CISO Insights: Voices in Cybersecurity

As autonomous AI agents rapidly compress the timeline between vulnerability and exploit, CISOs and security leaders must transition from traditional perimeter-based security to a dedicated agentic Zero Trust framework. This episode details how to deploy robust, enterprise-ready controls—including identity-based isolation, Just-In-Time (JIT) access, and advanced runtime defenses like Spotlighting and constitutional classifiers—to neutralize prompt injection and secure agent workloads. Finally, we explore why cryptographic "hard barriers" are fundamentally superior to temporary friction-based controls.
 
Sponsor:
www.cisomarketplace.com

As artificial intelligence shifts from passive conversational tools to autonomous agents capable of independent system execution, establishing secure boundaries for identity, delegation, and authorization has emerged as a paramount federal priority. This episode explores the National Institute of Standards and Technology's (NIST) AI Agent Standards Initiative, detailing how the agency is coordinating industry-led standards, open-source community protocols, and fundamental cryptographic research. We examine the real-world implications of this framework for high-stakes sectors like finance and healthcare, highlighting how organizations can apply emerging identity guidelines to protect multi-agent environments from session hijacking and unauthorized tool execution.

 

Sponsors:

www.vibehack.dev

www.airiskassess.com

www.cisomarketplace.com/blog

As AI deployments transition from basic chatbot interfaces into autonomous agents capable of executing complex real-world workflows, organizations are discovering that traditional input filtering can no longer guarantee safety. This podcast explores the critical security boundaries mapped across OWASP's main AI safety directories: the GenAI LLM Top 10, the Agentic Applications Top 10, and the newly released Agentic Skills Top 10. Join us as we dissect core vulnerabilities like malicious skills, over-privileged credentials, and supply chain compromises, outlining how security teams can build robust, system-level boundaries to control the blast radius when a model is inevitably fooled.

 

Sponsors:

www.vibehack.dev

www.airiskassess.com

www.cisomarketplace.com

Welcome to the frontline of digital and physical supply chain security, where geopolitical shifts, software vulnerabilities, and complex regulatory mandates like the EU Cyber Resilience Act are rewriting the rules of corporate survival. In each episode, we dissect how modern enterprises move beyond basic third-party checklists to map nested fourth-party dependencies, deploy Software Bills of Materials (SBOMs), and manage algorithmic risks. Packed with actionable insights for CISOs and procurement teams, this show provides the tactical playbooks needed to build secure, transparent, and always-on global networks.
 
Sponsors:
www.cisomarketplace.com
www.breached.company
www.compliancehub.wiki

As machine identities outnumber human employees by up to 100-to-1, modern cybersecurity has shifted from guarding human logins to managing a sprawling, unmonitored web of non-human credentials This podcast explores how the rise of Shadow AI and autonomous agents has transformed static secrets sprawl into an active, machine-speed threat vector capable of executing full kill chains without malware. Listeners will discover how leading security teams are moving beyond passive secrets scanning to enforce ephemeral workload federation and deterministic, action-layer constraints.

 

Sponsors:

www.vibehack.dev

www.cisomarketplace.com

www.compliancehub.wiki 

www.airiskassess.com