Security Weekly Podcast Network (Audio)

Most organizations think AI risk lives in the model – or the identity. It doesn’t. It lives in the data. In this episode, BigID’s CEO reframes the conversation: why legacy access controls are breaking down, why visibility into sensitive data is the missing foundation, and what it takes to govern humans and machines under a single, accountable framework.

Segment Resources:

• BigID's Agent Access Management Guide
• BigID's podcast, CTRL + ALT + AI

We’re seeing more and more 3rd and 4th party attacks that chain through multiple layers of compromised tools and services. In this topic segment, we discuss the two main aspects of this trend:

1. How we can stop the chain of breaches from a third party library, vendor, or service provider
2. How this might get handled at the legal, contractual, and organizational levels

We discuss two big recent examples:

1. Sonicwall's 2025 breach of their cloud firewall configuration backup service
2. The compromise of Aqua Security's widely used Trivy open source tool

Finally, in the enterprise security news,

1. Funding and M&A courtesy of the Security, Funded newsletter
2. We have evidence that attackers are leveraging AI now (this sounds like old news, but there was little to no evidence before, when people were claiming this)
3. The Angry admin problem emerges again
4. Vulnerability information is getting crazy to keep up with
5. Breach information is getting crazy to keep up with
6. You can give your Agents an allowance now - don’t spend it all in one place
7. Are vulnerabilities sparse or dense?
8. Mythos, as a model, isn’t all that special
9. Deploy your own deception sensors!
10. Japan made something weird. Again.

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-459

Cisco Catalyst, Canvas, Exchange 0-Days, BitLocker Bypass, Mini Shai Hulud, Node IPC, Patch Tuesday, GPT-5.5, Supply Chain Attacks, and More on the Security Weekly News

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-581

This week:

• New Yellowkey bitlocker bypass and what it means for you
• Hackers can run you over with a robot lawnmower
• FCC says new things about routers, again
• Glitching with AI
• almost no false positives
• AI thought it was evil
• DirtyFrag and the sad state of Linux LPEs
• You can buy better tools, perfect security, and other lies
• The Canvas breach
• Hackers can still take over trains
• Baby monitors, on the Internet!
• dnsmasq flaws I am now paying attention to
• Swordfish
• A neat vulnerability for ransomware
• Mythos, Curl, and how to do secure software
• Various ways to use AI to find bugs, spoiler, you don't need Mythos

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-926

Legal departments are under continual pressure to solve problems effectively and integrate innovative technology all while reducing costs and complexity. Enter cybersecurity, a complex and potentially costly risk. How should legal departments prepare?

Walter Wilkens, Head of Delivery, North America at DWF Legal Operations, joins Business Security Weekly to discuss how legal operations can help optimize your legal department by eliminating bottlenecks, identifying and fixinginefficiencies and developing processes tailored to enhance your team's performance. Walter will discuss how you can move from a lack of coordination to a structured legal operations to address cyber incidents before and after the event.

In the leadership and communications segment, The Art of Security: It Is Time to Rethink the CISO’s Role, The Best Leaders Embrace the Role of Supporting Character, Empathetic Leadership Can Make or Break AI Adoption, and more!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw-447

Tomato, JDownloader, TempPCP, Bad Vibes, Dirty Frag, Marketing, Shai Haluds, Giedi Prime, Aaran Leyland, and More on the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-580

If you have to ditch your entire appsec strategy because you expect 2026 to bring more vulns more quickly, then you probably didn't have a good strategy in the first place. Rob Allen shares how the mentality of "assume breach" doesn't have to be a defeatist attitude and can instead be a way to change a catastrophic breach into a more contained one. We also talk about proactive security and what an "avoid breach" attitude could look like, including how to apply the macro lessons of default deny and network isolation to writing secure code.

Resources

• https://www.threatlocker.com/blog/the-claude-mythos-preview-proves-now-is-the-time-for-zero-trust?utmsource=cyberriskalliance&utmmedium=sponsor&utmcampaign=claudemythosaswq226&utmcontent=claudemythosasw-&utm_term=podcast
• https://www.threatlocker.com/capabilities/zero-trust-network-access?utmsource=cyberriskalliance&utmmedium=sponsor&utmcampaign=ztnaq226&utmcontent=ztna-&utm_term=podcast
• https://www.threatlocker.com/capabilities/zero-trust-cloud-access?utmsource=cyberriskalliance&utmmedium=sponsor&utmcampaign=ztcaq226&utmcontent=ztca-&utm_term=podcast

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-382

This week, in the enterprise security news,

1. Copy Fail
2. The hits keep coming for CVE, NIST and NVD
3. Cyber attacks on breathalyzers
4. insurance carriers pulling support for AI
5. Florida Man pleads guilty
6. ignore the humanities at your own peril
7. offense and defense don’t scale the same
8. is it okay to be left behind?
9. scientists gave cocaine to salmon

Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder’s 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality.

Check out Intruder’s Security Middle Child Report at https://securityweekly.com/intruderrsac.

Recently, there has been a shift in cybercriminals’ behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past.

This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them!

The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection.

This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them!

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-458

Canvas, Shai-Hulud, QuasarRat, 0Days, Anthropic, Aaran Leyland, and EU Compliance and more!

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-579

Rob Allen from Threatlocker joins us to discuss the risks associated with VPN appliances and how to implement better security solutions that don't leave you hanging out on the open Internet. The interview segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlockerrsac to learn more about them!

In the Security News:

• Less details about the FCC router ban
• Canary traps that work
• Hacking trains and getting arrested
• You can be an adult if you have a mustache
• cPanel is being exploited
• Pro-Iran group takes down Ubuntu
• Anthropic's new security solution
• Safe AI Agents and other lies
• People still use screensavers?
• CISA and operating for weeks or months in isolation
• Paramiko issues fixes
• Find security research
• Copy/Fail and AI slop debate
• ESP32 simulator
• Spotting vibe coded malware
• Fast16 - Stuxnet before Stuxnet

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-925

As security leaders, we are continuously selling, maybe not as traditional sales folks, but as selling security across the organization. Whether you’re closing client deals, leading a team, running a business, or simply wanting your voice to be heard by other executives or the board, we are selling. How can influence help?

Dan Rochon, Author of Teach to Sell, joins Business Security Weekly to discuss psychology of influence, personal transformation, and how to build trust that converts. Dan will cover the four pillars from his book:

• Believe (in Yourself)
• Find Business
• Build an Organization to Scale
• Leadership

And how they will help you overcome self-doubt, communicate confidently, and build careers that serve your life—not consume it.

Segment Resources:

Teach to Sell Book: https://www.teachtosellbook.com/ No Broke Months Podcast: https://podcasts.apple.com/us/podcast/no-broke-months-for-salespeople/id1527318879

The Agentic SOC: Autonomous AI Analysts at Machine Speed SOC teams are overwhelmed with the sheer number of alerts and have historically been reactive. Edward will discuss how Dropzone’s Agentic SOC deploys autonomous AI agents that investigate every alert, respond to emerging threats, and proactively hunt attackers - without a human bottleneck. He’ll explain how agent collaboration, deep recursive investigations, and self-agency expand SOC capacity by 10x without additional headcount.

This segment is sponsored by Dropzone AI. Visit https://securityweekly.com/dropzonersac to learn more about them!

Browser in the AI Era: Apply Controls Where the Work Happens The browser has become the primary gateway to work, data, and AI. In this episode, we talk about why security and IT teams are rethinking the role of the browser and what sets Edge for Business apart as a secure, enterprise-ready solution. We’ll cover how built-in security, native integration with existing IT tools, and centralized management can simplify operations, reduce risk, and support modern work across managed devices, BYOD, and contractors. A must listen for IT pros and security experts navigating browser sprawl and AI adoption.

This segment is sponsored by Microsoft. Visit https://securityweekly.com/microsoftrsac to learn more about them!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw-446