The Secure Disclosure

Mackenzie Jackson

Cyber, Sake, News, Research and more
The Disclosure is a weekly cybersecurity podcast that brings the latest in news, research, and leaders into a 45-minute podcast.
Hosted by Mackenzie Jackson, we bring new guests each week to share their research and expertise in the space.

Play

Open in

31 episodes
a few times a week
Avg 34 min
English

Episodes 31

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

S2 · E56
Thursday · 34 min
Faceless Attacks: Why Rogue AI Agents Are Breaking Enterprise Systems
What happens when the entity wiping out your production database isn’t an external hacker, but an internal AI agent? Profero co-founder and CTO Guy Barnhart-Magen joins Secure Disclosure to break down the new reality of incident response. From shadow AI and log starvation to the career crisis facing junior engineers, Guy explains why internal AI misfires are eclipsing traditional attacks and why radical visibility and least privilege are the only defenses left.
S2 · E40
October 14 · 43 min
Is Deterministic Security Dead? Edouard Viot on Harnesses, Guardrails and AI Code Security
AI coding agents ship code at record speed, and ship vulnerabilities just as fast. Edouard Viot, Co-founder and CTO at Symbiotic Security, explains why scanning in CI is already too late, how AI harnesses and system prompts build real-time guardrails, whether deterministic SAST is dead, and why malicious skills and plugins are the next big attack surface.Edouard Viot is the Co-founder and CTO at Symbiotic Security. Symbiotic Security builds end-to-end security for AI-assisted software development, securing code as it is generated inside coding agents rather than after the fact. Learn more at ⁠https://symbioticsec.ai⁠This episode is sponsored by Aikido Security, the no-nonsense software security platform. Start for free at ⁠https://aikido.dev⁠
October 1 · 27 min
Stop Modern AI Phishing Attacks | Simon Bauwens
Phishing remains cybercrime's primary entry point, but outdated templates and punitive culture fail to stop AI-driven social engineering. In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Simon Bauwens, co-founder and CEO of Outkept. Simon explains why spotting phishing is a perishable reflex rather than a learned skill, how MFA fatigue leaves organizations vulnerable, and why Outkeep pays a crowdsourced community of ethical phishers based on simulation click rates. Finally, they explore building positive security cultures and play our signature Would You Rather challenge.
September 29 · 27 min
How to Stop Autonomous AI Agents From Going Rogue with Eyal Ben Ezra | Willow Security
We are handing non-deterministic AI agents static API keys, then acting surprised when production databases get wiped. In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Eyal Ben Ezra, CEO of Willow, to explore how modern enterprises can safely control autonomous AI agents. They discuss moving beyond traditional permission scopes toward capability-based dynamic guardrails, securing tool calls via MCP gateways, and why Eyal believes prompt injection is fundamentally unsolvable with current technology. From rogue agents purchasing cloud domains to accidental database catastrophes, learn how to protect critical infrastructure while adopting enterprise AI.
September 25 · 41 min
AI Agent Security: Why Traditional IAM and Firewalls Fail | David Mytton
As autonomous AI agents execute database queries and trigger APIs at machine speed, static permission models are collapsing. In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with David Mytton, CEO of Arcjet, to explore the shift from traditional network firewalls to application-native runtime security.David shares insights on managing non-deterministic non-human identities, mitigating prompt injection risks, and why granular authorization is essential for agentic workflows. He also debunks common myths surrounding data center water and energy consumption from his sustainable computing research, before facing a chaotic round of Would You Rather.
S2 · E42
September 22 · 39 min
How to Break Into Cybersecurity When AI Takes Junior Jobs | Michael Farnum
Is AI wiping out entry-level cybersecurity jobs? On this episode of The Secure Disclosure, host Mackenzie Jackson sits down with veteran and advisory CISO Michael Farnum. They dive into why teams must presume exploitability, how newcomers can break into security using home labs instead of just college degrees, and why conference accessibility matters.
S2 · E41
September 17 · 32 min
Practical AI Security & Adversarial Machine Learning with Dr Harriet Farlow
Most security teams treat AI flaws like standard code vulnerabilities, but machine learning can’t simply be patched. On this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Dr Harriot Farlow to unpack adversarial machine learning, shadow AI, practical enterprise defense, and why framing global AI development as an arms race is dangerous.
S2 · E40
September 15 · 34 min
The Blueprint for AI Security: Defending Against Prompt Injection & Shadow AI - Ashish Rajan
Join us on the Secure Disclosure Podcast as we sit down with Ashish Rajan, former CISO and author of AI Security Engineering. We dive deep into the chaotic new world of AI security, exploring the unique vulnerabilities of enterprise AI applications. Discover why prompt injection remains a fundamentally unsolved challenge, the hidden dangers of "vibe coding," and how to manage shadow AI across hundreds of corporate applications. Ashish breaks down the essential playbook every modern security team needs to safely integrate AI today.
S2 · E36
September 10 · 45 min
Can You Hack a Human? Transhumanism & Implant Tech Explained | Len Noe
Can surgically implanting 13 microchips turn you into the ultimate cyber threat? In this episode of The Secure Disclosure, ethical hacker and real-life cyborg Len Noe reveals how transhuman implants allow him to clone badges, exfiltrate a terabyte of data, and sense electromagnetic fields. Discover the terrifying, unregulated frontier where human biology meets offensive cyber security.
S2 · E35
September 8 · 37 min
The Future of Cyber Warfare and AI Manipulation with Winn Schwartau
Over thirty years ago, cybersecurity visionary Winn Schwartau warned Congress about an electronic Pearl Harbor. Today, he reveals his most alarming prediction yet: the dawn of metawar and cognitive warfare. Discover how modern systems overload human bandwidth, weaponize narratives, and manipulate belief systems—and learn what it takes to defend our minds in an era of weaponized AI.
S2 · E36
September 3 · 37 min
Email Security in the Age of AI | Josh Kamdjou, Sublime Security CEO
Why is email security still an absolute mess in the age of generative AI? In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Josh Kamdjou, CEO of Sublime Security. Discover how attackers abuse trusted platforms, weaponize LLMs for spear phishing at scale, and how autonomous agentic defenses fight back against next-gen email threats.
S2 · E34
August 31 · 32 min
AI Agents, The Dark Web & The New Attack Surface with Flare CEO Norman Menz
How has cybercrime evolved beyond traditional Tor sites into encrypted Telegram channels and automated AI agents? Norman Menz, CEO of Flare, joins the podcast to unpack continuous threat exposure, tracking exposed GitHub secrets, and why non-human identity security is the newest defense battleground. Learn how modern teams stay ahead of relentless digital adversaries.
S2 · E33
August 27 · 53 min
Can We Actually Fix Software Supply Chain Security? 6 AppSec Leaders Debate
Software supply chain attacks have gone parabolic over the past year, turning open-source packages, CI/CD pipelines, and developer laptops into prime targets for state-sponsored threat actors and AI-augmented attacks.In this special roundtable panel, security leaders from Aikido Security, Socket, OX Security, Step Security, and open source malware.com come together for an unfiltered conversation on the supply chain security crisis. The panel dives into the real catalysts behind the rise of malware—from North Korean crypto-theft campaigns and weaponized GitHub Actions to the hidden dangers of prioritizing developer velocity over security checks and balances.You'll also learn the critical difference between standard CVE vulnerabilities and active malicious software, why package registries like npm face systemic security challenges, and practical steps engineering teams must take to protect their developer environments against upstream compromises.
S32 · E2
August 19 · 36 min
Tearing Down Vendor Fluff: The Real State of AI Security | James Berthoty
n the era of rapid AI adoption, is it time for security teams to rethink their entire AppSec stack and throw away traditional SAST and SCA scanners?In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with James Berthoty, cloud security engineer and founder of Latio, a practitioner-first analyst firm. Together, they cut through vendor marketing fluff to discuss what actually stops modern breaches. James explains why executive mandates are pushing AI adoption faster than the cloud revolution and highlights the critical risks that emerge when autonomous AI agents gain CLI access and compute power.They also explore the dramatic surge in open-source supply chain malware, how AI coding agents lowered the barrier of entry for attackers, and the critical importance of securing developer endpoints, CI/CD pipelines, and Kubernetes infrastructure. To wrap it all up, James tackles the podcast's signature Would You Rather game to navigate terrible security trade-offs.
S2 · E31
August 12 · 29 min
GitGuardian CEO: How Exposed API Keys & AI Agents Cause Security Breaches - Eric Fourrier
What happens when two 25-year-old French engineers accidentally discover NASA's Slack admin API key on a public GitHub repository? That exact moment in 2017 launched GitGuardian. In this episode of The Secure Disclosure, GitGuardian CEO and co-founder Eric Fourrier sits down to share the wild origin story behind the company and how the battle against exposed secrets has shifted over the past decade. Eric breaks down how the threat landscape has evolved from public and private GitHub repositories straight to developer endpoints. With the rapid rise of AI coding agents and vibe coding, developers and non-engineers are inadvertently creating massive attack surfaces. Eric also reveals alarming statistics—including why developer laptops contain 50 times more valid secrets than GitHub repos, with 45% placed by non-deterministic AI agents.
S2 · E30
July 14 · 35 min
How to Stop Supply Chain Attacks Without Destroying Developer Productivity
In this episode of The Secure Disclosure Podcast, host Mackenzie sits down with Arun Singh, CISO of Tyro Payments. Drawing from his journey from an entry-level service desk role to a fintech security executive, Arun breaks down the counterintuitive realities of modern supply chain attacks, winning developer trust through technical authenticity, and how security leaders must evolve to manage the rapid productivity and threats introduced by AI.Sponsor & Call to ActionThis episode is brought to you by Aikido Security, your complete code-to-cloud security solution that secures everything from your first line of code through your supply chain and dependencies.Ready to shift your security into the developer's workflow? Start for free today at aikido.dev.
S2 · E25
July 1 · 36 min
Solving the Supply Chain Security & Malware Crisis w/John Amaral
In this episode of the Secure Disclosure Podcast , host McKenzie sits down with John Amaral, Co-founder and CTO of Root.io. They dive deep into the increasingly complex landscape of open-source supply chain attacks , examining how threat actors like Team PCP leverage AI to weaponize entire package ecosystems. John explains how Root's agentic software factory solves cascading CVE backlogs through precision pinning and automated patch backporting —all capped off with a massive industry merger announcement.Keep your supply chain secure from code to cloud with Aikido Security. Start protecting your ecosystem for free at aikido.dev.
S2 · E24
June 25 · 30 min
AI is an Amplifier: Why Bad Infrastructure Gets ‘Wronger’ Faster w/ Abdel SGHIOUAR
In this episode of The Secure Disclosure, Mackenzie sits down with Abdel Sghiouar, Senior Cloud Developer Advocate at Google and co-host of the Kubernetes Podcast. Together, they unpack the messy, high-stakes intersection of AI agents and Kubernetes cluster operations. Abdel breaks down the "Autonomy Catch-22", the technical paradox where an agent's capability to act independently is precisely what makes it a massive security liability. They explore real-world risks like prompt poisoning, how next-gen models like Gemini 3.5 Flash are aggressively ignoring user instructions, and the threat of over-privileged autonomous tools deleting production databases. From tactical mitigation strategies like "hook engineering" to managing massive cognitive overload and false positives for SRE teams, this conversation offers a grounded reality check on the future of cloud-native infrastructure.
S2 · E22
June 16 · 26 min
Your Microphone Became a Keylogger w/ David vonThenen
In this episode of The Secure Disclosure, we sit down in Copenhagen with David vonThenen, a keynote speaker and machine learning expert conducting groundbreaking—and terrifying—research. David breaks down his latest work on acoustic keystroke logging: training machine learning models from scratch using PyTorch to identify exactly what you are typing purely by the acoustic signature of your keyboard clicks. From hitting 100% accuracy over Zoom calls to tracing the roots of low-tech Cold War espionage, David explains how computational power has evolved, the threat this poses to corporate environments, and how we can use "digital interference" to fight back against pervasive data tracking.Sponsor Link Protect your code from cloud to deployment with Aikido Security, the leader in AI pen-testing and supply chain defense—start for free at https://aikido.dev.
S2 · E21
June 9 · 30 min
Understand the Software Supply Chain Chaos w/ Roeland Delrue
Supply chain security is evolving at a terrifying pace. In this episode of The Security Disclosure, Roeland Delrue (COO and co-founder of Aikido Security) breaks down why attackers have shifted their crosshairs from cloud infrastructure directly onto the individual developer's machine.We dive deep into how malicious JavaScript packages, VS Code extensions, and Chrome extensions manage to slip past traditional endpoint software like CrowdStrike or McAfee, and discuss the practical, counterintuitive steps security teams can take right now to protect themselves. Roeland also shares a surprisingly candid take on why open-source marketplaces like NPM and PyPI need to step up, why giving threat actors "oxygen" on social media does more harm than good, and plays a brutal round of tech "Would You Rather."

Showing 1–20 of 31 episodes