CISO Insights: Voices in Cybersecurity

This podcast delves into the complex world of Artificial Intelligence, exploring the cybersecurity risks associated with its adoption and the evolving regulatory landscape, particularly focusing on the EU AI Act. We break down the key aspects of the AI Act, including definitions of AI systems and general-purpose AI models risk classifications and the obligations for providers and deployers. We also examine strategies for securing AI applications and managing the cybersecurity threats that arise with increased AI usage Join us as we navigate the balance between AI innovation, security, and compliance. www.compliancehub.wiki/navigating-the-technical-landscape-of-eu-ai-act-compliance

This podcast explores the evolving cybersecurity landscape, drawing insights from the Microsoft Digital Defense Report 2024 and the ENISA Threat Landscape. We delve into the tactics of nation-state actors and cybercriminals, the growing impact of AI on both attacks and defenses, and strategies for building resilience in an increasingly complex digital world. Join us as we examine the latest threats, emerging techniques like AI-enabled social engineering and deepfakes, and the innovative solutions being developed to secure our digital future. breached.company/navigating-the-cyber-frontier-key-insights-for-a-secure-digital-future

Explore the cutting-edge intersection of artificial intelligence and red team operations in cybersecurity. We delve into how AI is revolutionizing traditional cyber offense and defense methodologies, enhancing adaptability, fostering innovation, and pushing the boundaries of cyber operations in an era of rapidly evolving digital threats, as highlighted in "AI For Red Team Operation". Join us to understand how this fusion is shaping the future of cybersecurity strategies and tactics. www.securitycareers.help/the-ai-powered-red-team-revolutionizing-cyber-operations

Based on the Arctic Wolf 2025 Threat Report, this podcast explores the key cybersecurity threats that organizations will face in the coming year. We delve into the prevalence of ransomware and data extortion, the ongoing challenges of business email compromise, and the persistent risks posed by intrusions. Gain insights into attacker tactics, vulnerable attack surfaces like Unsecured Remote Desktop Protocol (RDP), and actionable strategies for managing and mitigating these evolving threats. www.breached.company/deep-dive-into-the-cyber-threat-landscape-key-insights-from-the-arctic-wolf-2025-threat-report

This episode dives into the key findings of Recorded Future's 2024 Malicious Infrastructure Report, revealing the dominant malware families like LummaC2 and AsyncRAT, the continued reign of Cobalt Strike, and the evolving tactics of threat actors, including the abuse of legitimate internet services and relay networks. We'll explore the top threats, targeted regions, and the resilience of cybercriminals in the face of law enforcement efforts, providing crucial insights for defenders navigating today's complex threat landscape. www.breached.company/unpacking-the-2024-cyber-underworld-a-technical-deep-dive-into-malicious-infrastructure

Delve into the key findings of ThreatDown's 2025 State of Malware report, exploring the anticipated impact of agentic AI on cybercrime and the evolving ransomware landscape, including the emergence of smaller, more agile "dark horse" groups. We'll discuss how cybercriminals are leveraging AI to scale attacks and the shift towards Living Off The Land (LOTL) tactics for stealthier operations. We also examine the increasing threats from macOS stealers and sophisticated Android phishing malware, providing crucial insights into the challenges and defenses shaping the threat landscape in 2025. www.breached.company/decoding-the-2025-malware-landscape-a-technical-deep-dive

Dive into the key findings of the Greynoise 2025 Mass Internet Exploitation Report. We dissect how attackers are reviving old vulnerabilities, the impact of home router exploits, and the speed at which new vulnerabilities are weaponized. Discover actionable defense strategies for staying ahead of mass internet exploitation. breached.company/mass-internet-exploitation-in-2024-a-technical-overview

A deep dive into the latest trends, threat actors, and defense strategies in Operational Technology and Industrial Control Systems cybersecurity. We discuss how geopolitical tensions, ransomware, and hacktivist activities are shaping the threat landscape, and provide actionable insights to improve your organization's security posture. Learn about implementing the SANS ICS 5 Critical Controls, vulnerability management, incident response, and more to protect your critical infrastructure. breached.company/technical-brief-strengthening-ot-ics-cybersecurity-in-2024-and-beyond

Explore the evolving landscape of cyber threats with insights from the CrowdStrike 2025 Global Threat Report. We delve into the tactics, techniques, and procedures of modern adversaries, from social engineering and AI-driven attacks to cloud exploitation and vulnerability exploits. Learn how to proactively defend your organization against these ever-changing threats and stay one step ahead of enterprising adversaries. breached.company/technical-brief-evolving-threat-actor-tactics-in-2025

This episode dissects the cyber threat landscape of 2024, drawing insights from a comprehensive analysis of malicious activities targeting Union entities and their vicinity. We explore the major trends, including the rise of cyber espionage and prepositioning the exploitation of zero-day vulnerabilities, and the techniques employed by threat actors. The discussion highlights the most targeted sectors, such as defense, transportation, and technology, and emphasizes the critical role of service providers as prime targets. We also delve into the global events that shaped the threat landscape, such as elections and conflict. breached.company/deep-dive-analyzing-the-2024-cyber-threat-landscape-and-emerging-attack-vectors

Explore the inner workings of the Black Basta ransomware group through leaked chat logs and technical analysis. Discover their tactics, techniques, and procedures (TTPs), from initial access and lateral movement to data exfiltration and encryption. Learn how the group exploited vulnerabilities, managed internal conflicts, and targeted critical infrastructure. Gain insights into defending against ransomware attacks with actionable intelligence and mitigation strategies derived from real-world incidents and expert analysis. https://breached.company/stopransomware-black-basta

This podcast episode explores Vietnam's new Law on Data, effective July 1, 2025, and its implications for businesses. We'll break down the law's key aspects, including scope of application, digital data definitions, data ownership rights, regulations on cross-border data transfers (especially for "important" and "core" data), and the requirements for mandatory risk assessments. We also discuss data-related products and services, the establishment of the National General Database and National Data Centre, and practical steps businesses can take to ensure compliance and mitigate risks in Vietnam's evolving digital landscape. www.compliancehub.wiki/vietnams-law-on-data-key-provisions-and-implications

Understand the critical data breach notification requirements under Malaysia's Personal Data Protection Act (PDPA) 2010. Learn how to identify "significant harm" and when you must notify the Personal Data Protection Commissioner and affected data subjects. Stay informed about potential penalties for non-compliance and strategies for robust data breach management. www.compliancehub.wiki/understanding-data-breach-notification-requirements-under-malaysias-pdpa

This podcast explores how AI companies are uniquely positioned to disrupt malicious uses of AI models. We delve into real-world case studies, such as surveillance operations, deceptive employment schemes, and influence campaigns, to understand how these threats are identified and neutralized. Join us as we uncover the latest strategies and insights in the fight against AI abuse. www.myprivacy.blog/the-ai-threat-landscape-disrupting-malicious-uses-of-ai-models

Venture into the murky world where Silicon Valley's ethical lines blur as AI giants like Google and OpenAI chase lucrative military contracts. Explore how once-sacred principles are being abandoned in favor of algorithms that now dictate life-and-death decisions on the battlefield. Uncover the implications of a future where unaccountable AI systems reshape global conflict, privacy erodes, and the public remains in the dark. www.myprivacy.blog/from-dont-be-evil-to-drone-deals-silicon-valleys-reckless-ai-arms-race

This episode examines the rising threats to encrypted communications and the geopolitical implications of cyber espionage. We analyze how Russian threat actors exploit vulnerabilities in messaging apps like Signal and how platforms like Telegram have become hubs for cybercrime. Also examined is the impact of government pressures on encryption standards, and the delicate balance between privacy and national security. https://www.breached.company/encrypted-frontlines-unpacking-cyber-espionage-messaging-app-vulnerabilities-and-global-security

From understanding end-to-end encryption (E2EE) on WhatsApp to mastering privacy settings on Snapchat and managing ad preferences on X (Twitter), MyPrivacy.blog equips you with the knowledge to navigate the social media landscape with confidence. Learn about the nuances of private versus public accounts on TikTok. how to leverage features like Close Friends on Instagram and the importance of reviewing third-party app permissions on Facebook. https://www.myprivacy.blog/the-complete-guide-to-social-media-privacy-protecting-your-digital-life-in-2025/

Explore the cybersecurity and privacy challenges posed by Large Language Models (LLMs) through the lens of DeepSeek R1 red teaming. Dive into the vulnerabilities uncovered in DeepSeek R1, from harmful content generation to insecure code and biased outputs. Learn about practical strategies and frameworks like NIST AI RMF for mitigating risks and ensuring responsible AI deployment. https://www.breached.company/deepseek-r1-red-team-navigating-the-intersections-of-llm-ai-cybersecurity-and-privacy

The intersection of technology and geopolitics is creating unprecedented challenges in cybersecurity and AI governance. Global powers are competing in AI and semiconductor technologies, leading to rising tensions and potential risks. Experts at the Munich Security Conference 2025 emphasized the urgent need for international cooperation and robust frameworks to navigate this evolving landscape and foster trust through public-private partnerships https://www.breached.company/navigating-the-geopolitical-tech-storm-cybersecurity-ai-governance-and-global-power-shifts/

This podcast explores the diverse cybersecurity challenges facing the African continent, from state-sponsored attacks to cybercriminal networks. It examines the development and implementation of legal and regulatory frameworks, as well as regional cooperation efforts to combat cyber threats. The podcast also discusses emerging trends like data sovereignty, AI regulation, and critical infrastructure protection, providing insights into the future of cybersecurity in Africa. www.compliancehub.wiki/cybersecurity-in-africa-navigating-threats-trends-and-the-tech-landscape/

Cybercrime is a growing threat affecting all sectors, fueling a shadow economy with projected costs reaching $10.5 trillion by 2025. This episode explores the cybercrime ecosystem, from dark web platforms and cybercriminal psychology to specific attack techniques like social engineering and ransomware. Listeners will gain insights into how cybercriminals operate, their motivations, and the geographical distribution of cybercrime. We also discuss practical precautions and strategies for individuals and organizations to protect themselves against these evolving threats. www.breached.company/decoding-cybercrime-platforms-psychology-and-precautions

Decoding Digital Spain 2025" explores Spain's ambitious plan for digital transformation, focusing on key initiatives in connectivity, 5G, cybersecurity, and AI. The podcast examines how Spain aims to bridge digital divides, enhance public services, and boost its economy through strategic investments and policy reforms. Listeners will gain insights into the challenges and opportunities as Spain strives to become a leading digital hub in Europe while ensuring citizen rights and ethical AI development. www.compliancehub.wiki/span-cybersecurity-and-data-prviacy-with-gdpr-and-lopdgdd-synergy/

Explore the cyber espionage campaigns of People's Republic of China (PRC)-affiliated threat actors, such as Volt Typhoon, targeting critical infrastructure. Understand their techniques, including living off the land (LOTL) tactics to maintain anonymity within IT infrastructures. Learn about recommended mitigations and best practices to strengthen network defenses against these sophisticated cyber threats. https://www.breached.company/chinas-cyber-campaigns-a-deep-dive-into-salt-volt-typhoon-and-other-threat-actors/

Uncover the disturbing trend of nation-states utilizing cybercriminals to achieve their strategic objectives. This episode examines how countries like Russia, Iran, China, and North Korea leverage cybercriminals for espionage, disruption, and revenue generation. Explore the various ways states collaborate with cybercriminals, from purchasing malware and tools to directly hiring attackers for specific missions.

The podcast explores the key principles and obligations outlined in Singapore's Personal Data Protection Act (PDPA). It offers insights for organizations on how to comply with the PDPA's requirements for collecting, using, and disclosing personal data. It also examines individuals' rights to access and correct their personal data, ensuring a balance between data protection and business needs. https://www.compliancehub.wiki/understanding-the-personal-data-protection-act-singapores-framework-for-data-privacy/

Dive into Canada's National Cyber Security Strategy for 2025 and explore how it aims to protect Canadians and businesses from evolving cyber threats. This podcast examines the strategy's key pillars, including forging partnerships, promoting innovation, and disrupting cyber threat actors. Discover how the government plans to engage with all levels of society, from Indigenous communities to the private sector, to build a more resilient and secure digital Canada, as well as how the Canadian Cyber Defence Collective (CCDC) and other initiatives play a crucial role in achieving these goals.