CISO Insights: Voices in Cybersecurity

As artificial intelligence shifts from passive conversational tools to autonomous agents capable of independent system execution, establishing secure boundaries for identity, delegation, and authorization has emerged as a paramount federal priority. This episode explores the National Institute of Standards and Technology's (NIST) AI Agent Standards Initiative, detailing how the agency is coordinating industry-led standards, open-so...

As AI deployments transition from basic chatbot interfaces into autonomous agents capable of executing complex real-world workflows, organizations are discovering that traditional input filtering can no longer guarantee safety. This podcast explores the critical security boundaries mapped across OWASP's main AI safety directories: the GenAI LLM Top 10, the Agentic Applications Top 10, and the newly released Agentic Skills Top 10. J...

As machine identities outnumber human employees by up to 100-to-1, modern cybersecurity has shifted from guarding human logins to managing a sprawling, unmonitored web of non-human credentials This podcast explores how the rise of Shadow AI and autonomous agents has transformed static secrets sprawl into an active, machine-speed threat vector capable of executing full kill chains without malware. Listeners will discover how le...

As Japan pushes to become the world’s most “AI-friendly” country to combat severe demographic decline under its Society 5.0 vision, the government has introduced a light-touch, pro-innovation regulatory framework that actively reduces data consent requirements to support domestic model development. However, this rapid digital transition has created a sharp tension between preserving national technological sovereig...

As tactical combat assets, medical devices, and operational networks converge into a boundaryless Internet of Military Things, defense leaders must confront a reality where digital breaches trigger immediate physical consequences. This series explores how modern security teams are dismantling traditional perimeter defenses to deploy resilient Zero Trust Architectures and end-to-end Device Lifecycle Management across the edge. Throu...

Tras el hito histórico de junio de 2026, cuando el tráfico de bots superó oficialmente a la actividad humana, este episodio explora la transición hacia un internet de mayoría de máquinas impulsado por agentes de IA autónomos. Analizamos cómo las nuevas infraestructuras financieras, como Cloudflare Wallets y Stripe’s Link for Agents, permiten que los "compañeros de trabajo digitales" ejecuten transacciones seguras utilizando s...

Após o marco histórico de junho de 2026, quando o tráfego de bots superou oficialmente a atividade humana, este episódio explora a transição para uma internet de maioria de máquinas operada por agentes de IA autônomos. Analisamos como as novas infraestruturas financeiras, como as Carteiras da Cloudflare e o Link da Stripe para Agentes, permitem que "colegas de trabalho digitais" executem transações financeiras seguras usando stable...

Following the historic 2026 crossover where bot traffic officially outpaced human activity, this episode explores the transition to a machine-majority internet powered by autonomous AI agents. We analyze how programmable payment rails like Cloudflare Wallets and Stripe’s Link for Agents are enabling digital coworkers to execute financial transactions using stablecoins and task-scoped virtual cards. We also address the shift i...

In this episode, we explore the critical protection gaps and emerging digital threats facing high-net-worth families, executives, and family offices in 2026. We unpack how cybercriminals are leveraging AI-cloned voices and connected smart home IoT networks to target private wealth, and explain why standard personal umbrella insurance policies fail to cover these specialized risks. Finally, we discuss practical ways to harden your p...

In a highly interconnected digital economy, securing your organization requires looking past your direct vendors and actively managing the security of their subcontractors. This episode breaks down how emerging regulatory mandates—such as the EU's Digital Operational Resilience Act (DORA), the 2026 CISA Software Bill of Materials (SBOM) baseline, and NYDFS Part 500—are transforming how enterprises must govern fourth-par...

This episode provides an essential breakdown of Hacker Summer Camp 2026, covering the overlap of BSidesLV, Black Hat USA, and DEF CON 34 across Las Vegas. We explore hands-on interactive labs in the Packet Hacking Village, custom hardware experimentation in #badgelife, and the off-the-record talks at Skytalks. Finally, we share critical field-tested survival advice for first-timers, from practicing digital OpSec on hostile networks...

As major social media platforms automatically harvest public posts, photos, and interactions to train artificial intelligence models, users face an increasingly complex digital privacy landscape in 2026. This episode breaks down step-by-step opt-out settings across platforms like Meta, X, LinkedIn, and Google, while examining expanding US state laws and EU AI Act transparency mandates. Listeners will also discover essential digital...

In this episode, we dive into the shifting landscape of application security, exploring how the latest OWASP Top 10 frameworks address the explosive rise of autonomous AI agents and complex software supply chains. We unpack the real-world dangers of the "vibe coding" era, examining how organizations are battling unprecedented threats like cascading failures, rogue agents, and massive registry hijackings. Finally, we discuss the ess...

As autonomous AI systems introduce advanced business capabilities, they also create unprecedented security vulnerabilities such as prompt injection, malicious tool misuse, and machine-speed exploitation. To defend against these novel threats, organizations must move beyond traditional friction-based security and adopt a Zero Trust framework that relies on hard barriers, cryptographic identities, and continuous verification. This ep...

This episode explores the turbulent 2026 landscape of the NIS2 Directive, a period defined by the European Commission actively suing member states like France, Ireland, Spain, and the Netherlands for delayed transposition. We dive into the harsh new realities of corporate enforcement, highlighting the first wave of administrative fines and the direct personal penalties now hitting executives who fail to oversee cyber risk. Finally,...