CISO Insights: Voices in Cybersecurity

As major social media platforms automatically harvest public posts, photos, and interactions to train artificial intelligence models, users face an increasingly complex digital privacy landscape in 2026. This episode breaks down step-by-step opt-out settings across platforms like Meta, X, LinkedIn, and Google, while examining expanding US state laws and EU AI Act transparency mandates. Listeners will also discover essential digital...

In this episode, we dive into the shifting landscape of application security, exploring how the latest OWASP Top 10 frameworks address the explosive rise of autonomous AI agents and complex software supply chains. We unpack the real-world dangers of the "vibe coding" era, examining how organizations are battling unprecedented threats like cascading failures, rogue agents, and massive registry hijackings. Finally, we discuss the ess...

As autonomous AI systems introduce advanced business capabilities, they also create unprecedented security vulnerabilities such as prompt injection, malicious tool misuse, and machine-speed exploitation. To defend against these novel threats, organizations must move beyond traditional friction-based security and adopt a Zero Trust framework that relies on hard barriers, cryptographic identities, and continuous verification. This ep...

This episode explores the turbulent 2026 landscape of the NIS2 Directive, a period defined by the European Commission actively suing member states like France, Ireland, Spain, and the Netherlands for delayed transposition. We dive into the harsh new realities of corporate enforcement, highlighting the first wave of administrative fines and the direct personal penalties now hitting executives who fail to oversee cyber risk. Finally,...

This podcast dives into the European Union's Digital Operational Resilience Act (DORA), exploring how financial institutions must shift their focus from traditional cybersecurity to comprehensive operational resilience. We unpack the regulation's rigorous technical standards, offering practical insights on managing third-party risks via the Register of Information (RoI), meeting strict incident reporting deadlines, and preparing fo...

Join us as we explore how NovaCustom's PrivacyGuard and SecurityTitan product lines are redefining digital sovereignty through open-source Dasharo coreboot firmware and physical anti-tamper security. We dive deep into their customized hardware solutions, contrasting the effortless privacy of Zorin OS Pro for everyday users with the extreme, hardware-enforced isolation of Qubes OS for high-risk targets. Whether you are a business lo...

Dive into the world of uncompromising digital privacy with a comprehensive look at Nitrokey's open-source security hardware. From GrapheneOS-hardened NitroPhones and Qubes-certified laptops to enterprise-grade network firewalls and private home clouds, we explore how to build a truly sovereign tech stack. Whether you are securing a small business, protecting cryptocurrency assets, or locking down enterprise server keys with a NetHS...

In a controversial July 2026 vote, the European Union relied on a procedural loophole to extend the "Chat Control 1.0" voluntary mass-scanning regime until 2028, despite a majority of voting lawmakers actually opposing the measure. As lawmakers prepare for the critical September trilogues over the permanent "Chat Control 2.0" regulation, intense debates continue over mandatory age verification, client-side scanning, and the surviva...

As modern enterprises adopt autonomous AI and face stricter global privacy regulations, the traditional boundaries between security, privacy, and data leadership are colliding. This podcast explores the critical intersections, strategic partnerships, and inherent conflicts between executive roles like the CISO, DPO, CPO, and the emerging Chief AI Officer. We discuss how these leaders can break down operational silos to form a unifi...

Step away from the traditional conference floor and discover CISO.POKER, an exclusive Texas Hold'em tournament built specifically for top-tier cybersecurity executives. This episode explores how replacing vendor pitches and badge scanners with high-stakes gameplay and real-time, anonymous FeltIQ polling generates the most candid conversations in the industry. Join us to learn how players compete for privacy-first hardware prizes wh...

As AI agents evolve into autonomous orchestrators, the Model Context Protocol (MCP) has rapidly become the standard for connecting them to sensitive enterprise data and external tools. However, this architectural shift introduces novel attack vectors—such as tool description poisoning, shadow MCP servers, and the confused deputy problem—that bypass traditional perimeter defenses. In this episode, we explore the latest t...

In this episode, we explore the massive architectural shift reshaping application security between 2025 and 2026, driven by the updated OWASP Top 10 frameworks for Web, Mobile, and Large Language Models. We discuss how the rise of autonomous AI agents, complex Retrieval-Augmented Generation (RAG) pipelines, and hyper-distributed ecosystems have rendered traditional, perimeter-based defenses obsolete. Finally, we examine how organiz...

Nowe przepisy SEC dotyczące ujawniania informacji o cyberbezpieczeństwie fundamentalnie przekształciły rolę dyrektora ds. bezpieczeństwa informacji (CISO) z technicznego menedżera w kluczowego dyrektora biznesowego. W tym podcaście sprawdzamy, jak nowocześni CISO muszą współpracować z zespołami międzyfunkcyjnymi, aby budować ogólnofirmowe ramy istotności i w sposób uzasadniony prognozować długoterminowe skutki finansowe naruszeń cy...

As novas regras de divulgação de cibersegurança da SEC transformaram fundamentalmente o papel do Chief Information Security Officer (CISO), que deixou de ser um gerente técnico focado apenas em sistemas para se tornar um executivo de negócios de alto escalão. Neste podcast, exploramos como os CISOs modernos devem colaborar com equipes multifuncionais para construir estruturas de materialidade corporativa e projetar de forma defensá...

De nieuwe SEC-regels voor de openbaarmaking van cyberbeveiliging hebben de rol van de Chief Information Security Officer (CISO) fundamenteel getransformeerd van een technische beheerder naar een zakelijke topmanager. In deze podcast verkennen we hoe moderne CISO's moeten samenwerken met multifunctionele teams om bedrijfsbrede materialiteitskaders op te bouwen en de financiële langetermijneffecten van cyberincidenten verdedigbaar te...

Die neuen Cybersicherheits-Offenlegungsregeln der SEC haben die Rolle des Chief Information Security Officers (CISO) grundlegend von einem rein technischen Manager zu einer hochrangigen Führungskraft transformiert. In diesem Podcast untersuchen wir, wie moderne CISOs mit funktionsübergreifenden Teams zusammenarbeiten müssen, um unternehmensweite Rahmenwerke zur Wesentlichkeit aufzubauen und die langfristigen finanziellen Auswirkung...

Les nouvelles règles de divulgation en matière de cybersécurité de la SEC ont fondamentalement transformé le chef de la sécurité de l'information (CISO), passant d'un simple gestionnaire technique à un haut dirigeant d'affaires. Dans ce balado, nous explorons comment les CISO d'aujourd'hui doivent collaborer avec des équipes interfonctionnelles pour bâtir des cadres de matérialité à l'échelle de l'entreprise et projeter de façon ju...