Security Weekly Podcast Network

IT will never call you asking for a verification code.

Fake recruiters, fake gift card requests, and fake tech support calls all have something in common: they're trying to get you to hand over a code that actually works.

What's the one security rule everyone should remember?

#SocialEngineering #Phishing #Cybersecurity

Your board doesn't need another cybersecurity lecture. It needs to understand the financial impact of getting breached.

CISOs need to translate technical risks into business costs, showing executives what downtime, ransomware, and operational disruption could actually mean for the organization. Are you speaking the language your board understands?

#CISO #CybersecurityLeadership #RiskManagement

A crisis doesn't have to be a setback. It can be an opportunity to introduce new ideas, rethink processes, and make meaningful improvements.

The key is knowing how to respond, assess what happened, and turn lessons learned into action. How can organizations make the most of a crisis?

#CrisisManagement #IncidentResponse #Cybersecurity

Refrigeration systems are more than just a way to keep things cold.

Cyberattacks targeting these systems can affect blood banks, military facilities, and other critical infrastructure. Legacy equipment that can't be updated makes isolation and access control especially important.

How prepared are organizations to secure these overlooked systems?

#OTSecurity #CriticalInfrastructure #Cybersecurity

Giving AI coding agents access to your entire codebase creates a serious AppSec challenge.

In monorepos, permissions, approvals, and per-directory restrictions matter. Not every agent should have access to everything.

How should organizations manage security and authorization as agentic coding scales?

#AgenticAI #AppSec #Cybersecurity