial intelligence is changing cybersecurity on both sides of the battle. While defenders are adopting AI to improve detection and response, attackers are using it to discover vulnerabilities, automate exploitation, and dramatically accelerate the pace of attacks. In this episode of Cybersecurity Today On The Weekend, host David Shipley speaks with Lionel Liddy, Chief Information Security Officer at Menlo Security, about why today's security strategies must evolve as AI reshapes the threat landscape. The conversation explores how AI is speeding up vulnerability discovery, why browser security has become a critical layer of defence, the emerging risks of AI agents operating inside browsers, and why recent NIST research suggests perfect AI guardrails may be mathematically impossible. Lionel also explains why organizations should prepare for future attacks that could spread even faster than Log4j. In this episode: How AI is accelerating cyberattacks Why browser isolation can reduce risk The security challenges created by AI agents Prompt injection and browser extension threats Why AI guardrails have fundamental limits Lessons from Log4j and preparing for the next major exploit Practical advice for CISOs and security leaders Chapters 00:00 Sponsor – NordLayer 00:39 Weekend Show Intro 01:48 Lionel Liddy Background 04:44 What Menlo Security Does 06:43 AI Speeds Up Exploits 10:09 CISO Whiplash With AI 12:01 Agents And Browser Risks 15:59 Guardrails And NIST Proof 19:40 Mythos Hype And New Normal 23:19 Hazmat Suit For Servers 27:22 Log4j Times Four Scenario 31:44 Wrap Up And Links 32:54 Sponsor – NordLayer Outro Subscribe for weekly cybersecurity news, expert interviews, and practical insights for CISOs, IT professionals, and security leaders.

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Browser Security in the Age of Agentic AI: Containment, Isolation, and the New CISO Reality Host Jim Love introduces a #TrendingOnTheWeekend episode featuring David Shipley (Cyber Security Today, Beauceron Security) interviewing Lionel Liddy, CISO at Menlo Security, about AI-driven vulnerability discovery and why reactive security is failing as exploitation accelerates. Liddy shares his path from a University of Toronto PhD researching virtual machines to building Menlo's browser-security approach: an isolated remote "cloud browser" that prevents active web content from executing on endpoints and can also shield servers by forcing interactions through a controlled browser. They discuss CISOs struggling to keep up with rapid shifts, agentic AI risks in browsers and extensions, limits of LLM guardrails (including NIST's proof-like framing), and the compounding impact of pervasive bugs and technical debt. The episode closes with where to learn more at Menlo Security. 00:00 OpenClaw Policy Panic 00:19 Weekend Show Setup 00:57 Interview Preview 02:06 Lionel Origin Story 05:02 Menlo Browser Isolation 06:58 AI Speeds Up Exploits 10:33 CISO Whiplash Era 12:18 Agents In The Browser 16:17 Guardrails Limits Proof 19:58 Mythos And New Normal 23:36 Hazmat Suit For Servers 28:24 Collision Weekend Scenario 32:02 Wrap Up And Links 33:11 Show Closing Notes

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Today, we are dropping our final episode in our series The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.In our final episode, we are joined by Shayne Higdon, Wallarm CEO, who closes the series by examining what the accountability moment demands from enterprise leaders, what a mature AI governance model needs to prove rather than promise, and what the next 12 to 24 months look like for organizations that get this right.QuestionsWhy is now the accountability moment for enterprise AI?What has changed between the early days of AI experimentation and today's enterprise AI deployments that makes accountability such a pressing issue?When we talk about AI accountability, what does that actually mean in practical terms? Are we talking about visibility, auditability, enforcement, ownership—or all of the above?As organizations race to deploy AI, how should CIOs balance the speed of transformation with the responsibility to govern it effectively?Why are traditional governance and security models struggling to keep pace with the way AI is being adopted across the enterprise?Given those challenges, how should boards and executive teams evaluate whether their organizations are truly ready to scale AI safely and responsibly?And once an organization believes it's ready, what does a mature AI governance model actually need to prove - not just promise?From an operational standpoint, how do capabilities like discovery, runtime monitoring, and enforcement come together to create a closed-loop approach to AI accountability?Stepping back and looking across this entire conversation, what's the one mindset shift every enterprise leader needs to make when it comes to AI security and accountability?And finally, as listeners think about what's ahead, what should they expect the future of AI security and accountability to look like over the next 6, 12, or even 24 months?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/shaynehigdon/Full AbstractAbstract: Join Shayne Higdon, Wallarm CEO, for this episode, which closes the series by examining what the accountability moment demands from enterprise leaders, what a mature AI governance model needs to prove rather than promise, and what the next 12 to 24 months look like for organizations that get this right.AI deployment is not waiting for governance to catch up. Across most enterprises, the gap between how fast AI is being adopted and how well it is being governed is widening every quarter. CIOs and CISOs are not debating whether to govern AI. They are trying to figure out how, under real organizational pressure, with tools and frameworks that were built for a different threat model.That pressure is coming from every direction at once. Boards want AI transformation to move fast. Regulators want documented evidence that it is under control. Security teams want runtime visibility and enforcement capabilities that most of their current tools do not provide. And the AI systems themselves are not waiting: they are accessing data, calling external services, and making decisions continuously, in ways that after-the-fact governance cannot meaningfully constrain.This is the accountability moment. Not because the risk is new, but because the consequences of undermanaged AI are now concrete enough to land on a board agenda, an audit report, and a regulatory deadline at the same time. What accountability actually requires in practice is the full AI control loop: knowing what AI is running across the enterprise, seeing what it is doing at runtime, enforcing policy before damage compounds, and generating continuous evidence that the governance is real and not retroactive. Organizations that can demonstrate all four are in a fundamentally different position than those still assembling audit evidence from spreadsheets the week before a review.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://cash.app* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

AI is transforming cybersecurity, but who is securing the AI? Organizations urgently need leaders to manage AI security, governance, and risk. In this episode of TechTalks, InfosecTrain breaks down why the ISACA Advanced in AI Security Management (AAISM) credential is fast becoming essential for modern security leaders.

What happens when AI makes employees more productive today but gradually weakens the expertise companies will depend on tomorrow? In this episode of Tech Talks Daily, I speak with Dr. Margaret Cunningham, VP of Security and AI Strategy and Field CISO at Darktrace, about cognitive tech debt, the growing risk that companies are gaining short-term efficiency from AI while unintentionally weakening critical thinking, technical expertise, problem-solving ability, and human judgment. Margaret brings a rare combination of experience to this conversation. With a PhD in Applied Experimental Psychology and a career spanning behavioral science, cybersecurity, privacy, human-centered security, and AI strategy, she examines technology adoption through the lens of how people actually think, learn, develop expertise, and make decisions. She explains cognitive tech debt by comparing it with the technical debt familiar to software teams. Companies can introduce technology quickly and enjoy immediate improvements in speed and output, only to discover weaknesses underneath those gains later. With AI, the debt may accumulate in people. Employees can appear highly productive while outsourcing the difficult cognitive work required to build judgment, recognize patterns, understand failures, and develop genuine expertise. We discuss emerging evidence that over-reliance on AI is already affecting professional skills. Software engineers may become less capable of diagnosing problems in code they did not create themselves. Medical professionals can lose decision-making capabilities when they become dependent on automated systems. Across knowledge work, deep reading and sustained concentration are increasingly being replaced by summarization, generation, and superficial review. Margaret describes the current period as the "bridge years," when AI systems are becoming increasingly capable but people still need to maintain the expertise required to recognize mistakes, question recommendations, recover from failures, and understand when automation should not be trusted. Companies cannot safely abandon human skills before technology can reliably perform those responsibilities without supervision. The conversation also challenges one of the most repeated promises surrounding enterprise AI adoption: that automation will remove routine work and allow employees to concentrate on higher-value activities. Margaret argues that companies have done a poor job of defining which tasks people genuinely want to give up and which skills they need to preserve. Some of the repetitive, slow, and difficult work being automated may be exactly where people develop pattern recognition, creativity, and professional judgment. This creates a serious challenge for cybersecurity teams and other high-stakes professions. If employees become reviewers of AI-generated outputs rather than practitioners developing expertise through experience, where will the next generation of senior engineers, security analysts, doctors, researchers, and technical specialists come from? Margaret explains why leaders need to understand which AI techniques are being used for different business problems rather than treating every form of artificial intelligence as interchangeable. Large language models, machine learning systems, behavioral analytics, and other technologies have different strengths and limitations. Knowing what questions to ask requires domain expertise, creating a difficult paradox for companies that may be automating away the very experience needed to govern these systems responsibly. We also examine the human consequences of AI adoption. Technical specialists who enjoy solving difficult problems can lose motivation when meaningful work is replaced by reviewing machine-generated outputs. Companies may struggle to understand who owns decisions made through collaboration between humans and AI, while younger employees could lose access to the experiences that previously helped people progress from beginners to experts. Margaret offers practical advice for business and technology leaders deciding how quickly to introduce AI across their workforce. Companies can identify the skills they need to preserve, create opportunities for employees to practice difficult cognitive work, use simulations and training to maintain expertise, ask teams which aspects of their jobs give them purpose, and resist pressure to automate every task simply because the technology exists. The message is not anti-AI. Margaret sees enormous potential for artificial intelligence in scientific research, cybersecurity, productivity, and solving difficult problems. But realizing those benefits requires a more intentional relationship between people and machines. For business leaders, CISOs, technology teams, AI practitioners, and anyone concerned about the future of human expertise, this conversation provides a practical framework for recognizing cognitive tech debt, deciding what should and should not be automated, preserving critical thinking skills, and building healthier forms of human-AI collaboration. AI can make people faster. The bigger question is whether companies can capture those productivity gains without losing the human capabilities they will need when the technology gets something wrong.

AI for business leaders doesn't have to be complicated. Learn practical AI and cybersecurity strategies in under three minutes!

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Can governments decide who gets access to advanced AI models? Are third-party breaches becoming impossible to control? And why are so many CISOs reaching burnout? In this special Cybersecurity Today Month in Review Panel, host Jim Love is joined by cybersecurity experts Laura Payne, David Shipley, and Mike Kim (Mycroft) to examine the biggest cybersecurity stories and trends from June 2026. The panel explores the controversy over U.S. export controls on Anthropic's Mythos and Fable AI models, what they reveal about digital sovereignty, and whether governments should be able to restrict access to frontier AI. They also discuss the continuing wave of third-party breaches, including Salesforce ecosystem compromises and the Clue breach, and why organizations must move beyond compliance toward practical risk management. The conversation examines FortiBleed, exposed administrator portals, credential reuse, and the difficult balance between software flaws, operational mistakes, and secure-by-default design. The panel also tackles one of cybersecurity's biggest human challenges: CISO burnout, executive accountability, organizational culture, and what separates successful security leaders from those set up to fail. The episode concludes with encouraging developments in international cybercrime enforcement, including Operation Riptide, and why better intelligence sharing and improved operational security are making it harder for cybercriminals to hide. Whether you're a CISO, security practitioner, IT leader, or simply interested in the rapidly changing cybersecurity landscape, this discussion offers practical insight into the trends shaping the industry. Panel Jim Love (Host) Laura Payne David Shipley Mike Kim (Mycroft) Topics covered AI export controls and digital sovereignty Anthropic Mythos and Fable Third-party and supply chain risk Salesforce ecosystem security FortiBleed and Fortinet security Secure-by-default strategies CISO burnout and executive accountability Operation Riptide Cybercrime investigations Security leadership and governance Chapters 00:00 Sponsor NordLayer 00:38 Meet the Panel 02:40 Author Scam Warning 04:51 Emotion Is the Target 08:47 AI Model Export Controls 10:01 Hype vs Real AI Security 15:01 Sovereignty and Dependency 20:35 Governments Push Back 24:14 AI Internal Voice Risks 26:12 Third Party Breach Fatigue 30:05 Compliance Limits on Risk 32:15 Blame Game to Risk Focus 33:18 Standards and Priorities 33:39 When Security Vendors Fail 34:35 FortiBleed Numbers Explained 35:44 Process Failures vs Bugs 37:32 Why Fortinet Gets Heat 39:05 Secure by Default Basics 41:04 Budget Reality and Culture 44:36 CISO Burnout and AI Pressure 46:16 Liability and Shared Ownership 50:12 What Great CISOs Do 53:07 Operation Riptide Wins 56:10 Deterrence and Due Process 58:14 Sharing Intel for ROI 59:09 Hopium and Wrap Up 01:00:46 Sponsor NordLayer Message

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Emily Matthews, founder and principal of NOLA Marketing, partnered with the Ponemon Institute to ask CISOs directly how vendor marketing influences their buying decisions. The resulting State of Cybersecurity Marketing Influence Report 2026 holds some surprises: webinars beat CISO dinners, hands-on workshops build the peer references buyers trust most, and the first visitor to your website is increasingly a machine.In this episode:The top two CISO complaints about cyber marketing: it differs from product reality, and it's too high-level. Emily's fix starts with coffee-walk conversations with your engineers.Why 44% of security leaders ranked webinars the most valuable event format, while peer roundtables and CISO dinners came last.Why hands-on workshops should always be free: "You should be paying them, not them paying you."How workshops become "investments in peer influence," the #1 credibility source in the research.The shift to answer engines: Bain's 80% zero-click prediction and how to make your website a better "buffet for LLMs."Emily's case study method: start with your selling points, validate them in the customer's voice, and pack the piece with reusable quotes.Why buyers rely on analysts less than they used to, and what fills the gap for the ~3,700 vendors outside the magic quadrants.Her advice for marketers coming from outside tech: keep asking why. "Fast is not an answer."About the guest: Emily Matthews is the founder and principal of NOLA Marketing. A history and English major who started in mainframe system software, she has spent her career in technical product marketing and previously worked with the Ponemon Institute on the original Cost of a Data Breach report.Notable quotes:"You should be paying them, not them paying you.""If it sounds like BS to us, it's probably going to smell bad to them too.""If you make up a case study, it sounds made up. Interview someone. Because it's real, it comes across." Support the showThe Cyber Go-To-Market Talk is the show for cybersecurity sales leaders, founders, CROs, and go-to-market operators looking to improve cyber sales performance and build more predictable revenue growth. Hosted by Andrew Monaghan, founder of Unstoppable.do, covering cyber sales leadership, revenue leadership, sales onboarding, forecasting, pipeline generation, and cybersecurity go-to-market execution.Follow me on LinkedIn for regular posts about growing your cybersecurity startupWant to grow your revenue faster? Check out my cybersecurity sales consulting and trainingNeed ideas about how to grow your pipeline? Sign up for my newsletter.

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Today, we are dropping another episode in our series The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.In today's episode, Craig Thomas, Sr. Solutions Engineer at Wallarm, returns to the show to dive into why runtime behavior is the critical blind spot, and what CISOs should demand if they want to move from policy to control.QuestionsSecurity teams are used to detecting incidents and responding after the fact. Why is that model becoming insufficient for AI-driven systems?Building on that, when we talk about response today, enforcement often means actions like restarting pods, rotating credentials, or shutting down services. Why can those measures come too late in an AI environment?So if traditional response isn't enough, why does AI behavior require controls that operate much closer to runtime?And when people hear "runtime enforcement," they may think of existing security controls. What changes when enforcement happens at the kernel level rather than only at the network, identity, or application layer?Can you make that tangible for us? What does it actually mean to revoke or contain a compromised AI session without disrupting the broader deployment?How does that kind of real-time containment change the risk equation for AI agents that have access to sensitive data, external services, or production workflows?With that in mind, what are some examples of AI behaviors that organizations should be able to stop immediately?Of course, security teams also don't want to become a bottleneck. How do organizations balance strong enforcement with the need to keep AI development and deployment moving quickly?And once organizations have the ability to discover, observe, and enforce AI behavior in real time, how does that change accountability at the enterprise level? What does good governance look like from there?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/cu-craigthomas/Full AbstractThis episode examines what is actually missing in AI security today. Craig Thomas, Sr. Solutions Engineer at Wallarm, dives into why runtime behavior is the critical blind spot, and what CISOs should demand if they want to move from policy to control.CIOs and CISOs have moved past debating whether AI security matters. The question now is what to actually do about it, and most organizations are finding that their existing tools answer a different question than the one AI is asking.Traditional security tools were built around access: who can reach a system, what credentials they present, what traffic looks like at the perimeter. AI shifts the problem to execution: what a system does once it has access, whether that behavior matches what the business intended, and how you know when it doesn't. Most current tooling has no answer for that. It can tell you what is deployed and what is configured. It cannot tell you what your AI is actually doing at runtime, on whose behalf, or whether any of it violates the policies you thought were in place.That gap is where most AI security programs stall. There is no shortage of governance frameworks, compliance checklists, and vendor claims. What is missing is operational control: the ability to see AI behavior as it happens, enforce policy at runtime, and produce evidence that holds up when an auditor or a board asks for it. The four capabilities that define a closed AI control loop, discover, observe, enforce, govern, are well understood as a category. Getting all four working together in production is where the real work begins.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://cash.app* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Qualys' CEO joins the Cyber Uncut podcast to explain why autonomous remediation, smarter patching, and risk-based security will define the next generation of cyber defence. Cyber security is entering a new era as powerful AI models dramatically reduce the time it takes attackers to discover and exploit vulnerabilities. In this episode, Qualys CEO Sumedh Thakar joins Cyber Daily's Liam Garman to explain why businesses need to look beyond the headlines surrounding Anthropic's Mythos and focus on what AI really means for cyber risk. The conversation explores how organisations can turn the tables by using AI to identify and remediate vulnerabilities before attackers strike. From smarter patching to autonomous remediation and risk-based prioritisation, Thakar outlines why speed, not just visibility, is becoming the defining factor in cyber defence. Looking ahead, the pair discuss why AI-driven attacks will demand AI-driven security and why CISOs and business leaders need a roadmap for autonomous remediation. If you want to understand how AI is reshaping both sides of the cyber security battle – and what your organisation should do next – this is an episode you won't want to miss. Please see links to the reports below: Verizon 2026 Data Breach Investigation Report (DBIR) [palink.co] – includes data by Qualys from Section 7 of Qualys TRU's The Broken Physics of Remediation report [palink.co] The Broken Physics of Remediation Enjoy, The Cyber Uncut team

Most organizations are fighting an uphill battle to prevent breaches—yet many still ignore the real costs demanded by vulnerable software. In this episode, cybersecurity veteran Todd Beebe explains why the pace of cyber threats is forcing teams to move from reactive patching to proactive security. You'll hear why old perimeter defenses are no longer enough, how AI is helping attackers find weaknesses faster, and why modern attacks are becoming quicker and more aggressive. Todd also breaks down the hidden risk of insecure software, the importance of vulnerability checks during acquisitions, and why human behavior still plays a huge role in security outcomes. Perfect for CISOs, IT leaders, procurement teams, and security practitioners, this conversation offers a practical look at how to stay ahead in a threat landscape that changes by the hour.

Podcast: Industrial Cybersecurity InsiderEpisode: Your Organization Says It's 'Green' on Manufacturing Security: Here's Why That's DangerousPub date: 2026-06-30Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWho actually owns OT cybersecurity? And when something breaks, who's accountable?In this episode, Craig and Dino tackle a question most manufacturing organizations still haven't answered.They address why CISOs are often handed responsibility for OT security without the authority to act on it, and how plants can score "green" on a compliance dashboard while remaining blind to 80% of their actual assets.They also dig into the role OEMs and system integrators should be playing in building security into project proposals from day one, and why most still aren't.From virtual patching for legacy systems that can't be touched, to the fast-growing OT security market, this is a grounded conversation for plant leaders, engineers, and security teams trying to close the gap between IT and OT.Chapters:(00:00:00) - Who Really Owns OT Cybersecurity?(00:02:00) - Asset Owners Bear the Ultimate Responsibility(00:04:00) - Responsibility Without Authority: The CISO's Dilemma(00:06:00) - Why OEMs and SIs Aren't Including Cybersecurity in Their Proposals(00:08:00) - The False Sense of Security Driving Dangerous Blind Spots(00:10:00) - How Organizations Claim "Green" While Missing 80% of Their Assets(00:13:00) - Half Measures vs. a Real OT Cybersecurity Strategy(00:16:00) - The Growing OT Security Market and Why Some Still Aren't Paying Attention(00:18:00) - Incident Response Drills and AI Accelerating the Threat Landscape(00:20:00) - Breaking Down the IT/OT Trust Barrier for GoodLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you'd like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Today, we are dropping another episode in our series The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.In his follow up appearance on the Code Story podcast, Tim Ebbers, Field CTO at Wallarm, discusses why detection alone is insufficient for AI-driven systems, what real enforcement looks like at the runtime level, and what accountability becomes possible once all four stages are in place.QuestionsSecurity teams are used to detecting incidents and responding after the fact. Why is that model insufficient for AI-driven systems?What does “enforcement” usually mean today, and why can actions like restarting pods or rotating credentials come too late?Why does AI behavior require controls that operate closer to runtime?What changes when enforcement happens at the kernel level rather than only at the network, identity, or application layer?Can you explain what it means to revoke or contain a compromised AI session without touching the broader deployment?How does real-time blocking change the risk equation for AI agents that access sensitive data, external services, or production workflows?What kinds of AI behaviors should organizations be able to stop immediately?How do teams balance strong enforcement with the need to avoid slowing down AI development and deployment? Once organizations can discover, observe, and enforce AI behavior, what does accountability look like at the enterprise level?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/tebbers/Full AbstractTim Ebbers, Field CTO at Wallarm, discusses why detection alone is insufficient for AI-driven systems, what real enforcement looks like at the runtime level, and what accountability becomes possible once all four stages are in place.Detection tells you what happened. It does not stop it. For most security incidents, that tradeoff is manageable. For AI systems that can access sensitive data, call external services, and trigger downstream actions at machine speed, the gap between detection and response is where the damage happens.The enforcement model most security teams operate today was built for a slower threat. Restarting pods, rotating credentials, and updating policies are all responses to something that has already occurred. Against an AI agent that can exfiltrate data, invoke a production workflow, or violate a compliance boundary in the time it takes to page an on-call engineer, that response model is not enforcement. It's cleanup.Closing that gap requires controls that operate at the layer where AI behavior actually executes, not at the perimeter, not at the identity layer, not at the application boundary. Kernel-level enforcement changes what is possible: a compromised session can be revoked by user identity or trace ID, connections can be terminated at the workload level, and enforcement can happen without a pod restart, a deploy cycle, or any impact to the broader environment. That is what it means to complete the AI control loop. Discover what is running, observe what it is doing, enforce what it should not be doing, and govern with evidence that the enforcement worked. Organizations that can only do the first two are solving half the problem.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://cash.app* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

In this episode, Steve speaks with Alex Bovee, co-founder and CEO of C1, a technology company focused on identity security online. Steve and Alex discuss why identity still often is an afterthought when businesses look at their risk profiles and how governance is changing as employees get access to more and more systems. Alex also shares his thoughts on how to translate identity management to board members and how to adapt technology so that it fits your team, not the other way around. Key Takeaways: Identity must be treated as a strategic risk.  When it comes to protecting your business against deepfakes, tried and true verification methods like MFA and multi-step approval processes remain best practice.  Choosing robust but user-friendly technology is important for attracting and retaining new talent.  Tune in to hear more about: The deepfake challenge (6:14) Automated identity governance (8:33) Empowering a culture of trust through identity strategy (12:20) Standout Quotes: “I would say that most forward-thinking CISOs 100% view identity as one of the most important pillars in their company that they need to protect and secure.” - Alex Bovee  “There's different, I would say, classes of deepfake-type attacks. There's more of your broad-based social engineering type attacks, and I think one of the impacts of AI on that is that AI is able to do that at scale and in a very targeted way. I think we're gonna see a lot of asymmetry happening in those types of attacks. And then the second category is much more of your targeted attack, where you're trying to deepfake the CEO calling the CFO, asking for an immediate wire transfer to pay for something.” - Alex Bovee “The best kind of security controls are the ones that are just in place that work, that are silent, and you don't know they're there, but they let you do your job.” - Alex Bovee Read the transcript of this episodeSubscribe to the ISF Podcast wherever you listen to podcastsConnect with us on LinkedIn and TwitterFrom the Information Security Forum, the leading authority on cyber, information security, and risk management.

In this episode, Simon sits down with Jeff Majka, Founder & CEO of Security Bulldog, an AI-driven cybersecurity intelligence platform designed to help organizations make faster, smarter security decisions.With more than 20 years of experience in cybersecurity marketing, enterprise technology, and go-to-market strategy, Jeff shares why traditional cybersecurity approaches are no longer enough in today's rapidly evolving threat landscape. The conversation explores the growing challenges CISOs face, the increasing complexity of cybersecurity buying decisions, and how AI can reduce manual workloads while improving risk management.Jeff also offers valuable insights for startup founders on achieving product-market fit, building effective go-to-market strategies, and creating products customers genuinely need.Whether you're a cybersecurity leader, startup founder, marketer, or technology executive, this episode delivers practical insights on innovation, trust, and the future of AI-powered security.Key MomentsIntroduction to Jeff Majka and his cybersecurity backgroundWhy Jeff founded Security BulldogThe growing challenge of cybersecurity vendor saturationThe evolving role of today's CISOHow security leaders evaluate cybersecurity vendorsWhy trust and peer recommendations outperform traditional analyst reportsWhat separates successful cybersecurity startups from the restBuilding products around narrow, well-defined customer problemsHow AI is reshaping cybersecurity operationsHow Security Bulldog helps organizations reduce remediation timeJeff's top go-to-market advice for startup foundersWhat's next for Security BulldogTo learn more about Jeff Majka , please visit her Linkedin ProfileTo learn more about  Security Bulldog, please visit her website.YOUR HOST - SIMON LADER    Simon Lader is the host of The Conference Room, Co-Founder of global executive search firm Salisi Human Capital, and lead generation consultancy Flow and Scale. Since 1997, Simon has helped cybersecurity vendors to build highly effective teams, and since 2022 he has helped people create consistent revenue through consistent lead generation.      Get to know more about Simon at:    Website: https://simonlader.com/  Twitter: https://twitter.com/simonlader  LinkedIn: https://www.linkedin.com/in/headhuntersimonlader/    The Conference Room is available onSpotifyApple podcastsAmazon MusicIHeartRadio

US Loosens Anthropic Claude Mythos Access, Unpatchable iPhone Exploit Emerges, and CISO Burnout Drives Fractional Shift Washington granted a partial reprieve allowing Anthropic's Claude Mythos to be released to more than 100 approved U.S. firms and institutions after export controls paused Mythos and the more restricted Fable 5, with access still limited to vetted American entities; the same day, OpenAI's GPT 5.6 was also restricted to government-approved partners under a Trump executive order requiring review of cyber-capable models.  The episode also covers Canadian hacktivist Aubrey Cottle's 18-month sentence for the 2021 Texas GOP hack and bail breaches, with possible U.S. charges pending. Researchers disclosed "USBliterate," an unpatchable physical USB exploit in the Secure ROM of older A12/A13 iPhones that aids forensic extraction. Finally, a survey finds rising CISO burnout, fewer full-time CISOs, growth in fractional CISO roles, and AI—especially shadow AI—overtaking liability as the top stressor. 00:55 AI Export Controls Shift 03:37 Anonymous Hacker Sentenced 05:32 Unpatchable iPhone Boot Exploit 07:30 CISO Burnout And Exodus 09:40 Wrap Up And Sign Off

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

What separates a CISO who survives from one who shapes the boardroom? In this episode, Steve Moore sits down with Walt Powell, Lead Field CISO at CDW and author of The CISO 3.0, to unpack the modern CISO playbook—why technical credentials alone no longer cut it, how to build personal eminence, and why most security leaders are still treated as second-class C-suite citizens.Walt traces his path from teaching networking before stateful firewalls existed, to writing CISSP exam questions for ISC2, to running CDW's Global Security Strategy Office. He explains what a field CISO does, why the role is harder than ex-CISOs realize, and how one bad meeting can tarnish a brand built over decades.He and Steve break down the four pillars Walt uses to measure his team—embedded advisory, eminence building, sales enablement, and voice of the customer—and how a karate-style “belt system” maps each consultant's competency. Walt explains why the same skills matrix from The CISO 3.0 works for any CISO trying to spot their own gaps.Walt argues a CISO who is not liked cannot succeed: you are the talent magnet, the culture builder, and the person proving in every board meeting that you belong in the seat. He shares the questions every candidate should ask before accepting the role—from D&O coverage to 10-K disclosure access—and why the 30-60-90 plan should be written before the second interview, not after the offer.The conversation closes with what Walt calls “strategic debt”—the identity and data governance work organizations skipped a decade ago that is now blocking AI adoption. Walt shares lessons from running OpenClaw on a Mac mini, why non-human identity tops every 2026 CISO worry list, and how Deep Research is reshaping senior architects.Key Topics• The modern field CISO role and the four pillars of impact• Why CISOs are still treated as second-class C-suite citizens• Building personal eminence through books, speaking, and writing• The CISO 3.0 skills matrix and self-assessment spider wheel• Two paths to the CISO seat: technical vs. MBA, and the gaps each leaves• Why likability is not optional for a successful CISO• Board readiness and proving you belong in the seat• Interview questions every CISO candidate must ask• Strategic debt: identity and data governance blocking AI adoption• OpenClaw, non-human identity, and the future of senior architectsGuest Bio:Walt Powell is the Lead Field CISO at CDW and a founding member of CDW's Global Security Strategy Office, where he leads a team of former CISOs advising security leaders in the field. A longtime executive coach and ISC2 exam development committee member, Walt is the author of The CISO 3.0: A Guide to Next-Generation Cybersecurity Leadership and Quantum Ready, his book on post-quantum cryptography. Connect with Walt on LinkedIn or at ciso30.com.GET A DEMO:

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

A customer discovered 11,000 AI agents running in their environment - and most weren't even built by developers. In this episode of 10X Growth Strategies, host Preethy Padmanabhan talks to Ankur Shah (CEO, Straiker) and Nick Shevelyov (CEO, vCSO.ai) on how AI is reshaping cybersecurity for enterprises and startups alike.   In this episode, we discuss: The two sides of AI and cybersecurity: using AI to improve security, and securing the AI itself Why LLMs and AI agents can be socially engineered just like humans and why that's a fundamentally new attack surface The discovery of 11,000 "citizen agents" inside a single enterprise, built without developer oversight Why visibility, governance, and guardrails are the new foundation of AI security What "YOLO mode" is, and why human-in-the-loop approval matters for high-risk agent actions How CISOs are thinking about traceability, accountability, and blast radius when deploying agentic AI Why distribution and trust are now the hardest problems in cybersecurity How MYTHOS and AI-discovered vulnerabilities are changing patching cycles and concentration risk Founder advice on building enduring companies in a crowded, fast-moving cybersecurity market Whether you're a founder, a CISO, or an investor trying to understand where AI and cybersecurity intersect - this conversation is for you. 10X Growth Strategies is a community founded by Preethy Padmanabhan, started as a podcast five years ago and now grown into a community of over 7,500 founders, investors, and executives across Luma and LinkedIn. The community hosts monthly events on timely topics in tech, AI, and entrepreneurship. Chapters: 00:00:10 - 00:00:55 - Introduction & Community Milestone 00:00:56 - 00:01:43 - Sponsor & Partner Shout-Outs 00:01:44 - 00:02:52 - Audience Check: Founders vs. Investors 00:02:53 - 00:03:38 - Meet the Speakers: Ankur Shah (Straiker) 00:03:39 - 00:05:01 - Meet the Speakers: Nick Shevelyov (vCSO AI) 00:05:02 - 00:06:44 - How AI is Changing Cybersecurity 00:06:45 - 00:08:36 - Why AI Agents are Hard to Secure 00:08:37 - 00:26:26 - Variables vs. Invariables in Cyber Strategy 00:26:27 - 00:28:40 - Audience Q&A: Standing Out in a Crowded Market 00:28:41 - 00:31:00 - Audience Q&A: Is Your Data Safe with ChatGPT & Claude? 00:31:01 - 00:33:19 - Closing Advice for Founders Connect: LinkedIn: www.linkedin.com/in/preepadu Website: https://grow10x.podbean.com/ Luma: https://lu.ma/10xgrowthstrategies

Today, we are dropping another episode in our series The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.In this episode, Craig Thomas, Sr. Solutions Engineer at Wallarm, examines what rogue AI actually means in practice, where the risk materializes, and what it takes to move from detection to control.QuestionsWhen we say "rogue AI," what do we actually mean? Is it only malicious AI, or can legitimate systems become risky too?What are the most common ways AI systems drift outside intended boundaries? Once an organization understands what rogue AI looks like, where does that loss of control typically begin, and who is responsible for preventing it?How do shadow LLMs, unsanctioned agents, and unmanaged AI workflows create risk even when no attacker is involved? If AI drift often starts with normal business activity, where do shadow AI systems fit into that picture?Why can an AI action look legitimate in isolation but still create serious business, security, or compliance risk when viewed as part of a larger sequence of actions? As these shadow systems become more embedded in everyday workflows, why is it so difficult to recognize risk in real time?How do APIs, integrations, and connected systems amplify the impact of those seemingly legitimate actions? What changes once those actions begin flowing across APIs, business applications, and interconnected systems?What kinds of unexpected outcomes worry CIOs and CISOs most today when AI systems are operating across those interconnected environments? As that connectivity expands, what are security and business leaders most concerned about?And given those concerns, what does meaningful oversight actually look like when AI systems can act at machine speed? How should organizations distinguish between the experimentation they want to encourage and the unmanaged AI behavior they need to control? One challenge is balancing governance with innovation. How do organizations avoid slowing down AI adoption while still maintaining control?We know that many organizations can detect risky AI behavior after the fact. But if they can't stop it in real time, what critical gap still remains? Even with governance programs in place, many organizations are still operating reactively. In closing, what's the key difference between detecting AI risk and actually controlling it?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/cu-craigthomas/Full AbstractIn this episode, Craig Thomas, Sr. Solutions Engineer at Wallarm, examines what rogue AI actually means in practice, where the risk materializes, and what it takes to move from detection to control.Not every AI threat starts with an attacker. Some of the most consequential AI risks organizations face today come from systems that are working exactly as designed, just not quite as intended. An agent that calls an API it was never supposed to reach. A workflow that exposes PII because nobody mapped the data path before deployment. A shadow LLM standing up in an AWS account because a developer needed to move fast and approval processes were slow. None of these require malicious intent to create serious business, security, or compliance exposure.Rogue AI is a broader category than most governance frameworks account for. It includes the unsanctioned, the unmonitored, and the unpredictable: AI systems that drift outside intended boundaries, take actions that look legitimate in isolation but create risk in sequence, and operate at machine speed in ways that make after-the-fact detection feel like a consolation prize. The gap most organizations have is not in detecting that something went wrong. It's closing the loop fast enough to matter.Meaningful AI governance requires more than policy and discovery. It requires the ability to observe AI behavior at runtime, understand what triggered each action and what it touched, and enforce boundaries before consequences compound. That closed AI control loop, from knowing what is running to seeing what it does to stopping what it should not, is the operational standard AI transformation demands. Most organizations are not there yet.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://click.cash.app/ui6m/mt82fpxl #CashAppPod. Cash App is a financial services platform, not a bank. Banking services provided by Cash App's bank partner(s). Prepaid debit cards issued by Sutton Bank, Member FDIC. See terms and conditions at https://cash.app/legal/us/en-us/card-agreement. Cash App Green, overdraft coverage, borrow, cash back offers and promotions provided by Cash App, a Block, Inc. brand. Visit http://cash.app/legal/podcast for full disclosures.* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

In this episode of The Other Side of the Firewall, hosts Ryan, Shannon, and Chris dissect a trending security report detailing how a low-skilled attacker easily hijacked a Claude AI instance to breach 14 companies by simply tricking the AI's guardrails. The team then shifts gears to discuss a new Senate NDAA proposal offering up to $100,000 in CMMC grants to help small defense contractors manage the steep costs of compliance, followed by a fiery debate on whether the rise of part-time, "fractional" CISOs is a smart budget move or a dangerous trend fueled by executive burnout and SEC liability fears. Finally, the crew decompresses by sharing their recent personal highlights, diving into everything from Italian cheese wheels and intense kettlebell training to the latest anime and running Cyberpunk 2077 via cloud gaming. Article: Low-skilled attacker used Claude, Codex to breach 14 companies https://www.helpnetsecurity.com/2026/06/17/ai-agents-offensive-cyber-operations-claude-codex/?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExRmN0RFJDWEUzaUlaQ1dQanNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR4E3yG7BOaMeTYFubhdWQ_VIe4dFT44y-rT81FKg7V-SI5kcjcb1RWQ6xGULA_aem_8VhuxrLpU8NGw90c2z2F4g Senate NDAA proposes CMMC grant program https://federalnewsnetwork.com/technology-main/2026/06/senate-ndaa-proposes-cmmc-grant-program/?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExRmN0RFJDWEUzaUlaQ1dQanNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR4Aj2tVqytcIddIhgYsDnOqhU3C2bFQJfvK6bCubRb6Irl1e-RsrCyXf47h8g_aem_flEvM7hdgC50H6QHxfc4WQ CISOs Not Likely to Disappear https://www.darkreading.com/cybersecurity-operations/stressors-ai-changes-cybersecurity-teams?fbclid=IwZXh0bgNhZW0CMTAAYnJpZBExRmN0RFJDWEUzaUlaQ1dQanNydGMGYXBwX2lkEDIyMjAzOTE3ODgyMDA4OTIAAR5iE2M_iy9f90Ot-N5J6yTCoGvB03tT6inGBuBHKpGzTq0-Q_6Vcls5sUZkJw_aem_YQTYrJHf8yoZ6ZBmBjcUQg Buy my book: https://www.theothersideofthefirewall.com/ Please LISTEN

The west's big security agencies issue a sincere warning on AI risk acceleration, plus Microsoft's Satya Nadella wants to change the tone on AI.Starring Tom Merritt and Robb Dunewood.Show notes can be found here. Hosted on Acast. See acast.com/privacy for more information.

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

Today, we are dropping another episode in our series The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.We all know that you can't secure what you can't see, which is why AI discovery is a first principle for AI security, but what's really required for AI discovery? It's more than just LLMs and agents. Today's episode is entitled AI Discovery isn't just AI, and joining us is Tim Ebbers, Field CTO at Wallarm. Tim and I discuss the real requirements for AI discovery, and why the connections between assets and infrastructure are part of the puzzle.QuestionsSecurity teams often say, “You can't secure what you can't see.” In the context of AI, what exactly do they need to see? What supporting infrastructure matters most when mapping AI risk, such as APIs, cloud services, Kubernetes workloads, data stores, identities, and external integrations?Where does shadow AI typically appear first inside an enterprise environment? How can it be prevented?How do relationships between assets change the risk picture? For example, why does it matter which API an agent can call or which data source a workflow can reach?What makes AI discovery harder than traditional application or cloud asset discovery? What are the similarities and differences?How should organizations prioritize what they find? Is every AI asset equally risky?What does “continuous discovery” mean in a world where AI services can be deployed, connected, or changed in minutes?Once an organization has visibility into its AI footprint, what's next? What are the biggest gaps in today's AI security programs?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/tebbers/Full AbstractMost security teams know that you can't secure what you can't see. In the context of AI, that rule turns out to be a lot harder to satisfy than it sounds.AI discovery isn't just a matter of cataloging your LLMs and agents. The real picture includes the APIs those agents call, the data sources they reach, the infrastructure they run on, and all the AI that got deployed without anyone telling security. Building that picture requires understanding relationships, not just inventories, because risk doesn't live in assets in isolation. It lives in what those assets can do together.In this episode, Tim Ebbers, Field CTO at Wallarm, examines what a complete AI control loop actually requires at the discovery stage: what needs to be visible, why the connections between assets change the risk calculation, where shadow AI tends to appear first and how it becomes unmanaged risk, and what makes AI discovery structurally different from traditional cloud or application discovery. It also looks at what organizations should do once discovery is in place, and where the biggest gaps remain in AI security programs today.If your team is building toward continuous AI governance, this is where that work starts.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://click.cash.app/ui6m/mt82fpxl #CashAppPod. Cash App is a financial services platform, not a bank. Banking services provided by Cash App's bank partner(s). Prepaid debit cards issued by Sutton Bank, Member FDIC. See terms and conditions at https://cash.app/legal/us/en-us/card-agreement. Cash App Green, overdraft coverage, borrow, cash back offers and promotions provided by Cash App, a Block, Inc. brand. Visit http://cash.app/legal/podcast for full disclosures.* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy

SUMMARY: As tools like Mythos create new AI-cybersecurity concerns, CIOs and CISOs need to be prepared for two challenges: Security Remediation and Patch to Production. SHOW: 1037SHOW TRANSCRIPT: The Enterprise AI Show #1037 TranscriptSHOW VIDEO: https://youtu.be/H5KxoiEIfUoSHOW SPONSORS:Nasuni - Activate your data for AI and request a demoOutShift by Cisco - “Scaling Out Superintelligence”  The Internet of Cognition architectureShareGate - ShareGate Protect. Microsoft 365 Governance, we got this!SHOW NOTES:Project Lightwell (Red Hat and IBM)Athena (Chainguard)Anthropic Project GlasswingOpenAI GPT 5.5-CyberTHESIS: Major initiatives are forming to help enterprise organizations combat security vulnerability threats found or created using new AI-cyber tools such as Anthropic Mythos. What are the key considerations, and what additional steps do organizations need to take to be advantaged by these capabilities? Part 1The Breaking Point and the Mythos MomentThe scope of open source security and supportPatches, disclosures and upstream open sourceClearinghouses, EOs, Laws and CommunitiesRemediation - Build vs. BuyPart 2How fast can you get from Patch to Production?Mitigation before patchingFast path and stable patch pipelines?Automation in patching vs. automation in deploymentFEEDBACK?Email: show @ the enterprise ai show dot comeBluesky: @TheEntAIShow.bsky.socialTwitter/X: @TheEntAIShowInstagram: @TheEntAIShow

The Cybercrime Wire, hosted by Scott Schober, provides boardroom and C-suite executives, CIOs, CSOs, CISOs, IT executives and cybersecurity professionals with a breaking news story we're following. If there's a cyberattack, hack, or data breach you should know about, then we're on it. Listen to the podcast daily and hear it every hour on WCYB. The Cybercrime Wire is brought to you Cybercrime Magazine, Page ONE for Cybersecurity at https://cybercrimemagazine.com. • For more breaking news, visit https://cybercrimewire.com

In this episode of The Conference Room, Simon welcomes Joshua Jones, Founder and CEO of Crush Security, for an eye-opening conversation about the hidden flaws within today's cybersecurity partner ecosystem.Drawing on more than 20 years of industry experience, Joshua explains why many CISOs struggle to receive unbiased guidance when purchasing security technologies and how traditional reseller models have drifted away from their original purpose of delivering value. He shares the inspiration behind launching Crush Security and how the company is using AI-powered, data-driven insights to help organizations make smarter security decisions.The discussion explores trust, transparency, tool sprawl, and the growing pressure on security leaders, while offering practical lessons for anyone building businesses focused on solving real customer problems.Joshua shares how an unexpected career opportunity led him into cybersecurity over two decades ago.The story behind founding Crush Security and identifying a major gap in the cybersecurity ecosystem.Why the traditional partner and reseller model is "broken" and often fails to serve buyers effectively.The importance of unbiased advice and how incentives can influence purchasing recommendations.The biggest frustrations CISOs have with vendors, partners, and advisory firms today. Understanding tool sprawl and why organizations frequently purchase overlapping technologies.Building stronger relationships between security, procurement, legal, and finance teams.Do resellers still provide value? Joshua shares his perspective on the industry's future.How Crush Security aligns its internal culture to prioritize customers over quotas.Why CISOs played a direct role in shaping the Crush Security platform.A look ahead at what's next for Crush Security, including upcoming innovations and industry announcements.To learn more about Joshua Jones, please visit her Linkedin ProfileTo learn more about  Crush Security, please visit her website.YOUR HOST - SIMON LADER    Simon Lader is the host of The Conference Room, Co-Founder of global executive search firm Salisi Human Capital, and lead generation consultancy Flow and Scale. Since 1997, Simon has helped cybersecurity vendors to build highly effective teams, and since 2022 he has helped people create consistent revenue through consistent lead generation.      Get to know more about Simon at:    Website: https://simonlader.com/  Twitter: https://twitter.com/simonlader  LinkedIn: https://www.linkedin.com/in/headhuntersimonlader/    The Conference Room is available onSpotifyApple podcastsAmazon MusicIHeartRadio

Today, we are kicking off a new series entitled The AI Control Loop, How enterprises govern the AI they've already deployed - sponsored by our friends at Wallarm.Wallarm is the AI Control Platform for Enterprise AI, protecting every AI workload, API, and application in production, giving CISOs the governance they need and CIOs the speed they demand. Organizations choose Wallarm for a complete inventory of APIs, AI agents, and AI apps, patented AI/ML-based threat detection and blocking that operates at production traffic speeds.Today's episode is entitled AI Security is API Security, and joining us is Tim Erlin, VP of Product Marketing at Wallarm. We discuss the foundational link between AI security and API security, digging into the role that APIs play in the dev, deployment, and operations of AI. We explore how they contribute to the risk profile of AI transformation projects, and how securing APIs is critical for successful AI transformation.QuestionsWhen people hear “AI security,” they often think first about models, prompts, or training data. Why do you argue that AI security starts with APIs?Where do you see organizations underestimating API risk as they move AI projects from pilot to production?How does the rise of AI agents change the stakes for API security compared with traditional application architectures?What are the most common API security assumptions that break down once AI systems begin taking action autonomously?Wallarm's ThreatStats research points to APIs as a major overlap point for AI vulnerabilities and exploited vulnerabilities. What does that tell us about where attackers are likely to focus?How should security leaders think differently about authentication, authorization, and API abuse when the “user” may be an AI agent rather than a human?What is one practical step teams can take today to strengthen API security before AI adoption expands further?Once you accept that AI security depends on APIs, what do organizations actually need to discover before they can protect it?Linkshttps://www.wallarm.com/https://www.linkedin.com/in/tim-erlin/Full AbstractIn the first episode of the AI Control Loop series, Tim Erlin, VP Product at Wallarm, examines why AI security and API security are the same problem approached from different angles, and what organizations need to discover before they can protect either one.Every AI model needs data to act on. Every AI agent needs services to call. Every AI workflow needs integrations to function. The connective tissue running through all of it is APIs, which means the security posture of any AI system is inseparable from the security posture of the APIs underneath it.That link is not theoretical. APIs are already the most targeted attack surface in enterprise environments, and AI is making that problem significantly larger. Agents that act autonomously on behalf of users do not just consume APIs the way traditional applications do. They discover them, invoke them dynamically, chain them across workflows, and do all of it at a speed and scale that makes human review impractical. The authentication assumptions, rate limiting strategies, and abuse detection models that worked for human-driven API traffic were not designed for this, and the gaps are not subtle.Most organizations moving AI from pilot to production are underestimating how much of their AI risk surface is actually API risk surface. Shadow APIs that were never inventoried, overpermissioned integrations that made sense for a human user but not for an autonomous agent, authentication patterns that cannot distinguish a legitimate AI session from an abused one. Securing AI at the foundational level means answering the API question first: what APIs does the AI touch, what can it do through them, and what would an attacker be able to reach if any part of that surface were compromised.Our Sponsors:* Check out Cash App and use my code CASHAPP10 for a great deal: https://click.cash.app/ui6m/mt82fpxl #CashAppPod. Cash App is a financial services platform, not a bank. Banking services provided by Cash App's bank partner(s). Prepaid debit cards issued by Sutton Bank, Member FDIC. See terms and conditions at https://cash.app/legal/us/en-us/card-agreement. Cash App Green, overdraft coverage, borrow, cash back offers and promotions provided by Cash App, a Block, Inc. brand. Visit http://cash.app/legal/podcast for full disclosures.* Check out Plaud AI and use my code CODESTORY for a great deal: https://plaud.aiAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy