Podcasts about zero trust

china technology government data explore seek states explaining espionage gettysburg bulk deter sophisticated zero trust security risks electronic health records utilizes

Play Episode Listen Later Jun 2, 2026 96:35

It started with a fake car listing on eBay.What looked like a simple online scam quietly grew, over more than a decade, into one of the most sophisticated cybercrime operations the FBI had ever traced. Custom malware. Opsec off the charts. Fleets of infected computers mining cryptocurrency for someone else. Millions of dollars siphoned from victims who had no idea.This is the story of Bayrob and the three men from Romanian who were behind it. And the long, strange road that led American investigators to their door.SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.This show is sponsored by Meter, the company building networks from the ground up. Meter delivers a complete networking stack - wired, wireless, and cellular - in one solution that's built for performance and scale. Alongside their partners, Meter designs the hardware, writes the firmware, builds the software, manages deployments, and runs support. Learn more at meter.com.This show is sponsored by Maze. Maze uses AI agents to triage and remediate cloud vulnerabilities by figuring out what's actually exploitable, not just what's theoretically risky. They remove the noise, prioritize vulns that matter, and manage remediation, so your team stops wasting time on meaningless vulns. Visit MazeHQ.com/darknet for more information.Support for this episode comes from NetSuite. NetSuite gives you visibility and control of your financials, planning, budgeting, and of course - inventory - so you can manage risk, get reliable forecasts, and improve margins. NetSuite helps you identify rising costs, automate your manual business processes, and see where to save money. KNOW your numbers. KNOW your business. And get to KNOW how NetSuite can be the source of truth for your entire company. Visit www.netsuite.com/darknet to learn more.This episode is sponsored by Chainguard. Chainguard builds container images the right way — minimal, hardened, and built from source every single day. We're talking images with zero known CVEs, designed from the ground up for production. No bloat. No mystery packages. No 2 a.m. patching marathons because some transitive dependency lit up your dashboard. Stop patching images that are insecure. Start shipping clean. Head to chainguard.dev to see how secure your software supply chain can really be.

american head ai fbi millions ebay meter maze romanian zero trust fleets netsuite opsec cves threatlocker chainguard

S8 Ep945: (10) Francis Rose explores the security risks of electronic health records, explaining how nation-states like China seek bulk data for espionage and how the government utilizes "zero trust" technology to deter sophisticated machine-spe

The John Batchelor Show

Play Episode Listen Later May 30, 2026 5:53

(10) Francis Rose explores the security risks of electronic health records, explaining how nation-states like China seek bulk data for espionage and how the government utilizes "zero trust" technology to deter sophisticated machine-speed hacks.1913 GETTYSBURG

HS133: Approaching Zero…Trust (Sponsored)

android networks av zero trust

Play Episode Listen Later May 26, 2026 49:56

Most enterprises have some kind of zero trust strategy, but a lot of them could be better described as good intentions rather than active programs being implemented. Making good on a zero trust strategy and achieving an actual zero trust architecture requires tools that embody the core precept of zero trust thinking: deny access by... Read more »

strategy leadership cto cio ciso zero trust

HS133: Approaching Zero…Trust (Sponsored)

Heavy Strategy

Play Episode Listen Later May 26, 2026 49:56

Most enterprises have some kind of zero trust strategy, but a lot of them could be better described as good intentions rather than active programs being implemented. Making good on a zero trust strategy and achieving an actual zero trust architecture requires tools that embody the core precept of zero trust thinking: deny access by... Read more »

strategy leadership cto cio ciso zero trust

S E770: Zero Trust AV Networks | AVWeek 770

AVWeek - MP3 Edition

Play Episode Listen Later May 25, 2026 35:43

We talk a lot about “Zero Trust” in AV. But is the industry actually building systems worthy of that trust… or just throwing cybersecurity buzzwords around? And with Android devices heading toward end of life, what happens when meeting room technology is expected to outlive the software underneath it?Host Tim Albright and his industry expert guests bring you another must-watch AVWeek episode exploring Zero Trust in AV, cybersecurity accountability, Android end-of-life, MDEP, and what it all means for the future of meeting room technology.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Scott Alldridge on The Hidden Risks of AI Adoption: Cybersecurity, Data Protection & Zero Trust Strategies

Breakfast Leadership

Play Episode Listen Later May 22, 2026 31:35

Breakfast Leadership Show – AI, Cybersecurity & Why Your Board Should Care In this episode of the Breakfast Leadership Show, I sit down with cybersecurity veteran Scott Alldridge to unpack the real risks organizations face as they rush into AI adoption without governance, guardrails, or leadership oversight. With 30 years in IT and cybersecurity—and over 300,000 copies sold of the Visible Ops Handbook—Scott shares why AI security isn't just an IT issue… it's a board-level responsibility. We talk about the hidden dangers of uploading confidential information into AI tools, the human errors behind major breaches like the MGM Resorts International cyberattack, and why companies must stop treating cybersecurity as a cost center. Instead, it needs to be seen for what it truly is: revenue assurance and business survival. If you think your organization is “too small” to be targeted, you'll want to press play on this one.

ai strategy leadership hidden adoption risks cybersecurity data protection zero trust mgm resorts international breakfast leadership show

Cisco's 10.0 vulnerability, Microsoft email spammed, Chrome vulnerability surge

Play Episode Listen Later May 22, 2026 8:39

Cisco issues 10.0 Secure Workload admin flaw warning Spammers abuse internal Microsoftonline account Google's surge in Chrome vulnerability announcements Get the show notes here: https://cisoseries.com/cybersecurity-news-ciscos-10-0-vulnerability-microsoft-email-spammed-chrome-vulnerability-surge/ Thanks to our episode sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

google microsoft vulnerability crm surge cisco chrome ciso zero trust spammers threatlocker zero trust network access

The Department of Know: Google's CodeMender, CISA's big leak, Torvalds open-source warning

Play Episode Listen Later May 22, 2026 42:27

This week's Department of Know is hosted by Rich Stroffolino, with guests Kathleen Mullin, former CISO, MyCareGorithm, and Nick Espinosa, host, Deep Dive Radio Show. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. Huge thanks to our sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

google missed crm leak open source ciso zero trust cisa threatlocker torvalds zero trust network access ciso series rich stroffolino

GitHub VS Code extension breach, Shai-Hulud npm package compromise, Huawei/Luxembourg telecom link

Play Episode Listen Later May 21, 2026 7:37

GitHub breach via VS Code extension Shai-Hulud wave compromises 600 npm packages Huawei attack behind Luxembourg telecom crash Get the show notes here: https://cisoseries.com/cybersecurity-news-github-vs-code-extension-breach-shai-hulud-npm-package-compromise-huawei-luxembourg-telecom-link/ Thanks to our episode sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

crm compromise extension package huawei breach github luxembourg telecom ciso zero trust vs code shai hulud threatlocker zero trust network access

Shift to Prevention and Enforcement as We Repeat Security Mistakes With AI - Rob Allen - BSW #448

Paul's Security Weekly

Play Episode Listen Later May 20, 2026 62:32

Over the last decade, cybersecurity heavily invested in EDR, XDR, SIEM, telemetry, and SOC-driven operations. We stopped asking how to stop attacks and started asking how fast we could detect them. However, Mythos and frontier models have changed that paradigm. How do you detect a -7 day vulnerability? Detection and response cannot keep, so what's the answer? Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss why cybersecurity is shifting from detection and response to prevention and enforcement. As attackers accelerate through automation and AI, organizations are revisiting prevention-focused controls. Rob will discuss why organizations need to adopt application allowlisting, Zero Trust, Ringfencing, and policy enforcement to reduce attacker freedom before execution occurs. Prevention-first security is the only way to decrease the AI attack surface. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the leadership and communications segment, What CISOs need to land a board role, The Security Mistakes Being Repeated With AI, When Senior Leaders Lack People Skills, Transformations Fail, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-448

ai mistakes shift security prevention mythos enforcement chief product officer detection soc zero trust siem edr xdr rob allen threatlocker business security weekly

Microsoft hits Fox Tempest, robotics OS flaw, CISA admins leaks keys

Paul's Security Weekly TV

Play Episode Listen Later May 20, 2026 6:32

Microsoft disrupts malware-signing-as-a-service Critical flaw found in industrial robot OS CISA admin leaks keys Get the show notes here: https://cisoseries.com/cybersecurity-news-microsoft-hits-fox-tempest-robotics-os-flaw-cisa-admins-leaks-keys/ Thanks to our episode sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

microsoft keys hits crm robotics leaks tempest ciso flaw zero trust cisa admins threatlocker zero trust network access

Shift to Prevention and Enforcement as We Repeat Security Mistakes With AI - Rob Allen - BSW #448

Play Episode Listen Later May 20, 2026 62:32

Over the last decade, cybersecurity heavily invested in EDR, XDR, SIEM, telemetry, and SOC-driven operations. We stopped asking how to stop attacks and started asking how fast we could detect them. However, Mythos and frontier models have changed that paradigm. How do you detect a -7 day vulnerability? Detection and response cannot keep, so what's the answer? Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss why cybersecurity is shifting from detection and response to prevention and enforcement. As attackers accelerate through automation and AI, organizations are revisiting prevention-focused controls. Rob will discuss why organizations need to adopt application allowlisting, Zero Trust, Ringfencing, and policy enforcement to reduce attacker freedom before execution occurs. Prevention-first security is the only way to decrease the AI attack surface. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the leadership and communications segment, What CISOs need to land a board role, The Security Mistakes Being Repeated With AI, When Senior Leaders Lack People Skills, Transformations Fail, and more! Show Notes: https://securityweekly.com/bsw-448

ai mistakes shift security prevention mythos enforcement chief product officer detection soc zero trust siem edr xdr rob allen threatlocker business security weekly

Shift to Prevention and Enforcement as We Repeat Security Mistakes With AI - Rob Allen - BSW #448

Business Security Weekly (Audio)

Play Episode Listen Later May 20, 2026 62:32

Over the last decade, cybersecurity heavily invested in EDR, XDR, SIEM, telemetry, and SOC-driven operations. We stopped asking how to stop attacks and started asking how fast we could detect them. However, Mythos and frontier models have changed that paradigm. How do you detect a -7 day vulnerability? Detection and response cannot keep, so what's the answer? Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss why cybersecurity is shifting from detection and response to prevention and enforcement. As attackers accelerate through automation and AI, organizations are revisiting prevention-focused controls. Rob will discuss why organizations need to adopt application allowlisting, Zero Trust, Ringfencing, and policy enforcement to reduce attacker freedom before execution occurs. Prevention-first security is the only way to decrease the AI attack surface. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the leadership and communications segment, What CISOs need to land a board role, The Security Mistakes Being Repeated With AI, When Senior Leaders Lack People Skills, Transformations Fail, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-448

ai mistakes shift security prevention mythos enforcement chief product officer detection soc zero trust siem edr xdr rob allen threatlocker business security weekly

Shift to Prevention and Enforcement as We Repeat Security Mistakes With AI - Rob Allen - BSW #448

Business Security Weekly (Video)

Play Episode Listen Later May 20, 2026 62:32

Over the last decade, cybersecurity heavily invested in EDR, XDR, SIEM, telemetry, and SOC-driven operations. We stopped asking how to stop attacks and started asking how fast we could detect them. However, Mythos and frontier models have changed that paradigm. How do you detect a -7 day vulnerability? Detection and response cannot keep, so what's the answer? Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss why cybersecurity is shifting from detection and response to prevention and enforcement. As attackers accelerate through automation and AI, organizations are revisiting prevention-focused controls. Rob will discuss why organizations need to adopt application allowlisting, Zero Trust, Ringfencing, and policy enforcement to reduce attacker freedom before execution occurs. Prevention-first security is the only way to decrease the AI attack surface. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the leadership and communications segment, What CISOs need to land a board role, The Security Mistakes Being Repeated With AI, When Senior Leaders Lack People Skills, Transformations Fail, and more! Show Notes: https://securityweekly.com/bsw-448

ai mistakes shift security prevention mythos enforcement chief product officer detection soc zero trust siem edr xdr rob allen threatlocker business security weekly

Linus Torvalds talks AI bug hunters, 7-Eleven ransom demand, MENA's new cybercrime op

Play Episode Listen Later May 19, 2026 8:37

Linus Torvalds not into AI bug hunters 7-Eleven hit with ransom demand MENA runs new cybercrime op Get the show notes here: https://cisoseries.com/cybersecurity-news-linus-torvalds-talks-ai-bug-hunters-7-eleven-ransom-demand-menas-new-cybercrime-op/ Thanks to our episode sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

ai eleven crm hunters ransom mena cybercrime ciso zero trust linus torvalds threatlocker zero trust network access

Grafan GitHub extortion, Microsoft rejects Azure report, Funnel Builder flaw

Unofficial SAP on Azure podcast

Play Episode Listen Later May 18, 2026 7:51

Grafana GitHub token breach leads to extortion attempt Microsoft rejects Azure vulnerability report, researcher disputes decision Funnel Builder flaw actively exploited to steal payment data Get the show notes here: https://cisoseries.com/cybersecurity-news-grafan-github-extortion-microsoft-rejects-azure-report-funnel-builder-flaw/ Thanks to our episode sponsor, ThreatLocker ThreatLocker is extending Zero Trust beyond endpoint control. With their recent release of Zero Trust Network Access and Zero Trust Cloud Access, access isn't based on credentials alone, it requires the right user, the right device, and the right conditions. Because as we've seen in recent large-scale CRM breaches, stolen credentials and misconfigurations can expose massive amounts of data. With ThreatLocker, nothing is exposed, and access is limited to exactly what's needed. Learn more and start your free trial today at ThreatLocker.com/CISO.

microsoft crm builder github funnel rejects azure ciso flaw extortion zero trust threatlocker zero trust network access

Australia Post | EGM Enterprise Services | Michael McNamara

The iTnews Podcast

Play Episode Listen Later May 17, 2026 23:27

This episode is brought to you by the iTnews State of Security 2026 report. Featuring insights from CISOs and senior security leaders across Australia, the report explores the key trends and challenges shaping cyber security this year - from AI governance and identity security to Zero Trust, XDR and cyber resilience. Download your copy today to benchmark your organisation's security strategy against the rest of the industry. Thanks to our 2026 State of Security partners - Sumo Logic, Saviynt, Virtual IT Group, CoreView, Brennan and Rubrik - for supporting this year's report. Visit iTnews.com.au and search “State of Security 2026” to download the report now.Hello and welcome to the iTnews Podcast.Our guest this fortnight is Australia Post's Executive General Manager of Enterprise Services Michael McNamara.Join us as we unpack Australia Post's target state architecture and the progress of technology initiatives within the broader Post 26 strategy.We also explore the structure of Enterprise Services - how teams are organised and what it looks for in the organisations it partners with.

ai australia state security rubrik zero trust cisos australia post xdr executive general manager sumo logic enterprise services michael mcnamara

#289 - TOW Augmented Network Security via Azure Firewall and Application Gateway for SAP/Non-SAP workloads (Davis, Davis, Nautiyal, Nautiyal) | SAP on Azure Video Podcast

Play Episode Listen Later May 15, 2026 76:12

In episode 289 of our SAP on Azure video podcast we talk about Augmented Network Security via Azure Firewall and Application Gateway for SAP/Non-SAP workloadsGoran Condric talks with Evren Buyruk, Sai Kishor, Rajesh Nautiyal, and Derick Davis about how to strengthen network security for SAP and non‑SAP workloads on Azure. They explore how Azure Firewall and Application Gateway work together in a layered, Zero Trust architecture to protect applications, control traffic, and help customers meet security and compliance requirements.Find all the links mentioned here: https://www.saponazurepodcast.de/episode289Reach out to us for any feedback / questions:* Goran Condric: https://www.linkedin.com/in/gorancondric/* Holger Bruchelt: https://www.linkedin.com/in/holger-bruchelt/ #Microsoft #SAP #Azure #SAPonAzure #Security #AzureFirewall #AppGateway #ZeroTrust

application gateway sap azure video podcasts workload augmented firewalls zero trust network security davis davis

The Uncomfortable Truth About How Digital Vulnerabilities Put Our Kids' Future at Risk

DrZeroTrust

Play Episode Listen Later May 13, 2026 28:33

Your kids' education is under attack—and the damage goes far beyond data breaches. Schools have become prime targets for hackers, not just because of the valuable student information they hold, but because their interconnected digital systems make them vulnerable to ransomware, data theft, and operational shutdowns that threaten safety and learning at every level. If you think cyber threats are just an IT problem, think again—this is a crisis of safety, trust, and our collective future.In this eye-opening episode, I expose the alarming realities of cybersecurity in America's schools. From massive breaches of platforms like Canvas and PowerSchool to ransomware attacks disabling vital systems like emergency notifications, security cameras, and HVAC controls, the stakes couldn't be higher. He reveals how adversaries exploit legacy tech, lax access controls, and vendor vulnerabilities, turning school networks into playgrounds for cybercriminals. The consequences? Loss of instruction time, compromised student identities, and even direct threats to safety—issues that can last for years.You'll discover:How cyber breaches in schools impact everything from classroom learning to emergency response systemsThe systemic risks created by centralized edtech platforms and third-party vendorsWhy traditional cybersecurity approaches fall short and what a true Zero Trust model for schools looks likePractical questions parents and school boards should be asking about MFA, data segmentation, vendor contracts, and incident responseThe urgent need to treat school cybersecurity as a matter of public safety and resilienceThis episode exposes the flawed assumptions and complacency that perpetuate one of the most critical vulnerabilities in our infrastructure—our children's education system. With billions of records at stake, and long-lasting consequences for identity and safety, it's clear: cybersecurity in schools isn't optional, it's essential.Whether you're a parent, educator, administrator, or concerned citizen, this conversation will radically change your perspective on what's really at risk—and how we can safeguard the future. If we fail to act, the fallout could disrupt learning, safety, and trust for generations.Prepare to be informed, inspired, and compelled to demand change. Schools are more than just buildings—they're the backbone of our society. Protecting them is protecting our future.

america kids digital loss risk schools protecting mfa hvac canvas vulnerabilities zero trust uncomfortable truth systemsthe powerschool responsethe

Rethinking Network Defense in Healthcare

HLTH Matters

Play Episode Listen Later May 13, 2026 24:09

Cybersecurity in healthcare isn't just about keeping attackers out anymore. It's about what happens after they get in. In this episode, Chris Boehm, Field CTO of Zero Networks, breaks down how organizations can move toward “Zero Trust” without disrupting clinical operations. From legacy systems and third-party access to the growing risks of AI, Chris shares how visibility, identity-based segmentation, and smarter automation are helping healthcare organizations stay secure while keeping care moving. As healthcare organizations struggle to secure complex environments and protect sensitive patient data, it's time to prioritize resilience over reactive strategies. Learn how healthcare teams can proactively reduce attack surfaces and build self-defending networks that keep critical operations running – even during active cyber incidents. In this episode, they talk about: Traditional perimeter-based security is no longer enough to protect healthcare organizations from modern cyber threats. The industry is shifting from a focus on preventing breaches to a focus on containing them once they occur. “Zero Trust” in practice means continuously verifying identity and controlling access rather than assuming anyone inside the network is safe. Identity-based segmentation plays a critical role in reducing risk without disrupting day-to-day workflows. Healthcare organizations face a unique challenge in balancing strong security measures with the need to maintain seamless clinical operations. Most organizations achieve partial network segmentation, which leaves gaps that attackers can exploit. Solutions like those from Zero Networks enable full segmentation while still allowing normal business and clinical activities to continue. AI tools introduce new risks by potentially accessing more data than intended, especially without proper oversight. A lack of visibility into network activity remains one of the biggest gaps in modern cybersecurity strategies. Organizations must begin preparing now for upcoming regulatory changes, including evolving HIPAA requirements. Real-world challenges such as workforce turnover and limited IT resources make implementing and maintaining security even more complex. A Little About Chris: Chris is the Field Chief Technology Officer at Zero Networks, leading security strategy and revenue alignment globally. He drives enterprise growth by connecting customer realities to product, go-to-market, and executive decision-making across complex, high-value enterprise pursuits. Specialize in Zero Trust architecture, identity-based microsegmentation, and lateral movement prevention—helping organizations reduce risk while enabling scale and operational resilience. He's also held leadership roles at SentinelOne during its post-IPO growth to ~$800M ARR and at Microsoft, contributing to the early adoption and enterprise scaling of security platforms such as Azure Sentinel. Not to mention, Chris has advised CISOs and executive teams on security strategy, risk, and transformation—translating complex challenges into measurable business outcomes.

ai real identity microsoft healthcare network defense traditional rethinking cybersecurity organizations ipo hipaa zero trust cisos specialize sentinelone

PP109: ThreatLocker Enforces Zero Trust With Strict Application Control (Sponsored)

security networking engineers cybersecurity application compliance pcs strict zero trust threatlocker

Play Episode Listen Later May 12, 2026 44:55

ThreatLocker takes an opinionated approach to Zero Trust. The company, our sponsor for today’s episode, starts with application control. It uses endpoint software that runs on PCs and servers to allow or deny applications to run. It can also monitor and control the behavior of allowed applications. ThreatLocker has extended its platform to include network... Read more »

Can You Please Train the AI on Your Way Out the Door?

CISO-Security Vendor Relationship Podcast

Play Episode Listen Later May 12, 2026 36:49

All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Jean-Paul Calabio, vp and CISO, Grainger. In this episode: Scanning the map isn't securing the territory CFOs don't fund faith What your AI inherits Nobody owns the gap Thanks to Jonathan Waldrop, CISO, Acoustic for providing our "What's Worse" scenario. A huge thanks to our sponsor, ThreatLocker ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.

ai train worse acoustic mike johnson cfos scanning ciso rivian zero trust cisos grainger threatlocker david spark ciso series

PP109: ThreatLocker Enforces Zero Trust With Strict Application Control (Sponsored)

Packet Pushers - Fat Pipe

Play Episode Listen Later May 12, 2026 44:55

ThreatLocker takes an opinionated approach to Zero Trust. The company, our sponsor for today’s episode, starts with application control. It uses endpoint software that runs on PCs and servers to allow or deny applications to run. It can also monitor and control the behavior of allowed applications. ThreatLocker has extended its platform to include network... Read more »

security networking engineers cybersecurity application compliance pcs strict zero trust threatlocker

The impact of Mythos and Florida Man, confidence gaps, phishing, & AI adoption - Chris Wallis, Deepen Desai, Erich Kron - ESW #458

Paul's Security Weekly

Play Episode Listen Later May 11, 2026 99:53

The Weekly Enterprise News This week, in the enterprise security news, Copy Fail The hits keep coming for CVE, NIST and NVD Cyber attacks on breathalyzers insurance carriers pulling support for AI Florida Man pleads guilty ignore the humanities at your own peril offense and defense don't scale the same is it okay to be left behind? scientists gave cocaine to salmon Mind the Gap: Confidence, AI, and the Future of Exposure Management Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder's 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality. Check out Intruder's Security Middle Child Report at https://securityweekly.com/intruderrsac. Modern Phishing Attacks Are Under Multi-Channel Siege Recently, there has been a shift in cybercriminals' behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past. This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them! AI is Now Default Enterprise Accelerator The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection. This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-458

ceo ai future confidence mind adoption gaps trusted mythos florida man phishing erich deepen intruder desai nist zero trust cve kron zscaler knowbe4

The impact of Mythos and Florida Man, confidence gaps, phishing, & AI adoption - Chris Wallis, Deepen Desai, Erich Kron - ESW #458

Enterprise Security Weekly (Audio)

Play Episode Listen Later May 11, 2026 99:53

The Weekly Enterprise News This week, in the enterprise security news, Copy Fail The hits keep coming for CVE, NIST and NVD Cyber attacks on breathalyzers insurance carriers pulling support for AI Florida Man pleads guilty ignore the humanities at your own peril offense and defense don't scale the same is it okay to be left behind? scientists gave cocaine to salmon Mind the Gap: Confidence, AI, and the Future of Exposure Management Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder's 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality. Check out Intruder's Security Middle Child Report at https://securityweekly.com/intruderrsac. Modern Phishing Attacks Are Under Multi-Channel Siege Recently, there has been a shift in cybercriminals' behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past. This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them! AI is Now Default Enterprise Accelerator The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection. This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-458

ceo ai future confidence mind adoption gaps trusted mythos florida man phishing erich deepen intruder desai nist zero trust cve kron zscaler knowbe4

The impact of Mythos and Florida Man, confidence gaps, phishing, & AI adoption - Erich Kron, Deepen Desai, Chris Wallis - ESW #458

Paul's Security Weekly TV

Play Episode Listen Later May 11, 2026 99:53

The Weekly Enterprise News This week, in the enterprise security news, Copy Fail The hits keep coming for CVE, NIST and NVD Cyber attacks on breathalyzers insurance carriers pulling support for AI Florida Man pleads guilty ignore the humanities at your own peril offense and defense don't scale the same is it okay to be left behind? scientists gave cocaine to salmon Mind the Gap: Confidence, AI, and the Future of Exposure Management Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder's 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality. Check out Intruder's Security Middle Child Report at https://securityweekly.com/intruderrsac. Modern Phishing Attacks Are Under Multi-Channel Siege Recently, there has been a shift in cybercriminals' behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past. This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them! AI is Now Default Enterprise Accelerator The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection. This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them! Show Notes: https://securityweekly.com/esw-458

ceo ai future confidence mind adoption gaps trusted mythos florida man phishing erich deepen intruder desai nist zero trust cve kron zscaler knowbe4

The impact of Mythos and Florida Man, confidence gaps, phishing, & AI adoption - Erich Kron, Deepen Desai, Chris Wallis - ESW #458

Enterprise Security Weekly (Video)

Play Episode Listen Later May 11, 2026 99:53

The Weekly Enterprise News This week, in the enterprise security news, Copy Fail The hits keep coming for CVE, NIST and NVD Cyber attacks on breathalyzers insurance carriers pulling support for AI Florida Man pleads guilty ignore the humanities at your own peril offense and defense don't scale the same is it okay to be left behind? scientists gave cocaine to salmon Mind the Gap: Confidence, AI, and the Future of Exposure Management Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder's 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality. Check out Intruder's Security Middle Child Report at https://securityweekly.com/intruderrsac. Modern Phishing Attacks Are Under Multi-Channel Siege Recently, there has been a shift in cybercriminals' behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past. This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them! AI is Now Default Enterprise Accelerator The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection. This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them! Show Notes: https://securityweekly.com/esw-458

ceo ai future confidence mind adoption gaps trusted mythos florida man phishing erich deepen intruder desai nist zero trust cve kron zscaler knowbe4

Welcome to IGEL Weekly: The Future of Secure Endpoints & Digital Workspaces

XenTegra - IGEL Weekly

Play Episode Listen Later May 11, 2026 0:35

This podcast explores the future of endpoint management, cloud workspaces, Zero Trust, and secure digital work. Each week, we break down the latest IGEL updates, industry trends, real-world strategies, and modern endpoint conversations shaping today's IT environments.Whether you're focused on security, device management, hybrid work, EUC, or workspace transformation, IGEL Weekly delivers practical insight without the fluff.New episodes weekly-ish.

digital secure workspace zero trust igel endpoints euc

Breaking the Reactive Cycle of Cybersecurity

Defense in Depth

Play Episode Listen Later May 7, 2026 31:52

All links and images can be found on CISO Series. Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Rob Allen. In this episode: The vulnerable stack Changing the structural economics Change the terrain The cost-benefit equation A huge thanks to our sponsor, ThreatLocker ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.

change cycle cybersecurity reactive ciso zero trust cisos rob allen threatlocker david spark ciso series

Ep. 125: Zero Trust Starts with Leadership

#ShiftHappens Podcast

Play Episode Listen Later May 7, 2026 49:34

Zero Trust is a responsibility leaders choose to own. In this #shifthappens episode, we're joined by Nicolas Blank, CTO of NBConsult, to unpack why most security programs fail before technology even enters the picture. Through analogies and real‑world examples, Nicolas explains why Zero Trust starts with leadership alignment, emotional buy‑in, and clear guardrails. The conversation explores what “assume breach” really means, why AI agents introduce new trust boundaries, how sovereignty and control are deeply connected, and why security breaks down the moment responsibility is outsourced.

ai leadership starts cto zero trust

514 - Attack Analytics

Reversim Podcast

Play Episode Listen Later May 6, 2026

פרק מספר 514 של רברס עם פלטפורמה - Attack Analytics. בפרק זה רן ואורי מארחים את ד"ר גיא וייזל, Tech Evangelist בחברת Cato Networks, לשיחה מרתקת על האופן שבו בינה מלאכותית משנה את חוקי המשחק בעולם הסייבר. דיברנו על מודלי AI מתקדמים, כיצד הם מאיצים מתקפות של האקרים אך גם משפרים את יכולות ההגנה, ואיך פרוטוקולים עתיקים יכולים להוות נקודת תורפה מסוכנת לתשתיות פיזיות. [00:00] ל"ג בעומר, כנס רברסים ופתיחת הפרק חג שמח! מקליטים על הדרך למדורה של רבי שמעון. עדכונים לגבי כנס רברסים 2026: אנחנו כבר עובדים במרץ ומגייסים ספונסרים לכנס הקהילתי. אם הארגון שלכם מעוניין לתמוך, מוזמנים לשלוח לנו מייל ל-team@reversim.com (או כל וריאציה אחרת שעובדת לכם). קול קורא (CFP) להגשת הרצאות לכנס ייפתח ממש בקרוב. [01:05] הכירו את ד"ר גיא וייזל ואת חברת Cato Networks גיא משמש כ-Tech Evangelist ב-Cato Networks, תפקיד היושב בתפר שבין קבוצות ה-R&D והמוצר לבין עולם השיווק, החדשנות, ועבודת השטח בעולמות הסייבר וה-AI. קצת על קייטו נטוורקס: החברה, המונה כ-1,800 עובדים (עם מרכז פיתוח גדול בתל אביב), חלוצה בקטגוריית ה-SASE (Secure Access Service Edge). הפלטפורמה מספקת איחוד של רשת ואבטחה כשירות בענן - מעין "כיפת ברזל" לסניפים ומשתמשים של ארגונים ברחבי העולם. במקום להסתמך על ריבוי מוצרי נקודה (Point Solutions), הארגון מקבל תמונה מלאה וקונטקסט רחב על הכל תחת פלטפורמה אחת (הכוללת SD-WAN, DLP, CASB, Zero Trust ועוד). [06:07] עידן ה-"Mytus Moment" והשפעת ה-AI על מתקפות סייבר רן מזכיר מודל מיתולוגי ומתקדם ממשפחת Claude של Anthropic שמסוגל לאתר ולנצל פרצות אבטחה ביעילות מפחידה. גיא מתאר את המצב כ-"The Mytus Moment" – סמן לתעשייה על כניסתם של מודלים מתקדמים (מבית אנתרופיק, OpenAI ואחרים) שמייצרים קפיצת מדרגה בעולם התקיפה (ראו גם: Cato joins OpenAI's Trusted Access for Cyber TAC). מה בעצם משתנה בפועל? מתודולוגיות התקיפה עצמן (Reconnaissance, Lateral Movement) נותרו דומות, אך ה-Scale והמהירות צמחו משמעותית. ה-AI מצמצם את זמן התגובה מגילוי ה-Zero-day ועד לניצול בפועל – משבועות וחודשים לשעות או דקות. במקום סריקות גנריות (כמו של Script Kiddies), סוכני AI יודעים כעת לתפור וקטורי תקיפה מותאמים אישית למטרה ספציפית, ולשרשר חולשות (Vulnerability Chaining) כדי להתקדם ברשת בצורה עצמאית וחכמה. [16:04] כשה-Agents חובשים כובע לבן: איך משנים את תפיסת ההגנה בדיוק כפי שתוקפים נעזרים ב-AI, ארגוני הסייבר חייבים לאמץ Agents הגנתיים כדי להתמודד עם קצב האיומים החדש. מעבר ממנגנונים מבוססי חתימות (Signatures) לזיהוי אנומליות ופעילות דינאמית מבוססת קונטקסט מלא של המשתמש והרשת. שינוי דרמטי במדדי ההצלחה (SLA) של צוותי אבטחה: המיקוד עובר מ-Time to Patch (זמן תיקון החולשה). להתמקדות ב-Time to Protect (זמן ההגנה הרציפה בסביבת הריצה). יש חשיבות גוברת ל-Shift Right (הגנה על ה-Production בזמן אמת) ולא רק ל-Shift Left. מלכודות לסוכני AI: מחקר של קייטו חשף את WebPromptTrap – פרצת Indirect Prompt Injection חדשה שמדגימה כיצד תוקפים יכולים לחטוף סוכני AI דרך תוכן זדוני המוטמע באתרים. [18:04] מתקפות על תשתיות פיזיות: הבעיה עם פרוטוקול Modbus Modbus הוא פרוטוקול תקשורת ותיק (משנת 1979) המשמש לבקרי תעשייה (PLC ו-SCADA), המפעילים תשתיות פיזיות כמו סכרים, מערכות אנרגיה סולארית, משאבות וצנטריפוגות. הפרוטוקול נעדר אבטחה בסיסית או הצפנה, ולמרות זאת, בשל תהליכי מודרניזציה או טעויות אנוש, הוא נחשף לעיתים ישירות לאינטרנט. מחקר של קייטו שבוצע לאורך 3 חודשים חשף שרכיבי Modbus ב-70 מדינות (ביניהן ארה"ב, צרפת ויפן) נמצאים תחת מתקפות אמיתיות. אילו סוגי מתקפות נצפו על ידי המערכות? איסוף מידע (Reconnaissance). מתקפות מניעת שירות (DoS) שנועדו למנוע מהמפעילים לשלוט בבקר. זיהוי סוג המערכת (Fingerprinting). ניסיונות אקטיביים של כתיבה ל-Registers (זיהו מתקפות מתשתית סינית) במטרה לשנות פיזית פעולות של חיישנים ומנועים. שילוב של יכולות ה-Agentic AI – שיודעות לזהות בקר פתוח ולשגר אקספלויט תוך שניות – יחד עם המצב הגיאופוליטי המתוח, הופכים את האיום על תשתיות לאומיות לממשי ומהיר יותר מאי פעם. האזנה נעימה!

time ai attack protect scale analytics openai cfp patch anthropic cato signatures reconnaissance sla zero trust dlp sd wan registers fingerprinting tech evangelist casb modbus

174: Pacific Rim

Play Episode Listen Later May 5, 2026 90:54

For six years, Sophos fought a secret cyber war against a state-backed hacking group targeting its firewalls. This forced Sophos to drastically change tactics to properly secure their firewalls.Was it ethical? Was it effective? They disrupted nine zero-day attacks, exposed who was hacking them, and forced the hackers to change tactics. But at what cost?You have to listen to one of the most audacious corporate cyber defenses ever conducted.SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.This show is sponsored by Meter, the company building networks from the ground up. Meter delivers a complete networking stack - wired, wireless, and cellular - in one solution that's built for performance and scale. Alongside their partners, Meter designs the hardware, writes the firmware, builds the software, manages deployments, and runs support. Learn more at meter.com.Support for this show comes from Drata. Drata is the trust management platform that uses AI-driven automation to modernize governance, risk, and compliance, helping thousands of businesses stay audit-ready and scale securely. Learn more at drata.com/darknetdiaries.Sources https://news.sophos.com/en-us/2024/10/31/pacific-rim-timeline/ https://www.justice.gov/archives/opa/pr/seven-hackers-associated-chinese-government-charged-computer-intrusions-targeting-perceived https://www.fbi.gov/wanted/cyber/guan-tianfeng

ai meter pacific rim zero trust sophos threatlocker drata

PP108: How to Build and Sustain a Successful Zero Trust Project

Packet Pushers - Fat Pipe

Play Episode Listen Later May 5, 2026 51:15

In theory, a zero trust initiative seems straightforward: you just need the right tools and maybe some whiteboard sessions to work out the architecture. In practice, our guests note that zero trust “unfolds inside organizations filled with legacy systems, political friction, budget constraints, and competing priorities.” Without accounting for those complications, a zero trust project... Read more »

security networking engineers cybersecurity compliance sustain zero trust trust project

PP108: How to Build and Sustain a Successful Zero Trust Project

Play Episode Listen Later May 5, 2026 51:15

In theory, a zero trust initiative seems straightforward: you just need the right tools and maybe some whiteboard sessions to work out the architecture. In practice, our guests note that zero trust “unfolds inside organizations filled with legacy systems, political friction, budget constraints, and competing priorities.” Without accounting for those complications, a zero trust project... Read more »

security networking engineers cybersecurity compliance sustain zero trust trust project

Ep. 319 Data Control Is Redefining Federal Security Strategy Now

Federal Tech Podcast: Listen and learn how successful companies get federal contracts

Play Episode Listen Later May 5, 2026 22:10

Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com Angel Smith, President of Global Public Sector at Virtru, discussed the challenges of data interoperability in federal agencies, emphasizing that trust and policy issues often hinder data sharing more than technology. It took several years, but the federal government has realized that its defenses are not perfect and has had to adopt a zero-trust approach to limit access to important information. Zero Trust is Missing the Point During the interview, Angel Smith argues that Zero Trust seems to focus on the network and identity, rather than on data. While intended to secure infrastructure, these changes can create new attack vectors. Data Sovereignty is broken. Traditionally, a data set would reside in a hard drive in a server room down the hall. Because of this, thinking about security can be focused on the physical location of the data or its sovereignty. Sometimes, a strategic approach is necessary to protect data. This is an outdated approach because data can be protected by the data object itself, which can carry control. Security vs. Speed is a False Tradeoff. This legacy thinking also applies to security. Some will exist to control data because it has been viewed as too time-consuming. Smith also stressed the need for modern data governance to enable AI and other advanced technologies, advocating for a rethinking of legacy practices to enhance data security and usability without compromising mission speed.

president ai missing security speed federal redefining traditionally zero trust security strategy data sovereignty data control virtru john gilroy

Trust at Machine Speed: AI, DevSecOps, and Zero Trust in National Security Software

@BEERISAC: CPS/ICS Security Podcast Playlist

Play Episode Listen Later May 4, 2026 34:09

Podcast: Exploited: The Cyber Truth Episode: Trust at Machine Speed: AI, DevSecOps, and Zero Trust in National Security SoftwarePub date: 2026-04-30Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationArtificial intelligence is moving faster than the policies, security controls, and acquisition processes designed to govern it—especially in national security environments where preventing failure is mission-critical. In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by Nicolas Chaillan, the host of In the Nic of Time and Former DAF CSO, to examine a central question: how do you build trust in systems that operate, adapt, and make decisions at machine speed? Drawing on his experience deploying DevSecOps across the Department of Defense and building large-scale AI platforms, Chaillan offers a direct perspective on what's working, what isn't, and where organizations are falling behind. Together, they explore: Why multi-model AI strategies are critical to avoid lock-in and improve outcomesHow AI is accelerating software development, testing, and security workflowsWhere policy and governance are lagging behind technical realityThe risks of restricting access to critical AI capabilitiesWhat zero trust looks like in systems driven by automation and AI From defense systems to software pipelines, this episode examines what it takes to move fast without losing control—and what leaders need to understand as AI becomes embedded across the mission stack.The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

time ai drawing defense speed software nic national security zero trust devsecops listen notes realitythe nicolas chaillan paul ducklin

AISPM Isn't Enough: How to Apply Zero Trust to AI Agents

Cloud Security Podcast

Play Episode Listen Later Apr 29, 2026 54:01

We are officially entering the "Multi-AI Era." Much like the multi-cloud times, organizations are no longer just using a single AI tool like Microsoft Copilot, they are building custom, agentic workflows using diverse third-party models and MCP servers . In this episode, Ashish sits down with Shawn Hays from Varonis to discuss why the security market has over-pivoted on AISPM (AI Security Posture Management) . Shawn spoke about how having visibility and an inventory of your AI models is a great start, but it fails to secure the enterprise if you lack the guardrails to actually stop an agent from going off the rails and exfiltrating data . Shawn breaks down the components of a robust AI security platform (like Varonis Atlas) and explains why data security is inseparable from AI security. He spoke about why AI agents will blindly "read whatever is on the teleprompter," meaning your AI is only as secure as the data access and identity controls surrounding it . Tune in to learn how to apply Zero Trust across the entire AI chain from the prompter to the cloud infrastructure Guest Socials -⁠⁠ Shawn's Linkedin Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you are interested in AI Security, you can check out our sister podcast -⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ AI Security Podcast⁠Questions asked:(00:00) Introduction(02:50) Shawn's Background: Microsoft, CMMC, and Varonis (03:50) The Biggest AI Security Challenges (Copilot to Agentic AI) (05:50) Third-Party AI Risk (Jira and Salesforce Agents) (08:40) The Connector Ecosystem Danger (Copilot + Salesforce) (11:50) 8 Distinct Areas of an AI Security Platform (Varonis Atlas) (14:00) Entering the "Multi-AI Era" (Analogies to Multi-Cloud) (16:00) The AI Bill of Materials (Athena AI & Grammarly) (20:50) Why Data Security and AI Security are Intertwined (22:00) Applying Zero Trust to the Entire AI Chain (24:50) The Role of Identity and ITDR in AI Systems (27:00) HIPAA, OCR, and Regulating AI Data Access (31:30) Creating a Governance Plan for Microsoft Copilot (33:50) Securing Pro-Code AI Systems (AWS Bedrock & MCP Servers) (38:30) Why the Security Market is Over-Pivoting on AISPM (44:10) The "Ron Burgundy" Analogy for AI Agents (45:50) Fun Questions: Crocodile & Caramel Tasting (47:20) The Ed Sheeran & Yelawolf Mixtape Connection (48:50) Hobbies & Pride: DJing Weddings and Playing Ice Hockey in Alabama (51:50) Favorite Food: Alabama White Sauce BBQ & Milo's BurgersResources spoken about during the episode:Varonis Atlas

Aviatrix Launches New Platform for the “Containment Era” in Cloud Security, Podcast

Telecom Reseller

Play Episode Listen Later Apr 29, 2026

By Doug Green “The question is no longer whether an attacker gets in—it's how far they can go.” In a recent Technology Reseller News podcast, I spoke with Doug Merritt, CEO of Aviatrix, about the company's latest platform launch and a broader shift in cybersecurity strategy he calls the “Containment Era.” Aviatrix operates at the architectural layer of cloud environments, focusing on how systems, applications, and workloads communicate—where security outcomes are ultimately determined. As Merritt explains, the industry is moving beyond the assumption that breaches can always be prevented. Instead, the focus must shift to controlling what happens after a breach by defining exactly what each workload is allowed to reach and enforcing those boundaries consistently. The result is a model where lateral movement is restricted and risk is managed by reducing blast radius rather than relying solely on detection. A major driver behind this shift is the rapid rise of AI. According to Merritt, AI has dramatically accelerated both vulnerability discovery and exploitation, shrinking the window between exposure and attack and making traditional response models less effective. At the same time, attackers are increasingly using legitimate credentials, trusted code, and authorized pathways, blending malicious activity into normal operations and making detection far more difficult. Compounding the issue, autonomous AI agents can now operate across systems, increasing both scale and risk. This combination defines the Containment Era—a model where the key question is not whether an attack gets in, but how far it can spread. The Containment Era represents a shift from detection-first security to containment-first architecture. When threats are indistinguishable from legitimate activity, the defining variable becomes lateral movement—how far a compromised workload, identity, or AI agent can reach. Containment addresses this by enforcing strict communication controls so that systems can only access what they are explicitly permitted to reach. Even if a breach occurs, its impact is limited by design, requiring enforcement to move into the network and infrastructure layer rather than relying solely on edge or endpoint tools. To support this shift, Aviatrix has introduced new capabilities within its Cloud Native Security Fabric. The platform delivers workload-level containment by enforcing precise communication policies across cloud environments without requiring agents or code changes. Key capabilities include consistent enforcement across clouds, regions, and compute environments; Zero Trust controls for AI workloads; default-deny policies to eliminate shadow AI and unauthorized connections; AgentGuard visibility into AI workloads; and integration with partners to secure both AI behavior and access. The goal is to reduce blast radius while maintaining flexibility for modern, distributed applications. For enterprise and service provider leaders, the takeaway is clear: AI has fundamentally changed the threat landscape. The first step is understanding exposure—specifically, how far a compromise could spread—followed by measuring and managing blast radius as a core security metric. Architectural controls that limit workload communication need to become standard in cloud design, and security and infrastructure teams must align around containment as a shared responsibility. As AI adoption accelerates, governing how systems connect and interact will become increasingly critical, and the organizations that move early will be best positioned to harness AI while keeping risk contained. Learn more: https://aviatrix.ai/

ceo ai platform launches compounding merritt architectural zero trust containment aviatrix cloud security podcast

Step 1: Deploy New AI Tool. Step 2: Discover Security Flaws. Step 3: Repeat. (LIVE in Orlando)

CISO-Security Vendor Relationship Podcast

Play Episode Listen Later Apr 28, 2026 42:40

All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Michelle Wilson, CISO, Movement Mortgage. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker. This show was recorded in front of a live audience at ThreatLocker's conference, Zero Trust World 2026. In this episode: Risk as a daily habit AI agents talking to AI agents The code on the lock Words that shape decisions A huge thanks to our sponsor, ThreatLocker ThreatLocker makes Zero Trust practical. With Default Deny, Ringfencing, and Elevation Control, CISOs get real control that's easy to manage and built to scale. Stop threats before they execute and reduce operational noise without adding complexity. See how simple prevention can be at ThreatLocker.com/CISO.

ai discover risk security flaws deploy ciso new ai zero trust cisos ai tool movement mortgage michelle wilson rob allen threatlocker david spark ciso series

EP274 AI, Zero Trust and Secure by Design Walk into a Bar...

Cloud Security Podcast by Google

Play Episode Listen Later Apr 27, 2026 29:37

Guest: Grant Dasher, ex-CISA, ex-Google, Distinguished Engineer, Google (again) Topics: Why is the "Secure-by-Design" movement gaining so much momentum now, and is it a response to the failure of "bolted-on" security, or just a natural evolution of cloud maturity? In a future Secure-by-Design world, is identity the only perimeter that actually matters anymore? Or is this a cliche? As we move toward a world of autonomous agents, how does our approach to machine identity need to change? Are we just talking about more complex Service Accounts, or do we need a fundamental shift in how we authorize "intent" What is your advice to people who want to move fast and cannot wait for Secure by Design / Default AI to be decided by consensus or IETF, NIST or OASIS committee? We love the argument that modern AI agents are effectively repeating the mistakes of 1960s payphones - mixing the data plane and the control plane. What is your rebuttal? How do we build "Agentic Security" that doesn't fall for 60-year-old traps? Customers are torn between their Zero Trust implementations and their AI adoption. Is Zero Trust now "legacy," or is it the prerequisite for everything we're trying to do with AI agents? Is there Zero Trust for AI? Is this a fake buzzword or technical reality? Resources: Video version EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance EP133 The Shared Problem of Alerting: More SRE Lessons for Security EP85 Deploy Security Capabilities at Scale: SRE Explains How Google SRE books "Atomic Accidents" book (yes, really)

ai google design walk secure customers oasis nist zero trust cisa distinguished engineer ietf

173: Tarjeteros

new york ai privacy dominican republic maze zero trust threatlocker

Play Episode Listen Later Apr 21, 2026 38:01 Transcription Available

In the streets of the Dominican Republic, a new economy thrives in the shadows. It's built not on tourism or sugar, but on stolen data. They call them tarjeteros. And they are making a lot of money from stolen credit cards. This is a story about one group of tarjeteros who came to the US, and let loose on New York city.SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.This show is sponsored by Maze. Maze uses AI agents to triage and remediate cloud vulnerabilities by figuring out what's actually exploitable, not just what's theoretically risky. They remove the noise, prioritize vulns that matter, and manage remediation, so your team stops wasting time on meaningless vulns. Visit MazeHQ.com/darknet for more information.Support for this show comes from Privacy.com. Privacy allows you to create anonymous debit cards instantly to use for online shopping. Visit privacy.com/darknet to get a special offer.

PP106: Architecting for Wi-Fi 7, Zero Trust, PQC, and More

security networking engineers cybersecurity wifi compliance zero trust architecting

Play Episode Listen Later Apr 21, 2026 21:23

For decades, network and security professionals have adapted to technology change in a piecemeal fashion: a new rule here, an upgrade there, a new product deployment over yonder. On today’s Packet Protector, co-host Jennifer ‘JJ’ Jabbusch makes the case for why several emerging technologies require IT pros to think about security at an architectural level.... Read more »

PP106: Architecting for Wi-Fi 7, Zero Trust, PQC, and More

Packet Pushers - Fat Pipe

Play Episode Listen Later Apr 21, 2026 21:23

For decades, network and security professionals have adapted to technology change in a piecemeal fashion: a new rule here, an upgrade there, a new product deployment over yonder. On today’s Packet Protector, co-host Jennifer ‘JJ’ Jabbusch makes the case for why several emerging technologies require IT pros to think about security at an architectural level.... Read more »

security networking engineers cybersecurity wifi compliance zero trust architecting

Making AI actually work in the enterprise and more RSAC Conference 2026 interviews - Camellia Chan, Aamir Lakhani, Jim Spignardo, Jody Brazil, Ely Abramovitch - ESW #455

Paul's Security Weekly

Play Episode Listen Later Apr 20, 2026 100:09

Interview with Jim Spignardo What does it take to build AI workflows that work? Why do so many fail? Jim isn't a typical ESW guest. I think it's essential for security folks to regularly step outside the security bubble and understand other perspectives and mindsets. That's what we're doing today with Jim. He specializes in building custom AI architecture and workflows for his clients. We discuss the state of AI in the enterprise and why so many of these efforts fail. We'll discuss the elements of AI success and whether security plays a role in helping AI efforts succeed or contribute to failures. Segment Resources: https://www.proarch.com/ Cowork vs Cowork - Why Microsoft 365 Copilot Cowork Is the One Built for Enterprise RSAC Exec Interviews, Part 1 Trends Revealed in Fortinet's FortiGuard Labs 2026 Global Threat Landscape Report Fortinet's Global Director of Threat Intelligence and Adversarial AI Research explores the trends revealed in the latest Global Threat Landscape Report from FortiGuard Labs, including a surge in AI-enabled cybercrime. As AI optimizes and accelerates attack techniques, here's how cyber defenders should respond. This segment is sponsored by Fortinet . Visit https://securityweekly.com/fortinetrsac to learn more about them! X-PHY Delivers Hardware-Enforced Security for the Age of AI Agents Camellia Chan, CEO and Co-Founder of X-PHY, discusses how Model Context Protocol (MCP) is making it easier for AI agents to plug into enterprise apps and operate with elevated permissions—creating new opportunities for attacks and data exfiltration. She explains how X-PHY's hardware-enforced monitoring and detection sit beyond the OS trust boundary to enforce immutable limits on what agents can do and stop threats before data is lost, so organizations can adopt agentic AI with confidence. Security leaders looking to deploy AI agents safely can request a demo or briefing with X-PHY at https://securityweekly.com/xphyrsac. RSAC Exec Interviews, Part 2 Introducing Legion Investigator: Goal-Oriented AI Investigations Traditional security playbooks often fail because they cannot capture the fluid, context-dependent reasoning required when a routine investigation hits a non-scripted "judgment point." Legion Investigator addresses this gap by employing goal-oriented AI agents that move beyond rigid scripts to interpret findings and execute complex, multi-step investigations based on your team's unique environment and expertise. By bridging the divide between automated execution and human-level reasoning, the platform ensures that every alert (no matter how unpredictable) is handled with the depth and consistency of a senior analyst. This segment is sponsored by Legion Security. Visit https://securityweekly.com/legionrsac to learn more about them! The Missing Layer in Zero Trust: The Security Policy Control Plane Zero Trust has become the dominant security architecture for hybrid and cloud environments, but many organizations are discovering that deploying enforcement technologies alone does not deliver operational control. Firewalls, cloud security groups, and microsegmentation platforms enforce access decisions, yet the policies behind those controls are often fragmented, difficult to validate, and constantly changing. In this conversation, FireMon CEO Jody Brazil discusses why modern security architectures increasingly require a security policy control plane: a layer that continuously validates how policy is enforced across firewalls, cloud networks, and segmentation platforms. The discussion explores why policy drift occurs in real environments, how enforcement systems become difficult to coordinate at scale, and what organizations must do to ensure Zero Trust policies remain consistent as infrastructure evolves. This segment is sponsored by FireMon. Visit https://securityweekly.com/firemonrsac to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-455

ceo ai interview co founders brazil conference security os enterprise chan actually work global director firewalls zero trust fortinet threat intelligence cowork making ai lakhani aamir rsac esw fortiguard labs firemon segment resources

172: SuperBox