Episodes
-
EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier
Cloud security provides significant benefits through economies of scale and democratizes access to advanced security capabilities.
-
EP272 More Than Just Packets: Is NDR a "First-Class" Cloud Security Control?
Network Detection and Response (NDR) is experiencing a revival as an essential security control, even in 2026, due to its ability to provide comprehensive visibility into network activity.
-
EP271 Can AI-Native MDR Actually Fix Your Broken SOC Workflows or Just Automate the Mess?
Organizations still operating with legacy SIEMs and manual workflows are at a significant disadvantage. AI native solutions built for modern cloud environments offer transformative benefits, including better data structures and automation.
-
EP270 The Convenience Tax: Why We Keep Failing at Supply Chain Security
Effective supply chain security requires more than just tools like SBOMs; it demands comprehensive, architecture-level safeguards.
-
EP269 Reflections on RSA 2026 - Beyond AI AI AI AI AI AI AI
Vendors' AI claims should be backed by data and measurable proof; beware superficial 'AI washing'.
-
EP268 Weaponizing the Administrative Fabric: Cloud Identity and SaaS Compromise in M Trends 2026
Threat adversaries are evolving rapidly, reducing response times to seconds through automation and collaboration, necessitating a reassessment of traditional security metrics.
-
EP267 AI SOC or AI in a SOC? Cutting Through Hype, Pricing Models, and SIEM Detection Efficacy with Raffy Marty
Traditional SIEMs remain relevant and can evolve to address existing gaps, contrary to some marketing claims.
-
EP266 Resetting the SOC for Code War: Allie Mellen on Detecting State Actors vs. Doing the Basics
Understanding the historical motives and strategies of nation-states is crucial to anticipating cyber threats and making strategic security decisions.
-
EP265 Beyond Shadow IT: Unsanctioned AI Agents Don't Just Talk, They Act!
Traditional security measures like bans and restrictions are often ineffective against shadow AI, which employees tend to circumvent for productivity reasons.
-
EP264 Measuring Your (Agentic) SOC: Two Security Leaders Walk into a Podcast
Metrics must evolve alongside technology; traditional measures like MTTD and MTTR may become less relevant with AI handling incident response at machine speed.
-
EP263 SOC Refurbishing: Why New Tools Won't Fix Broken Processes (Even With AI)
Effective security requires integrating people, processes, and technology; technology alone cannot solve foundational process issues.
-
EP262 Freedom, Responsibility, and the Federated Guardrails: A New Model for Modern Security
Organizations should transition from centralized to distributed security ownership to keep pace with rapid cloud, SaaS, and AI developments.
-
EP261 No More Aspiration: Scaling a Modern SOC with Real AI Agents
Not summarized yet
-
EP260 The Agentic IAM Trainwreck: Why Your Bots Need Better Permissions Than Your Admins
Not summarized yet
-
EP259 Why DeepMind Built a Security LLM Sec-Gemini and How It Beats the Generalists
Not summarized yet
-
EP258 Why Your Security Strategy Needs an Immune System, Not a Fortress with Royal Hansen
Not summarized yet
-
EP257 Beyond the 'Kaboom': What Actually Breaks When OT Meets the Cloud?
Not summarized yet
-
EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance
Not summarized yet
-
EP255 Separating Hype from Hazard: The Truth About Autonomous AI Hacking
Not summarized yet
-
EP254 Escaping 1990s Vulnerability Management: From Unauthenticated Scans to AI-Driven Mitigation
Not summarized yet
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account