Security Weekly Podcast Network

A CyberRisk Alliance Production

For Security Professionals, By Security Professionals.

#InfoSec #CyberSec #Podcast #Livestream

[Security Weekly Podcast Network @SecWeekly]

CyberRisk TV Live Coverage from Identiverse 2026 https://t.co/RW8umdUS3i

[Security Weekly Podcast Network @SecWeekly]

Defense is becoming the harder side of cybersecurity.

AI is rapidly accelerating vulnerability discovery and exploit creation. That makes offensive security faster, cheaper, and more “exciting.”

But defense doesn’t get that luxury. Detection and patching must be correct every time. One mistake can break security posture entirely.

Is cybersecurity innovation drifting too far toward offense while defense struggles to keep up?

#Cybersecurity #AI #BlueTeam

[Security Weekly Podcast Network @SecWeekly]

Some security vulnerabilities happen even when the software works exactly as designed.

This clip explains business logic vulnerabilities using a payroll example: who should — and shouldn’t — be allowed to see salary data. The challenge is not just authentication. It’s making sure applications understand roles, context, and real-world business rules correctly.

How many “working” applications are quietly exposing sensitive information?

#AppSec #Cybersecurity #BusinessLogic

[Security Weekly Podcast Network @SecWeekly]

Sometimes the biggest obstacle isn’t talent.

It’s deciding too early that something “isn’t for you.”

This clip reflects on walking away from cybersecurity at a young age, only to realize later that the passion and curiosity never disappeared. The broader lesson applies far beyond tech: people often disqualify themselves before they’ve actually tested what they’re capable of.

How many opportunities get missed because people assume they can’t succeed?

#Cybersecurity #CareerGrowth #Motivation

[Security Weekly Podcast Network @SecWeekly]

Quantum computers aren't mainstream yet.

That doesn't mean organizations should wait. Just as early computers evolved into everyday technology, quantum computing could arrive faster than many expect—and policy decisions made today will determine how prepared organizations are.

When should companies start planning for quantum security?

#QuantumComputing #Cybersecurity #Technology

[Security Weekly Podcast Network @SecWeekly]

Company values only matter if they're true.

Saying "people first" means nothing when everyday decisions tell a different story. Honest leadership starts by defining what your organization actually values—and acting accordingly.

Do your company's actions reinforce its stated values, or contradict them?

#Leadership #CompanyCulture #Trust

[Security Weekly Podcast Network @SecWeekly]

Empowerment isn't an on/off switch.

High-performing teams earn more autonomy through operational clarity and capability. Skip those foundations, and giving people full authority can create mistakes, confusion, and chaos instead of speed.

How do you decide when a team is ready for more autonomy?

#Leadership #Management #TeamBuilding

[Security Weekly Podcast Network @SecWeekly]

One bizarre prompt was enough to change an AI's answer.

A simple "green shirt" jailbreak shows how attackers can manipulate language instead of exploiting software. It's a reminder that LLM security is still evolving, and today's guardrails aren't always enough.

What's harder to secure: code or language?

#AI #Cybersecurity #PromptInjection

[Security Weekly Podcast Network @SecWeekly]

AI agents may soon become your next customer—and your next decision-maker.

Instead of humans comparing vendors, agents could evaluate pricing, security, and MCP support automatically before choosing where to execute tasks. That shift could change how companies design pricing pages and APIs.

If AI agents start making purchasing decisions, what should businesses optimize for first?

#AI #MCP #AgenticAI

[Security Weekly Podcast Network @SecWeekly]

Everyone worries about what AI says.

The bigger security problem is what AI is allowed to do. As AI agents gain access to systems and identities, prompt filtering alone won't stop real-world damage.

Where should security teams focus first: controlling AI responses or controlling AI permissions?

#AI #Cybersecurity #IdentitySecurity

[Security Weekly Podcast Network @SecWeekly]

Many AI penetration testing tools work great in demos.

But enterprise environments run on custom applications.

This clip explains why continuous scanning matters for modern AppSec — and why support for proprietary, constantly changing software may be the real test of whether an AI security platform works in production.

If your scanner can’t understand custom applications, what parts of your environment are actually being tested?

#AppSec #Cybersecurity #AI

[Security Weekly Podcast Network @SecWeekly]

Sometimes attackers don't target your company at all.

They target the software, supplier, or service that dozens of organizations rely on. This conversation explains "cascading breaches" and why a single successful compromise can rapidly spread across an entire ecosystem.

How much of your organization's security depends on someone else's?

#CyberSecurity #SupplyChainSecurity #DataBreach

[Security Weekly Podcast Network @SecWeekly]

Attackers expect firewalls and patches.

What they don't want to find is a properly placed honeypot. In this clip, a professional red teamer explains why even basic deception technology can expose an attacker during their very first reconnaissance steps—even in networks with known vulnerabilities.

Would you prioritize another security control before deploying honeypots?

#CyberSecurity #Honeypots #RedTeam

[Security Weekly Podcast Network @SecWeekly]

Some cybersecurity tactics used to sound extreme.

Now things like scam baiting, honeypots, and botnet takedowns are treated as normal defensive tools.

The line between “defense” and “offense” may be getting blurrier than most people realize.

Where should that boundary actually be?

Now booking interviews at Black Hat 2026. Early access pricing is open. Message us for details!

#CyberSecurity #Hackback #ScamBaiting

[Security Weekly Podcast Network @SecWeekly]

Not every crypto token is treated the same by regulators.

The SEC's new framework distinguishes which digital assets are generally considered securities and which are not. The guidance separates common cryptocurrencies from tokenized traditional securities, with stablecoins addressed under separate legislation.

Do you think this framework provides more clarity or leaves important questions unanswered?

#Crypto #SEC #Blockchain

[Security Weekly Podcast Network @SecWeekly]

Think multi-factor authentication makes phishing harmless?

This phishing kit uses an adversary-in-the-middle attack to capture authenticated sessions in real time. Instead of simply stealing a password, it sits between the victim and the legitimate website, making the login page appear genuine while intercepting the session.

How is your organization protecting users from modern phishing attacks?

#CyberSecurity #Phishing #MFA

[Security Weekly Podcast Network @SecWeekly]

The latest cyberattack isn't always your biggest problem.

The hosts explain why organizations often obsess over new vulnerabilities while neglecting basic security practices like patching, firmware updates, and maintenance. Strong fundamentals make new threats much less dangerous.

Are you spending more time chasing headlines than improving your security baseline?

#CyberSecurity #PatchManagement #InfoSec

[Security Weekly Podcast Network @SecWeekly]

Generating least-privilege policies isn't enough if they never get deployed.

Sandy Bird explains how attackers abused an overprivileged Git runner to create new access keys—and why a behavior-based approval model stopped the same attack cold. It's a practical look at why enforcement matters more than documentation.

Would behavior-based controls reduce security gaps better than relying on policy deployment alone?

#CloudSecurity #IAM #CyberSecurity

[Security Weekly Podcast Network @SecWeekly]

Fake CEO emails got too recognizable.

So scammers changed tactics.

Now they impersonate executive coaching firms, fabricate reply chains, and send invoices designed to look already approved — often just under internal review limits.

Why are the most effective attacks starting to look completely ordinary?

Now booking interviews at Black Hat 2026. Early access pricing is open. Message us for details!

#CyberSecurity #Phishing #BusinessEmailCompromise

[Security Weekly Podcast Network @SecWeekly]

A lot of small businesses assume cyber threats only matter for massive corporations or government agencies.

But most of the economy runs on small and medium-sized businesses — and many industries people never think about fall under critical infrastructure. That includes healthcare, food, finance, IT, and more.

The question isn’t whether you’re “important enough.” It’s whether attackers see an opening.

Are small businesses still underestimating their cyber risk?

#Cybersecurity #SmallBusiness #CriticalInfrastructure

[Security Weekly Podcast Network @SecWeekly]

Paying a ransomware demand doesn’t end the attack.

It can restart it.

This clip explains a brutal reality of ransomware incidents: if organizations don’t fix the root cause, attackers can simply return and repeat the attack. In some cases, paying once can signal that a victim is willing to pay again.

Recovery isn’t just about getting a decryption key.

It’s about making sure the attacker can’t walk back in.

#Ransomware #Cybersecurity #IncidentResponse