CYBERCAST by NEVERHACK

Cybercrime isn’t a niche problem anymore—it’s a scalable, borderless business. In this episode of NEVERHACK Estonia CyberCast, Anett Numa speaks with Estonian State Prosecutor Vahur Verte about how cybercrime has evolved, why one attacker can impact thousands (or more), and what it really takes to investigate and prosecute digital crimes in a world where data moves instantly.

You’ll hear why international cooperation is the biggest bottleneck, why deterrence depends more on the likelihood of being caught than harsher punishment, and how Estonia thinks about defending a highly digital e-state without compromising citizens’ rights. Plus: the human side—what it’s like to prosecute crimes at massive scale, and why public officials must live with extra caution online.

🎧 Listen now, follow NEVERHACK Estonia CyberCast, and visit our website for more episodes and insights.

Cybersecurity is no longer “handled by IT.” Under NIS2 Directive, it’s a leadership responsibility—with real accountability, fast incident reporting expectations, and growing supply-chain pressure. In this Cybercast episode, host Anett Numa speaks with Henri Ratnik and Rainer Ratnik from WIDEN legal about what NIS2 changes in everyday business, how boards should think about liability and resilience, and the biggest mistakes companies make when preparing. You’ll also hear practical advice for SMEs and scale-ups: how to prioritize, build layered defenses (“Swiss cheese”), and avoid expensive security theater.

🎧 Listen now and share this with your CEO/board team. For more episodes, visit our website and subscribe.

NIS2 is now reshaping cybersecurity expectations for Estonian businesses—and the scope has grown fast. In this episode of the NeverHack Cybercast, Louis Zezeran is joined by NEVERHACK security advisor Andres Järv to break down what NIS2 really is (an EU directive), how Estonia implemented it through the Cybersecurity Act (KüTS), and why thousands more organizations may now be in scope.

You’ll learn the difference between E-ITS (Estonia’s detailed, prescriptive standard) and ISO 27001 (international, risk-based), what audits and evidence look like, and what “management responsibility” means in practice. Andres also shares practical first-step examples—policies, risk management, incident handling, asset/vulnerability management, and staff awareness—so you can start building compliance without panic.

🎧 Listen now, subscribe for more, and contact NEVERHACK if you need guidance on where to begin.

Phishing is evolving fast—and in 2026 it’s no longer “just suspicious emails.” In this episode of NeverHack CyberCast, host Louis Zezeran talks with Urmo Keskel from Phishbite (Estonia) about the newest phishing tactics: AI-personalized lures in perfect local language, deepfake social engineering, hybrid attacks that jump from LinkedIn to Telegram, ClickFix campaigns that trick users into running commands, and the growing underground market for stolen sessions and access.

They also cover hiring-process malware traps, supply-chain invoice scams, and how QR code phishing moves victims from protected laptops to less protected phones. Most importantly: what actually works in the real world—continuous simulations, behavior-driven metrics, and building awareness without blame.

🎧 Listen now, follow/subscribe for more CyberCast episodes, and share this with someone who still thinks “I’d never fall for phishing.”

Most organizations understand the idea of “cybersecurity” as tools, controls, and response plans. But Cyber Threat Intelligence (CTI) often sits in a strange place: it’s widely advertised, frequently misunderstood, and sometimes dismissed as buzzword fuel. In this NEVERHACK CyberCast episode, host Louis Zezeran sits down with Britta Sillaots, a NEVERHACK Cyber Threat Intelligence analyst, to unpack what CTI actually is—what it looks like in the real world, how it supports security teams, and why it’s not reserved for “big enterprise only.”

Britta’s definition is simple, and that simplicity is the point: CTI is about making information useful. Not just collecting data, not just “watching the dark web,” and not just generating reports. CTI is the process of taking scattered signals—news, indicators, chatter, leaks, vulnerabilities—and adding enough context that a security team can act.

In this CyberCast episode, host Louis Zezeran is joined by Rob Gillette (NAL Research) and Stefan Grefsgaard (SGM Technology) to unpack a growing and often misunderstood threat: GPS spoofing and jamming in the maritime domain. The conversation explores why GNSS systems are vulnerable by design, how interference manifests in real-world operations, and why this issue has become a critical concern for safety, security, and commercial shipping.

Through real-world examples and testing experiences, the discussion explains the difference between jamming and spoofing, how navigation systems behave under interference, and why trust in positioning data has become a security concern. Rather than focusing on a single solution, the episode looks at broader principles such as independent verification, resilience, and operational awareness.

🎧 Listen now and subscribe for more practical discussions on real-world security challenges from NEVERHACK Estonia.

In this end-of-year CyberCast, Ronnie welcomes new hosts Anett Numa, Britta Sillaots, and Louis Zezeran as they reflect on 2025’s biggest security lessons—from the Cinamon cinemas ransomware incident to the rising impact of AI on both attackers and defenders. They also share practical 2026 priorities: cloud sovereignty, supply chain resilience, war-gaming, and patching basics.

Step inside the world of smart manufacturing with Ericsson architect Allan Puusepp, as we explore how intelligent architecture, AI, robotics, and cybersecurity are reshaping the factory floor. From private 5G networks to real-time data models and layered industrial design, Allan reveals how modern factories achieve agility, reliability, and security at massive scale.

Discover why microsegmentation and Zero Trust matter, how to secure legacy machinery, and why monitoring network traffic is the fastest path to stronger industrial cybersecurity. Packed with practical insights and future-focused thinking, this episode is a must-listen for anyone navigating Industry 4.0.

Humans remain the strongest—and weakest—link in cybersecurity. In this eye-opening episode, psychologist and leadership trainer Andero Teras reveals how cognitive bias, micro-habits, and everyday communication patterns shape cyber risk far more than technology alone. Learn why our brains misjudge digital threats, how attackers exploit human heuristics, and what small behavioral changes can dramatically improve security culture.

From storytelling to closed-loop communication, Andero shares practical, real-world strategies that CISOs and teams can start using today.

Tune in to discover how to build stronger defenses by understanding the human mind.

How do you secure nearly 9,000 government endpoints? In this episode of CyberCast, recorded live at the Nordic-Baltic Security Summit, Andri Rebane from the Estonian IT Center and Indrek Turmen from Trend Micro share how Estonia unified endpoint protection across its public sector.

They reveal what it takes to roll out EDR at national scale — from automation and tuning to trust, collaboration, and long-term learning. Discover how “last-mile security” became Estonia’s strongest defense layer and what other organizations can learn from it.

Listen now and explore the full playbook behind one of the most ambitious public-sector cybersecurity rollouts in Europe.