CISO Insights: Voices in Cybersecurity

Join us as we delve into the critical realm of risk management for General-Purpose AI (GPAI) and foundation models. Drawing insights from the UC Berkeley Center for Long-Term Cybersecurity's profile, we explore the unique risks associated with these increasingly multi-purpose AI systems, from their large-scale impact and potential for misuse to the challenges posed by emergent behaviors We examine frameworks and best practices for identifying, analyzing, and mitigating these risks, aligning with standards like the NIST AI Risk Management Framework and considering the implications of emerging regulations This podcast is essential listening for developers, policymakers, and anyone seeking to understand and responsibly navigate the rapidly evolving landscape of advanced AI.

Navigate the world of SOC 2 compliance specifically for SaaS companies. We break down the Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, and Privacy) explain the difference between Type I and Type II audits, and offer best practices for achieving and maintaining your SOC 2 certification to build customer trust and gain a competitive advantage. Learn how to prepare for your audit, understand the importance of continuous monitoring, and leverage your SOC 2 report for business growth.

www.compliancehub.wiki/soc-2-compliance-for-saas-companies-a-technical-deep-dive

Explore how artificial intelligence is transforming the core of organizational collaboration. We delve into the groundbreaking research from "The Cybernetic Teammate" study, revealing how AI-powered tools are impacting team performance, breaking down expertise silos, and even influencing social engagement in the workplace. Discover how individual AI users are matching and sometimes exceeding the output of traditional teams, and what this means for the future of work and organizational design.

www.securitycareers.help/the-rise-of-the-cybernetic-teammate-how-ai-is-redefining-collaboration-in-the-modern-workplace

Thank you to our sponsor: https://cyberagent.exchange

This podcast dives deep into the 2025 Annual Threat Assessment by the U.S. Intelligence Community, analyzing the most serious threats to U.S. national security posed by major state actors like China and Russia, non-state transnational criminals and terrorists such as ISIS, and the growing trend of adversarial cooperation. We explore the nuanced intelligence, long-term strategic challenges, and evolving tactics that shape the global security landscape.

breached.company/the-shifting-global-security-landscape-insights-from-the-2025-annual-threat-assessment/

This podcast dives into the shocking findings of a live honeypot experiment that recorded over 570,000 cyber attacks in just seven days. We explore the attack trends, including brute-force attempts, stolen credentials, automated bots, and known vulnerabilities, offering valuable insights for SOC analysts, security researchers, and anyone curious about real-world cyber threats. Learn about attacker behavior, commonly exploited vulnerabilities, and actionable steps to make security teams smarter and better prepared.

breached.company/the-relentless-tide-understanding-global-cyber-attacks-and-breaches

Explore the dynamic world of artificial intelligence through a global lens, examining key trends identified in India and Africa. We delve into the balance between AI innovation and regulatory frameworks. Discover how AI is being applied for public sector transformation in India, addressing accessibility and leveraging multilingual capabilities. We also critically analyze the concept of trustworthy AI from African perspectives, considering ethical implications, data justice, and the need for Afrocentric approaches that prioritize local values and community benefits over global tech interests. Join us as we navigate the complexities of AI development and deployment across diverse cultural and societal landscapes, discussing challenges like bias, governance, and the crucial pursuit of responsible and trustworthy AI for all.

https://www.compliancehub.wiki/navigating-the-ai-landscape-compliance-considerations-in-india-and-africa

Delve into the key cybercrime trends observed in 2024 by Israel National Crime Directorate (INCD), from the pervasive use of infostealers and the rise of encryption-less ransomware to the emerging threats involving AI and decentralized technologies. We analyze how cybercriminals are adapting their tactics, the impact of law enforcement actions, and what these shifts foreshadow for the cyber threat landscape in 2025.

breached.company/understanding-the-2024-cyber-threat-landscape-insights-for-our-community

This podcast delves into the findings of the European Union Serious and Organised Crime Threat Assessment (EU-SOCTA) 2025, exploring the changing DNA of serious and organised crime in Europe as it becomes increasingly nurtured online and accelerated by AI and other new technologies. We examine the destabilising impact of these criminal activities on society, the growing intersection with hybrid threats, and the key areas of concern identified by Europol, including cyber-attacks, online fraud, drug trafficking, and more. Join us as we unpack the intelligence-led analysis shaping the EU's fight against these evolving threats

breached.company/understanding-the-evolving-threat-landscape-following-a-data-breach

This podcast delves into the findings of Red Canary's 2025 Threat Detection Report, dissecting the major cybersecurity trends observed in 2024. We explore the surge in ransomware, increasingly sophisticated initial access techniques like "paste and run," the dramatic rise of identity attacks targeting cloud environments, persistent vulnerability exploitation, the proliferation of stealer malware on Windows and macOS, the emergence of state-sponsored insider threats, the consistent abuse of VPNs, the growing landscape of cloud attacks, and the dominance of stealers in Mac malware. Understand the implications of these trends and how organizations can shift their security strategies towards early detection and effective response across endpoints, identities, and cloud resources, moving beyond prevention to identify and mitigate threats before they cause significant harm.

breached.company/learning-from-the-shadows-key-insights-from-the-red-canary-2025-threat-detection-report-for-breached-companies

Are you struggling to understand and manage your organization's data security risks? Based on the latest insights, we delve into the key challenges hindering effective data protection, including gaps in risk understanding, the critical misalignment between management and staff on security strategies, the limitations of existing security tools, and the shift from reactive compliance to proactive, risk-based approaches. Join us as we unpack these issues and explore the path towards a stronger data security posture.

www.securitycareers.help/bridging-the-gaps-in-the-cloud-why-understanding-and-alignment-are-key-to-effective-data-security-risk-management

Dive into the alarming world of secrets sprawl, exploring the growing number of exposed API keys, passwords, and other sensitive credentials across development environments, collaboration tools, and cloud platforms. Based on the latest data analysis from GitGuardian's "The State of Secrets Sprawl 2025" report, we uncover the primary risk categories and attack vectors, the cascade effect of minor leaks, and the critical timelines that make rapid remediation essential. We'll also discuss the challenges organizations face, from the limitations of secrets managers and the dangers of excessive permissions to the persistent problem of unfixed exposed credentials and the overlooked risks in collaboration tools. Join us to understand the real-world impact of secrets sprawl and learn strategies for effective management and mitigation.

www.securitycareers.help/the-state-of-secrets-sprawl-a-critical-risk-imperative-for-cisos

www.compliancehub.wiki/secrets-sprawl-a-compliance-nightmare-leading-to-potential-privacy-fines

This podcast breaks down the complexities of the Department of Defense's Cybersecurity Maturity Model Certification (CMMC) framework. We delve into the fundamental differences between Level 1's basic safeguarding requirements, Level 2's alignment with NIST SP 800-171 Rev 2, and Level 3's enhanced security based on NIST SP 800-172 and government assessment. Understand the distinct security requirements, assessment processes (self-assessment vs. certification by C3PAOs or DIBCAC), and prerequisites for each level to ensure your organization can confidently navigate the CMMC landscape.

www.compliancehub.wiki/navigating-cmmc-compliance-for-your-defense-contractor-website

This podcast delves into the growing privacy vulnerabilities and cybersecurity risks inherent in the deeply interconnected systems of modern smart cities. We explore the challenges of data protection, the expanding attack surface created by IoT devices, and the governance and regulatory gaps that can leave urban environments vulnerable to exploitation. Join us as we examine the threats and discuss potential solutions for building more secure and privacy-respecting smart urban futures.

www.secureiotoffice.world/the-intelligent-workspace-leveraging-iot-for-a-smarter-office

www.secureiot.house/securing-your-connected-sanctuary-navigating-privacy-and-cyber-threats-in-your-smart-home

This podcast delves into the findings of Lithuania's "National Threat Assessment 2025," dissecting the primary external state actors posing the most significant risks to its national security. We examine the multifaceted threats emanating from an increasingly aggressive Russia, Belarus with its growing dependence, and an increasingly hostile China, exploring their strategies and potential impact on Lithuania and the wider region.

breached.company/unpacking-the-perils-why-lithuanias-2025-security-threats-demand-your-attention

In an era where cyber and physical threats increasingly intersect, critical infrastructure faces unprecedented risks. This podcast delves into the crucial need for security convergence, exploring how organizations can break down security silos between IT, physical security, and operational technology (OT) to achieve a holistic and resilient defense. We examine the challenges of converging disparate security cultures and technologies, and highlight the benefits of a unified approach, including improved risk management, efficiency, and protection against hybrid threats. Drawing on expert insights and real-world examples, we explore strategies for strategic alignment, joint risk assessments, and the implementation of frameworks that foster collaboration and a stronger security posture for the foundational systems that underpin modern society.

www.secureiotoffice.world/bridging-the-divide-why-converged-security-is-imperative-for-protecting-critical-infrastructure

www.securitycareers.help/the-evolving-role-of-the-ciso-leading-converged-security-teams-in-a-cyber-physical-world

In this episode, we delve into the alarming rise of edge device exploitation in 2024 from the Check Point Threat Intel report, where cybercriminals and nation-states alike targeted routers, firewalls, and VPN appliances to gain initial access, establish ORBs for covert operations, and leverage a surge in zero-day vulnerabilities. We explore the tactics of groups like Raptor Train and Magnet Goblin, the challenges of patching these critical devices, and the implications for network security in the evolving threat landscape.

breached.company/edge-wars-unpacking-the-escalating-exploitation-of-network-perimeters-in-2024

Navigate the complex landscape of Connected Autonomous Vehicle (CAV) cybersecurity. We delve into the critical vulnerabilities in intra- and inter-vehicle communication, explore potential attack motivations ranging from operational disruption to data theft and physical control, and discuss the significance of standards like ISO/SAE 21434 in building a secure future for autonomous mobility. Join us as we uncover the threats and solutions in the evolving world of CAV security.

www.hackernoob.tips/autonomy-under-attack-a-hackers-intro-to-cav-cybersecurity 

www.myprivacy.blog/your-car-knows-more-than-you-think

This podcast delves into the crucial aspects of cyber security incident response maturity. We explore how organizations can assess and improve their capabilities using tools like the detailed assessment based on 15 steps. We discuss key concepts such as criticality assessments, threat analysis, and the importance of people, process, technology, and information in preparing for, responding to, and following up on cyber security incidents. Understand how target maturity levels and weighting factors can be used to tailor your assessment and identify areas for improvement in your cyber security incident response lifecycle.

https://irmaturityassessment.com

breached.company/enhancing-cyber-resilience-an-in-depth-look-at-incident-response-maturity-assessments

Join us as we explore the NIST Cybersecurity Framework (CSF) 2.0, the essential guide for organizations looking to manage and reduce cybersecurity risks. We delve into the six core Functions: Govern, Identify, Protect, Detect, Respond, and Recover, examining the key changes and updates from previous versions. Whether you're new to the CSF or looking to implement the latest version, this podcast offers insights into creating Organizational Profiles, understanding Community Profiles, and leveraging the framework to improve your overall cybersecurity posture. We'll also discuss how the NIST CSF complements other compliance frameworks and helps you build a resilient and risk-informed cybersecurity strategy

www.compliancehub.wiki/the-nist-cybersecurity-framework-csf-2-0-a-comprehensive-guide-for-your-compliance-hub

Discover how CISO Marketplace's latest innovations, GeneratePolicy.com and CyberAgent.Exchange, are transforming cybersecurity for startups and SMBs. Learn how AI-driven policy generation simplifies compliance and documentation, and how AI-powered agents automate critical security roles, enhancing efficiency and reducing costs. We delve into the key features, benefits, and target audiences for these cutting-edge solutions designed to strengthen your cybersecurity posture.

www.cisomarketplace.services

Visit and Vote! 
https://www.producthunt.com/posts/generatepolicy-com-ai-policy-generator
https://www.producthunt.com/posts/cyber-agent-exchange-ai-talent-hub

This podcast delves into the complex world of Artificial Intelligence, exploring the cybersecurity risks associated with its adoption and the evolving regulatory landscape, particularly focusing on the EU AI Act. We break down the key aspects of the AI Act, including definitions of AI systems and general-purpose AI models risk classifications and the obligations for providers and deployers. We also examine strategies for securing AI applications and managing the cybersecurity threats that arise with increased AI usage Join us as we navigate the balance between AI innovation, security, and compliance.

www.compliancehub.wiki/navigating-the-technical-landscape-of-eu-ai-act-compliance

This podcast explores the evolving cybersecurity landscape, drawing insights from the Microsoft Digital Defense Report 2024 and the ENISA Threat Landscape. We delve into the tactics of nation-state actors and cybercriminals, the growing impact of AI on both attacks and defenses, and strategies for building resilience in an increasingly complex digital world. Join us as we examine the latest threats, emerging techniques like AI-enabled social engineering and deepfakes, and the innovative solutions being developed to secure our digital future.

breached.company/navigating-the-cyber-frontier-key-insights-for-a-secure-digital-future

Explore the cutting-edge intersection of artificial intelligence and red team operations in cybersecurity. We delve into how AI is revolutionizing traditional cyber offense and defense methodologies, enhancing adaptability, fostering innovation, and pushing the boundaries of cyber operations in an era of rapidly evolving digital threats, as highlighted in "AI For Red Team Operation". Join us to understand how this fusion is shaping the future of cybersecurity strategies and tactics.

www.securitycareers.help/the-ai-powered-red-team-revolutionizing-cyber-operations

Based on the Arctic Wolf 2025 Threat Report, this podcast explores the key cybersecurity threats that organizations will face in the coming year. We delve into the prevalence of ransomware and data extortion, the ongoing challenges of business email compromise, and the persistent risks posed by intrusions. Gain insights into attacker tactics, vulnerable attack surfaces like Unsecured Remote Desktop Protocol (RDP), and actionable strategies for managing and mitigating these evolving threats.

www.breached.company/deep-dive-into-the-cyber-threat-landscape-key-insights-from-the-arctic-wolf-2025-threat-report

This episode dives into the key findings of Recorded Future's 2024 Malicious Infrastructure Report, revealing the dominant malware families like LummaC2 and AsyncRAT, the continued reign of Cobalt Strike, and the evolving tactics of threat actors, including the abuse of legitimate internet services and relay networks. We'll explore the top threats, targeted regions, and the resilience of cybercriminals in the face of law enforcement efforts, providing crucial insights for defenders navigating today's complex threat landscape.

www.breached.company/unpacking-the-2024-cyber-underworld-a-technical-deep-dive-into-malicious-infrastructure

Delve into the key findings of ThreatDown's 2025 State of Malware report, exploring the anticipated impact of agentic AI on cybercrime and the evolving ransomware landscape, including the emergence of smaller, more agile "dark horse" groups. We'll discuss how cybercriminals are leveraging AI to scale attacks and the shift towards Living Off The Land (LOTL) tactics for stealthier operations. We also examine the increasing threats from macOS stealers and sophisticated Android phishing malware, providing crucial insights into the challenges and defenses shaping the threat landscape in 2025.

www.breached.company/decoding-the-2025-malware-landscape-a-technical-deep-dive

Dive into the key findings of the Greynoise 2025 Mass Internet Exploitation Report. We dissect how attackers are reviving old vulnerabilities, the impact of home router exploits, and the speed at which new vulnerabilities are weaponized. Discover actionable defense strategies for staying ahead of mass internet exploitation.

breached.company/mass-internet-exploitation-in-2024-a-technical-overview

A deep dive into the latest trends, threat actors, and defense strategies in Operational Technology and Industrial Control Systems cybersecurity. We discuss how geopolitical tensions, ransomware, and hacktivist activities are shaping the threat landscape, and provide actionable insights to improve your organization's security posture. Learn about implementing the SANS ICS 5 Critical Controls, vulnerability management, incident response, and more to protect your critical infrastructure.

breached.company/technical-brief-strengthening-ot-ics-cybersecurity-in-2024-and-beyond

Explore the evolving landscape of cyber threats with insights from the CrowdStrike 2025 Global Threat Report. We delve into the tactics, techniques, and procedures of modern adversaries, from social engineering and AI-driven attacks to cloud exploitation and vulnerability exploits. Learn how to proactively defend your organization against these ever-changing threats and stay one step ahead of enterprising adversaries.

breached.company/technical-brief-evolving-threat-actor-tactics-in-2025

This episode dissects the cyber threat landscape of 2024, drawing insights from a comprehensive analysis of malicious activities targeting Union entities and their vicinity. We explore the major trends, including the rise of cyber espionage and prepositioning the exploitation of zero-day vulnerabilities, and the techniques employed by threat actors. The discussion highlights the most targeted sectors, such as defense, transportation, and technology, and emphasizes the critical role of service providers as prime targets. We also delve into the global events that shaped the threat landscape, such as elections and conflict.

breached.company/deep-dive-analyzing-the-2024-cyber-threat-landscape-and-emerging-attack-vectors

Explore the inner workings of the Black Basta ransomware group through leaked chat logs and technical analysis. Discover their tactics, techniques, and procedures (TTPs), from initial access and lateral movement to data exfiltration and encryption. Learn how the group exploited vulnerabilities, managed internal conflicts, and targeted critical infrastructure. Gain insights into defending against ransomware attacks with actionable intelligence and mitigation strategies derived from real-world incidents and expert analysis.

https://breached.company/stopransomware-black-basta

This podcast episode explores Vietnam's new Law on Data, effective July 1, 2025, and its implications for businesses. We'll break down the law's key aspects, including scope of application, digital data definitions, data ownership rights, regulations on cross-border data transfers (especially for "important" and "core" data), and the requirements for mandatory risk assessments. We also discuss data-related products and services, the establishment of the National General Database and National Data Centre, and practical steps businesses can take to ensure compliance and mitigate risks in Vietnam's evolving digital landscape.

www.compliancehub.wiki/vietnams-law-on-data-key-provisions-and-implications

www.compliancehub.wiki/understanding-data-breach-notification-requirements-under-malaysias-pdpa

This podcast explores how AI companies are uniquely positioned to disrupt malicious uses of AI models. We delve into real-world case studies, such as surveillance operations, deceptive employment schemes, and influence campaigns, to understand how these threats are identified and neutralized. Join us as we uncover the latest strategies and insights in the fight against AI abuse.

www.myprivacy.blog/the-ai-threat-landscape-disrupting-malicious-uses-of-ai-models

www.myprivacy.blog/from-dont-be-evil-to-drone-deals-silicon-valleys-reckless-ai-arms-race

The intersection of technology and geopolitics is creating unprecedented challenges in cybersecurity and AI governance. Global powers are competing in AI and semiconductor technologies, leading to rising tensions and potential risks. Experts at the Munich Security Conference 2025 emphasized the urgent need for international cooperation and robust frameworks to navigate this evolving landscape and foster trust through public-private partnerships

https://www.breached.company/navigating-the-geopolitical-tech-storm-cybersecurity-ai-governance-and-global-power-shifts/

www.compliancehub.wiki/cybersecurity-in-africa-navigating-threats-trends-and-the-tech-landscape/

www.breached.company/decoding-cybercrime-platforms-psychology-and-precautions

www.compliancehub.wiki/span-cybersecurity-and-data-prviacy-with-gdpr-and-lopdgdd-synergy/

Uncover the disturbing trend of nation-states utilizing cybercriminals to achieve their strategic objectives. This episode examines how countries like Russia, Iran, China, and North Korea leverage cybercriminals for espionage, disruption, and revenue generation. Explore the various ways states collaborate with cybercriminals, from purchasing malware and tools to directly hiring attackers for specific missions.

The podcast explores the key principles and obligations outlined in Singapore's Personal Data Protection Act (PDPA). It offers insights for organizations on how to comply with the PDPA's requirements for collecting, using, and disclosing personal data. It also examines individuals' rights to access and correct their personal data, ensuring a balance between data protection and business needs.

https://www.compliancehub.wiki/understanding-the-personal-data-protection-act-singapores-framework-for-data-privacy/

The Phobos ransomware, operating under a Ransomware-as-a-Service (RaaS) model since 2019, targets various sectors, demanding millions in ransom. This episode explores Phobos's tactics, such as exploiting vulnerable RDP ports, phishing campaigns, and open-source tools like Smokeloader, to infiltrate networks. Discover practical mitigation strategies and actions to defend against Phobos ransomware attacks and protect your organization.

https://www.breached.company/overview-of-phobos-and-8base-ransomware-the-shakedown/

Dive into the transformative world of AI in urban environments, exploring both the exciting potential and the significant risks. From UN reports and cybersecurity concerns to real-world case studies, we uncover how AI is reshaping our cities. Join us as we discuss key questions about ethics, governance, and citizen empowerment in the age of AI-driven urban development.

https://www.secureiotoffice.world/ai-powered-smart-offices-balancing-innovation-and-security-in-the-modern-workspace/

As AI becomes more prevalent, understanding its risks and ensuring compliance are critical. This episode explores the crucial role of internal audit in guiding organizations toward responsible AI implementation. We delve into key areas like risk assessment, data governance, and transparency, offering insights for auditors and business leaders alike.

https://www.compliancehub.wiki/the-role-of-internal-audit-in-responsible-ai-and-ai-act-compliance/

Explore the complex landscape of artificial intelligence risks with the MIT AI Risk Repository. This podcast delves into the repository's comprehensive database, causal and domain taxonomies, and methodologies for identifying and classifying AI threats. Join experts as they discuss how policymakers, auditors, academics, and industry professionals can leverage this resource to navigate the evolving challenges of AI safety and governance.

https://www.myprivacy.blog/ai-risk-repository-meta-review-database-and-taxonomies/

This episode explores the growing conflict between farmers and agricultural equipment manufacturers over the right to repair their own machinery. We delve into how intellectual property laws and proprietary software limit farmers' access to repair tools and information, often creating a manufacturer monopoly. We also examine the ongoing legislative battles, industry agreements, and antitrust lawsuits that are shaping the future of agricultural technology.

This episode explores the growing cybersecurity risks associated with the increasing connectivity of modern equipment across industries. We examine how the integration of IoT devices and digital technologies in construction, agriculture, and transportation introduces vulnerabilities that can be exploited by malicious actors. We discuss the potential consequences of these cyber threats, including project delays, safety hazards, data breaches, and financial losses.

This episode delves into the rapid rise of the Chinese AI startup DeepSeek, exploring its cutting-edge technology that rivals major competitors and its recent challenges including a cyberattack and mounting global scrutiny. We'll examine the concerns surrounding data privacy, censorship, and regulatory hurdles that DeepSeek faces in the wake of its quick success.

The cybersecurity landscape in 2024 saw a dramatic 20% surge in exploited vulnerabilities, with attackers increasingly targeting network edge devices and cloud infrastructure. This episode dives into the key statistics, trends, and major incidents, highlighting the critical need for proactive security measures like robust patch management and zero-trust architecture to combat the growing threat.

https://www.breached.company/the-escalating-threat-landscape-a-deep-dive-into-2024s-surge-in-vulnerability-exploitation/

This episode explores the escalating cybersecurity landscape, with a particular focus on how generative AI is enabling more sophisticated and personalized cyberattacks. We delve into the ways AI is being used by cybercriminals to refine social engineering tactics, create more convincing phishing attempts in multiple languages, and automate their malicious activities. The episode also highlights the critical need for organizations to prioritize cyber resilience, focusing on building stronger cybersecurity foundations, increasing awareness and education, and developing robust incident response plans. Additionally, we discuss the importance of ecosystem-level collaboration and the need for all organizations to adopt secure-by-design principles for AI systems. We also consider the ways that governments may create policies on biotech.

This episode examines recent trends in GDPR enforcement, including the shift towards personal liability for management, the rise of class action lawsuits, and the importance of compliant data transfer mechanisms. We'll discuss how the EU court's recent award of damages for illegal data transfers without material loss could lead to significant legal challenges. Learn how to protect your organization from heavy penalties and safeguard user data.

https://dataprivacytool.info

https://finemydata.com

https://www.compliancehub.wiki

Join us as we explore the latest cybersecurity advisory from the NSA and its international partners, revealing the most exploited vulnerabilities of 2023. We break down complex technical jargon into understandable concepts, highlighting real-world examples like the Microsoft Outlook vulnerability that allows attackers to take over your system just by opening an email! Discover the common weaknesses hackers target and learn practical steps to protect yourself. From enabling multi-factor authentication to understanding the dangers of buffer overflows and SQL injections, we provide actionable insights to enhance your cybersecurity posture. Tune in and level up your digital defenses!

This episode examines Spain's proactive approach to online child safety. We explore the Spanish Data Protection Agency's (AEPD) innovative framework for age verification and its emphasis on safeguarding children's rights in the digital age. COPAA, KOSA, TDPSA

This episode explores the complex challenges and opportunities facing the U.S. in the realm of cybersecurity. Experts weigh in on a new report outlining a roadmap for the incoming administration, emphasizing the need for a comprehensive national strategy, public-private partnerships, and a robust cyber workforce.

This podcast explores the alarming trend of North Korean IT workers infiltrating US companies, using their positions to generate revenue, evade sanctions, and potentially engage in cyber espionage. Discover the tactics they employ and how businesses can protect themselves.

Experts break down the latest cybersecurity reports, revealing how threat actors are evolving their tactics and accelerating their attacks. Learn what's changing, who's being targeted, and what you can do to protect yourself and your organization. www.breached.company

Join us as we explore the evolving landscape of AI governance, comparing the US, EU, and Chinese approaches, and discussing the implications for society.

Join us as we explore the hidden world of Terms of Service and End User License Agreements. We'll examine how companies and governments collect and use your data, the implications for your privacy and freedoms, and what you can do to protect yourself in the digital age.

Learn how scammers plan attacks around holidays and your habits! This episode breaks down common seasonal scams, how to spot them, and how to protect yourself. Plus, we explore the world of scam baiting!

visit: www.ScamWatchHQ.com 

This episode explores Brazil's General Data Protection Law (LGPD), examining its impact on businesses worldwide, key principles, and enforcement.

Every week, another company is slapped with a hefty fine for violating data privacy. This podcast explores the financial fallout of data breaches and ransomware attacks, discussing high-profile cases and the evolving regulatory landscape. Are companies taking data security seriously or just writing checks? Tune in to find out!

From water bills held hostage to artists losing their savings, this week's cyberattacks expose our digital vulnerabilities. We unpack the motives, the players, and the tech shaping this digital battleground. Plus, what you can do to protect yourself.

Ever order takeout online? You're thinking about food, not data, right? But somewhere a company is processing your order, your address, and even your payment information, possibly sending it across borders. This podcast is your crash course on data privacy laws and cross-border data transfers. Learn how GDPR, CCPA, LGPD, and PIPL impact you and what control you have over your data.

Ever get the feeling like someone's listening in on your digital life? Well, Texas has heard you! In this episode, we break down the Texas Data Privacy and Security Act (TDPSA), a game-changing law designed to give Texans more control over their personal data.

Explore landmark legal cases like USA v. Sullivan and SEC v. SolarWinds and learn about the evolving responsibilities of CISOs and the impact of cyber security on financial stability.

Learn what it takes to be a Chief Information Security Officer in this deep dive into building a security culture.

Tired of the annual PCI scramble? This episode explores how to make PCI DSS part of your everyday security posture. We'll discuss practical tips, new technologies, and the evolving threat landscape, emphasizing that security is a journey, not a destination!

Feeling lost in a sea of acronyms like NIST, ISO 27001, and CIS? This podcast is your guide to understanding and choosing the right cybersecurity framework for your organization. We break down the jargon, explore the strengths of each framework, and help you ask the right questions to find the perfect fit for your size, industry, and budget. Join us as we demystify cybersecurity frameworks and empower you to build a safer digital future.

In a world driven by data, are you truly protected? Join us as we explore the complexities of cyber insurance, empowering businesses and individuals to make informed decisions in the face of evolving digital threats.

Schools, hospitals, airports, and even a global energy giant weren't safe from cyberattacks this summer. Listen as we unpack the major events, new ransomware players, and the alarming trend of attacks on essential services.

Millions in recovery costs. Chaos for residents. The Suffolk County cyberattack was a major wake-up call. Join us as we unpack the recent report revealing the perfect storm of missed warnings, systemic failures, and poor decisions that left Suffolk County vulnerable to attack.

Black Cat, also known as ALPHV, was one of the most prolific and feared ransomware groups in the world. This episode examines Black Cat's rise to prominence, their use of the ransomware-as-a-service model, and the events that led to their dramatic downfall. Learn how they exploited a critical vulnerability in Veritas Backup Exec, bypassed multi-factor authentication, and used a combination of technical prowess and social engineering to extort millions from their victims.

LockBit ransomware has dominated headlines for its ruthless attacks and lucrative business model. This podcast goes beyond the headlines, exploring LockBit's evolution, its notorious triple extortion tactics, and the impact on victims worldwide. Listen as experts analyze real attack breakdowns and offer insights into how to protect your organization from becoming the next victim.

Join us as we explore the complex world of AI regulations. We'll break down the latest laws and guidelines from around the world, discuss their impact on businesses and individuals, and examine the ethical considerations shaping the future of AI. Get ready to understand the rules governing the AI revolution.

Join us as we unravel the complex world of deepfakes. We'll expose the technology behind these AI-generated illusions, explore their potential for harm and deception, and equip you with the knowledge to spot these digital deceptions. From imposter scams and disinformation campaigns to the liar's dividend, we'll navigate the ethical and societal implications of this rapidly evolving technology.

This episode explores the risks of "confabulation" in AI, where systems generate outputs that appear credible but are actually fabricated. The hosts discuss a NIST report highlighting this issue and emphasizing the importance of proactive measures to mitigate the potential for AI misuse.

Confused by the growing number of state privacy laws? Join us as we break down these complex regulations, empowering you to protect your data and navigate the evolving world of digital privacy. We will discuss how states like Connecticut, Florida, Texas, Maine, Montana, and Oregon are tackling these issues and what it means for you!

In this CISO Insights episode, we unpack the GDPR and its impact on you and your business. Learn the key principles of data privacy, how companies are adapting, and get practical tips on managing data inventory, consent, and breach responses. Whether you're a business owner or tech enthusiast, discover how GDPR is shaping the future of data privacy. Tune in for actionable advice and expert insights!

In this episode, we explore HIPAA and HITECH, their impact on healthcare data privacy, and how these regulations affect everyone. We'll discuss HIPAA's evolution and how HITECH strengthened it with stricter standards for electronic health records, business associates, and breach notifications. Learn about key concepts like PHI, BAAs, and encryption, with real-world examples to help you understand compliance and the importance of data security.