Greynoise Legacy Exploits & Zero-Days: Mass Internet Attacks In 2024 CISO Insights: Voices In Cybersecurity podcast

1
The Resilient CISO: Navigating Stress and Sustaining Security Leadership 12:47

10 hours پیش12:47

12:47

The role of the Chief Information Security Officer (CISO) is more critical and demanding than ever, placing leaders in a persistent high-stress environment. This podcast delves into the unique pressures faced by CISOs and cybersecurity professionals, including the immense responsibility and potential for blame, resource constraints, excessive workload, and the relentless "always-on" nature of the job. We explore the significant mental health impacts, such as anxiety, burnout, and the psychological toll of managing data breaches, which can include feelings of violation and loss of control. More than just identifying the challenges, this podcast offers insights and strategies for building resilience and fostering well-being, drawing on experiences from security leaders. Learn how supportive organizational culture and leadership, prioritizing well-being, building strong teams, and effective stress management techniques are crucial for not only personal health but also for maintaining optimal professional performance and sustaining a vital career in cybersecurity leadership. Join us to understand how to thrive, not just survive, in the CISO's crucible. www.securitycareers.help/the-cisos-crucible-how-organizational-culture-and-leadership-shape-well-being-and-tenure www.cisomarketplace.services…

1
Converging Worlds: Securing IoT, OT, and Critical Infrastructure 27:32

1 day پیش27:32

27:32

The digital transformation journey in critical infrastructure organizations and other sectors like healthcare is increasingly connecting operational technology (OT) and integrating Internet of Things (IoT) devices. While this convergence of OT and IT creates efficiencies, it also introduces new vulnerabilities and expands the attack surface for cybersecurity threats. Cyber actors are actively exploiting internet-accessible OT assets against critical infrastructure, and these cyberattacks are growing in size, sophistication, and prevalence. Securing OT presents additional complexities compared to traditional IT security, partly due to differences in priorities (Availability, Integrity, Confidentiality in OT versus Confidentiality, Integrity, Availability in IT) and the mix of old and new technology used. Threats can range from insider risks and nation-state attacks to ransomware. In healthcare, integrating IoT devices offers benefits but exposes patients to unique cybersecurity threats, where compromising devices like implantable devices could cause harm The lines between physical security and cybersecurity have become blurred, as physical security systems are increasingly connected and cyber-physical systems bridge the digital and physical realms10. Siloed security functions, treating physical and cyber security separately, mean security leaders lack a holistic view of threats, creating blind spots and hindering rapid identification, prevention, mitigation, and response to complex threats. For example, an unsecured IoT device can serve as a backdoor into enterprise networks, allow unauthorized physical access, or disrupt operations by hijacking physical systems, as seen in the casino fish tank hack. Addressing these challenges requires a shift towards integrated security functions and a holistic approach that aligns physical and cybersecurity efforts. This includes unified risk assessments, enhancing visibility of unmanaged devices, implementing specific security measures like segmentation and hardening, employing robust authentication and secure design principles, establishing continuous monitoring, and developing comprehensive incident response plans, guided by frameworks such as the NIST Cybersecurity Framework, IEC 62443, and C2M2. Leveraging AI and machine learning can further enhance threat detection and anomaly detection. Ultimately, effective integrated security protects cyber-physical infrastructure and enhances resilience against hybrid threats. www.securitycareers.help/securing-the-converged-frontier-why-integrated-security-is-paramount-in-the-age-of-iot-and-ot www.secureiotoffice.world/securing-the-smart-office-why-integrated-security-is-no-longer-optional 25% off - ' LAUNCH ' https://securecheck.tools https://policyquest.diy…

1
Zero Trust for Critical Infrastructure: Securing the OT/ICS Backbone 35:28

۲ روز پیش35:28

35:28

Delve into the essential and intricate application of Zero Trust (ZT) principles within Operational Technology (OT) and Industrial Control Systems (ICS) environments. This episode explores the unique challenges of securing critical infrastructure, where safety, reliability, and availability are primary objectives, and legacy systems, unique protocols, and often unencrypted communications present distinct complexities compared to traditional IT security models. We'll discuss how the increasing convergence of IT and OT, driven by digital transformation, is reshaping the threat landscape and exposing previously isolated systems. Learn about the tailored roadmap for implementing Zero Trust in these vital sectors, employing a systematic five-step process: defining Protect Surfaces, mapping operational flows, building a Zero Trust Architecture (ZTA), creating policies, and ongoing monitoring and maintenance. Discover how established frameworks like the ISA/IEC 62443 Zone and Conduit Model and the SANS Top 5 Critical Controls for OT/ICS integrate with and are fortified by a Zero Trust approach to enhance security and resilience in the face of evolving threats. www.securitycareers.help/securing-the-industrial-heartbeat-why-zero-trust-is-imperative-and-different-for-ot-ics…

1
Cyber Resilience Through Bundling: The Regulatory Challenge 17:53

۳ روز پیش17:53

17:53

Explore the emerging practice of bundling cyber insurance with security products and services, a strategy aimed at enhancing cyber resilience by incentivizing policyholders to adopt proactive security measures from the outset. This episode delves into the potential benefits, such as encouraging better cyber hygiene, aligning the long-term goals of insurers and policyholders to reduce incident frequency and impact, improving risk mitigation, providing deeper risk insights through real-time data, offering guidance on effective security controls, and making security more accessible and affordable for SMEs and SLTTs. We also examine the significant concerns and barriers preventing wider adoption. These include historical worries about insolvency, potential impairment of risk assessment and pricing, the risk of discriminatory practices in partnering with security vendors, and inherent conflicts of interest in business-to-business relationships between insurers and service providers. A major hurdle is the complex and varied regulatory landscape across different states, where differing interpretations of anti-inducement, anti-rebating, and anti-bundling laws create uncertainty and a "chilling effect" that hinders innovation and widespread implementation. Discover why navigating these concerns requires careful oversight and regulation to balance cybersecurity effectiveness with market choice www.securitycareers.help/a-cisos-guide-leveraging-cyber-insurance-for-enhanced-resilience-across-the-enterprise www.breached.company/beyond-the-breach-how-cyber-insurance-can-drive-proactive-cybersecurity https://cyberinsurancecalc.com…

1
Beyond the URL: Decoding Domain Intelligence Threats in 2024 14:40

۴ روز پیش14:40

14:40

In the ever-evolving digital landscape, security teams face the immense challenge of evaluating over a hundred million newly observed domains registered each year. This episode dives into how analytical methods are providing crucial insights into domain intelligence threats. We explore techniques like domain attribute analysis to identify patterns used by threat actors, risk scoring to quantify the likelihood of a domain being malicious, and DGA detection to uncover domains generated by automated systems used in malware and botnets. We also discuss the importance of keyword and topic analysis for identifying domains used in credential harvesting, malware delivery, and scams, and how analyzing new TLDs and likeness to high-profile events helps spot emerging threats and deceptive tactics like typosquatting. Furthermore, we touch upon analyzing webpage attributes to understand attack infrastructure and using anomaly detection to investigate spikes in domain registrations. Ultimately, building a shared knowledge base and fostering community collaboration by sharing insights and observed techniques is essential for strengthening our collective defenses against external threats and making the internet safer. This episode draws insights from an analysis comparing 106 million newly observed domains from 2024 against a large reference set of known malicious domains. breached.company/decoding-the-digital-deluge-how-domain-intelligence-informs-cybersecurity-defenses-in-2024 https://policyquest.diy -> Coupon 15% off -> 'podcast'…

1
US State Privacy Laws: Navigating the Expanding Consumer Rights Patchwork 45:55

۵ روز پیش45:55

45:55

Explore the complex and rapidly evolving landscape of US state data privacy laws, drawing on insights from recent legislative developments across states like California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, and Texas, plus Washington's focused health data act. We break down the core consumer rights becoming standard nationwide – including the right to access, delete, correct, and opt out of data sales, targeted advertising, and certain profiling. Learn about the heightened focus on sensitive data, such as health information and data from children and teens, often requiring explicit opt-in consent. We discuss key differences like scope thresholds, variations in the definition of "sale", and the emergence of mandatory universal opt-out signals. Understand the differing enforcement approaches by state Attorneys General, the role of cure periods (and their sunsetting in many states), and the limited private rights of action. This episode helps untangle the intricate patchwork, highlights the practical implications for businesses implementing compliance systems, and touches on how consumer expectations and trust are shaped by these new regulations. www.compliancehub.wiki/navigating-the-patchwork-an-in-depth-look-at-u-s-state-comprehensive-privacy-laws/ https://globalcompliancemap.com/ https://generatepolicy.com/…

1
Beyond Encryption: Ransomware's New Game & Top Exploits of 2024 18:22

۶ روز پیش18:22

18:22

Tune in to explore the rapidly evolving cyber threat landscape of 2024 from Huntress 2025 global Cyber Threat Report, where attackers standardized sophisticated techniques across businesses of all sizes. We dissect the significant shifts in ransomware strategies, including the fragmentation of major groups following takedowns like LockBit, Dharma, Hive, and Phobos. Discover how agile affiliate networks like RansomHub and INC/Lynx emerged, offering high payouts and dominating the landscape. Learn about the pivot from traditional encryption to data theft and extortion as a cost-saving tactic due to improved defenses. We'll also break down the most impactful vulnerabilities exploited, including the critical ConnectWise ScreenConnect flaws (CVE-2024-1709 & CVE-2024-1708) that spurred a major campaign, the zero-day CrushFTP vulnerability (CVE-2024-4040), and the continued exploitation of the older ProxyShell Exchange vulnerability (CVE-2021-31207). Finally, we'll cover the pervasive use of abused tools like RATs, RMM software, malicious scripts, LOLBins, and sophisticated phishing techniques that defined attacker methodologies throughout the year. This episode provides crucial insights for defenders navigating this complex and challenging environment breached.company/navigating-the-new-frontier-key-cyber-threats-exploits-and-tools-of-2024…

1
The Accelerating Threat Landscape: Inside Modern Cybercrime 15:39

۷ روز پیش15:39

15:39

Delve into the complex and rapidly transforming world of cyber threats. This episode examines notorious ransomware groups like Black Basta, LockBit, BlackCat/ALPHV, Phobos/8Base, Medusa, and Clop, exploring their Ransomware-as-a-Service (RaaS) models and distinctive tactics, techniques, and procedures (TTPs). We also discuss state-sponsored cyber warfare, such as the activities of Iran's APT42 and its impact on critical infrastructure, hacking groups like Scattered Spider, and the individual hacker USDoD, as well as significant law enforcement disruptions like Operation Cronos against LockBit and the arrests of key figures behind Phobos and 8Base. We'll touch upon the emerging challenges of AI-enabled crime and the continuous escalation in the scale and sophistication of cyberattacks. breached.company/global-cybercrime-crackdown-major-law-enforcement-operations-of-2024-2025…

1
Cybersecurity Unpacked: Breaches, Billions, and AI's Double Edge 10:34

۸ روز پیش10:34

10:34

In this episode, we dive into the recent developments shaping the cybersecurity landscape as of May 2025. We discuss major incidents like the significant breach of the LockBit ransomware gang, which exposed sensitive data including negotiation messages and user credentials. We'll also explore the growing sophistication of financial cyberattacks, highlighted by the uncovering of the "industrial-scale" FreeDrain cryptocurrency phishing operation targeting digital wallets with sophisticated methods. The episode examines landmark legal actions, such as Meta's $168 million victory against spyware firm NSO Group, signaling a pushback against surveillance abuses. We explore the evolving role of AI, which offers speed in threat detection but also introduces risks from vulnerabilities in AI-generated code and "shadow AI". Finally, we look at how governments and corporations are responding with new initiatives to bolster defenses, including the UK's Cyber Resilience programs, CISA's advisories for critical infrastructure, and corporate innovations like HPE's Secure Gateway for small businesses and Microsoft's patching of critical cloud vulnerabilities. Join us as we unpack these challenges and responses in a dynamic digital world. www.compliancehub.wiki/cybersecurity-frontlines-recent-breaches-legal-battles-and-the-double-edged-sword-of-ai…

1
The Accelerating Adversary: Inside the 2025 Threat Landscape 13:52

۸ روز پیش13:52

13:52

Join us for a deep dive into the Global Threat Landscape Report 2025 by FortiGuard Labs. This episode explores the dramatic escalation in cyberattacks, revealing how adversaries are moving faster than ever, leveraging automation, commoditized tools, and AI to gain advantage. We'll shed light on the surge in automated reconnaissance, the evolving darknet ecosystem where credentials and corporate access are traded, and how AI is supercharging cybercrime through tools like FraudGPT and deepfakes. Discover the trends in exploitation volumes targeting exposed systems and IoT devices, the stealthy nature of post-exploitation tactics including lateral movement and C2, and the persistent challenges in securing cloud environments plagued by misconfigurations and identity compromise. We'll also break down the changing adversary landscape, from fragmented ransomware groups and the rise of RaaS on the darknet to the dangerous convergence of hacktivism and ransomware and the ongoing operations of state-sponsored actors. Finally, we'll discuss the critical need for organizations to shift from reactive defense to proactive Continuous Threat Exposure Management (CTEM) to counter this accelerating threat. breached.company/navigating-the-accelerating-threat-landscape-proactive-defense-in-the-era-of-adversary-acceleration…

1
2025 Cyber Attack Playbooks: Navigating the Future Threat Landscape 42:13

۹ روز پیش42:13

42:13

This podcast delves into the critical insights found within the 2025 Cybersecurity Attacks Playbooks, exploring the diverse and evolving threat landscape organizations face. We examine playbooks covering threats from AI-enhanced phishing and advanced ransomware to the complexities of supply chain compromises, zero-day exploits, and AI-powered malware. We also discuss emerging threats like deepfake social engineering, quantum computing vulnerabilities, and securing IoT devices. Each episode breaks down the essential stages outlined in the playbooks for specific attacks: Preparation to build foundational defenses, Detection to identify threat indicators, Analysis to understand the attack's scope and methods, Containment/Eradication tailored to the specific threat vector, and Recovery to restore operations and resilience. Gain a deeper understanding of modern attack vectors like credential stuffing, fileless malware, rogue access points, SQL injection, steganography-based data exfiltration, and cache poisoning, as well as network attacks like homograph attacks, Denial-of-Service (DoS), and watering hole attacks, and complex infiltrations like island hopping and Advanced Persistent Threats (APTs). Tune in to learn how the playbooks guide organizations through detection, response, and the vital Lessons Learned process to continuously improve their cybersecurity posture. www.securitycareers.help/navigating-the-2025-threat-landscape-preparing-for-and-responding-to-advanced-cyber-attacks…

1
Beyond the Scan: Unmasking Hidden Risks and Unfixed Flaws in the Age of AI 20:13

10 روز پیش20:13

20:13

In this episode, we dive deep into the findings of the State of Pentesting Report 2025 to explore the real state of cybersecurity. Organizations may feel confident, but pentesting consistently reveals hidden, exploitable vulnerabilities that automated scanners miss. We'll uncover the most significant risks identified through human-led pentests, from common web and mobile application flaws like Server Security Misconfiguration and Missing Access Control to the rapidly emerging and uniquely challenging security issues in AI and Large Language Models (LLMs). Learn why AI/LLM tests have a significantly higher proportion of serious findings and the specific threats like Insecure Output Handling, Prompt Injection, and Unbounded Consumption. More critically, we'll address the disconnect between perceived security and reality by examining why less than half of all findings ever get resolved and how even serious vulnerabilities often remain open for months or years, far exceeding targeted SLAs. We'll explore the factors influencing this remediation struggle, including criticality, pentest type, organizational size, industry, and internal processes. Tune in to understand the critical need for a programmatic approach to offensive security and the challenges teams face in fixing what pentesters find. www.securitycareers.help/beyond-the-scan-the-hidden-reality-of-unfixed-security-risks-revealed-by-pentesting-data…

1
Building Cyber Warriors: The Evolving Cyber Professional 33:42

11 روز پیش33:42

33:42

In the dynamic world of cybersecurity, professionals face constant challenges that demand adherence to strict ethical and legal guidelines. This episode delves into the key ethical and legal considerations, such as protecting individual privacy, ensuring robust data protection, maintaining confidentiality, and complying with relevant laws and regulations like GDPR and CCPA. We discuss responsible practices like vulnerability disclosure and the ethical use of cybersecurity tools. Given the ever-evolving landscape of cybersecurity threats and technologies, staying updated is not optional; it's an imperative for success. Join us as we explore why continuous education and professional development are essential strategies for cybersecurity professionals to navigate this complex terrain, adapt to emerging trends, maintain expertise, and uphold trust. https://cisomarketplace.services/careers www.securitycareers.help/building-cyber-warriors-the-imperative-of-the-evolving-cyber-professional…

1
The Iceberg Impact: Unpacking the Hidden Costs of Cyber Attacks 16:24

12 روز پیش16:24

16:24

Join us as we delve into the complex and pervasive world of cyber risk, exploring the threats, vulnerabilities, and far-reaching consequences for organizations today. Drawing on insights from experts, we'll discuss how cyber attacks can lead to outcomes ranging from regulatory fines and reputational loss to the complete failure of a business. Go beyond the headlines of data breaches and understand the full "iceberg impact" of cyber losses, including significant uninsurable costs like reputational damage, loss of customers, stock devaluation, and devaluation of intellectual property that often exceed the direct financial costs. We'll explore how attacks threaten critical corporate data, intellectual property, and customer details, potentially causing financial loss and damage to market value, share price, and competitive advantage. The conversation will touch upon the challenges posed by mobile devices, social media, and supply chain vulnerabilities, and the critical need for organizations to accurately assess their cyber risk exposure, identify their "crown jewels" of critical data, and prepare for inevitable incidents through robust incident management and layered defenses. www.securitycareers.help/the-iceberg-impact-navigating-the-full-scope-of-cyber-risk-in-the-digital-age www.compliancehub.wiki/cyber-risk-through-a-compliance-lens-navigating-the-regulatory-landscape…

1
The MAESTRO Framework: Layering Up Against MAS Security Threats 44:05

13 روز پیش44:05

44:05

Multi-Agent Systems (MAS), characterized by multiple autonomous agents coordinating to achieve shared goals, introduce additional complexity and expand the attack surface compared to single-agent systems. This episode delves into the unique security challenges presented by MAS, drawing on the OWASP Agentic Security Initiative's MAESTRO (Multi-Agent Environment, Security, Threat, Risk, and Outcome) framework. We explore how MAESTRO provides a layered and architectural methodology for structured threat modeling in MAS. The framework breaks down MAS security into seven distinct architectural layers, each with specific concerns, from the Foundation Model to the Agent Ecosystem. Crucially, we examine the cross-layer risks and emergent behaviors unique to MAS environments, highlighting how vulnerabilities don't just exist within layers but manifest through complex interactions between them. Furthermore, we discuss the key agentic factors—Non-Determinism, Autonomy, Agent Identity Management, and Agent-to-Agent Communication—that MAESTRO emphasizes as significantly contributing to these threat scenarios and amplifying risks across layers. Tune in to understand how applying MAESTRO helps uncover and mitigate these multifaceted security challenges in real-world MAS deployments, as detailed in the OWASP Multi-Agentic system Threat Modelling Guide. www.hackernoob.tips/navigating-the-labyrinth-structured-threat-modeling-in-multi-agent-systems-with-the-owasp-maestro-framework www.securitycareers.help/securing-the-autonomous-frontier-a-cisos-guide-to-protecting-multi-agent-systems-and-building-a-specialized-team…

1
Unmasking the Unseen: Building and Benefiting from Behavioral Threat Hunting 25:40

14 روز پیش25:40

25:40

In today's complex threat landscape, adversaries are constantly evolving their tactics to evade traditional defenses. Behavioral threat hunting offers a proactive methodology to identify cyber threats that have infiltrated systems undetected and disrupt them before they cause significant damage, ultimately reducing attacker "dwell time". This episode delves into the fundamental requirements for establishing effective threat hunting capabilities, covering the crucial technological prerequisites like achieving sufficient visibility and storage for deep data analysis, and the necessity of a robust analysis platform. We also explore the essential personnel prerequisites, highlighting the need for skilled staffing, diverse team knowledge, and specific technical and analytical skill sets, while acknowledging the persistent challenge of skills shortages. Beyond tech and talent, we discuss the importance of foundational elements like emulation and validation, adopting a formal methodology such as the Threat Hunting Cycle, and utilizing centralized management and metrics tools to ensure consistent, repeatable, and valuable hunts. Finally, we uncover how effective threat hunting integrates with and enhances broader security operations and incident response, by improving security posture, closing visibility gaps, developing new automated detection capabilities from discovered unknown threats, and providing crucial documentation and support for incident response engagements. Join us as we explore how proactive hunting transforms security operations from reactive defense to strategic resilience. www.securitycareers.help/unmasking-the-unseen-why-behavioral-threat-hunting-is-essential-for-modern-security-operations…

1
Beyond the Prompt: Navigating the Threats to AI Agents 22:57

15 روز پیش22:57

22:57

AI agents, programs designed to autonomously collect data and take actions toward specific objectives using LLMs and external tools, are rapidly becoming widespread in applications from customer service to finance. While built on LLMs, they introduce new risks by integrating tools like APIs and databases, significantly expanding their attack surface to include classic software vulnerabilities like SQL injection, remote code execution, and broken access control, in addition to inherent LLM risks like prompt injection. Our sources demonstrate that these vulnerabilities are largely framework-agnostic, stemming from insecure designs and misconfigurations rather than flaws in frameworks like CrewAI or AutoGen. Given the autonomous nature and expanded capabilities of agents, the potential impact of compromises escalates from data leakage to infrastructure takeover. This episode dives into the complex threats targeting AI agents and highlights why a layered, defense-in-depth strategy is essential, combining safeguards like Prompt Hardening, Content Filtering, Tool Input Sanitization, Tool Vulnerability Scanning, and Code Executor Sandboxing, because no single mitigation is sufficient to address the diverse attack vectors. www.securitycareers.help/securing-the-autonomous-frontier-layered-defenses-for-ai-agent-deployments/ https://www.hackernoob.tips/exploring-the-attack-surface-our-guide-to-ai-agent-exploitation/ https://vibehack.dev/ https://devsecops.vibehack.dev…

1
Space Under Pressure: Geopolitical Threats and the Evolving Cosmos (2025) 27:41

17 روز پیش27:41

27:41

Drawing on open-source information and eight years of collected data, the CSIS Aerospace Security Project's 2025 Space Threat Assessment explores the key developments in foreign counterspace weapons and the evolving security landscape in Earth orbit. This assessment highlights how space is becoming a more dangerous place and is increasingly woven into both peacetime and wartime activities. The report categorizes counterspace weapons into four main types: kinetic, non-kinetic, electronic, and cyber operations. While the past year saw few headline-grabbing kinetic tests, concerns persist, notably regarding Russia's pursuit of a nuclear anti-satellite capability designed to target satellites orbiting Earth, which the United States and international partners remain concerned about. www.myprivacy.blog/space-threats-and-the-unseen-impact-a-privacy-perspective-on-the-2025-assessment www.compliancehub.wiki/navigating-the-orbital-minefield-compliance-challenges-in-the-2025-space-threat-landscape/…

1
The Price of Protection: Budgeting for Essential Cyber Hygiene (CIS IG1) 14:26

17 روز پیش14:26

14:26

This episode explores the costs associated with implementing essential cyber hygiene as outlined by the CIS Critical Security Controls Implementation Group 1 (IG1). We delve into the different approaches enterprises can take – utilizing on-premises tools, leveraging Cloud Service Providers (CSPs), or partnering with Managed Service Providers (MSPs). Drawing on the guide's research, we discuss the types of tools and policies needed for the 10 areas of cyber defense, explore budgeting considerations for different enterprise sizes, and highlight how IG1 Safeguards can provide significant protection against common threats for a relatively low cost. Learn how to make informed and prioritized decisions to secure your enterprise, whether through owned infrastructure, outsourced services, or a hybrid approach. www.securitycareers.help/the-price-of-protection-making-cis-ig1-cyber-hygiene-achievable-and-affordable https://baseline.compliancehub.wiki…

1
GTIG 2024 Zero-Days: Espionage, Enterprise, and the Shifting Landscape 13:16

18 روز پیش13:16

13:16

Join us as we dive into Google Threat Intelligence Group's (GTIG) comprehensive analysis of zero-day exploitation in 2024. Drawing directly from the latest research, this episode explores the 75 zero-day vulnerabilities tracked in the wild. While the overall number saw a slight decrease from 2023, the analysis reveals a steady upward trend over the past four years. Discover the significant shift towards targeting enterprise-focused technologies, which jumped to 44% of tracked zero-days in 2024, up from 37% in 2023. We examine why security and networking products have become high-value targets, making up over 60% of enterprise exploitation, and the implications for defenders. Learn about the continued targeting of end-user platforms like desktop operating systems, especially Microsoft Windows, which saw an increase in exploitation, contrasting with decreased exploitation observed in browsers and mobile devices. We also break down who is driving this exploitation, with espionage actors (government-backed and commercial surveillance vendors) leading the charge, accounting for over 50% of attributed vulnerabilities. Hear about the persistent activity of PRC-backed groups targeting security technologies and the notable rise of North Korean actors mixing espionage and financial motives. Finally, we touch on the most frequently exploited vulnerability types and what vendors and defenders can do to counter these evolving threats. This episode provides a detailed look into the complex and changing world of zero-day exploitation in 2024, offering insights beyond just the numbers. breached.company/technical-brief-a-deep-dive-into-2024-zero-day-exploitation-trends…

1
Verizon DBIR 2025: Navigating Third-Party Risk and the Human Factor 12:11

19 روز پیش12:11

12:11

Join us as we unpack the critical insights from the Verizon 2025 Data Breach Investigations Report. This episode dives deep into the report's most prominent themes, highlighting the ever-increasing involvement of third parties in data breaches and the persistent influence of the human element, which was involved in 60% of breaches this year. We explore the prevalent incident patterns including System Intrusion, often involving ransomware, Basic Web Application Attacks, largely driven by stolen credentials, and Social Engineering, where phishing and pretexting remain key techniques, now joined by emerging threats like prompt bombing. Drawing on data collected from November 1, 2023, to October 31, 2024, we discuss how attackers exploit vulnerabilities, how different industries and organizations of all sizes are targeted, and the importance of frameworks like VERIS for understanding the threat landscape. Tune in to gain actionable insights directly supported by the data and analysis from the DBIR sources. breached.company/navigating-the-modern-threat-landscape-key-insights-from-the-verizon-dbir-2025…

1
The State of EU Cybersecurity: Threats, Trends, and the Evolving Landscape 16:21

20 روز پیش16:21

16:21

Explore the complex and widespread cybersecurity threat landscape currently facing the European Union. This episode delves into the findings of recent reports, highlighting how geopolitical tensions and the rapid pace of digitisation are fueling a surge in malicious cyber activity. We discuss the substantial threat level assessed for the EU, meaning direct targeting and serious disruptions are realistic possibilities [previous turn]. You'll learn about the most reported attacks, including Denial-of-Service (DoS/DDoS/RDoS) and ransomware, and how threats against data are also prevalent. We break down the key threat actors – from financially motivated cybercriminals and well-funded state-nexus groups focused on espionage and disruption, to increasingly unpredictable hacktivists driven by geopolitical events. Discover how threats are evolving, including the shift in ransomware tactics, the rise of hacker-for-hire services, the use of AI in creating fake content and misinformation, and the persistent danger posed by the exploitation of unpatched vulnerabilities and sophisticated supply chain attacks. We also look at which sectors are most targeted, including public administration and transport, and peer into the future to understand how emerging technologies like AI and quantum computing will shape the threat landscape towards 2030. www.compliancehub.wiki/understanding-the-evolving-cybersecurity-threat-landscape-in-the-eu-an-in-depth-analysis-for-compliance/ https://gdpriso.com/ https://baseline.compliancehub.wiki/…

1
Integrating Incident Response: A NIST SP 800-61r3 Guide to Cyber Risk Management 16:55

21 روز پیش16:55

16:55

Incident response is a critical part of cybersecurity risk management and should be integrated across organizational operations. This episode explores the recommendations and considerations for incorporating cybersecurity incident response throughout an organization’s cybersecurity risk management activities, as described by the new NIST Special Publication (SP) 800-61 Revision 3. We'll discuss how NIST SP 800-61r3, a CSF 2.0 Community Profile, uses the NIST Cybersecurity Framework (CSF) 2.0 Functions to provide a common language and structure for these efforts. Learn how the Govern, Identify, and Protect functions support preparation activities, while the Detect, Respond, and Recover functions cover the incident response itself. We'll also highlight the crucial role of continuous improvement, feeding lessons learned back into the overall strategy. This guidance aims to help organizations prepare for incidents, reduce their number and impact, and improve the efficiency and effectiveness of detection, response, and recovery activities. This episode is intended for cybersecurity program leadership, cybersecurity personnel, and others responsible for handling cybersecurity incidents www.compliancehub.wiki/beyond-reaction-integrating-incident-response-into-your-cybersecurity-risk-management-strategy-with-nist-sp-800-61r3 https://irmaturityassessment.com https://cyberinsurancecalc.com…

1
Beyond the Blueprint: Learning Cyber Resilience Together 20:26

22 روز پیش20:26

20:26

Achieving cyber resilience is a complex and dynamic journey with no one-size-fits-all solution. This episode explores how organizations can significantly improve their cyber resilience posture by leveraging the shared experiences, insights, and front-line practices of their peers and the wider ecosystem. Drawing on insights from the Cyber Resilience Compass initiative, we discuss why sharing what works in practice is essential for building collective knowledge in the field. You'll hear how participating in consultations and workshops, engaging in information-sharing networks like ISACs and CERTs, collaborating with external parties, and learning from real-world case studies can provide vital inspiration and direction. Discover how this collaborative approach helps organizations identify effective strategies, shape their resilience roadmaps, make well-informed decisions, and transition towards a more consistent and future-ready approach, ultimately enhancing the resilience of the entire ecosystem. breached.company/navigating-the-digital-storm-why-shared-experiences-are-your-compass-to-cyber-resilience…

1
EDPB 2024: Guarding EU Data Privacy in a Rapidly Changing Digital World 15:35

23 روز پیش15:35

15:35

Join us as we delve into the European Data Protection Board's (EDPB) 2024 Annual Report to understand how they championed data protection in a year marked by significant technological and regulatory shifts. This episode will cover the key milestones and priorities outlined in the EDPB's 2024-2027 Strategy, designed to strengthen, modernise, and harmonise data protection across Europe www.compliancehub.wiki/edpb-2024-navigating-the-complexities-of-data-protection-in-a-rapidly-evolving-digital-landscape…

1
The 2024 IC3 Report: Unpacking Record Cybercrime Losses 14:02

24 روز پیش14:02

14:02

Join us as we delve into the key findings of the FBI's 2024 Internet Crime Complaint Center (IC3) Annual Report. This year marks the 25th anniversary of IC3, which serves as the primary destination for the public to report cyber-enabled crime and fraud. The report reveals a staggering new record for losses reported to IC3, totaling $16.6 billion in 2024. This represents a 33 percent increase from 2023. We'll explore the most impactful crime types by reported loss, including Investment fraud ($6.57 billion), Business Email Compromise ($2.77 billion), and Tech Support scams ($1.46 billion), which are collectively responsible for the bulk of reported losses. A major factor contributing to these losses is the increasing use of cryptocurrency, which served as a descriptor in 149,686 complaints and was associated with $9.3 billion in losses in 2024, a 66% increase in losses. We'll also examine the significant impact on different age groups, noting that individuals over the age of 60 suffered the most losses ($4.885 billion) and submitted the most complaints (147,127). For this age group, Investment fraud ($1.834 billion) and Tech Support scams ($982 million) resulted in the highest reported losses, and cryptocurrency was referenced in 33,369 complaints with over $2.8 billion in losses. The episode will also touch upon the IC3's core functions including collection, analysis, public awareness, and referrals, its role in partnering with law enforcement and the private sector, and notable efforts like the IC3 Recovery Asset Team which assists in freezing funds for victims of fraudulent transactions, demonstrating a 66% success rate in 2024, and Operation Level Up, which successfully notified victims of cryptocurrency investment fraud, resulting in estimated savings breached.company/the-2024-ic3-report-record-cybercrime-losses-highlight-escalating-digital-threats…

1
The 2025 Cyber Crossroads: Balancing AI Innovation with IoT Security and Evolving Threats 23:37

25 روز پیش23:37

23:37

Navigate the complex cybersecurity landscape of Q2 and Summer 2025 as we delve into the escalating convergence of AI-driven cyberattacks, the persistent vulnerabilities of the expanding Internet of Things (IoT), and the challenges of establishing robust security and governance frameworks. Based on recent Q1 2025 incident data and expert projections, this episode explores the weaponization of AI in phishing, malware, and social engineering, the continued exploitation of poorly secured IoT devices, and the evolving tactics of ransomware and state-sponsored actors. We'll also discuss the crucial need for proactive defense, AI-augmented security, and adaptation to a fragmenting global regulatory environment. breached.company/strategic-cybersecurity-outlook-ai-iot-and-threat-actor-convergence-in-q2-summer-2025…

1
2025 Q1 Cyber Shockwave: Ransomware Records, AI Threats, and the Regulatory Reckoning 21:31

26 روز پیش21:31

21:31

The first four months of 2025 witnessed an alarming surge in global cybersecurity incidents, with ransomware attacks reaching unprecedented levels. Join us as we dissect the key trends, including the evolution of ransomware tactics like double extortion, the increasing sophistication of social engineering fueled by AI and deepfakes, and the persistent exploitation of software vulnerabilities. We'll delve into major incidents like the crippling attack on Change Healthcare and the record-breaking Bybit cryptocurrency theft, highlighting the most targeted sectors such as healthcare, education, government, and manufacturing. Finally, we'll examine how organizations, law enforcement, and the evolving global regulatory environment, with key legislation like the EU's NIS2 and DORA, are grappling with this escalating cyber threat. breached.company/global-cybersecurity-incident-review-january-april-2025…

1
Navigating Privacy Risks with the NIST Privacy Framework 1.1 16:59

27 روز پیش16:59

16:59

This podcast delves into the NIST Privacy Framework 1.1, a voluntary tool developed to help organizations identify and manage privacy risk while fostering innovation and protecting individuals' privacy. We explore its three core components: Core, Organizational Profiles, and Tiers, and how they enable organizations to understand, assess, prioritize, and communicate their privacy activities. Learn how to use this framework to build customer trust, meet compliance obligations, and facilitate dialogue about privacy practices. www.compliancehub.wiki/navigating-the-complex-world-of-privacy-with-the-nist-privacy-framework-1-1…

1
Beyond the Firewall: The Offensive Cybersecurity Edge 13:24

28 روز پیش13:24

13:24

Dive into the dynamic world of offensive cybersecurity with insights from leading experts and real-world scenarios. We explore the critical role of techniques like penetration testing, adversary simulation, and red team exercises in proactively identifying vulnerabilities and strengthening defenses against evolving cyber threats. Understand how adopting an adversarial mindset and employing continuous assessment methodologies are essential for navigating today's complex threat landscape and building a resilient security posture. www.securitycareers.help/dont-just-scan-test-choosing-the-right-penetration-testing-partner https://cisomarketplace.services https://generatepolicy.com…

1
AI on Trial: Decoding the Intersection of Artificial Intelligence and Harm 21:17

29 روز پیش21:17

21:17

Explore the rapidly evolving landscape where artificial intelligence intersects with criminality and societal risks. Drawing on expert research, this podcast delves into the transformative potential of AI-enabled crime, from sophisticated financial fraud using deepfakes to the generation of child sexual abuse material, and the challenges this poses for law enforcement. We also examine the critical need for robust AI incident reporting mechanisms, as proposed with standardized key components for documenting AI-related harms and near misses. Join us as we unpack the threats, the defenses, and the policy reforms necessary to navigate this complex new frontier. breached.company/navigating-the-ai-frontier-confronting-ai-enabled-crime-through-robust-incident-reporting https://airiskassess.com https://cisomarketplace.services…

1
Quantum Leap Security: Navigating the Post-Quantum Cryptography Era 9:45

۴ weeks پیش9:45

9:45

We delve into the urgent need for organizations to prepare for the era of quantum computing, which threatens to break today's standard encryption methods. We examine the "harvest now, break later" (HNDL) threat, where malicious actors are already collecting encrypted data for future decryption by quantum computers. Drawing upon information from sources like NIST and expert analysis, we discuss the development and standardization of quantum-resistant cryptographic algorithms such as CRYSTALS-Kyber (ML-KEM) and CRYSTALS-Dilithium (ML-DSA). We provide CISOs and cybersecurity professionals with key strategic considerations for a successful quantum-safe transition, including conducting a comprehensive cryptographic inventory and quantum risk assessment (QRA), prioritizing systems for migration, engaging with vendors, and fostering crypto agility. Join us as we navigate the challenges and opportunities of this critical cybersecurity revolution and help you take the necessary quantum leap to secure your future. www.securitycareers.help/the-quantum-clock-is-ticking-your-guide-to-navigating-the-post-quantum-cryptography-era https://quantumsecurity.ai https://risk.quantumsecurity.ai/…

1
The AI and Influence Front - (dis/mis)Information 23:04

۴ weeks پیش23:04

23:04

Explore the escalating threats posed by artificial intelligence incidents, sophisticated disinformation campaigns like the Doppelgänger network targeting nations from France to Israel, and the cyber espionage activities of threat actors such as UAC-0050 and UAC-0006 as revealed by Intrinsec's analysis. We delve into the tactics, infrastructure, and narratives employed in these digital battlegrounds, drawing insights directly from recent intelligence reports. Understand the key components of AI incident reporting, the disinformation narratives amplified across different countries, and the evolving techniques of cyber intrusion sets targeting critical infrastructure and institutions. Join us as we unpack the complex landscape of AI risks, influence operations, and cyber warfare. breached.company/the-unseen-frontlines-navigating-the-intertwined-threats-of-ai-incidents-disinformation-and-cyber-espionage…

1
Smart City Cyber Shield 14:36

۵ weeks پیش14:36

14:36

This podcast we are exploring the critical cybersecurity challenges facing today's interconnected urban environments. We delve into the evolving threats arising from smart city infrastructure and the Internet of Things (IoT), including ransomware attacks on critical infrastructure, the expanded attack surface created by interconnected devices, and strategies for building cyber resilience. Join us as we discuss best practices for municipalities, the importance of public trust, and the role of AI in both cyberattacks and defense. Stay informed and learn how we can collectively protect the future of our smart cities. www.securitycareers.help/navigating-the-cyber-threat-landscape-of-smart-cities https://cybersafe.city https://risk.secureiotoffice.world https://risk.secureiot.house…

1
AI vs. the Expanding Attack Surface: Proactive Defense Strategies 18:07

۵ weeks پیش18:07

18:07

Is your attack surface spiraling out of control with multi-cloud, SaaS, and third-party integrations? Join us as we delve into how AI-powered automation is becoming critical for modern Attack Surface Management (ASM). We'll explore the challenges organizations face in achieving comprehensive visibility and how AI provides viable solutions for enhanced asset discovery, proactive threat detection, intelligent risk prioritization, and faster incident response. Learn how AI acts as a force multiplier in cybersecurity, enabling a shift from reactive to proactive defense against evolving cyber threats. www.securitycareers.help/why-ai-powered-attack-surface-management-is-your-new-strategic-imperative https://risk.quantumsecurity.ai/ https://airiskassess.com/…

1
Deep Dive into Deepfakes: Unmasking the AI Illusion 19:16

۵ weeks پیش19:16

19:16

Welcome to Deep Dive, where we tackle complex topics head-on. In this episode, we delve into the fascinating and increasingly concerning world of deepfakes: AI-generated audio and visual content designed to deceive. We'll explore the technology behind deepfakes, from face-swapping to voice cloning the threats they pose to individuals, organizations, and even democratic processes and the ongoing efforts to detect and mitigate this emerging challenge. Join us as we break down the science fiction of today into the cybersecurity reality of tomorrow. www.myprivacy.blog/the-deepfake-dilemma-navigating-the-age-of-ai-generated-deception…

1
Scam Savvy: Navigating the Digital Deception 15:16

۵ weeks پیش15:16

15:16

In a world increasingly shaped by digital interactions and artificial intelligence, online scams are becoming more sophisticated and pervasive. Scam Savvy delves into the tactics employed by fraudsters, from exploiting emotions in charity and romance scams to leveraging AI for deepfakes and personalized phishing attacks. We unmask these deceptive practices and equip you with the knowledge to protect yourself in the evolving landscape of online crime. www.scamwatchhq.com/navigating-the-digital-deception-understanding-and-avoiding-online-scams-in-the-age-of-ai https://identityrisk.myprivacy.blog…

1
Coordinated Cyber Defense: Inside Vulnerability Disclosure Programs (VDP) 23:17

۵ weeks پیش23:17

23:17

This podcast dives into the critical world of vulnerability disclosure programs (VDPs), exploring how organizations and security researchers work together to identify and address security weaknesses. We'll examine the core principles that underpin effective VDPs, including establishing clear reporting channels and defined scopes, the importance of timely responses and good-faith engagement, and the crucial role of safe harbor provisions. We'll also delve into modern best practices such as automation in triage, integration with security workflows, adherence to coordinated vulnerability disclosure (CVD) norms, and the benefits of transparency in building community trust. Join us to understand how VDPs are becoming a strategic necessity for cyber resilience, fostering a collaborative security ecosystem. www.hackernoob.tips/diving-deep-a-researchers-guide-to-navigating-vulnerability-disclosure-programs www.securitycareers.help/establishing-a-vulnerability-disclosure-program-a-cisos-perspective https://irmaturityassessment.com https://cyberinsurancecalc.com…

1
State Privacy Unpacked 27:08

۵ weeks پیش27:08

27:08

Navigating the complex landscape of U.S. state data privacy laws can be challenging. Join us as we break down the key aspects of these regulations, including consumer rights, business obligations, data breach notification requirements, and enforcement trends. We'll explore the nuances of laws like the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (CDPA), the Colorado Privacy Act (CPA), and emerging legislation like the New York Privacy Act (if passed), helping businesses and consumers understand their rights and responsibilities in an ever-evolving digital world. www.compliancehub.wiki/navigating-the-maze-an-in-depth-look-at-u-s-state-data-privacy-laws https://globalcompliancemap.com https://cisomarketplace.services…

1
Crypto Payments: Secure or Exposed? 16:14

۵ weeks پیش16:14

16:14

Explore the exciting future of cryptocurrency payments through the lens of cybersecurity and privacy. We delve into the potential benefits and significant risks, offering insights into best practices and the crucial role of regulation in this evolving landscape. www.myprivacy.blog/navigating-the-crypto-landscape-an-in-depth-look-at-privacy-in-the-future-of-payments www.compliancehub.wiki/navigating-the-crossroads-compliance-and-privacy-in-the-cryptocurrency-realm…

1
Secure Digital Retail: Navigating Privacy and Compliance 16:23

۶ weeks پیش16:23

16:23

This podcast delves into the critical aspects of data privacy laws like GDPR and the Connecticut Data Privacy Law, alongside the essential Payment Card Industry Data Security Standard (PCI DSS) compliance for e-commerce success. We explore how retailers can craft clear privacy policies, manage user consent effectively, and implement stringent security measures to protect customer data and ensure secure online transactions in the evolving digital landscape. Join us for insights on building customer trust through adherence to regulations and best practices in digital retail security. www.compliancehub.wiki/navigating-the-complexities-of-compliance-in-digital-retail-a-comprehensive-guide…

1
AI's Cyber Shadow: Unpacking the Emerging Threat 18:16

۶ weeks پیش18:16

18:16

Dive deep into the rapidly evolving landscape of AI-powered cyberattacks with insights from cutting-edge research, including the framework for evaluating AI cyber capabilities developed by Google DeepMind. Explore how AI is shifting the balance between offense and defense in cybersecurity, potentially lowering the cost and complexity of sophisticated attacks while demanding new strategies for protection. Join us as we unpack the key findings, potential future threats, and essential considerations for safeguarding your digital world in the age of increasingly capable AI adversaries. breached.company/the-ai-cyberattack-horizon-understanding-the-emerging-threat https://airiskassess.com https://globalcompliancemap.com…

1
Never Trust, Always Verify: Exploring Zero Trust Architecture 22:43

۶ weeks پیش22:43

22:43

Delve into the principles and practical applications of Zero Trust Architecture (ZTA), a modern cybersecurity paradigm that moves away from traditional perimeter-based security by embracing the core tenet of "never trust, always verify". Learn about the key components, tenets, and benefits of ZTA, as well as strategies for implementation in today's complex and distributed IT environments, including cloud, remote users, and diverse devices. https://www.zerotrustciso.com www.securitycareers.help/building-a-career-in-a-zero-trust-world-understanding-the-foundational-principles-of-modern-cybersecurity…

1
Decoding Digital Finance: Navigating Cyber Threats with Innovative Solutions 16:23

۶ weeks پیش16:23

16:23

Explore the critical cybersecurity challenges facing the financial services industry today, from the increased risk of data breaches and sophisticated cyber attacks to emerging threats like quantum computing and client-side vulnerabilities. Drawing insights from the cutting-edge solutions featured in the CYBERTECH100, we delve into innovative technologies like AI-powered threat detection, behavioral biometrics, post-quantum cryptography, and centralized access management that are revolutionizing how financial institutions protect their assets and customers. Join us as we unpack the complexities of the digital finance landscape and discover how to stay ahead of evolving cyber risks. www.compliancehub.wiki/navigating-the-digital-maze-a-comprehensive-guide-to-e-commerce-compliance…

1
HIPAA Security Hub: Protecting Your Digital Health Information 13:36

۶ weeks پیش13:36

13:36

Navigating the complex world of healthcare cybersecurity. Join us as we delve into the HIPAA Security Rule, its purpose in safeguarding electronic Protected Health Information (ePHI), and the latest updates addressing evolving threats like AI and quantum computing. We'll break down compliance requirements, explore the impact of the HIPAA Omnibus Rule, and discuss best practices for maintaining the confidentiality, integrity, and availability of sensitive patient data. Stay informed and secure your digital healthcare landscape. www.compliancehub.wiki/mastering-hipaa-security-rule-compliance-protecting-your-digital-healthcare-landscape…

1
SOC Insights: Navigating the Cyber Security Operations Center 25:10

۶ weeks پیش25:10

25:10

Join us for SOC Insights, the podcast dedicated to demystifying the world of the Security Operations Center. We delve into the core functions of a SOC including collection, detection, triage, investigation, and incident response. Explore essential SOC tools like SIEMs, Threat Intelligence Platforms, and Incident Management Systems. Understand the critical role of threat intelligence, the proactive practice of threat hunting and the importance of metrics for measuring SOC performance. We'll also discuss the challenges faced by SOC teams, such as alert triage, the need for skilled staff, and the integration of automation and orchestration. Whether you're a seasoned security professional or new to the field, SOC Insights provides valuable perspectives on building and operating an effective cyber defense. www.securitycareers.help/the-nerve-center-of-cyber-defense-understanding-and-building-effective-security-operations-centers…

1
Digital Forensics Evolved: Navigating New Tech Threats 25:35

۶ weeks پیش25:35

25:35

Explore the dynamic landscape of digital forensics in the face of rapidly evolving technologies. We delve into the impact of trends like IoT, 5G networks, AI-driven attacks, advanced file systems (APFS, NTFS), cloud integration, and sophisticated anti-forensic techniques across Mac OS, network infrastructures, and Windows platforms. Join us as we unravel the challenges and emerging solutions for investigators striving to uncover digital evidence in an increasingly complex world. www.hackernoob.tips/digital-forensics-on-the-edge-navigating-emerging-technologies-across-platforms…

1
AI Unlocked: The Prompt Hacking Threat Landscape 21:53

۷ weeks پیش21:53

21:53

Delve into the critical security vulnerabilities of Artificial Intelligence, exploring the dangerous world of prompt injection, leaking, and jailbreaking as highlighted in SANS' Critical AI Security Controls and real-world adversarial misuse of generative AI like Gemini by government-backed actors. Understand how malicious actors attempt to bypass safety controls, extract sensitive information and manipulate LLMs for nefarious purposes, drawing insights from documented cases involving Iranian, PRC, North Korean, and Russian threat actors. Learn about the offensive techniques used and the ongoing challenge of securing AI systems,…

1
AI in Cyber and Strategy: Threats, Defenses, and Geopolitical Shifts 27:09

۷ weeks پیش27:09

27:09

This podcast explores the multifaceted impact of artificial intelligence on the landscape of cybersecurity and military strategy. We delve into how AI is being leveraged for advanced cyber defense, including identifying vulnerabilities and accelerating incident response. while also examining the emerging cyberattack capabilities that AI can enable. Furthermore, we analyze the broader strategic risks and opportunities presented by the growing military use of AI, considering its implications for national security, international competition, and the future of conflict. www.myprivacy.blog/the-ai-revolution-in-cyber-and-strategy-a-double-edged-sword…

1
Navigating the AI Frontier: Risk Management for GPAI and Foundation Models 16:02

۷ weeks پیش16:02

16:02

Join us as we delve into the critical realm of risk management for General-Purpose AI (GPAI) and foundation models. Drawing insights from the UC Berkeley Center for Long-Term Cybersecurity's profile, we explore the unique risks associated with these increasingly multi-purpose AI systems, from their large-scale impact and potential for misuse to the challenges posed by emergent behaviors We examine frameworks and best practices for identifying, analyzing, and mitigating these risks, aligning with standards like the NIST AI Risk Management Framework and considering the implications of emerging regulations This podcast is essential listening for developers, policymakers, and anyone seeking to understand and responsibly navigate the rapidly evolving landscape of advanced AI.…

1
SOC 2 for SaaS: Building Trust and Compliance 22:06

۷ weeks پیش22:06

22:06

Navigate the world of SOC 2 compliance specifically for SaaS companies. We break down the Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, and Privacy) explain the difference between Type I and Type II audits, and offer best practices for achieving and maintaining your SOC 2 certification to build customer trust and gain a competitive advantage. Learn how to prepare for your audit, understand the importance of continuous monitoring, and leverage your SOC 2 report for business growth. www.compliancehub.wiki/soc-2-compliance-for-saas-companies-a-technical-deep-dive…

1
The Cybernetic Teammate: AI's Revolution in Teamwork 21:01

۷ weeks پیش21:01

21:01

Explore how artificial intelligence is transforming the core of organizational collaboration. We delve into the groundbreaking research from "The Cybernetic Teammate" study, revealing how AI-powered tools are impacting team performance, breaking down expertise silos, and even influencing social engagement in the workplace. Discover how individual AI users are matching and sometimes exceeding the output of traditional teams, and what this means for the future of work and organizational design. www.securitycareers.help/the-rise-of-the-cybernetic-teammate-how-ai-is-redefining-collaboration-in-the-modern-workplace Thank you to our sponsor: https://cyberagent.exchange…

1
Global Threats Unveiled: Decoding the 2025 Intelligence Assessment 27:56

۷ weeks پیش27:56

27:56

This podcast dives deep into the 2025 Annual Threat Assessment by the U.S. Intelligence Community, analyzing the most serious threats to U.S. national security posed by major state actors like China and Russia, non-state transnational criminals and terrorists such as ISIS, and the growing trend of adversarial cooperation. We explore the nuanced intelligence, long-term strategic challenges, and evolving tactics that shape the global security landscape. breached.company/the-shifting-global-security-landscape-insights-from-the-2025-annual-threat-assessment/…

1
Caught in the Trap: Honeypot Cyber Attack Insights 23:36

۷ weeks پیش23:36

23:36

This podcast dives into the shocking findings of a live honeypot experiment that recorded over 570,000 cyber attacks in just seven days. We explore the attack trends, including brute-force attempts, stolen credentials, automated bots, and known vulnerabilities, offering valuable insights for SOC analysts, security researchers, and anyone curious about real-world cyber threats. Learn about attacker behavior, commonly exploited vulnerabilities, and actionable steps to make security teams smarter and better prepared. breached.company/the-relentless-tide-understanding-global-cyber-attacks-and-breaches…

1
Germany AI Trends 2025: Navigating the Global Race 17:01

۸ weeks پیش17:01

17:01

Delve into the critical artificial intelligence trends shaping 2025, as highlighted in the statworx AI Trends Report. This podcast explores the rapid advancements in AI, the ongoing global competition for AI supremacy, the impact of European regulations like the AI Act, and the potential bursting of the AI investment bubble, offering insights for businesses and decision-makers.…

1
Global AI Crossroads (India & Africa): Innovation, Regulation, and Trust 21:57

۸ weeks پیش21:57

21:57

Explore the dynamic world of artificial intelligence through a global lens, examining key trends identified in India and Africa. We delve into the balance between AI innovation and regulatory frameworks. Discover how AI is being applied for public sector transformation in India, addressing accessibility and leveraging multilingual capabilities. We also critically analyze the concept of trustworthy AI from African perspectives, considering ethical implications, data justice, and the need for Afrocentric approaches that prioritize local values and community benefits over global tech interests. Join us as we navigate the complexities of AI development and deployment across diverse cultural and societal landscapes, discussing challenges like bias, governance, and the crucial pursuit of responsible and trustworthy AI for all. https://www.compliancehub.wiki/navigating-the-ai-landscape-compliance-considerations-in-india-and-africa…

1
INCD Cybercrime Unpacked: 2024's Evolution and 2025 Predictions 27:08

۸ weeks پیش27:08

27:08

Delve into the key cybercrime trends observed in 2024 by Israel National Crime Directorate (INCD), from the pervasive use of infostealers and the rise of encryption-less ransomware to the emerging threats involving AI and decentralized technologies. We analyze how cybercriminals are adapting their tactics, the impact of law enforcement actions, and what these shifts foreshadow for the cyber threat landscape in 2025. breached.company/understanding-the-2024-cyber-threat-landscape-insights-for-our-community…

1
Europe Under Threat: Inside the Evolving World of Organised Crime 28:11

۸ weeks پیش28:11

28:11

This podcast delves into the findings of the European Union Serious and Organised Crime Threat Assessment (EU-SOCTA) 2025, exploring the changing DNA of serious and organised crime in Europe as it becomes increasingly nurtured online and accelerated by AI and other new technologies. We examine the destabilising impact of these criminal activities on society, the growing intersection with hybrid threats, and the key areas of concern identified by Europol, including cyber-attacks, online fraud, drug trafficking, and more. Join us as we unpack the intelligence-led analysis shaping the EU's fight against these evolving threats breached.company/understanding-the-evolving-threat-landscape-following-a-data-breach…

1
Red Canary: Detecting the 2025 Threats 14:45

۸ weeks پیش14:45

14:45

This podcast delves into the findings of Red Canary's 2025 Threat Detection Report, dissecting the major cybersecurity trends observed in 2024. We explore the surge in ransomware, increasingly sophisticated initial access techniques like "paste and run," the dramatic rise of identity attacks targeting cloud environments, persistent vulnerability exploitation, the proliferation of stealer malware on Windows and macOS, the emergence of state-sponsored insider threats, the consistent abuse of VPNs, the growing landscape of cloud attacks, and the dominance of stealers in Mac malware. Understand the implications of these trends and how organizations can shift their security strategies towards early detection and effective response across endpoints, identities, and cloud resources, moving beyond prevention to identify and mitigate threats before they cause significant harm. breached.company/learning-from-the-shadows-key-insights-from-the-red-canary-2025-threat-detection-report-for-breached-companies…

1
Unpacking Data Security Risk: Navigating the Gaps and Misalignment 13:05

۸ weeks پیش13:05

13:05

Are you struggling to understand and manage your organization's data security risks? Based on the latest insights, we delve into the key challenges hindering effective data protection, including gaps in risk understanding, the critical misalignment between management and staff on security strategies, the limitations of existing security tools, and the shift from reactive compliance to proactive, risk-based approaches. Join us as we unpack these issues and explore the path towards a stronger data security posture. www.securitycareers.help/bridging-the-gaps-in-the-cloud-why-understanding-and-alignment-are-key-to-effective-data-security-risk-management…

1
Secrets Unsprawled: Navigating the Hidden Risks of Exposed Credentials 23:54

۹ weeks پیش23:54

23:54

Dive into the alarming world of secrets sprawl, exploring the growing number of exposed API keys, passwords, and other sensitive credentials across development environments, collaboration tools, and cloud platforms. Based on the latest data analysis from GitGuardian's "The State of Secrets Sprawl 2025" report, we uncover the primary risk categories and attack vectors, the cascade effect of minor leaks, and the critical timelines that make rapid remediation essential. We'll also discuss the challenges organizations face, from the limitations of secrets managers and the dangers of excessive permissions to the persistent problem of unfixed exposed credentials and the overlooked risks in collaboration tools. Join us to understand the real-world impact of secrets sprawl and learn strategies for effective management and mitigation. www.securitycareers.help/the-state-of-secrets-sprawl-a-critical-risk-imperative-for-cisos www.compliancehub.wiki/secrets-sprawl-a-compliance-nightmare-leading-to-potential-privacy-fines…

1
Decoding CMMC: Navigating Levels 1, 2, and 3 16:19

۹ weeks پیش16:19

16:19

This podcast breaks down the complexities of the Department of Defense's Cybersecurity Maturity Model Certification (CMMC) framework. We delve into the fundamental differences between Level 1's basic safeguarding requirements, Level 2's alignment with NIST SP 800-171 Rev 2, and Level 3's enhanced security based on NIST SP 800-172 and government assessment. Understand the distinct security requirements, assessment processes (self-assessment vs. certification by C3PAOs or DIBCAC), and prerequisites for each level to ensure your organization can confidently navigate the CMMC landscape. www.compliancehub.wiki/navigating-cmmc-compliance-for-your-defense-contractor-website…

1
Smart City Under Siege: Navigating Privacy and Cyber Threats 28:26

۹ weeks پیش28:26

28:26

This podcast delves into the growing privacy vulnerabilities and cybersecurity risks inherent in the deeply interconnected systems of modern smart cities. We explore the challenges of data protection, the expanding attack surface created by IoT devices, and the governance and regulatory gaps that can leave urban environments vulnerable to exploitation. Join us as we examine the threats and discuss potential solutions for building more secure and privacy-respecting smart urban futures. www.secureiotoffice.world/the-intelligent-workspace-leveraging-iot-for-a-smarter-office www.secureiot.house/securing-your-connected-sanctuary-navigating-privacy-and-cyber-threats-in-your-smart-home…

1
Lithuania's 2025 Security Under Threat 15:41

۹ weeks پیش15:41

15:41

This podcast delves into the findings of Lithuania's "National Threat Assessment 2025," dissecting the primary external state actors posing the most significant risks to its national security. We examine the multifaceted threats emanating from an increasingly aggressive Russia, Belarus with its growing dependence, and an increasingly hostile China, exploring their strategies and potential impact on Lithuania and the wider region. breached.company/unpacking-the-perils-why-lithuanias-2025-security-threats-demand-your-attention…

1
Converged Infrastructure: Bridging the Cyber-Physical Security Gap 17:49

۹ weeks پیش17:49

17:49

In an era where cyber and physical threats increasingly intersect, critical infrastructure faces unprecedented risks. This podcast delves into the crucial need for security convergence, exploring how organizations can break down security silos between IT, physical security, and operational technology (OT) to achieve a holistic and resilient defense. We examine the challenges of converging disparate security cultures and technologies, and highlight the benefits of a unified approach, including improved risk management, efficiency, and protection against hybrid threats. Drawing on expert insights and real-world examples, we explore strategies for strategic alignment, joint risk assessments, and the implementation of frameworks that foster collaboration and a stronger security posture for the foundational systems that underpin modern society. www.secureiotoffice.world/bridging-the-divide-why-converged-security-is-imperative-for-protecting-critical-infrastructure www.securitycareers.help/the-evolving-role-of-the-ciso-leading-converged-security-teams-in-a-cyber-physical-world…

1
Check Point Edge Wars: 2024's Battle for Network Perimeters 33:40

۹ weeks پیش33:40

33:40

In this episode, we delve into the alarming rise of edge device exploitation in 2024 from the Check Point Threat Intel report, where cybercriminals and nation-states alike targeted routers, firewalls, and VPN appliances to gain initial access, establish ORBs for covert operations, and leverage a surge in zero-day vulnerabilities. We explore the tactics of groups like Raptor Train and Magnet Goblin, the challenges of patching these critical devices, and the implications for network security in the evolving threat landscape. breached.company/edge-wars-unpacking-the-escalating-exploitation-of-network-perimeters-in-2024…

1
Autonomy Under Attack: Decoding CAV Cybersecurity 15:25

۹ weeks پیش15:25

15:25

Navigate the complex landscape of Connected Autonomous Vehicle (CAV) cybersecurity. We delve into the critical vulnerabilities in intra- and inter-vehicle communication, explore potential attack motivations ranging from operational disruption to data theft and physical control, and discuss the significance of standards like ISO/SAE 21434 in building a secure future for autonomous mobility. Join us as we uncover the threats and solutions in the evolving world of CAV security. www.hackernoob.tips/autonomy-under-attack-a-hackers-intro-to-cav-cybersecurity www.myprivacy.blog/your-car-knows-more-than-you-think…

1
Cyber Incident Response Maturity: Assessing Your Readiness 21:31

10 weeks پیش21:31

21:31

This podcast delves into the crucial aspects of cyber security incident response maturity. We explore how organizations can assess and improve their capabilities using tools like the detailed assessment based on 15 steps. We discuss key concepts such as criticality assessments, threat analysis, and the importance of people, process, technology, and information in preparing for, responding to, and following up on cyber security incidents. Understand how target maturity levels and weighting factors can be used to tailor your assessment and identify areas for improvement in your cyber security incident response lifecycle. https://irmaturityassessment.com breached.company/enhancing-cyber-resilience-an-in-depth-look-at-incident-response-maturity-assessments…

1
Navigating NIST CSF 2.0: Your Guide to Cybersecurity Resilience 18:24

10 weeks پیش18:24

18:24

Join us as we explore the NIST Cybersecurity Framework (CSF) 2.0, the essential guide for organizations looking to manage and reduce cybersecurity risks. We delve into the six core Functions: Govern, Identify, Protect, Detect, Respond, and Recover, examining the key changes and updates from previous versions. Whether you're new to the CSF or looking to implement the latest version, this podcast offers insights into creating Organizational Profiles, understanding Community Profiles, and leveraging the framework to improve your overall cybersecurity posture. We'll also discuss how the NIST CSF complements other compliance frameworks and helps you build a resilient and risk-informed cybersecurity strategy www.compliancehub.wiki/the-nist-cybersecurity-framework-csf-2-0-a-comprehensive-guide-for-your-compliance-hub…

1
AI-Powered Cybersecurity: Simplifying Policies and Automating Tasks with CISO Marketplace 13:08

10 weeks پیش13:08

13:08

Discover how CISO Marketplace's latest innovations, GeneratePolicy.com and CyberAgent.Exchange, are transforming cybersecurity for startups and SMBs. Learn how AI-driven policy generation simplifies compliance and documentation, and how AI-powered agents automate critical security roles, enhancing efficiency and reducing costs. We delve into the key features, benefits, and target audiences for these cutting-edge solutions designed to strengthen your cybersecurity posture. www.cisomarketplace.services Visit and Vote! https://www.producthunt.com/posts/generatepolicy-com-ai-policy-generator https://www.producthunt.com/posts/cyber-agent-exchange-ai-talent-hub…

1
AI Risks & Regulations: Navigating the New Landscape 32:03

10 weeks پیش32:03

32:03

This podcast delves into the complex world of Artificial Intelligence, exploring the cybersecurity risks associated with its adoption and the evolving regulatory landscape, particularly focusing on the EU AI Act. We break down the key aspects of the AI Act, including definitions of AI systems and general-purpose AI models risk classifications and the obligations for providers and deployers. We also examine strategies for securing AI applications and managing the cybersecurity threats that arise with increased AI usage Join us as we navigate the balance between AI innovation, security, and compliance. www.compliancehub.wiki/navigating-the-technical-landscape-of-eu-ai-act-compliance…

1
Cyber Frontier: Navigating Threats and AI in the Digital Age 26:48

10 weeks پیش26:48

26:48

This podcast explores the evolving cybersecurity landscape, drawing insights from the Microsoft Digital Defense Report 2024 and the ENISA Threat Landscape. We delve into the tactics of nation-state actors and cybercriminals, the growing impact of AI on both attacks and defenses, and strategies for building resilience in an increasingly complex digital world. Join us as we examine the latest threats, emerging techniques like AI-enabled social engineering and deepfakes, and the innovative solutions being developed to secure our digital future. breached.company/navigating-the-cyber-frontier-key-insights-for-a-secure-digital-future…

1
AI Red Team: The Cyber Frontier 15:53

10 weeks پیش15:53

15:53

Explore the cutting-edge intersection of artificial intelligence and red team operations in cybersecurity. We delve into how AI is revolutionizing traditional cyber offense and defense methodologies, enhancing adaptability, fostering innovation, and pushing the boundaries of cyber operations in an era of rapidly evolving digital threats, as highlighted in "AI For Red Team Operation". Join us to understand how this fusion is shaping the future of cybersecurity strategies and tactics. www.securitycareers.help/the-ai-powered-red-team-revolutionizing-cyber-operations…

1
Arctic Wolf 2025: Navigating the Cyber Threat Landscape 19:48

10 weeks پیش19:48

19:48

Based on the Arctic Wolf 2025 Threat Report, this podcast explores the key cybersecurity threats that organizations will face in the coming year. We delve into the prevalence of ransomware and data extortion, the ongoing challenges of business email compromise, and the persistent risks posed by intrusions. Gain insights into attacker tactics, vulnerable attack surfaces like Unsecured Remote Desktop Protocol (RDP), and actionable strategies for managing and mitigating these evolving threats. www.breached.company/deep-dive-into-the-cyber-threat-landscape-key-insights-from-the-arctic-wolf-2025-threat-report…

1
2024 Cyber Underworld: Recorded Future Unpacking Malicious Infrastructure 22:30

10 weeks پیش22:30

22:30

This episode dives into the key findings of Recorded Future's 2024 Malicious Infrastructure Report, revealing the dominant malware families like LummaC2 and AsyncRAT, the continued reign of Cobalt Strike, and the evolving tactics of threat actors, including the abuse of legitimate internet services and relay networks. We'll explore the top threats, targeted regions, and the resilience of cybercriminals in the face of law enforcement efforts, providing crucial insights for defenders navigating today's complex threat landscape. www.breached.company/unpacking-the-2024-cyber-underworld-a-technical-deep-dive-into-malicious-infrastructure…

1
ThreatDown's 2025 Malware State: Autonomous AI and the Rise of Dark Horse Ransomware 20:38

11 weeks پیش20:38

20:38

Delve into the key findings of ThreatDown's 2025 State of Malware report, exploring the anticipated impact of agentic AI on cybercrime and the evolving ransomware landscape, including the emergence of smaller, more agile "dark horse" groups. We'll discuss how cybercriminals are leveraging AI to scale attacks and the shift towards Living Off The Land (LOTL) tactics for stealthier operations. We also examine the increasing threats from macOS stealers and sophisticated Android phishing malware, providing crucial insights into the challenges and defenses shaping the threat landscape in 2025. www.breached.company/decoding-the-2025-malware-landscape-a-technical-deep-dive…

1
Greynoise Legacy Exploits & Zero-Days: Mass Internet Attacks in 2024 24:08

11 weeks پیش24:08

24:08

Dive into the key findings of the Greynoise 2025 Mass Internet Exploitation Report. We dissect how attackers are reviving old vulnerabilities, the impact of home router exploits, and the speed at which new vulnerabilities are weaponized. Discover actionable defense strategies for staying ahead of mass internet exploitation. breached.company/mass-internet-exploitation-in-2024-a-technical-overview…

1
OT/ICS Cybersecurity: Defending Against Evolving Threats 22:13

11 weeks پیش22:13

22:13

A deep dive into the latest trends, threat actors, and defense strategies in Operational Technology and Industrial Control Systems cybersecurity. We discuss how geopolitical tensions, ransomware, and hacktivist activities are shaping the threat landscape, and provide actionable insights to improve your organization's security posture. Learn about implementing the SANS ICS 5 Critical Controls, vulnerability management, incident response, and more to protect your critical infrastructure. breached.company/technical-brief-strengthening-ot-ics-cybersecurity-in-2024-and-beyond…

1
Enterprising Adversaries: Staying Ahead of Evolving Cyber Threats 31:13

11 weeks پیش31:13

31:13

Explore the evolving landscape of cyber threats with insights from the CrowdStrike 2025 Global Threat Report. We delve into the tactics, techniques, and procedures of modern adversaries, from social engineering and AI-driven attacks to cloud exploitation and vulnerability exploits. Learn how to proactively defend your organization against these ever-changing threats and stay one step ahead of enterprising adversaries. breached.company/technical-brief-evolving-threat-actor-tactics-in-2025…

1
CERT-EU Unveiling the 2024 Cyber Threat Landscape: Key Trends and Targeted Sectors 28:34

11 weeks پیش28:34

28:34

This episode dissects the cyber threat landscape of 2024, drawing insights from a comprehensive analysis of malicious activities targeting Union entities and their vicinity. We explore the major trends, including the rise of cyber espionage and prepositioning the exploitation of zero-day vulnerabilities, and the techniques employed by threat actors. The discussion highlights the most targeted sectors, such as defense, transportation, and technology, and emphasizes the critical role of service providers as prime targets. We also delve into the global events that shaped the threat landscape, such as elections and conflict. breached.company/deep-dive-analyzing-the-2024-cyber-threat-landscape-and-emerging-attack-vectors…

1
Black Basta: Inside the Ransomware Gang 19:36

11 weeks پیش19:36

19:36

Explore the inner workings of the Black Basta ransomware group through leaked chat logs and technical analysis. Discover their tactics, techniques, and procedures (TTPs), from initial access and lateral movement to data exfiltration and encryption. Learn how the group exploited vulnerabilities, managed internal conflicts, and targeted critical infrastructure. Gain insights into defending against ransomware attacks with actionable intelligence and mitigation strategies derived from real-world incidents and expert analysis. https://breached.company/stopransomware-black-basta…

1
Navigating Vietnam's Data Law: Key Compliance for Businesses 19:13

11 weeks پیش19:13

19:13

This podcast episode explores Vietnam's new Law on Data, effective July 1, 2025, and its implications for businesses. We'll break down the law's key aspects, including scope of application, digital data definitions, data ownership rights, regulations on cross-border data transfers (especially for "important" and "core" data), and the requirements for mandatory risk assessments. We also discuss data-related products and services, the establishment of the National General Database and National Data Centre, and practical steps businesses can take to ensure compliance and mitigate risks in Vietnam's evolving digital landscape. www.compliancehub.wiki/vietnams-law-on-data-key-provisions-and-implications…

1
PDPA Data Breaches: Navigating Malaysia's Compliance Landscape 15:12

12 weeks پیش15:12

15:12

Understand the critical data breach notification requirements under Malaysia's Personal Data Protection Act (PDPA) 2010. Learn how to identify "significant harm" and when you must notify the Personal Data Protection Commissioner and affected data subjects. Stay informed about potential penalties for non-compliance and strategies for robust data breach management. www.compliancehub.wiki/understanding-data-breach-notification-requirements-under-malaysias-pdpa…

1
AI Threat Disruption: Staying Ahead of Malicious Actors 12:25

12 weeks پیش12:25

12:25

This podcast explores how AI companies are uniquely positioned to disrupt malicious uses of AI models. We delve into real-world case studies, such as surveillance operations, deceptive employment schemes, and influence campaigns, to understand how these threats are identified and neutralized. Join us as we uncover the latest strategies and insights in the fight against AI abuse. www.myprivacy.blog/the-ai-threat-landscape-disrupting-malicious-uses-of-ai-models…

1
The Algorithmic Battlefield: AI, Ethics, and the New Arms Race 12:04

12 weeks پیش12:04

12:04

Venture into the murky world where Silicon Valley's ethical lines blur as AI giants like Google and OpenAI chase lucrative military contracts. Explore how once-sacred principles are being abandoned in favor of algorithms that now dictate life-and-death decisions on the battlefield. Uncover the implications of a future where unaccountable AI systems reshape global conflict, privacy erodes, and the public remains in the dark. www.myprivacy.blog/from-dont-be-evil-to-drone-deals-silicon-valleys-reckless-ai-arms-race…

1
Encrypted Frontlines: Cyber Espionage, Messaging App Vulnerabilities, and Global Security 30:00

12 weeks پیش30:00

30:00

This episode examines the rising threats to encrypted communications and the geopolitical implications of cyber espionage. We analyze how Russian threat actors exploit vulnerabilities in messaging apps like Signal and how platforms like Telegram have become hubs for cybercrime. Also examined is the impact of government pressures on encryption standards, and the delicate balance between privacy and national security. https://www.breached.company/encrypted-frontlines-unpacking-cyber-espionage-messaging-app-vulnerabilities-and-global-security…

1
Privacy Matters: Navigating the Social Media Maze in 2025 23:54

12 weeks پیش23:54

23:54

From understanding end-to-end encryption (E2EE) on WhatsApp to mastering privacy settings on Snapchat and managing ad preferences on X (Twitter), MyPrivacy.blog equips you with the knowledge to navigate the social media landscape with confidence. Learn about the nuances of private versus public accounts on TikTok. how to leverage features like Close Friends on Instagram and the importance of reviewing third-party app permissions on Facebook. https://www.myprivacy.blog/the-complete-guide-to-social-media-privacy-protecting-your-digital-life-in-2025/…

1
AI Unveiled: DeepSeek R1 Red Team & the Future of LLM Security 36:21

12 weeks پیش36:21

36:21

Explore the cybersecurity and privacy challenges posed by Large Language Models (LLMs) through the lens of DeepSeek R1 red teaming. Dive into the vulnerabilities uncovered in DeepSeek R1, from harmful content generation to insecure code and biased outputs. Learn about practical strategies and frameworks like NIST AI RMF for mitigating risks and ensuring responsible AI deployment. https://www.breached.company/deepseek-r1-red-team-navigating-the-intersections-of-llm-ai-cybersecurity-and-privacy…

1
Geopolitical Tech Storm: Navigating Cybersecurity, AI, and Global Power 17:36

12 weeks پیش17:36

17:36

The intersection of technology and geopolitics is creating unprecedented challenges in cybersecurity and AI governance. Global powers are competing in AI and semiconductor technologies, leading to rising tensions and potential risks. Experts at the Munich Security Conference 2025 emphasized the urgent need for international cooperation and robust frameworks to navigate this evolving landscape and foster trust through public-private partnerships https://www.breached.company/navigating-the-geopolitical-tech-storm-cybersecurity-ai-governance-and-global-power-shifts/…

1
Cybersecurity in Africa: Threats, Trends, and Tech 27:23

13 weeks پیش27:23

27:23

This podcast explores the diverse cybersecurity challenges facing the African continent, from state-sponsored attacks to cybercriminal networks. It examines the development and implementation of legal and regulatory frameworks, as well as regional cooperation efforts to combat cyber threats. The podcast also discusses emerging trends like data sovereignty, AI regulation, and critical infrastructure protection, providing insights into the future of cybersecurity in Africa. www.compliancehub.wiki/cybersecurity-in-africa-navigating-threats-trends-and-the-tech-landscape/…

1
Decoding Cybercrime: Platforms, Psychology, and Precautions 21:50

13 weeks پیش21:50

21:50

Cybercrime is a growing threat affecting all sectors, fueling a shadow economy with projected costs reaching $10.5 trillion by 2025. This episode explores the cybercrime ecosystem, from dark web platforms and cybercriminal psychology to specific attack techniques like social engineering and ransomware. Listeners will gain insights into how cybercriminals operate, their motivations, and the geographical distribution of cybercrime. We also discuss practical precautions and strategies for individuals and organizations to protect themselves against these evolving threats. www.breached.company/decoding-cybercrime-platforms-psychology-and-precautions…

1
Decoding Digital Spain 2025: Strategies for a Connected Future 32:55

13 weeks پیش32:55

32:55

Decoding Digital Spain 2025" explores Spain's ambitious plan for digital transformation, focusing on key initiatives in connectivity, 5G, cybersecurity, and AI. The podcast examines how Spain aims to bridge digital divides, enhance public services, and boost its economy through strategic investments and policy reforms. Listeners will gain insights into the challenges and opportunities as Spain strives to become a leading digital hub in Europe while ensuring citizen rights and ethical AI development. www.compliancehub.wiki/span-cybersecurity-and-data-prviacy-with-gdpr-and-lopdgdd-synergy/…

1
China's Cyber Campaigns: Salt & Volt Typhoon and Beyond 37:45

13 weeks پیش37:45

37:45

Explore the cyber espionage campaigns of People's Republic of China (PRC)-affiliated threat actors, such as Volt Typhoon, targeting critical infrastructure. Understand their techniques, including living off the land (LOTL) tactics to maintain anonymity within IT infrastructures. Learn about recommended mitigations and best practices to strengthen network defenses against these sophisticated cyber threats. https://www.breached.company/chinas-cyber-campaigns-a-deep-dive-into-salt-volt-typhoon-and-other-threat-actors/…

1
State-Sponsored Cybercrime: When Nations Turn to Hackers 22:53

13 weeks پیش22:53

22:53

Uncover the disturbing trend of nation-states utilizing cybercriminals to achieve their strategic objectives. This episode examines how countries like Russia, Iran, China, and North Korea leverage cybercriminals for espionage, disruption, and revenue generation. Explore the various ways states collaborate with cybercriminals, from purchasing malware and tools to directly hiring attackers for specific missions.…

1
Navigating Singapore's PDPA: Protecting Personal Data in the Digital Age 18:51

13 weeks پیش18:51

18:51

The podcast explores the key principles and obligations outlined in Singapore's Personal Data Protection Act (PDPA). It offers insights for organizations on how to comply with the PDPA's requirements for collecting, using, and disclosing personal data. It also examines individuals' rights to access and correct their personal data, ensuring a balance between data protection and business needs. https://www.compliancehub.wiki/understanding-the-personal-data-protection-act-singapores-framework-for-data-privacy/…

1
Securing Canada's Digital Future: The National Cyber Security Strategy 2025 14:21

13 weeks پیش14:21

14:21

Dive into Canada's National Cyber Security Strategy for 2025 and explore how it aims to protect Canadians and businesses from evolving cyber threats. This podcast examines the strategy's key pillars, including forging partnerships, promoting innovation, and disrupting cyber threat actors. Discover how the government plans to engage with all levels of society, from Indigenous communities to the private sector, to build a more resilient and secure digital Canada, as well as how the Canadian Cyber Defence Collective (CCDC) and other initiatives play a crucial role in achieving these goals.…

1
Phobos Ransomware: A Deep Dive into Tactics, Techniques, and Mitigation 22:32

14 weeks پیش22:32

22:32

The Phobos ransomware, operating under a Ransomware-as-a-Service (RaaS) model since 2019, targets various sectors, demanding millions in ransom. This episode explores Phobos's tactics, such as exploiting vulnerable RDP ports, phishing campaigns, and open-source tools like Smokeloader, to infiltrate networks. Discover practical mitigation strategies and actions to defend against Phobos ransomware attacks and protect your organization. https://www.breached.company/overview-of-phobos-and-8base-ransomware-the-shakedown/…

1
AI Smart Cities: Promises, Perils, and the Power of Governance 16:39

14 weeks پیش16:39

16:39

Dive into the transformative world of AI in urban environments, exploring both the exciting potential and the significant risks. From UN reports and cybersecurity concerns to real-world case studies, we uncover how AI is reshaping our cities. Join us as we discuss key questions about ethics, governance, and citizen empowerment in the age of AI-driven urban development. https://www.secureiotoffice.world/ai-powered-smart-offices-balancing-innovation-and-security-in-the-modern-workspace/…

1
Decoding DORA: Navigating Digital Resilience in Finance 19:39

14 weeks پیش19:39

19:39

The Digital Operational Resilience Act (DORA) is a European regulation designed to ensure the financial sector can withstand, respond to, and recover from ICT-related disruptions. This episode breaks down the key pillars of DORA, including ICT risk management, incident reporting, digital resilience testing, and third-party risk management, offering practical insights for financial institutions. Tune in to learn how DORA will impact your organization's cybersecurity strategy and what steps you need to take to achieve compliance by January 17, 2025. https://www.compliancehub.wiki/digital-operational-resilience-act-dora-a-comprehensive-guide-to-compliance/…

1
CISO's 20/20 Vision: Key Performance Indicators for Cybersecurity Success 24:14

14 weeks پیش24:14

24:14

Are you ready to get a 360° view of your organization’s cybersecurity posture? In this episode, we dive into the 20 Key Performance Indicators (KPIs) that CISOs use to measure and enhance their security programs. Learn how to track risk reduction, incident detection, patch compliance, and more to make data-driven decisions and demonstrate the value of security initiatives. https://www.securitycareers.help/20-key-performance-indicators-kpis-for-cisos-chief-information-security-officers…

1
Decoding NIS2: What It Means for Your Organization 41:15

14 weeks پیش41:15

41:15

The NIS2 Directive is here, and it's changing the cybersecurity landscape for EU businesses. This episode breaks down the complex requirements of NIS2, explaining who it affects and what steps organizations must take to comply. We'll explore key changes, risk management measures, incident reporting, and the crucial role of management accountability in this new era of cybersecurity. https://www.compliancehub.wiki/navigating-nis2-a-comprehensive-guide-to-the-eus-cybersecurity-directive/…

1
Auditing AI: Navigating Risks and Regulations 27:57

14 weeks پیش27:57

27:57

As AI becomes more prevalent, understanding its risks and ensuring compliance are critical. This episode explores the crucial role of internal audit in guiding organizations toward responsible AI implementation. We delve into key areas like risk assessment, data governance, and transparency, offering insights for auditors and business leaders alike. https://www.compliancehub.wiki/the-role-of-internal-audit-in-responsible-ai-and-ai-act-compliance/…

1
Decoding AI Risks: A Deep Dive into the MIT AI Risk Repository 21:26

14 weeks پیش21:26

21:26

Explore the complex landscape of artificial intelligence risks with the MIT AI Risk Repository. This podcast delves into the repository's comprehensive database, causal and domain taxonomies, and methodologies for identifying and classifying AI threats. Join experts as they discuss how policymakers, auditors, academics, and industry professionals can leverage this resource to navigate the evolving challenges of AI safety and governance. https://www.myprivacy.blog/ai-risk-repository-meta-review-database-and-taxonomies/…

1
Tractor Tech Tug-of-War: Farmers, Manufacturers, and the Right to Repair 20:00

14 weeks پیش20:00

20:00

This episode explores the growing conflict between farmers and agricultural equipment manufacturers over the right to repair their own machinery. We delve into how intellectual property laws and proprietary software limit farmers' access to repair tools and information, often creating a manufacturer monopoly. We also examine the ongoing legislative battles, industry agreements, and antitrust lawsuits that are shaping the future of agricultural technology.…

1
Cybersecurity Risks in Modern Machinery: From Construction Sites to Farm Fields and Beyond 14:01

15 weeks پیش14:01

14:01

This episode explores the growing cybersecurity risks associated with the increasing connectivity of modern equipment across industries. We examine how the integration of IoT devices and digital technologies in construction, agriculture, and transportation introduces vulnerabilities that can be exploited by malicious actors. We discuss the potential consequences of these cyber threats, including project delays, safety hazards, data breaches, and financial losses.…

1
DeepSeek: AI Innovation vs. Global Scrutiny 22:37

15 weeks پیش22:37

22:37

This episode delves into the rapid rise of the Chinese AI startup DeepSeek, exploring its cutting-edge technology that rivals major competitors and its recent challenges including a cyberattack and mounting global scrutiny. We'll examine the concerns surrounding data privacy, censorship, and regulatory hurdles that DeepSeek faces in the wake of its quick success.…

1
Zero Day to Breach: The 2024 Vulnerability Explosion 14:01

15 weeks پیش14:01

14:01

The cybersecurity landscape in 2024 saw a dramatic 20% surge in exploited vulnerabilities, with attackers increasingly targeting network edge devices and cloud infrastructure. This episode dives into the key statistics, trends, and major incidents, highlighting the critical need for proactive security measures like robust patch management and zero-trust architecture to combat the growing threat. https://www.breached.company/the-escalating-threat-landscape-a-deep-dive-into-2024s-surge-in-vulnerability-exploitation/…

1
AI Security Deep Dive: Threats, Controls, and Red Teaming 20:34

16 weeks پیش20:34

20:34

This podcast explores the critical landscape of AI security, drawing on insights from leading experts and resources. We delve into the unique challenges and risks associated with AI systems, including both machine learning and heuristic models. We will discuss the various types of threats, such as those that occur during development, through use, and at runtime, as well as their associated controls. We will also examine the application of these concepts in the specific context of Generative AI, which presents its own unique challenges. https://www.hackernoob.tips/llm-red-teaming-a-comprehensive-guide/…

1
The Rise of AI-Powered Cyberattacks and the Imperative of Cyber Resilience 13:29

18 weeks پیش13:29

13:29

This episode explores the escalating cybersecurity landscape, with a particular focus on how generative AI is enabling more sophisticated and personalized cyberattacks. We delve into the ways AI is being used by cybercriminals to refine social engineering tactics, create more convincing phishing attempts in multiple languages, and automate their malicious activities. The episode also highlights the critical need for organizations to prioritize cyber resilience, focusing on building stronger cybersecurity foundations, increasing awareness and education, and developing robust incident response plans. Additionally, we discuss the importance of ecosystem-level collaboration and the need for all organizations to adopt secure-by-design principles for AI systems. We also consider the ways that governments may create policies on biotech.…

1
GDPR Gets Personal: Fines, Class Actions, and Data Transfer Rules 23:35

19 weeks پیش23:35

23:35

This episode examines recent trends in GDPR enforcement, including the shift towards personal liability for management, the rise of class action lawsuits, and the importance of compliant data transfer mechanisms. We'll discuss how the EU court's recent award of damages for illegal data transfers without material loss could lead to significant legal challenges. Learn how to protect your organization from heavy penalties and safeguard user data. https://dataprivacytool.info https://finemydata.com https://www.compliancehub.wiki…

1
META Versus You: Data, Deepfakes & Dangerous Algorithms 23:09

26 weeks پیش23:09

23:09

Ever get the feeling you're being watched online? Like every click, every like, every share is feeding some invisible monster? Well, you're not wrong. This podcast explores the dark side of Meta, the company formerly known as Facebook, and how its vast empire impacts your privacy, security, and even your mental health. We'll uncover Meta's data collection practices, expose the chilling world of deepfake scams, and investigate allegations that Meta's algorithms are enabling child exploitation. Get ready to take back control of your digital life. We'll provide practical tips on how to protect yourself from data breaches, manipulative algorithms, and government overreach. Plus, we'll explore the future of online privacy, from smart glasses to the metaverse. Tune in and join the fight for a safer and more ethical digital world.…

1
Zero-Day Exploits on the Rise: A Deep Dive into the NSA's Top Vulnerabilities of 2023 14:13

27 weeks پیش14:13

14:13

Join us as we explore the latest cybersecurity advisory from the NSA and its international partners, revealing the most exploited vulnerabilities of 2023. We break down complex technical jargon into understandable concepts, highlighting real-world examples like the Microsoft Outlook vulnerability that allows attackers to take over your system just by opening an email! Discover the common weaknesses hackers target and learn practical steps to protect yourself. From enabling multi-factor authentication to understanding the dangers of buffer overflows and SQL injections, we provide actionable insights to enhance your cybersecurity posture. Tune in and level up your digital defenses!…

1
OWASP Top 10 for LLMs: Unveiling the Hidden Dangers of AI 27:41

27 weeks پیش27:41

27:41

Large Language Models (LLMs) are revolutionizing the world, powering everything from chatbots to content creation. But as with any new technology, there are security risks lurking beneath the surface. Join us as we explore the OWASP Top 10 for LLMs, a guide that exposes the most critical vulnerabilities in these powerful AI systems. We'll break down complex security threats like prompt injection attacks, data poisoning, and the dangers of insecure code generation. Discover how malicious actors can manipulate LLMs to steal sensitive information, spread misinformation, and even take control of your applications. Our expert guest, [Guest Name], will share real-world examples and practical solutions to safeguard your LLM applications. Learn how to implement robust security measures, from input validation and access control to model monitoring and incident response planning. Tune in to gain a deeper understanding of the potential risks and actionable strategies for protecting your AI systems in this era of LLMs.…

1
Ransomware Insights: From Simple Extortion to Global Threat 16:47

27 weeks پیش16:47

16:47

This episode breaks down the evolution of ransomware over the past two years (December 2022 to November 2024), using a trove of cyber insights reports. Listeners will gain a clear understanding of how ransomware has transformed from basic encryption schemes to sophisticated attacks involving data exfiltration, double extortion, and specialized targeting. The episode explores: Evolving Tactics: The shift from simple encryption to data theft and double extortion, increasing pressure on victims. Expanding Targets: The move beyond traditional targets like healthcare and government to include critical infrastructure, highlighting the growing threat to essential services. Ransomware-as-a-Service: The emergence of this model, lowering the barrier to entry for cybercriminals and contributing to the fragmentation of the ransomware landscape.…

1
Safe Internet By Default: Spain's Approach to Protecting Children Online 35:51

29 weeks پیش35:51

35:51

This episode examines Spain's proactive approach to online child safety. We explore the Spanish Data Protection Agency's (AEPD) innovative framework for age verification and its emphasis on safeguarding children's rights in the digital age. COPAA, KOSA, TDPSA

1
Cybersecurity Crossroads: Charting the Course for the Next Administration 30:28

29 weeks پیش30:28

30:28

This episode explores the complex challenges and opportunities facing the U.S. in the realm of cybersecurity. Experts weigh in on a new report outlining a roadmap for the incoming administration, emphasizing the need for a comprehensive national strategy, public-private partnerships, and a robust cyber workforce.…

1
North Korea's Secret Weapon: IT Workers Infiltrating the US 18:03

29 weeks پیش18:03

18:03

This podcast explores the alarming trend of North Korean IT workers infiltrating US companies, using their positions to generate revenue, evade sanctions, and potentially engage in cyber espionage. Discover the tactics they employ and how businesses can protect themselves.

1
EU AI Act: Decoding the Future of AI 13:22

30 weeks پیش13:22

13:22

Explore the EU's groundbreaking law regulating artificial intelligence. We break down the risk-based system, banned practices, and global impact. Join us as we decode the AI Act and its implications for the future of technology.

1
SolarWinds Hack: Fallout and Lessons Learned 26:10

30 weeks پیش26:10

26:10

This podcast examines the SolarWinds cyber breach, a sophisticated supply chain attack that sent shockwaves through the cybersecurity landscape. It explores the attack's mechanics, how malicious code embedded in SolarWinds' Orion software updates compromised thousands of organizations, including prominent government agencies and Fortune 500 companies.…

1
Cybersecurity 2024: New Threats, Faster Attacks 16:15

30 weeks پیش16:15

16:15

Experts break down the latest cybersecurity reports, revealing how threat actors are evolving their tactics and accelerating their attacks. Learn what's changing, who's being targeted, and what you can do to protect yourself and your organization. www.breached.company

1
The State of AI: A Global Perspective 25:34

30 weeks پیش25:34

25:34

Join us as we explore the evolving landscape of AI governance, comparing the US, EU, and Chinese approaches, and discussing the implications for society.

1
Digital Panopticon: Unraveling the Fine Print of Your Online Life 16:54

31 weeks پیش16:54

16:54

Join us as we explore the hidden world of Terms of Service and End User License Agreements. We'll examine how companies and governments collect and use your data, the implications for your privacy and freedoms, and what you can do to protect yourself in the digital age.

1
Scammer Calendar: A Year-Round Guide 10:06

31 weeks پیش10:06

10:06

Learn how scammers plan attacks around holidays and your habits! This episode breaks down common seasonal scams, how to spot them, and how to protect yourself. Plus, we explore the world of scam baiting! visit: www.ScamWatchHQ.com

1
Brazil's LGPD: A Deep Dive into Data Protection 13:40

31 weeks پیش13:40

13:40

This episode explores Brazil's General Data Protection Law (LGPD), examining its impact on businesses worldwide, key principles, and enforcement.

1
Breach Finances: The Price of Data Privacy 14:56

31 weeks پیش14:56

14:56

Every week, another company is slapped with a hefty fine for violating data privacy. This podcast explores the financial fallout of data breaches and ransomware attacks, discussing high-profile cases and the evolving regulatory landscape. Are companies taking data security seriously or just writing checks? Tune in to find out!…

1
Digital Wild West: Greed, Chaos, and the Cyber Arms Race 13:09

31 weeks پیش13:09

13:09

From water bills held hostage to artists losing their savings, this week's cyberattacks expose our digital vulnerabilities. We unpack the motives, the players, and the tech shaping this digital battleground. Plus, what you can do to protect yourself.

1
Data Privacy: Crossing Borders in the Digital Age 8:07

31 weeks پیش8:07

8:07

Ever order takeout online? You're thinking about food, not data, right? But somewhere a company is processing your order, your address, and even your payment information, possibly sending it across borders. This podcast is your crash course on data privacy laws and cross-border data transfers. Learn how GDPR, CCPA, LGPD, and PIPL impact you and what control you have over your data.…

1
Texas Cyber: My Data, My Rules 11:09

31 weeks پیش11:09

11:09

Ever get the feeling like someone's listening in on your digital life? Well, Texas has heard you! In this episode, we break down the Texas Data Privacy and Security Act (TDPSA), a game-changing law designed to give Texans more control over their personal data.

1
CISO's on Trial: Cybersecurity's Legal Battlefield 12:59

31 weeks پیش12:59

12:59

Explore landmark legal cases like USA v. Sullivan and SEC v. SolarWinds and learn about the evolving responsibilities of CISOs and the impact of cyber security on financial stability.

1
The CISO's Playbook 10:38

32 weeks پیش10:38

10:38

Learn what it takes to be a Chief Information Security Officer in this deep dive into building a security culture.

1
Cybersecurity Law 101 18:38

32 weeks پیش18:38

18:38

This podcast provides a comprehensive overview of the essential cybersecurity laws that shape how we interact with data in the digital age. Listeners will gain a clear understanding of the key regulations, including GDPR, CCPA, HIPAA, and PCI DSS, and how these laws work in concert to protect personal and sensitive information. The podcast breaks down complex legal concepts into accessible explanations, using real-world examples to illustrate the practical implications of cybersecurity law.…

1
PCI Compliance: Not Just a Checkbox 11:57

32 weeks پیش11:57

11:57

Tired of the annual PCI scramble? This episode explores how to make PCI DSS part of your everyday security posture. We'll discuss practical tips, new technologies, and the evolving threat landscape, emphasizing that security is a journey, not a destination!

1
Navigating the Cybersecurity Wilderness: Your Guide to Choosing the Right Framework 13:26

32 weeks پیش13:26

13:26

Feeling lost in a sea of acronyms like NIST, ISO 27001, and CIS? This podcast is your guide to understanding and choosing the right cybersecurity framework for your organization. We break down the jargon, explore the strengths of each framework, and help you ask the right questions to find the perfect fit for your size, industry, and budget. Join us as we demystify cybersecurity frameworks and empower you to build a safer digital future.…

1
Cyber Insurance: Navigating the Digital Threat Landscape 14:34

32 weeks پیش14:34

14:34

In a world driven by data, are you truly protected? Join us as we explore the complexities of cyber insurance, empowering businesses and individuals to make informed decisions in the face of evolving digital threats.

1
August & September 2024: Cyber Chaos 8:50

32 weeks پیش8:50

8:50

Schools, hospitals, airports, and even a global energy giant weren't safe from cyberattacks this summer. Listen as we unpack the major events, new ransomware players, and the alarming trend of attacks on essential services.

1
Suffolk County Cyberattack: A Preventable Disaster 14:30

32 weeks پیش14:30

14:30

Millions in recovery costs. Chaos for residents. The Suffolk County cyberattack was a major wake-up call. Join us as we unpack the recent report revealing the perfect storm of missed warnings, systemic failures, and poor decisions that left Suffolk County vulnerable to attack.

1
Black Cat: The Rise and Fall of a Ransomware Empire 10:25

33 weeks پیش10:25

10:25

Black Cat, also known as ALPHV, was one of the most prolific and feared ransomware groups in the world. This episode examines Black Cat's rise to prominence, their use of the ransomware-as-a-service model, and the events that led to their dramatic downfall. Learn how they exploited a critical vulnerability in Veritas Backup Exec, bypassed multi-factor authentication, and used a combination of technical prowess and social engineering to extort millions from their victims.…

1
LockBit: Inside the World's Most Prolific Ransomware 11:20

33 weeks پیش11:20

11:20

LockBit ransomware has dominated headlines for its ruthless attacks and lucrative business model. This podcast goes beyond the headlines, exploring LockBit's evolution, its notorious triple extortion tactics, and the impact on victims worldwide. Listen as experts analyze real attack breakdowns and offer insights into how to protect your organization from becoming the next victim.…

1
Inside Evil Corp: The Story of a Ransomware Giant 9:05

33 weeks پیش9:05

9:05

Join us as we trace Evil Corp’s evolution from their early days developing banking trojans like Dridex and BitPaymer to their more recent adoption of ransomware-as-a-service models like LockBit. We'll investigate the key players behind the operation, including the elusive mastermind Maksim Yakubets and his intricate network of developers, administrators, and financial facilitators.…

1
Cybersecurity SOS: Insights from the Front Lines with CISOs 12:55

33 weeks پیش12:55

12:55

Join us as we unpack the alarming findings from Proofpoint's Voice of the CISO report. This episode explores the anxieties keeping CISOs awake at night, from the looming threat of major cyberattacks to the struggle with burnout in the face of mounting pressure.

1
Decoding AI Laws: From Algorithms to Ethics 12:59

33 weeks پیش12:59

12:59

Join us as we explore the complex world of AI regulations. We'll break down the latest laws and guidelines from around the world, discuss their impact on businesses and individuals, and examine the ethical considerations shaping the future of AI. Get ready to understand the rules governing the AI revolution.…

1
Deepfakes 101: How to Spot AI-Generated Fake Videos 12:19

33 weeks پیش12:19

12:19

Join us as we unravel the complex world of deepfakes. We'll expose the technology behind these AI-generated illusions, explore their potential for harm and deception, and equip you with the knowledge to spot these digital deceptions. From imposter scams and disinformation campaigns to the liar's dividend, we'll navigate the ethical and societal implications of this rapidly evolving technology.…

1
Navigating the Potential Pitfalls of AI: Confabulation and Misuse 7:52

33 weeks پیش7:52

7:52

This episode explores the risks of "confabulation" in AI, where systems generate outputs that appear credible but are actually fabricated. The hosts discuss a NIST report highlighting this issue and emphasizing the importance of proactive measures to mitigate the potential for AI misuse.

1
Navigating the Patchwork: Your Guide to State Privacy Laws 10:42

33 weeks پیش10:42

10:42

Confused by the growing number of state privacy laws? Join us as we break down these complex regulations, empowering you to protect your data and navigate the evolving world of digital privacy. We will discuss how states like Connecticut, Florida, Texas, Maine, Montana, and Oregon are tackling these issues and what it means for you!…

1
GDPR Deep Dive: Taking Control of Your Data in a Changing World 11:43

33 weeks پیش11:43

11:43

In this CISO Insights episode, we unpack the GDPR and its impact on you and your business. Learn the key principles of data privacy, how companies are adapting, and get practical tips on managing data inventory, consent, and breach responses. Whether you're a business owner or tech enthusiast, discover how GDPR is shaping the future of data privacy. Tune in for actionable advice and expert insights!…

1
HIPAA and HITECH: Navigating the Digital World of Healthcare Data 9:20

33 weeks پیش9:20

9:20

In this episode, we explore HIPAA and HITECH, their impact on healthcare data privacy, and how these regulations affect everyone. We'll discuss HIPAA's evolution and how HITECH strengthened it with stricter standards for electronic health records, business associates, and breach notifications. Learn about key concepts like PHI, BAAs, and encryption, with real-world examples to help you understand compliance and the importance of data security.…

2025 - American Silver Eagle .999 Fine Silver with our Smyrnacoin Certificate of Authenticity Dollar Uncirculated US Mint

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Apple AirTag

پادکست هایی که ارزش شنیدن دارند

CISO Insights: Voices in Cybersecurity « » Greynoise Legacy Exploits & Zero-Days: Mass Internet Attacks in 2024

Greynoise Legacy Exploits & Zero-Days: Mass Internet Attacks in 2024

پادکست هایی که ارزش شنیدن دارند

CISO Insights: Voices in Cybersecurity « »
Greynoise Legacy Exploits & Zero-Days: Mass Internet Attacks in 2024