CISO Marketplace public
[search 0]
More
Download the App!
show episodes
 
CISO Insights: The Cybersecurity Leadership Podcast Where Security Leaders Shape Tomorrow’s Defenses Join us for CISO Insights, the definitive podcast for cybersecurity executives navigating today’s evolving threat landscape. Each episode delivers exclusive conversations with industry pioneers and practical frameworks from security leaders. CISO Insights provides actionable intelligence for executives building resilient security programs. We cover everything from board-level risk communicati ...
  continue reading
 
Loading …
show series
 
Identity sprawl, often called secrets sprawl, describes the unmanaged proliferation of digital credentials like API keys and tokens across an organization's IT environment. This widespread distribution creates a massive and expanded attack surface, as non-human identities (NHIs) often possess overprivileged access and their secrets are frequently e…
  continue reading
 
In 2025, the rapid evolution of AI, from sophisticated agents and coding assistants to widespread no-code tools, is inadvertently fueling an unprecedented surge in secrets sprawl across enterprises. This episode delves into how human error, "shadow AI" usage, and interconnected agent-to-agent communications are exposing critical credentials in ever…
  continue reading
 
This podcast explores the complex landscape where Washington State's leading tech industry meets evolving data privacy laws and city policy challenges. We unpack how major players like Amazon navigate stringent regulations such as the My Health My Data Act, implement robust cloud governance and cybersecurity best practices, and respond to demands f…
  continue reading
 
Dive deep into California's cutting-edge privacy and cybersecurity landscape, from the foundational CCPA and CPRA to the intricate new regulations governing Automated Decision-Making Technology (ADMT) and AI. We'll explore how businesses must navigate evolving compliance requirements, consumer rights, and state-led initiatives like Cal-Secure to pr…
  continue reading
 
North Carolina is confronting an unprecedented surge in cyberattacks, with thousands of incidents impacting millions of residents and vital sectors annually. From pervasive ransomware and sophisticated phishing campaigns targeting healthcare, education, and government, to data breaches affecting major tech hubs like the Research Triangle, the digit…
  continue reading
 
Oregon's Digital Frontier explores the intensifying cyber threats facing Oregon businesses and residents, from frequent cyberattacks and data breaches to complex data privacy concerns. We delve into the state's comprehensive response, examining the impact of the Oregon Consumer Privacy Act (OCPA) and Oregon Consumer Information Protection Act (OCIP…
  continue reading
 
This episode delves into the Virginia Consumer Data Protection Act (VCDPA), which took effect on January 1, 2023, exploring how its comprehensive framework for data privacy is shaping the state's vibrant tech sector. We'll examine the specific rights granted to consumers, such as the ability to opt-out of targeted advertising and data sales, and th…
  continue reading
 
Artificial intelligence is rapidly transforming New Zealand's digital landscape, offering new ways to process data, create content, and automate tasks, with services like ChatGPT gaining rapid user adoption. However, this rapid adoption raises significant privacy and cybersecurity concerns, including the malicious use of AI for fraud and deepfake i…
  continue reading
 
This episode delves into Hungary's evolving digital landscape, focusing on its robust cybersecurity framework, the challenges and opportunities presented by AI, and stringent data protection regulations. We explore the impact of the NIS2 Directive, the 2024 Cybersecurity Act, and the Critical Infrastructure Act, alongside the National Authority for…
  continue reading
 
Minnesota faces a relentless wave of daily cyberattacks targeting local governments, healthcare, and critical infrastructure, evidenced by a significant surge in malware reports following new incident reporting laws. In response, the state has enacted the Minnesota Consumer Data Privacy Act (MCDPA), a comprehensive law granting residents unpreceden…
  continue reading
 
Polska nawiguje przez złożony krajobraz ochrony danych, gdzie unijne RODO jest uzupełniane rozbudowanymi krajowymi ustawami, takimi jak Ustawa o Ochronie Danych Osobowych z 2018 roku i Ustawa z 2019 roku, która znowelizowała ponad 160 ustaw sektorowych. Firmy mierzą się z wyzwaniami, od luk w podstawowych zabezpieczeniach cybernetycznych, takich ja…
  continue reading
 
Deepfake creation tools are now freely available, rapidly improving, and astonishingly easy to use, allowing anyone with minimal effort to craft convincing synthetic media. This widespread accessibility fuels a surge in sophisticated scams, financial fraud, and disinformation campaigns, making deepfakes a normalized part of everyday threats. Join u…
  continue reading
 
This episode delves into the OWASP AI Maturity Assessment (AIMA), a groundbreaking framework designed to enhance the security, trustworthiness, and compliance of AI systems. We explore why traditional security models often fall short in addressing AI's unique challenges, such as non-deterministic behavior, opaque decision logic, and data-centric vu…
  continue reading
 
Neste episódio, mergulhamos no complexo e crescente cenário das ciberameaças no Brasil, um dos países mais visados por criminosos e atores estatais. Exploraremos desde ataques de ransomware e phishing generalizados, que se aproveitam da baixa conscientização e da dependência tecnológica, até as vulnerabilidades intrínsecas à governança cibernética …
  continue reading
 
This podcast delves into Israel's ambitious "Cyber Dome" initiative, a multi-layered, AI-driven system designed to proactively defend the nation's cyberspace and critical infrastructure, drawing parallels to its renowned Iron Dome missile defense. We'll explore how this advanced defense leverages big data and artificial intelligence for early threa…
  continue reading
 
This episode dives into the distinct digital journeys of Austria, a European nation making significant strides in technology adoption. We explore Austria's impressive progress in digital identity solutions like ID Austria, which provides 100% of its citizens with a secure digital proof of identity and unrestricted control over their personal data T…
  continue reading
 
In an increasingly connected world, the lines between traditional Information Technology (IT) devices and the burgeoning Internet of Things (IoT) are blurring, yet their fundamental differences create unique challenges. This episode delves into how IoT devices, with their direct interaction with the physical world and often limited built-in securit…
  continue reading
 
Smart home devices offer unparalleled convenience, from voice-controlled assistants and automated thermostats to video doorbells that let you see who's at your door. However, this interconnectedness comes at a significant cost, as these devices continuously collect vast amounts of personal data, from daily habits and purchases to biometric informat…
  continue reading
 
In an era defined by unprecedented digital connectivity, we often find ourselves facing a paradox: immense convenience coupled with a profound loss of control over our personal data and online experiences. This podcast delves into the critical implications of surveillance capitalism and algorithmic manipulation on our privacy, freedom of expression…
  continue reading
 
Join us as we explore how Estonia transformed from a post-Soviet state into a global leader in digital governance, offering nearly all government services online and attracting entrepreneurs worldwide through its e-Residency program. We'll delve into the remarkable benefits of this digital revolution, from unparalleled convenience and citizen trust…
  continue reading
 
The Asia-Pacific region stands at a critical juncture, with its fast-growing digital economies confronting an increasingly sophisticated and diverse array of cyber threats, including evolving ransomware attacks, pervasive online scams, and state-backed intrusions. Businesses must navigate a fragmented data governance landscape marked by unique data…
  continue reading
 
Australia aims to be a global leader in cybersecurity by 2030, implementing a comprehensive strategy built on six "cyber shields" to protect citizens and businesses from escalating threats like ransomware and identity theft, while also enacting significant privacy reforms. However, these efforts are met with concerns over increasingly broad governm…
  continue reading
 
Africa is undergoing a profound digital transformation, driven by its mobile-first connectivity, innovative fintech solutions, and a burgeoning tech startup ecosystem, which together offer unprecedented opportunities for financial inclusion and economic growth across the continent. However, this rapid digitalization is accompanied by significant cy…
  continue reading
 
Latin America has become a hotspot for cyber activity, with countries like Chile, Mexico, and Colombia experiencing significant data breaches and ransomware attacks on critical infrastructure. This widespread vulnerability is often fueled by frequently outdated cybersecurity measures, a talent gap, and a pervasive lack of awareness at high levels o…
  continue reading
 
América Latina se ha convertido en un objetivo principal para los ciberdelincuentes, siendo considerada la región menos preparada globalmente a pesar de su rápida digitalización, lo que ha expuesto a empresas y gobiernos a un aumento exponencial de ciberataques. Exploraremos incidentes críticos como el ataque de ransomware Conti en Costa Rica, las …
  continue reading
 
This episode delves into how Hong Kong is bolstering its cybersecurity through landmark legislation like the Protection of Critical Infrastructures (Computer Systems) Bill, which sets strict security protocols and reporting obligations for essential services. We explore the city's extensive collaborative initiatives, from the Cyber Security and Tec…
  continue reading
 
This episode uncovers how global digital ID systems, paired with stringent age verification and online surveillance laws, are systematically eroding personal privacy and online anonymity. We delve into the comprehensive collection of biometric and behavioral data, examining how it creates a "digital twin" of every individual and enables cross-borde…
  continue reading
 
De NIS2-richtlijn hervormt het cybersecuritylandschap van Europa, met als doel een hoog gemeenschappelijk beveiligingsniveau te bereiken tegen toenemende cyberdreigingen. Deze aflevering duikt in de essentiële technische implementatierichtlijnen en biedt praktisch advies voor organisaties om cyberrisico's effectief te beheren en te voldoen aan de v…
  continue reading
 
Dive into the revolutionary world of Brain-Computer Interfaces (BCIs) and their incredible potential to connect human thought directly with technology. This podcast unravels the alarming vulnerabilities of these cutting-edge devices, exploring how they can be subjected to "neural hacking" through remote manipulation, AI-powered attacks, and sensiti…
  continue reading
 
The metaverse is rapidly transforming into a new digital frontier where immersive experiences meet real-world value, driven by cryptocurrencies and NFTs. However, this exciting evolution has opened a new battleground for sophisticated cybercrimes, including virtual identity theft, deep fake impersonation, NFT hacking, and pervasive social engineeri…
  continue reading
 
This podcast delves into the escalating cybersecurity threats facing modern medical devices, from Bluetooth-enabled pacemakers and insulin pumps to sophisticated patient monitors, revealing how vulnerabilities can lead to dire consequences for patient safety and data integrity. We explore the ethical frontiers of this challenge, examining how advan…
  continue reading
 
The Internet of Bodies (IoB) promises a revolution in personalized health and convenience by collecting intimate data directly from our bodies, ranging from heart rate to potential future capabilities like reading thoughts. However, this widespread data collection introduces profound privacy challenges, including unclear data ownership, bypassed in…
  continue reading
 
The Internet of Bodies (IoB) and Human Digital Twins promise a revolution in personalized health and daily convenience by collecting intimate data directly from our bodies. But as these technologies become more widespread, they introduce profound privacy challenges, from unclear data ownership and bypasses of informed consent to the creation of exp…
  continue reading
 
As machine identities exponentially outnumber human ones, creating a vast and vulnerable attack surface by 2025, organizations face unprecedented cybersecurity challenges. This podcast explores how artificial intelligence (AI) and advanced automation are becoming critical for managing the lifecycle of these digital credentials, from detecting anoma…
  continue reading
 
This episode explores the critical juncture where human behavior meets technological defense in cybersecurity, highlighting how a significant 68% of breaches are human-driven due to factors like ineffective training and a poor security experience. We delve into the growing imperative for organizations to shift from complex "tool sprawl" with dozens…
  continue reading
 
In today's complex digital world, understanding the financial side of cybersecurity is crucial. This episode delves into Cybersecurity as a Service (CaaS), exploring the various factors that influence its cost, from service scope and company size to pricing models and the level of customization required. Discover how CaaS provides cost-effective ac…
  continue reading
 
Explore the rapidly emerging world of mandatory digital identity and financial tracking through Central Bank Digital Currencies (CBDCs), which are creating an unprecedented global infrastructure for monitoring, scoring, and controlling human digital interaction. Uncover how these systems are eroding privacy and anonymity, linking online activity to…
  continue reading
 
This podcast delves into the complex world of AI-powered disinformation, exploring how sophisticated tactics like typosquatting are employed to clone legitimate media websites and disseminate false narratives at scale, as seen in campaigns like "Doppelgänger". We uncover how malicious actors leverage generative AI to produce convincing deepfakes, A…
  continue reading
 
Agentic AI systems significantly extend their capabilities by interfacing with diverse external environments through tools and function calls, including API access, code execution, databases, web browsers, and critical operational systems. However, each of these "agencies" introduces unique and severe security concerns, such as tool misuse (T2), pr…
  continue reading
 
As a Federal Cyber Center and Center of Excellence, the Department of Defense Cyber Crime Center (DC3) proactively builds and leverages strategic partnerships across the globe to enable insight and action in cyberspace and beyond. These vital collaborations span U.S. government entities, international allies, law enforcement agencies, the private s…
  continue reading
 
The EU's Digital Services Act (DSA) is presented as a comprehensive digital censorship law, ostensibly designed for online safety, but criticized for targeting core political speech, humor, and satire, even when not illegal. This report uncovers how European regulators leverage the DSA to compel American social media companies to change their globa…
  continue reading
 
The 21st century's quiet revolution, the Internet of Things (IoT), has woven digital systems into our physical world, promising efficiency and convenience while simultaneously creating an attack surface of unparalleled scale and complexity. This episode delves into the inherent fragility of IoT, exploring how market pressures and design compromises…
  continue reading
 
Traditional network perimeters have dissolved in the hyper-connected world of IoT, escalating cyber threats into pervasive cyber-physical risks with tangible real-world consequences for organizations and human safety. This podcast guides Chief Information Security Officers (CISOs) through a paradigm shift, detailing how to build a proactive, intell…
  continue reading
 
In 2025, the global aviation industry has been rocked by an unprecedented wave of cyberattacks, compromising millions of passengers' personal data and disrupting critical infrastructure systems. This crisis is largely driven by the notorious cybercriminal group Scattered Spider, also known as UNC3944, Scatter Swine, or Muddled Libra, which employs …
  continue reading
 
Explore the unprecedented, multi-front cyber crisis confronting the global healthcare sector as of July 2025, where technological innovation dangerously intertwines with cyber warfare, creating a hyper-connected ecosystem rife with vulnerabilities. We deconstruct the escalating threat landscape, including evolving ransomware with multi-extortion mo…
  continue reading
 
Law firms are a "digital bullseye", acting as custodians of clients' "crown jewels" of confidential and strategic information, making them uniquely vulnerable to escalating cyber threats. Attackers are now leveraging AI to launch hyper-realistic attacks at an unprecedented scale, while the human element remains the primary point of failure, leading…
  continue reading
 
Traditional security awareness training (SAT) has often proven ineffective, with only 15% of participants actually changing their behavior and a significant majority of data breaches, predicted to be 90% in 2024, involving a human element. Artificial intelligence (AI) is fundamentally transforming SAT by enabling personalized learning experiences, …
  continue reading
 
Cloud Security Posture Management (CSPM) is a critical component for continuously monitoring, detecting, and remediating security risks and compliance violations across cloud environments, particularly addressing misconfigurations which account for over 90% of cloud security breaches. While essential for visibility, risk assessment, and compliance …
  continue reading
 
An Incident Response (IR) playbook is a comprehensive, step-by-step guide essential for organizations to proactively mitigate, detect, respond to, and recover from ransomware incidents. It serves as a single source of truth, enabling swift action to limit an incident's impact, save data, time, and money, and accelerate the return to normal business…
  continue reading
 
This episode explores how Enterprise Risk Management (ERM) processes evolve from foundational structures and informal approaches to sophisticated, enterprise-wide analytical frameworks. We delve into how Key Risk Indicators (KRIs) serve as crucial early warning signals, examining their varied development, monitoring, and application across three di…
  continue reading
 
Loading …

Quick Reference Guide

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play