Security Weekly Podcast Network

CyberRisk TV Live Coverage from Identiverse 2026 x.com/i/broadcasts/1…

Imagine trusting the person negotiating your ransomware incident... ...only to learn they were allegedly feeding information to the attackers. This case highlights how insider threats can undermine even the organizations brought in to help during a cyber crisis. How do you verify trust when every piece of negotiation data has value? #CyberSecurity #Ransomware #InsiderThreat

Looking at one security control at a time isn't enough for AI. Modern AI AppSec needs context, connecting input validation, output sanitization, infrastructure, and other protections into one security model instead of isolated defenses. What would holistic AI security look like in your environment? #CyberSecurity #AI #AppSec

The biggest AI security risk isn't the tool. It's what employees are typing into it. Traditional security tools weren't designed to monitor prompt content, creating a blind spot for confidential data and shadow AI usage. How is your organization detecting AI-related data exposure? #CyberSecurity #AI #DataSecurity

Everyone talks about AI making developers 10x more productive. But cybersecurity doesn't work the same way. Success isn't measured by writing more code—it's measured by finding and reducing risk faster. That changes how AI should be evaluated inside security teams. Will AI ever create a true productivity breakthrough for cybersecurity professionals? #Cybersecurity #ArtificialIntelligence #CISO

AI can strengthen security controls, but it cannot replace human judgment yet. Because AI systems are non-deterministic, organizations need better policies, broader context, and human oversight when making critical decisions. The challenge is finding the right balance between automation and accountability as AI becomes part of security operations. How much decision-making should organizations trust to AI? #AISecurity #Cybersecurity #IdentitySecurity

Pinning dependencies isn't enough if attackers can edit your CI workflow. Once someone can modify the pipeline, they can change what gets executed, access secrets available to the runner, and potentially use those credentials to move deeper into your environment. What's the stronger security control: protecting dependencies or protecting the workflow itself? #CyberSecurity #CICD #DevSecOps

What happens when your cyber insurer also runs your security? For many small businesses, it's an attractive option. But if thousands of customers rely on the same managed security service and tools, a single weakness could have far-reaching consequences. Does convenience outweigh the risk of a security monoculture? #CyberSecurity #CyberInsurance #MSSP

Waiting for a patch may no longer be enough. The idea is simple: when a critical vulnerability appears, the first question shouldn't be "When can we patch?" It should be "How fast can we reduce the risk?" That shift—from time to patch to time to mitigate—could determine how much damage an attack causes. How prepared is your organization to respond before a fix is available? #CyberSecurity #IncidentResponse #BlueTeam

Cybersecurity isn't standing still. The claim is simple: attacks are happening faster than defenders can respond, and today's security systems weren't built for that pace. The challenge isn't just stopping attackers—it's redesigning defense so the advantage shifts back. What would it take to give defenders the upper hand again? #CyberSecurity #SecurityResearch #BlueTeam

Some organizations may have only 72 hours to report an exploited vulnerability. That means accurately determining whether a flaw is merely exploitable—or actively being exploited—has become a legal and operational challenge, not just a technical one. Can vulnerability management keep pace with modern regulations? #Cybersecurity #VulnerabilityManagement #Compliance

A smart vacuum shouldn't stop working because a company shuts down its cloud service. This open-source, offline robot vacuum takes a different approach—giving owners full control without relying on external servers or subscriptions. Would you choose convenience in the cloud, or ownership that lasts? #Cybersecurity #IoT #OpenSource

Stopping an attack starts with understanding attacker behavior. Threat intelligence isn't just about identifying who attacked you. It's about recognizing tactics, techniques, and patterns that help security teams anticipate what an attacker is likely to do next. How much could better context improve your defenses? #ThreatIntelligence #CyberSecurity #ThreatHunting

Guardsquare’s CPO joined the Application Security Weekly podcast to discuss some current mobile threats, why mobile app security requires a defense-in-depth strategy, and how you can implement multi-layered protections. Listen to the full interview here: hubs.ly/Q04p04-s0

Patching isn't just about staying current anymore—it's about keeping pace. As exploit timelines shrink from months to minutes, long approval processes and inflexible maintenance windows become security risks of their own. Organizations may need to rethink how quickly they can respond to known, actively exploited vulnerabilities. How fast can your team move when a critical vulnerability is disclosed? #CyberSecurity #PatchManagement #VulnerabilityManagement

AI's impact may go far beyond entry-level jobs. If organizations need fewer junior employees and fewer managers, they could also reduce the pool of future directors and executives. The biggest challenge may not be today's workforce—but tomorrow's leadership pipeline. How should companies prepare future leaders in an AI-driven workplace? #AI #Leadership #FutureOfWork

The old approach to patch management is being challenged. As AI accelerates vulnerability discovery and exploitation, waiting 60 or 90 days for the next maintenance window may leave organizations exposed. The conversation is shifting from scheduled patching to responding based on real-time risk. Is your patching strategy built for today's threat landscape—or yesterday's? #CyberSecurity #PatchManagement #AI

What started as a joke didn't stay one for long. After Sony announced the end of optical media for future PlayStations, GitHub joked that it would mail developers CD-ROMs of their public repositories. The catch? People actually signed up—and requested repositories far too large to fit on a stack of CDs. Would you have ordered one? #GitHub #Sony #TechNews

Streaming security isn't just about keeping apps online. The real target is the content itself. DRM and digital watermarking help protect licensed media and trace leaked content, but those protections also become attractive targets for attackers looking to bypass them. What do you think is harder to protect: the content or the security features protecting it? #AppSec #Streaming #CyberSecurity

Better security often requires collecting more information. From kernel-level anti-cheat in games to identity verification in banking and social media, companies constantly balance stronger protection against user privacy. There isn't a universal answer—each organization has to decide where that balance belongs while minimizing the risks of the data they collect. Where do you think companies should draw the line? #CyberSecurity #Privacy #AppSec

Ransomware isn't just malware—it's a business model. Affiliates switch between ransomware groups much like resellers change distributors. When one group disappears, another takes its place, driven by the same economic incentives that shape legitimate markets. Does understanding the business model help defenders fight ransomware more effectively? #Ransomware #CyberSecurity #ThreatIntelligence