Navigating The AI Frontier: Risk Management For GPAI And Foundation Models CISO Insights: Voices In Cybersecurity podcast

Artwork

Tech News Tech News CISO Marketplace

Player FM - Internet Radio Done Right

اضافه شده در thirty-one هفته پیش

محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

<

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/different-not-broken">Different, not broken</a></span>

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/different-not-broken">Different, not broken</a></span> podcast artwork

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/different-not-broken">Different, not broken</a></span> podcast artwork

1
Different, not broken

لغو اشتراک

۶ روز پیش۶d ago

لغو اشتراک

هفتگی

You’ve spent your whole life feeling like something’s wrong with you. Here’s a radical thought: what if you’re not broken - just different? Welcome to Different, Not Broken, the no-filter, emotionally intelligent, occasionally sweary podcast that challenges the idea that we all have to fit inside neat little boxes to be acceptable. Hosted by L2 (aka Lauren Howard), founder of LBee Health, this show dives into the real, raw and ridiculous sides of being neurodivergent, introverted, chronically underestimated - and still completely worthy. Expect deeply honest conversations about identity, autism, ADHD, gender, work, grief, anxiety and everything in between. There’ll be tears, dead dad jokes, side quests, and a whole lot of swearing. Whether you're neurodivergent, neurotypical, or just human and tired of pretending to be someone you’re not, this space is for you. Come for the chaos. Stay for the catharsis. Linger for the dead Dad jokes.

CISO Insights: Voices in Cybersecurity « »
Navigating the AI Frontier: Risk Management for GPAI and Foundation Models

حدود یک سال پیش 16:02

اشتراک گذاری

MP3•خانه قسمت

محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

Join us as we delve into the critical realm of risk management for General-Purpose AI (GPAI) and foundation models. Drawing insights from the UC Berkeley Center for Long-Term Cybersecurity's profile, we explore the unique risks associated with these increasingly multi-purpose AI systems, from their large-scale impact and potential for misuse to the challenges posed by emergent behaviors We examine frameworks and best practices for identifying, analyzing, and mitigating these risks, aligning with standards like the NIST AI Risk Management Framework and considering the implications of emerging regulations This podcast is essential listening for developers, policymakers, and anyone seeking to understand and responsibly navigate the rapidly evolving landscape of advanced AI.

… continue reading

133 قسمت

#Tech #News #Tech News #CISO Marketplace

Artwork

Navigating the AI Frontier: Risk Management for GPAI and Foundation Models

CISO Insights: Voices in Cybersecurity

published حدود یک سال پیش

اشتراک گذاری

MP3•خانه قسمت

محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

Join us as we delve into the critical realm of risk management for General-Purpose AI (GPAI) and foundation models. Drawing insights from the UC Berkeley Center for Long-Term Cybersecurity's profile, we explore the unique risks associated with these increasingly multi-purpose AI systems, from their large-scale impact and potential for misuse to the challenges posed by emergent behaviors We examine frameworks and best practices for identifying, analyzing, and mitigating these risks, aligning with standards like the NIST AI Risk Management Framework and considering the implications of emerging regulations This podcast is essential listening for developers, policymakers, and anyone seeking to understand and responsibly navigate the rapidly evolving landscape of advanced AI.

… continue reading

133 قسمت

#Tech #News #Tech News #CISO Marketplace

همه قسمت ها

×

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The Iceberg Impact: Unpacking the Hidden Costs of Cyber Attacks 16:24

1 hour پیش16:24

پخش در آینده

پخش در آینده

دوست داشته شد

16:24

Join us as we delve into the complex and pervasive world of cyber risk, exploring the threats, vulnerabilities, and far-reaching consequences for organizations today. Drawing on insights from experts, we'll discuss how cyber attacks can lead to outcomes ranging from regulatory fines and reputational loss to the complete failure of a business. Go beyond the headlines of data breaches and understand the full "iceberg impact" of cyber losses, including significant uninsurable costs like reputational damage, loss of customers, stock devaluation, and devaluation of intellectual property that often exceed the direct financial costs. We'll explore how attacks threaten critical corporate data, intellectual property, and customer details, potentially causing financial loss and damage to market value, share price, and competitive advantage. The conversation will touch upon the challenges posed by mobile devices, social media, and supply chain vulnerabilities, and the critical need for organizations to accurately assess their cyber risk exposure, identify their "crown jewels" of critical data, and prepare for inevitable incidents through robust incident management and layered defenses. www.securitycareers.help/the-iceberg-impact-navigating-the-full-scope-of-cyber-risk-in-the-digital-age www.compliancehub.wiki/cyber-risk-through-a-compliance-lens-navigating-the-regulatory-landscape…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The MAESTRO Framework: Layering Up Against MAS Security Threats 44:05

19 hours پیش44:05

پخش در آینده

پخش در آینده

دوست داشته شد

44:05

Multi-Agent Systems (MAS), characterized by multiple autonomous agents coordinating to achieve shared goals, introduce additional complexity and expand the attack surface compared to single-agent systems. This episode delves into the unique security challenges presented by MAS, drawing on the OWASP Agentic Security Initiative's MAESTRO (Multi-Agent Environment, Security, Threat, Risk, and Outcome) framework. We explore how MAESTRO provides a layered and architectural methodology for structured threat modeling in MAS. The framework breaks down MAS security into seven distinct architectural layers, each with specific concerns, from the Foundation Model to the Agent Ecosystem. Crucially, we examine the cross-layer risks and emergent behaviors unique to MAS environments, highlighting how vulnerabilities don't just exist within layers but manifest through complex interactions between them. Furthermore, we discuss the key agentic factors—Non-Determinism, Autonomy, Agent Identity Management, and Agent-to-Agent Communication—that MAESTRO emphasizes as significantly contributing to these threat scenarios and amplifying risks across layers. Tune in to understand how applying MAESTRO helps uncover and mitigate these multifaceted security challenges in real-world MAS deployments, as detailed in the OWASP Multi-Agentic system Threat Modelling Guide. www.hackernoob.tips/navigating-the-labyrinth-structured-threat-modeling-in-multi-agent-systems-with-the-owasp-maestro-framework www.securitycareers.help/securing-the-autonomous-frontier-a-cisos-guide-to-protecting-multi-agent-systems-and-building-a-specialized-team…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Unmasking the Unseen: Building and Benefiting from Behavioral Threat Hunting 25:40

۲ روز پیش25:40

پخش در آینده

پخش در آینده

دوست داشته شد

25:40

In today's complex threat landscape, adversaries are constantly evolving their tactics to evade traditional defenses. Behavioral threat hunting offers a proactive methodology to identify cyber threats that have infiltrated systems undetected and disrupt them before they cause significant damage, ultimately reducing attacker "dwell time". This episode delves into the fundamental requirements for establishing effective threat hunting capabilities, covering the crucial technological prerequisites like achieving sufficient visibility and storage for deep data analysis, and the necessity of a robust analysis platform. We also explore the essential personnel prerequisites, highlighting the need for skilled staffing, diverse team knowledge, and specific technical and analytical skill sets, while acknowledging the persistent challenge of skills shortages. Beyond tech and talent, we discuss the importance of foundational elements like emulation and validation, adopting a formal methodology such as the Threat Hunting Cycle, and utilizing centralized management and metrics tools to ensure consistent, repeatable, and valuable hunts. Finally, we uncover how effective threat hunting integrates with and enhances broader security operations and incident response, by improving security posture, closing visibility gaps, developing new automated detection capabilities from discovered unknown threats, and providing crucial documentation and support for incident response engagements. Join us as we explore how proactive hunting transforms security operations from reactive defense to strategic resilience. www.securitycareers.help/unmasking-the-unseen-why-behavioral-threat-hunting-is-essential-for-modern-security-operations…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Beyond the Prompt: Navigating the Threats to AI Agents 22:57

۳ روز پیش22:57

پخش در آینده

پخش در آینده

دوست داشته شد

22:57

AI agents, programs designed to autonomously collect data and take actions toward specific objectives using LLMs and external tools, are rapidly becoming widespread in applications from customer service to finance. While built on LLMs, they introduce new risks by integrating tools like APIs and databases, significantly expanding their attack surface to include classic software vulnerabilities like SQL injection, remote code execution, and broken access control, in addition to inherent LLM risks like prompt injection. Our sources demonstrate that these vulnerabilities are largely framework-agnostic, stemming from insecure designs and misconfigurations rather than flaws in frameworks like CrewAI or AutoGen. Given the autonomous nature and expanded capabilities of agents, the potential impact of compromises escalates from data leakage to infrastructure takeover. This episode dives into the complex threats targeting AI agents and highlights why a layered, defense-in-depth strategy is essential, combining safeguards like Prompt Hardening, Content Filtering, Tool Input Sanitization, Tool Vulnerability Scanning, and Code Executor Sandboxing, because no single mitigation is sufficient to address the diverse attack vectors. www.securitycareers.help/securing-the-autonomous-frontier-layered-defenses-for-ai-agent-deployments/ https://www.hackernoob.tips/exploring-the-attack-surface-our-guide-to-ai-agent-exploitation/ https://vibehack.dev/ https://devsecops.vibehack.dev…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Space Under Pressure: Geopolitical Threats and the Evolving Cosmos (2025) 27:41

۴ روز پیش27:41

پخش در آینده

پخش در آینده

دوست داشته شد

27:41

Drawing on open-source information and eight years of collected data, the CSIS Aerospace Security Project's 2025 Space Threat Assessment explores the key developments in foreign counterspace weapons and the evolving security landscape in Earth orbit. This assessment highlights how space is becoming a more dangerous place and is increasingly woven into both peacetime and wartime activities. The report categorizes counterspace weapons into four main types: kinetic, non-kinetic, electronic, and cyber operations. While the past year saw few headline-grabbing kinetic tests, concerns persist, notably regarding Russia's pursuit of a nuclear anti-satellite capability designed to target satellites orbiting Earth, which the United States and international partners remain concerned about. www.myprivacy.blog/space-threats-and-the-unseen-impact-a-privacy-perspective-on-the-2025-assessment www.compliancehub.wiki/navigating-the-orbital-minefield-compliance-challenges-in-the-2025-space-threat-landscape/…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The Price of Protection: Budgeting for Essential Cyber Hygiene (CIS IG1) 14:26

۵ روز پیش14:26

پخش در آینده

پخش در آینده

دوست داشته شد

14:26

This episode explores the costs associated with implementing essential cyber hygiene as outlined by the CIS Critical Security Controls Implementation Group 1 (IG1). We delve into the different approaches enterprises can take – utilizing on-premises tools, leveraging Cloud Service Providers (CSPs), or partnering with Managed Service Providers (MSPs). Drawing on the guide's research, we discuss the types of tools and policies needed for the 10 areas of cyber defense, explore budgeting considerations for different enterprise sizes, and highlight how IG1 Safeguards can provide significant protection against common threats for a relatively low cost. Learn how to make informed and prioritized decisions to secure your enterprise, whether through owned infrastructure, outsourced services, or a hybrid approach. www.securitycareers.help/the-price-of-protection-making-cis-ig1-cyber-hygiene-achievable-and-affordable https://baseline.compliancehub.wiki…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
GTIG 2024 Zero-Days: Espionage, Enterprise, and the Shifting Landscape 13:16

۶ روز پیش13:16

پخش در آینده

پخش در آینده

دوست داشته شد

13:16

Join us as we dive into Google Threat Intelligence Group's (GTIG) comprehensive analysis of zero-day exploitation in 2024. Drawing directly from the latest research, this episode explores the 75 zero-day vulnerabilities tracked in the wild. While the overall number saw a slight decrease from 2023, the analysis reveals a steady upward trend over the past four years. Discover the significant shift towards targeting enterprise-focused technologies, which jumped to 44% of tracked zero-days in 2024, up from 37% in 2023. We examine why security and networking products have become high-value targets, making up over 60% of enterprise exploitation, and the implications for defenders. Learn about the continued targeting of end-user platforms like desktop operating systems, especially Microsoft Windows, which saw an increase in exploitation, contrasting with decreased exploitation observed in browsers and mobile devices. We also break down who is driving this exploitation, with espionage actors (government-backed and commercial surveillance vendors) leading the charge, accounting for over 50% of attributed vulnerabilities. Hear about the persistent activity of PRC-backed groups targeting security technologies and the notable rise of North Korean actors mixing espionage and financial motives. Finally, we touch on the most frequently exploited vulnerability types and what vendors and defenders can do to counter these evolving threats. This episode provides a detailed look into the complex and changing world of zero-day exploitation in 2024, offering insights beyond just the numbers. breached.company/technical-brief-a-deep-dive-into-2024-zero-day-exploitation-trends…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Verizon DBIR 2025: Navigating Third-Party Risk and the Human Factor 12:11

۷ روز پیش12:11

پخش در آینده

پخش در آینده

دوست داشته شد

12:11

Join us as we unpack the critical insights from the Verizon 2025 Data Breach Investigations Report. This episode dives deep into the report's most prominent themes, highlighting the ever-increasing involvement of third parties in data breaches and the persistent influence of the human element, which was involved in 60% of breaches this year. We explore the prevalent incident patterns including System Intrusion, often involving ransomware, Basic Web Application Attacks, largely driven by stolen credentials, and Social Engineering, where phishing and pretexting remain key techniques, now joined by emerging threats like prompt bombing. Drawing on data collected from November 1, 2023, to October 31, 2024, we discuss how attackers exploit vulnerabilities, how different industries and organizations of all sizes are targeted, and the importance of frameworks like VERIS for understanding the threat landscape. Tune in to gain actionable insights directly supported by the data and analysis from the DBIR sources. breached.company/navigating-the-modern-threat-landscape-key-insights-from-the-verizon-dbir-2025…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The State of EU Cybersecurity: Threats, Trends, and the Evolving Landscape 16:21

۸ روز پیش16:21

پخش در آینده

پخش در آینده

دوست داشته شد

16:21

Explore the complex and widespread cybersecurity threat landscape currently facing the European Union. This episode delves into the findings of recent reports, highlighting how geopolitical tensions and the rapid pace of digitisation are fueling a surge in malicious cyber activity. We discuss the substantial threat level assessed for the EU, meaning direct targeting and serious disruptions are realistic possibilities [previous turn]. You'll learn about the most reported attacks, including Denial-of-Service (DoS/DDoS/RDoS) and ransomware, and how threats against data are also prevalent. We break down the key threat actors – from financially motivated cybercriminals and well-funded state-nexus groups focused on espionage and disruption, to increasingly unpredictable hacktivists driven by geopolitical events. Discover how threats are evolving, including the shift in ransomware tactics, the rise of hacker-for-hire services, the use of AI in creating fake content and misinformation, and the persistent danger posed by the exploitation of unpatched vulnerabilities and sophisticated supply chain attacks. We also look at which sectors are most targeted, including public administration and transport, and peer into the future to understand how emerging technologies like AI and quantum computing will shape the threat landscape towards 2030. www.compliancehub.wiki/understanding-the-evolving-cybersecurity-threat-landscape-in-the-eu-an-in-depth-analysis-for-compliance/ https://gdpriso.com/ https://baseline.compliancehub.wiki/…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Integrating Incident Response: A NIST SP 800-61r3 Guide to Cyber Risk Management 16:55

۹ روز پیش16:55

پخش در آینده

پخش در آینده

دوست داشته شد

16:55

Incident response is a critical part of cybersecurity risk management and should be integrated across organizational operations. This episode explores the recommendations and considerations for incorporating cybersecurity incident response throughout an organization’s cybersecurity risk management activities, as described by the new NIST Special Publication (SP) 800-61 Revision 3. We'll discuss how NIST SP 800-61r3, a CSF 2.0 Community Profile, uses the NIST Cybersecurity Framework (CSF) 2.0 Functions to provide a common language and structure for these efforts. Learn how the Govern, Identify, and Protect functions support preparation activities, while the Detect, Respond, and Recover functions cover the incident response itself. We'll also highlight the crucial role of continuous improvement, feeding lessons learned back into the overall strategy. This guidance aims to help organizations prepare for incidents, reduce their number and impact, and improve the efficiency and effectiveness of detection, response, and recovery activities. This episode is intended for cybersecurity program leadership, cybersecurity personnel, and others responsible for handling cybersecurity incidents www.compliancehub.wiki/beyond-reaction-integrating-incident-response-into-your-cybersecurity-risk-management-strategy-with-nist-sp-800-61r3 https://irmaturityassessment.com https://cyberinsurancecalc.com…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Beyond the Blueprint: Learning Cyber Resilience Together 20:26

10 روز پیش20:26

پخش در آینده

پخش در آینده

دوست داشته شد

20:26

Achieving cyber resilience is a complex and dynamic journey with no one-size-fits-all solution. This episode explores how organizations can significantly improve their cyber resilience posture by leveraging the shared experiences, insights, and front-line practices of their peers and the wider ecosystem. Drawing on insights from the Cyber Resilience Compass initiative, we discuss why sharing what works in practice is essential for building collective knowledge in the field. You'll hear how participating in consultations and workshops, engaging in information-sharing networks like ISACs and CERTs, collaborating with external parties, and learning from real-world case studies can provide vital inspiration and direction. Discover how this collaborative approach helps organizations identify effective strategies, shape their resilience roadmaps, make well-informed decisions, and transition towards a more consistent and future-ready approach, ultimately enhancing the resilience of the entire ecosystem. breached.company/navigating-the-digital-storm-why-shared-experiences-are-your-compass-to-cyber-resilience…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
EDPB 2024: Guarding EU Data Privacy in a Rapidly Changing Digital World 15:35

11 روز پیش15:35

پخش در آینده

پخش در آینده

دوست داشته شد

15:35

Join us as we delve into the European Data Protection Board's (EDPB) 2024 Annual Report to understand how they championed data protection in a year marked by significant technological and regulatory shifts. This episode will cover the key milestones and priorities outlined in the EDPB's 2024-2027 Strategy, designed to strengthen, modernise, and harmonise data protection across Europe www.compliancehub.wiki/edpb-2024-navigating-the-complexities-of-data-protection-in-a-rapidly-evolving-digital-landscape…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The 2024 IC3 Report: Unpacking Record Cybercrime Losses 14:02

12 روز پیش14:02

پخش در آینده

پخش در آینده

دوست داشته شد

14:02

Join us as we delve into the key findings of the FBI's 2024 Internet Crime Complaint Center (IC3) Annual Report. This year marks the 25th anniversary of IC3, which serves as the primary destination for the public to report cyber-enabled crime and fraud. The report reveals a staggering new record for losses reported to IC3, totaling $16.6 billion in 2024. This represents a 33 percent increase from 2023. We'll explore the most impactful crime types by reported loss, including Investment fraud ($6.57 billion), Business Email Compromise ($2.77 billion), and Tech Support scams ($1.46 billion), which are collectively responsible for the bulk of reported losses. A major factor contributing to these losses is the increasing use of cryptocurrency, which served as a descriptor in 149,686 complaints and was associated with $9.3 billion in losses in 2024, a 66% increase in losses. We'll also examine the significant impact on different age groups, noting that individuals over the age of 60 suffered the most losses ($4.885 billion) and submitted the most complaints (147,127). For this age group, Investment fraud ($1.834 billion) and Tech Support scams ($982 million) resulted in the highest reported losses, and cryptocurrency was referenced in 33,369 complaints with over $2.8 billion in losses. The episode will also touch upon the IC3's core functions including collection, analysis, public awareness, and referrals, its role in partnering with law enforcement and the private sector, and notable efforts like the IC3 Recovery Asset Team which assists in freezing funds for victims of fraudulent transactions, demonstrating a 66% success rate in 2024, and Operation Level Up, which successfully notified victims of cryptocurrency investment fraud, resulting in estimated savings breached.company/the-2024-ic3-report-record-cybercrime-losses-highlight-escalating-digital-threats…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The 2025 Cyber Crossroads: Balancing AI Innovation with IoT Security and Evolving Threats 23:37

13 روز پیش23:37

پخش در آینده

پخش در آینده

دوست داشته شد

23:37

Navigate the complex cybersecurity landscape of Q2 and Summer 2025 as we delve into the escalating convergence of AI-driven cyberattacks, the persistent vulnerabilities of the expanding Internet of Things (IoT), and the challenges of establishing robust security and governance frameworks. Based on recent Q1 2025 incident data and expert projections, this episode explores the weaponization of AI in phishing, malware, and social engineering, the continued exploitation of poorly secured IoT devices, and the evolving tactics of ransomware and state-sponsored actors. We'll also discuss the crucial need for proactive defense, AI-augmented security, and adaptation to a fragmenting global regulatory environment. breached.company/strategic-cybersecurity-outlook-ai-iot-and-threat-actor-convergence-in-q2-summer-2025…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
2025 Q1 Cyber Shockwave: Ransomware Records, AI Threats, and the Regulatory Reckoning 21:31

14 روز پیش21:31

پخش در آینده

پخش در آینده

دوست داشته شد

21:31

The first four months of 2025 witnessed an alarming surge in global cybersecurity incidents, with ransomware attacks reaching unprecedented levels. Join us as we dissect the key trends, including the evolution of ransomware tactics like double extortion, the increasing sophistication of social engineering fueled by AI and deepfakes, and the persistent exploitation of software vulnerabilities. We'll delve into major incidents like the crippling attack on Change Healthcare and the record-breaking Bybit cryptocurrency theft, highlighting the most targeted sectors such as healthcare, education, government, and manufacturing. Finally, we'll examine how organizations, law enforcement, and the evolving global regulatory environment, with key legislation like the EU's NIS2 and DORA, are grappling with this escalating cyber threat. breached.company/global-cybersecurity-incident-review-january-april-2025…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Navigating Privacy Risks with the NIST Privacy Framework 1.1 16:59

15 روز پیش16:59

پخش در آینده

پخش در آینده

دوست داشته شد

16:59

This podcast delves into the NIST Privacy Framework 1.1, a voluntary tool developed to help organizations identify and manage privacy risk while fostering innovation and protecting individuals' privacy. We explore its three core components: Core, Organizational Profiles, and Tiers, and how they enable organizations to understand, assess, prioritize, and communicate their privacy activities. Learn how to use this framework to build customer trust, meet compliance obligations, and facilitate dialogue about privacy practices. www.compliancehub.wiki/navigating-the-complex-world-of-privacy-with-the-nist-privacy-framework-1-1…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Beyond the Firewall: The Offensive Cybersecurity Edge 13:24

16 روز پیش13:24

پخش در آینده

پخش در آینده

دوست داشته شد

13:24

Dive into the dynamic world of offensive cybersecurity with insights from leading experts and real-world scenarios. We explore the critical role of techniques like penetration testing, adversary simulation, and red team exercises in proactively identifying vulnerabilities and strengthening defenses against evolving cyber threats. Understand how adopting an adversarial mindset and employing continuous assessment methodologies are essential for navigating today's complex threat landscape and building a resilient security posture. www.securitycareers.help/dont-just-scan-test-choosing-the-right-penetration-testing-partner https://cisomarketplace.services https://generatepolicy.com…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
AI on Trial: Decoding the Intersection of Artificial Intelligence and Harm 21:17

17 روز پیش21:17

پخش در آینده

پخش در آینده

دوست داشته شد

21:17

Explore the rapidly evolving landscape where artificial intelligence intersects with criminality and societal risks. Drawing on expert research, this podcast delves into the transformative potential of AI-enabled crime, from sophisticated financial fraud using deepfakes to the generation of child sexual abuse material, and the challenges this poses for law enforcement. We also examine the critical need for robust AI incident reporting mechanisms, as proposed with standardized key components for documenting AI-related harms and near misses. Join us as we unpack the threats, the defenses, and the policy reforms necessary to navigate this complex new frontier. breached.company/navigating-the-ai-frontier-confronting-ai-enabled-crime-through-robust-incident-reporting https://airiskassess.com https://cisomarketplace.services…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Quantum Leap Security: Navigating the Post-Quantum Cryptography Era 9:45

18 روز پیش9:45

پخش در آینده

پخش در آینده

دوست داشته شد

9:45

We delve into the urgent need for organizations to prepare for the era of quantum computing, which threatens to break today's standard encryption methods. We examine the "harvest now, break later" (HNDL) threat, where malicious actors are already collecting encrypted data for future decryption by quantum computers. Drawing upon information from sources like NIST and expert analysis, we discuss the development and standardization of quantum-resistant cryptographic algorithms such as CRYSTALS-Kyber (ML-KEM) and CRYSTALS-Dilithium (ML-DSA). We provide CISOs and cybersecurity professionals with key strategic considerations for a successful quantum-safe transition, including conducting a comprehensive cryptographic inventory and quantum risk assessment (QRA), prioritizing systems for migration, engaging with vendors, and fostering crypto agility. Join us as we navigate the challenges and opportunities of this critical cybersecurity revolution and help you take the necessary quantum leap to secure your future. www.securitycareers.help/the-quantum-clock-is-ticking-your-guide-to-navigating-the-post-quantum-cryptography-era https://quantumsecurity.ai https://risk.quantumsecurity.ai/…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
The AI and Influence Front - (dis/mis)Information 23:04

19 روز پیش23:04

پخش در آینده

پخش در آینده

دوست داشته شد

23:04

Explore the escalating threats posed by artificial intelligence incidents, sophisticated disinformation campaigns like the Doppelgänger network targeting nations from France to Israel, and the cyber espionage activities of threat actors such as UAC-0050 and UAC-0006 as revealed by Intrinsec's analysis. We delve into the tactics, infrastructure, and narratives employed in these digital battlegrounds, drawing insights directly from recent intelligence reports. Understand the key components of AI incident reporting, the disinformation narratives amplified across different countries, and the evolving techniques of cyber intrusion sets targeting critical infrastructure and institutions. Join us as we unpack the complex landscape of AI risks, influence operations, and cyber warfare. breached.company/the-unseen-frontlines-navigating-the-intertwined-threats-of-ai-incidents-disinformation-and-cyber-espionage…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Smart City Cyber Shield 14:36

20 روز پیش14:36

پخش در آینده

پخش در آینده

دوست داشته شد

14:36

This podcast we are exploring the critical cybersecurity challenges facing today's interconnected urban environments. We delve into the evolving threats arising from smart city infrastructure and the Internet of Things (IoT), including ransomware attacks on critical infrastructure, the expanded attack surface created by interconnected devices, and strategies for building cyber resilience. Join us as we discuss best practices for municipalities, the importance of public trust, and the role of AI in both cyberattacks and defense. Stay informed and learn how we can collectively protect the future of our smart cities. www.securitycareers.help/navigating-the-cyber-threat-landscape-of-smart-cities https://cybersafe.city https://risk.secureiotoffice.world https://risk.secureiot.house…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
AI vs. the Expanding Attack Surface: Proactive Defense Strategies 18:07

21 روز پیش18:07

پخش در آینده

پخش در آینده

دوست داشته شد

18:07

Is your attack surface spiraling out of control with multi-cloud, SaaS, and third-party integrations? Join us as we delve into how AI-powered automation is becoming critical for modern Attack Surface Management (ASM). We'll explore the challenges organizations face in achieving comprehensive visibility and how AI provides viable solutions for enhanced asset discovery, proactive threat detection, intelligent risk prioritization, and faster incident response. Learn how AI acts as a force multiplier in cybersecurity, enabling a shift from reactive to proactive defense against evolving cyber threats. www.securitycareers.help/why-ai-powered-attack-surface-management-is-your-new-strategic-imperative https://risk.quantumsecurity.ai/ https://airiskassess.com/…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Deep Dive into Deepfakes: Unmasking the AI Illusion 19:16

22 روز پیش19:16

پخش در آینده

پخش در آینده

دوست داشته شد

19:16

Welcome to Deep Dive, where we tackle complex topics head-on. In this episode, we delve into the fascinating and increasingly concerning world of deepfakes: AI-generated audio and visual content designed to deceive. We'll explore the technology behind deepfakes, from face-swapping to voice cloning the threats they pose to individuals, organizations, and even democratic processes and the ongoing efforts to detect and mitigate this emerging challenge. Join us as we break down the science fiction of today into the cybersecurity reality of tomorrow. www.myprivacy.blog/the-deepfake-dilemma-navigating-the-age-of-ai-generated-deception…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Scam Savvy: Navigating the Digital Deception 15:16

23 روز پیش15:16

پخش در آینده

پخش در آینده

دوست داشته شد

15:16

In a world increasingly shaped by digital interactions and artificial intelligence, online scams are becoming more sophisticated and pervasive. Scam Savvy delves into the tactics employed by fraudsters, from exploiting emotions in charity and romance scams to leveraging AI for deepfakes and personalized phishing attacks. We unmask these deceptive practices and equip you with the knowledge to protect yourself in the evolving landscape of online crime. www.scamwatchhq.com/navigating-the-digital-deception-understanding-and-avoiding-online-scams-in-the-age-of-ai https://identityrisk.myprivacy.blog…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Coordinated Cyber Defense: Inside Vulnerability Disclosure Programs (VDP) 23:17

24 روز پیش23:17

پخش در آینده

پخش در آینده

دوست داشته شد

23:17

This podcast dives into the critical world of vulnerability disclosure programs (VDPs), exploring how organizations and security researchers work together to identify and address security weaknesses. We'll examine the core principles that underpin effective VDPs, including establishing clear reporting channels and defined scopes, the importance of timely responses and good-faith engagement, and the crucial role of safe harbor provisions. We'll also delve into modern best practices such as automation in triage, integration with security workflows, adherence to coordinated vulnerability disclosure (CVD) norms, and the benefits of transparency in building community trust. Join us to understand how VDPs are becoming a strategic necessity for cyber resilience, fostering a collaborative security ecosystem. www.hackernoob.tips/diving-deep-a-researchers-guide-to-navigating-vulnerability-disclosure-programs www.securitycareers.help/establishing-a-vulnerability-disclosure-program-a-cisos-perspective https://irmaturityassessment.com https://cyberinsurancecalc.com…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
State Privacy Unpacked 27:08

25 روز پیش27:08

پخش در آینده

پخش در آینده

دوست داشته شد

27:08

Navigating the complex landscape of U.S. state data privacy laws can be challenging. Join us as we break down the key aspects of these regulations, including consumer rights, business obligations, data breach notification requirements, and enforcement trends. We'll explore the nuances of laws like the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (CDPA), the Colorado Privacy Act (CPA), and emerging legislation like the New York Privacy Act (if passed), helping businesses and consumers understand their rights and responsibilities in an ever-evolving digital world. www.compliancehub.wiki/navigating-the-maze-an-in-depth-look-at-u-s-state-data-privacy-laws https://globalcompliancemap.com https://cisomarketplace.services…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Crypto Payments: Secure or Exposed? 16:14

26 روز پیش16:14

پخش در آینده

پخش در آینده

دوست داشته شد

16:14

Explore the exciting future of cryptocurrency payments through the lens of cybersecurity and privacy. We delve into the potential benefits and significant risks, offering insights into best practices and the crucial role of regulation in this evolving landscape. www.myprivacy.blog/navigating-the-crypto-landscape-an-in-depth-look-at-privacy-in-the-future-of-payments www.compliancehub.wiki/navigating-the-crossroads-compliance-and-privacy-in-the-cryptocurrency-realm…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Secure Digital Retail: Navigating Privacy and Compliance 16:23

27 روز پیش16:23

پخش در آینده

پخش در آینده

دوست داشته شد

16:23

This podcast delves into the critical aspects of data privacy laws like GDPR and the Connecticut Data Privacy Law, alongside the essential Payment Card Industry Data Security Standard (PCI DSS) compliance for e-commerce success. We explore how retailers can craft clear privacy policies, manage user consent effectively, and implement stringent security measures to protect customer data and ensure secure online transactions in the evolving digital landscape. Join us for insights on building customer trust through adherence to regulations and best practices in digital retail security. www.compliancehub.wiki/navigating-the-complexities-of-compliance-in-digital-retail-a-comprehensive-guide…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
AI's Cyber Shadow: Unpacking the Emerging Threat 18:16

28 روز پیش18:16

پخش در آینده

پخش در آینده

دوست داشته شد

18:16

Dive deep into the rapidly evolving landscape of AI-powered cyberattacks with insights from cutting-edge research, including the framework for evaluating AI cyber capabilities developed by Google DeepMind. Explore how AI is shifting the balance between offense and defense in cybersecurity, potentially lowering the cost and complexity of sophisticated attacks while demanding new strategies for protection. Join us as we unpack the key findings, potential future threats, and essential considerations for safeguarding your digital world in the age of increasingly capable AI adversaries. breached.company/the-ai-cyberattack-horizon-understanding-the-emerging-threat https://airiskassess.com https://globalcompliancemap.com…

C

CISO Insights: Voices in Cybersecurity

CISO Insights: Voices in Cybersecurity podcast artwork

1
Never Trust, Always Verify: Exploring Zero Trust Architecture 22:43

29 روز پیش22:43

پخش در آینده

پخش در آینده

دوست داشته شد

22:43

Delve into the principles and practical applications of Zero Trust Architecture (ZTA), a modern cybersecurity paradigm that moves away from traditional perimeter-based security by embracing the core tenet of "never trust, always verify". Learn about the key components, tenets, and benefits of ZTA, as well as strategies for implementation in today's complex and distributed IT environments, including cloud, remote users, and diverse devices. https://www.zerotrustciso.com www.securitycareers.help/building-a-career-in-a-zero-trust-world-understanding-the-foundational-principles-of-modern-cybersecurity…

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.

به بیش از 500 موضوع گوش کنید

راهنمای مرجع سریع

پادکست های برتر

Timche podcast | پادکست اقتصادی تیمچه

طنزپردازی | tanzpardazi

نود و هشت، پنجاه و سه

GoushFilm | گوش‌فیلم

Alireza Nourizadeh

رادیو فردا

ChannelB پادکست فارسی

در حین کاوش به این نمایش گوش دهید