CISO Insights: Voices in Cybersecurity

CISO Marketplace

CISO Insights: The Cybersecurity Leadership Podcast

Where Security Leaders Shape Tomorrow’s Defenses

Join us for CISO Insights, the definitive podcast for cybersecurity executives navigating today’s evolving threat landscape. Each episode delivers exclusive conversations with industry pioneers and practical frameworks from security leaders.

CISO Insights provides actionable intelligence for executives building resilient security programs. We cover everything from board-level risk communication to threat detection, compliance, and talent development.

Whether you’re a CISO, aspiring security leader, or technology executive, we equip you with the tools to thrive in a complex digital environment.

Connect with us:
Shop:
News:
Podcast:
Tools:
AI Resources: CISO.diy || generate Policy || Cyber Policy Shop

Swag:

Gadgets:

Watch Videos: video.cyberadx.network

Follow us:

X & Pinterest: @cisomarketplace
TikTok @cisomarketplace - Quick insights and security tips
YouTube @cisomarketplace - In-depth discussions and CISO interviews
Tiktok & Youtube: @ScamwatchHQ

Donate

Play

Open in

97 episodes
daily
Avg 30 min
English

Episodes 97

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

#595
Yesterday · 21 min
Identity as the New Perimeter – Unifying Passkeys, Governance, and Human Risk
As traditional network boundaries dissolve, enterprise security relies entirely on identity verification, cryptographic credentials, and continuous human risk management. This Week 2 capstone episode synthesizes passkey adoption, machine identity governance, and Shadow AI guardrails into a cohesive Identity-First Zero Trust architecture. Listeners will learn how to leverage these identity controls as a launchpad for Week 3's focus on Incident Response Game Day and active threat containment. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#594
Saturday · 22 min
Stopping the Wire Fraud Storm – Dual Authorization; Step-Up Controls
Even when attackers successfully impersonate executives or hijack legitimate communication accounts, robust procedural controls can halt unauthorized transactions. Dual authorization mandates that high-risk actions—such as modifying supplier bank accounts or executing large wire transfers—require independent approval from two separate personnel. This episode provides step-by-step guidance for building resilient financial workflows that withstand synthetic social engineering and executive impersonation. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#593
Friday · 22 min
Beyond MFA – Token Binding and Device-Bound Session Credentials
Modern infostealers bypass initial multi-factor authentication by stealing active browser session cookies, allowing adversaries to hijack authenticated cloud sessions. To neutralize session theft, emerging standards like Device Bound Session Credentials (DBSC) cryptographically pair SaaS session tokens to the endpoint hardware's Trusted Platform Module (TPM). This episode explains how hardware-bound session tokens prevent stolen cookies from functioning on attacker devices, closing the gap in post-authentication defense. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#592
Thursday · 25 min
Shadow AI Governance – Balancing Innovation and Data Protection
While enterprise teams adopt AI tools to boost productivity, inserting corporate IP, customer PII, or proprietary code into unvetted public LLMs creates severe data leakage risks. Shadow AI risk management requires visibility into unauthorized AI tool usage without stifling employee efficiency or creativity. This episode establishes practical guidelines for local prompt scrubbing, safe AI usage policies, and selecting enterprise-grade AI platforms with guaranteed data privacy. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#591
Wednesday · 21 min
The Hidden Perimeter – Governing Machine and Non-Human Identities
Machine identities—including API keys, service accounts, automated scripts, and AI agents—now outnumber human employees in enterprise environments by over ten to one. Threat actors increasingly target these non-human identities because they often possess elevated privileges without multi-factor authentication or session expiration constraints. This episode examines strategies for discovering orphaned API tokens, enforcing zero-trust access for automated workflows, and auditing non-human identity lifecycle management. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#590
Tuesday · 22 min
The Death of the Password – Rolling Out FIDO2 Passkeys
As adversary-in-the-middle (AiTM) phishing kits routinely bypass SMS and push-based multi-factor authentication, enterprise security is pivoting toward cryptographic passkeys. Built on FIDO2 and WebAuthn standards, passkeys bind authentication directly to the official domain and hardware enclave, rendering credential harvesting impossible. This episode breaks down device-bound versus synced passkeys and outlines how organizations can transition seamlessly from legacy passwords to phishing-resistant authentication. Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth Https://securitygadgets.shop/nitrokey
#589
October 12 · 14 min
Sensorial Zero Trust: Trusting Code Over Senses
As AI makes synthetic voices and videos indistinguishable from reality, cybersecurity enters the era of "Sensorial Zero Trust"—where human senses can no longer serve as the primary security filter. This Week 2 capstone episode synthesizes voice, video, and helpdesk attack vectors into a unified defense model centered on cryptographic verification and strict procedural controls. Listeners will learn how to bridge Week 2's multi-channel lessons into Week 3's focus on identity management, passkeys, and safe Shadow AI usage. Week 1 Bonus Code: ' PHISHPROOF ' Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#588
October 12 · 18 min
Video Deepfakes; Live Synthetic Media in Meetings
Synthetic media has progressed beyond pre-recorded clips into real-time video deepfakes capable of spoofing executives in live Zoom or Teams meetings. Attackers leverage live video filters and voice synthesis to conduct multi-million dollar wire fraud and trick employees into releasing confidential data. This episode highlights visual glitch indicators, challenge-response verification questions, and protocols for handling suspicious video interactions. Week 1 Bonus Code: ' PHISHPROOF ' Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#587
October 12 · 20 min
Out-of-Band Verification – Establishing Bulletproof Callbacks
When an incoming call, text, or chat message requests urgent financial transfers or credential changes, trusting the incoming channel creates a critical vulnerability. Out-of-band verification requires stepping outside the initial communication channel to confirm requests using an independent, pre-verified contact method. This episode outlines practical callback scripts and protocols to ensure employees never rely on numbers or links provided within suspicious messages. Week 1 Bonus Code: ' PHISHPROOF ' Week 2 Bonus Code: ' CALLBACK ' 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#586
October 9 · 20 min
Helpdesk Hijacking MFA Reset Scams
Cybercriminals routinely target the human element of IT support through social engineering phone calls and collaboration messages. By impersonating distressed employees, attackers persuade helpdesk agents or coworkers to reset MFA tokens, grant remote desktop access via Quick Assist, or register new authenticators. This episode breaks down helpdesk verification scripts and demonstrates how to secure identity workflows beyond initial authentication 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#585
October 8 · 25 min
Deepfake Audio & Vishing – When the Voice on the Phone Isn't Real
Generative AI has made voice cloning accessible, allowing threat actors to replicate an executive's or colleague's voice using only short audio samples. This episode explores the surge in voice phishing (vishing) attacks targeting corporate finance, HR, and helpdesks to authorize urgent wire transfers or credential reset. Listeners will learn how to identify synthetic audio artifacts and establish a healthy skepticism when receiving unexpected, high-stakes phone calls. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#584
October 7 · 44 min
The Voice on the Line – The Dawn of Multi-Channel Deception
Serving as the strategic bridge between Week 1 and Week 2, this episode examines how threat actors transition from text-based phishing to AI-synthesized audio and video deception. The hosts explore how adversaries combine stolen browser data with voice cloning tools to execute sophisticated "callback phishing" and vishing attacks targeting helpdesks and finance teams. Listeners gain a preview of Week 2's deepfake threats alongside practical out-of-band verification scripts to ensure "just calling back" is done securely. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#583
October 6 · 55 min
The Phishing Playbook Review – Testing Your Security Reflexes
As Week 1 of October Awareness Month concludes, this episode synthesizes the text-based social engineering tactics covered so far into an interactive scenario-based review. The hosts evaluate real-world 2026 phishing lures—from LLM-crafted email lures to infostealer attachments—and break down how organizations track reporting velocity rather than mere click-through rates. Listeners learn how to benchmark their security reflexes and prepare their defenses as social engineering pivots toward non-text channels. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#582
October 5 · 21 min
Turn Awareness into Telemetry – Speeding Up Incident Reporting
Modern cybersecurity success is no longer measured by low click rates on fake tests, but by reporting velocity—how fast employees flag real threats[ This episode demonstrates how clicking the "Report Phishing" button feeds real-time threat telemetry directly into automated Security Operations Center (SOC) workflows. The hosts explain how a single employee's rapid report can automatically quarantine a malicious campaign across the entire enterprise. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#581
October 4 · 24 min
The AI Assistant Hazard – Defending Against Prompt Injection
As 80% of workers adopt generative AI tools for daily tasks, attackers have developed "prompt injection" techniques to weaponize workplace AI assistants. By hiding malicious commands inside web pages or document attachments, adversaries can trick AI assistants into exfiltrating corporate data or executing backdoors. This episode breaks down the "Check Before You Paste" rule and offers clear guardrails for using AI tools safely. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#580
October 3 · 24 min
Beyond the Inbox – Securing Slack, Teams, and SMS
Adversaries routinely bypass traditional email gateways by launching multi-channel social engineering campaigns across internal collaboration tools like Microsoft Teams, Slack, and SMS. By exploiting implicit workplace trust, attackers drop malicious files or urgent link requests into team channels where employees least expect them. This episode highlights how to extend critical evaluation habits across every communication channel you use at work. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#579
October 2 · 42 min
The Infostealer Trap – How Session Cookies Bypass Passwords
With infostealers like Vidar and StealC infecting over 11 million machines and harvesting 3.3 billion credentials in 2025, threat actors have moved beyond simple password cracking. This episode explains how malware delivered via "ClickFix" social engineering prompts steals session cookies and OAuth tokens directly from browsers. Listeners will learn why cookie hygiene and endpoint isolation are critical to preventing attackers from simply "logging in" as valid users. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/ #CyberAwareWin #CybersecurityAwarenessMonth
#578
October 1 · 44 min
Unmasking the AI Phishing Machine
As Large Language Models (LLMs) eliminate traditional "tells" like bad grammar and awkward formatting, AI-crafted social engineering has transformed phishing into a high-velocity, automated attack pipeline This episode explores how adversaries deploy generative AI to craft hyper-personalized lures across email, Teams, and Slack in minutes while delivering infostealers that harvest corporate credentials. Aligning with the National Cybersecurity Alliance’s "Don't Make It Easy for Them!" campaign, the hosts break down practical daily habits and demonstrate how rapid threat reporting converts employee vigilance into real-time telemetry for the SOC. 🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31 Enter free: https://cyberaware.win Bonus entries (+25 for your first submission): https://cyberaware.win/community Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights 20% off across CISO Marketplace with code CYBERAWARE26 No purchase necessary. Rules: https://cyberaware.win/rules Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth
#577
October 1 · 24 min
Enter Free, Win the NitroPhone: Inside CISO Marketplace's Cybersecurity Awareness Month 2026
CISO Marketplace is turning Cybersecurity Awareness Month into a month-long community event, with a free-to-enter giveaway at cyberaware.win where every entrant unlocks more Nitrokey hardware for everyone and the grand prize is a NitroPhone 5a. Alongside it, the CISO Insights podcast runs 22 weekday episodes on AI phishing, deepfake vishing, passkeys and incident-response game days, each carrying a bonus code read on air. We walk through how the giveaway works, how to win the weekly Submission of the Week, and how the CYBERAWARE26 code takes 20% off across the CISO Marketplace ecosystem of tools, kits, policies and memberships. The Cyber Awareness Giveaway runs October 1–31, 2026, is free to enter at cyberaware.win, and draws its NitroPhone 5a winner on November 5, 2026, revealed on the CISO Insights podcast. No purchase is necessary. Free Entry: https://cyberaware.win How to enter. Sign in or create a free CISO Marketplace account (a verified email), then fill in name, US state or country, an 18+ confirmation and agreement to the rules. Company, role and Social Media are optional. One entry per person. Entries close October 31 at 11:59 PM Central Time. October Podcast Schedule Eight ways to submit Content for Bonus Entries October Security Awareness Kickoff Episode Maximize Entries Video CISO Marketplace Discount Code across stores: ' CYBERAWARE26 ' Stores - https://ciso.diy - https://cyberpolicy.shop - https://generatepolicy.com - https://securitygadgets.shop (not include in discount but entry amount yes) - https://securitybydesign.shop Membership, tools and content - https://cisomarketplace.services/membership - https://threatwatch.news/pricing - https://cyberbrief.news/pricing - https://microsec.tools/pricing - https://cisomarketplace.com Creators, affiliates and the network - https://securitybydesign.shop/creators - https://cyberadx.network/affiliate
#576
October 1 · 24 min
Ränge im Visier: Sicherheit, Überwachung und Datenschutz im modernen Stadion
Das heutige Ökosystem intelligenter Stadien agiert als hochgradig vernetzter Knotenpunkt kritischer Infrastruktur, der KI-gestützte Biometrie an den Einlässen, hochdichte Drahtlosnetzwerke, digitales Ticketing und physischen Perimeterschutz in einem einzigen System vereint. Um diese Massenveranstaltungen zu schützen, müssen Sicherheitsteams ein komplexes Bedrohungsszenario bewältigen, das von physischen Gefahren und Drohnenabwehr bis hin zu konvergenten kybernetisch-physischen Schwachstellen an Drehkreuzen, Beschallungsanlagen und der Gebäudeautomation reicht. Gleichzeitig stehen Sicherheitsverantwortliche vor beispiellosen rechtlichen und ethischen Herausforderungen, da strengere Datenschutzgesetze und die EU-KI-Verordnung (EU AI Act) klare Grenzen für die Erfassung, Speicherung und Löschung biometrischer Daten sowie personenbezogener Informationen der Fans setzen. English Episode: Video: https://youtu.be/WhQIuF04Bwc https://biometric.myprivacy.blog/ https://pii.compliancehub.wiki Sponsors: www.cisomarketplace.com www.cisomarketplace.services www.ciso.diy

Showing 1–20 of 97 episodes