Two weeks ago on Reimagining Cyber, we explored how agentic AI could become the next major security choke point. Since then, things have escalated.

Enterprises are restricting — even banning — AI agents. Security teams are scrambling to regain visibility. Vendors are rushing out “agent security” features. And early warning signs are already surfacing.

In this episode, Tyler Moffitt answers the critical question: Did agentic AI just move from innovation to crisis?

What changed in just a matter of weeks?

This discussion breaks down:

• Why AI agents are fundamentally different from traditional automation and service accounts
• How autonomous reasoning + persistent system access creates a new attack paradigm
• The identity and API sprawl problem most organizations didn’t realize they had
• Why compromised agents could give attackers automation at scale
• The growing wave of enterprise bans — and what they signal
• Whether regulation or a high-profile incident is likely to come first

Tyler explains how agents don’t just generate responses — they take action. They hold API keys, access internal systems, modify code repositories, interact with cloud infrastructure, and execute workflows. When deployed without guardrails, logging, or least-privilege controls, they can quietly multiply an organization’s attack surface overnight.

The core issue isn’t that AI is malicious — it’s that AI has become an acceleration layer. And when autonomy meets overprivileged access, traditional security models break.

You’ll also hear practical, immediate steps security teams should be taking now — from credential rotation and agent inventories to sandboxing and behavioral monitoring.

This isn’t an anti-AI episode. It’s a maturity wake-up call.

Because the organizations that build guardrails now will move faster and safer. The ones that don’t may learn the hard way.

If you’re a CISO, security architect, developer experimenting with agents in production, or executive evaluating AI adoption — this is a conversation you can’t afford to miss.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

One year after the Digital Operational Resilience Act (DORA) came into force, what has actually changed?

In this follow-up episode of Reimagining Cyber, Rob Aragao welcomes back Dominic Brown of Graveslight Consulting to assess the reality of DORA in practice. Last time, the regulation was looming. Now, firms across the EU — and global financial institutions operating within it — have been living with it.

The conversation explores:

• Why DORA was designed as a systemic risk regulation — not just a compliance exercise
• Where firms struggled during year one, from immature ICT governance to gaps between policy and practice
• How regulators have responded — and why patience may be running out
• The impact of Level 2 Technical Standards, including threat-led penetration testing under the TIBER-EU methodology
• What ICT third-party risk management really means for cloud providers and subcontracting chains
• Why resilience is becoming both a supervisory priority and a competitive differentiator
• Why DORA may set a precedent for future resilience regulation worldwide
• The impact on organisations with a global footprint

With enforcement expectations rising and supervisory scrutiny intensifying, year two marks the shift from preparation to proof. Boards, CISOs, and technology providers alike will need to demonstrate that operational resilience works in practice — not just on paper.

If year one was about Europe adapting to DORA, year two is about the world responding to it.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

Agentic AI is moving fast — and it’s changing how risk shows up inside modern organizations.

Autonomous AI agents are no longer just answering questions. They’re wired into cloud consoles, internal tools, ticketing systems, and finance platforms, acting on our behalf with real permissions and real consequences. And in the rush to automate, many teams are quietly centralizing access in ways security models were never designed to handle.

In this episode, Ben sits down with Tyler Moffitt to break down what’s actually happening with agentic AI, why security teams are raising red flags, and how incentives around speed, automation, and scale are reshaping risk. They explore over-permissioned agents, token hygiene failures, broken separation of duties, and why AI agents are becoming the new security choke point.

The conversation also looks at how attackers are already using agentic AI to operate at machine speed — and what defenders can do now to design systems that assume compromise rather than perfection.

If you’re building, deploying, or securing AI agents, this is a conversation you can’t afford to miss.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

AI has officially moved from experimentation to execution—and regulation is racing to catch up.

In this episode of Reimagining Cyber, Tyler Moffitt is joined by Matt Aldridge to unpack what the rapidly evolving AI regulatory landscape means for security teams, businesses, and managed service providers heading into 2026.

From the EU AI Act and GDPR to California’s CPRA and emerging rules around automated decision-making, they explore how governments are trying to balance innovation with safety, privacy, and accountability. The conversation dives into the real-world security implications of agentic AI, autonomous decision-making, biased training data, and the growing risks of AI systems operating with minimal oversight.

Whether you’re an enterprise security leader, an SMB, or an MSP supporting multiple customers, this episode breaks down why AI regulation is no longer a future concern—and what practical steps organizations should be taking now to reduce risk, protect data, and responsibly govern AI adoption.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

Microsoft Defender is often treated as “good enough” security—built in, always on, and quietly doing its job. But what happens when malware convinces Windows to turn it off without triggering alarms?

In this episode, cybersecurity expert Tyler Mofitt breaks down a real-world Windows malware campaign that disables Defender before anything else happens. No zero-days. No flashy exploits. Just a quiet abuse of built-in trust that causes Windows to step aside its own protection.

He walks through how shortcut files, PowerShell, and legitimate cloud services are used to blend into normal activity, why Defender doesn’t fail so much as follow the rules, and what defenders should be watching for when “installed” doesn’t always mean “active.”

A conversation about assumptions, visibility, and why the most dangerous attacks don’t look dangerous at all.

Link mentioned in the episode -  threat intel hub with all the latest trends and stories going on with threat intelligence.

https://community.opentextcybersecurity.com/

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

In this episode, Rob Aragao sits down with Theresa Lanowitz for a deep dive into the evolving meaning of cyber resilience and why it has become a true business imperative. Moving beyond traditional cybersecurity, the conversation explores how organizations must unite leadership, technology, and operations to withstand and recover from today’s most disruptive cyber events.

Theresa shares insights on the defining attacks of 2025, including the rise of AI-driven social engineering, software supply chain compromises, and credential-based intrusions from new-generation threat groups. The discussion also looks ahead to 2026, examining emerging risks around data misuse, non-human identities, insider threats, and the long-term impact of breached data.

Together, Rob and Theresa unpack why cyber resilience must be owned at the board and C-suite level, how software supply chain complexity has become a critical weakness, and what organizations can do to better govern, protect, and use their most sensitive data. This episode offers a strategic perspective for leaders looking to align cyber resilience with business outcomes in an increasingly connected and unpredictable digital world.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

Low effort cybercrime continues to dominate the threat landscape as attackers rely on misconfigurations, exposed databases, stolen credentials, and extortion tactics—not advanced exploits—to cause real damage. 

In this episode of Reimagining Cyber, cyber expert Tyler Moffitt breaks down recent stories including ShinyHunters extortion of Pornhub user activity
data and widespread MongoDB database exposure to explain why fundamentals like asset visibility, identity controls, and incident readiness matter more than ever in 2026.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

Quantum computing is coming—but what does that actually mean for cybersecurity leaders today?

In this episode, Rob Aragao is joined by Morgan Adamski to break down key insights from PwC’s 2026 Global Digital Trust Insights Report and explore why quantum risk belongs on every CISO’s strategic roadmap. From geopolitical uncertainty to the shift from reactive to proactive cyber defense, the conversation cuts through the hype to explain what’s real, what’s next, and what leaders should be doing now.

Morgan demystifies quantum threats to encryption, explains the “harvest now, decrypt later” risk, and shares practical steps organizations can take today—starting with asset visibility, prioritization, and clear communication with the board.

If you’re thinking beyond today’s incidents and preparing for tomorrow’s threats, this episode is for you.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

In part two of the 'Best of 2025' series of Reimagining Cyber, hosted by Rob Aragao, the focus is on the human elements influencing cybersecurity. The episode explores the challenges of burnout in the cybersecurity workforce as explained by Dr. Andrew Reeves, a cyber psychology expert. Betsy Cooper of the Aspen Policy Academy emphasizes the importance of integrating personal experiences and community voices in shaping cybersecurity policy. Lynn Dohm, Executive Director of Women in Cybersecurity (WiCyS), shares inspiring stories of individuals transitioning into cybersecurity careers. Finally, Craig Taylor of CyberHoot discusses a more effective approach to training that leverages positive reinforcement over punishment. The episode underlines that cybersecurity is not just about technology but also about understanding and supporting the people behind it.

00:00 Introduction to Reimagining Cyber

00:24 The Human Side of Cybersecurity: Burnout

04:43 Shaping Cybersecurity Policy with Personal Experience

07:00 Opening Doors: Women in Cybersecurity

10:27 Effective Cybersecurity Training: Positive Reinforcement

12:51 Conclusion: The Future of Cybersecurity

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]

2025 was a defining year for cybersecurity. In Part One of Reimagining Cyber’s Review of 2025, we break down the biggest cybersecurity trends, threats, and technologies shaping the future. Topics include AI-driven security, automation, legacy systems in critical infrastructure, ransomware response, identity security, and deepfake attacks.

Hear expert insights from Richard Stein, Gary Kessler, Ed Gaudet, Tom Tovar, and former FBI executive Matt Gorham on maritime cybersecurity, healthcare cyber risk, federal incident response, and digital trust.

Part Two explores the human side of cybersecurity.

As featured on Million Podcasts'

Best 100 Cybersecurity Podcasts

Top 50 Chief Information Security Officer CISO Podcasts

Top 70 Security Hacking Podcasts

This list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via [email protected]