The Security Champions Podcast

Dr. Tomás Peña - Champions Beyond the Atmosphere

Dr. Tomás Peña is a retired U.S. Air Force lieutenant colonel with more than 30 years of experience across information technology, cybersecurity, cyber operations, and systems security engineering. Through Parallax Cyber, he helps professionals build the knowledge and skills needed to secure space systems. In this episode of The Security Champions Podcast, Dr. Peña joins Michael Erquitt to explore how security fundamentals translate to spacecraft and ground systems. They discuss how commercial technologies are changing the space attack surface, why testing and vulnerability assessment matter before launch, and how digital twins can support secure development and anomaly investigation. The conversation also examines the challenges of applying zero trust and AI in resource-constrained environments, the importance of mentorship and engineering collaboration, and how security champions can help develop the space cybersecurity workforce. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Robert Hurlbut - AI's Impact on Threat Modeling Practices

Robert Hurlbut is a Microsoft MVP and threat-modeling expert with extensive experience in software security. Throughout his career, Robert has helped organizations understand systems holistically, identify potential threats, and build security practices grounded in continuous learning, collaboration, and human judgment. In this episode of The Security Champions Podcast, Robert joins Michael Erquitt to discuss the evolution of threat modeling and the role security champions play across modern industries. They explore how AI can assist with identifying threats while reinforcing the need for human oversight and accountability, as well as the security challenges surrounding citizen developers, autonomous agents, and embedded systems. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Michael Erquitt - The Future of Security Champions in an AI World

In this special episode of The Security Champions Podcast, Michael Burch passes the hosting reins to Security Journey senior security engineer Michael Erquitt. Together, they reflect on the podcast’s evolution and explore how the role of the security champion is changing in an AI-driven world. As developers increasingly work alongside AI agents, and more employees gain the ability to build software, security champions must expand beyond traditional secure coding education to influence workflows, architecture, governance, risk, and the human-AI relationship. They also examine how champions can help teams integrate security directly into AI-enabled workflows rather than treating it as an afterthought. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

North Carolina State University Students - Navigating the Cybersecurity Journey

In this episode of The Security Champions Podcast, Michael Burch sits down with Britton Janet, Quinn Merkel, and Snehanshu Samanta, students from North Carolina State University, to discuss their collaboration with Security Journey on a project to automate lab setups. The conversation explores what they learned while working through a real-world technical project and how the experience shaped their understanding of development, security, and teamwork. They share the challenges they faced along the way, from troubleshooting and adapting to unfamiliar requirements to learning when to ask questions and how to keep moving when things did not go as planned. The episode also touches on the role of AI in the development process and the importance of persistence, curiosity, and communication when building practical cybersecurity solutions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Brandon Troche - Engaging the Next Generation of Security Champions

Brandon Troche is an OWASP chapter leader in Las Vegas with a unique path into the AppSec community. Before stepping into cybersecurity, Brandon built his career in sales and marketing within the health and fitness industry, bringing a people-first perspective to community building, relationship development, and security education. In this episode of The Security Champions Podcast, Brandon joins Michael Burch to discuss the role of OWASP chapters in creating stronger, more connected AppSec communities. They explore the importance of member feedback, in-person meetups, accessible events, and support networks that help security professionals learn, collaborate, and grow, regardless of their technical background. 0:07 Welcome to The Security Champions Podcast ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Spandana Sarala Gorantla - Scaling Security: How AI and Collaboration Transform Threat Modeling

Spandana Sarala Gorantla is a Senior Product Security Engineer at Adobe, specializing in product security, threat modeling, and secure development practices. She is passionate about making threat modeling collaborative, practical, and scalable, especially as AI and agentic systems reshape how teams build software. Spandana joined The Security Champions Podcast to discuss why threat modeling matters more than ever in the age of AI. In this episode, she shares how threat modeling became a central part of her security career, why collaboration across engineering, product, business, and security teams is essential, and how AI can help scale early risk identification without replacing human judgment. The conversation explores practical approaches to threat modeling, the role of Security Champions, and why frameworks like STRIDE and MAESTRO can help teams ask better questions about modern systems. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Nariman Aga-Tagiyev - Understanding the EU Cyber Resiliency Act: What You Need to Know

Nariman Aga-Tagiyev is an application security expert with over two decades of experience in software development across diverse technology stacks, including cloud-native environments. Since 2016, he has been in charge of the Application Security program and the Secure Software Development Lifecycle, with deep expertise in frameworks such as BSIMM, OWASP SAMM, and NIST SSDF. In this episode, Nariman breaks down the EU Cyber Resilience Act (CRA) and why it’s far more than a regional regulation. It’s a global shift in how software security is expected to be built and maintained. He explains what the CRA requires, how it impacts software vendors and open source, and what “secure by design” really looks like in practice. The conversation also covers practical steps teams can take today to prepare, without overcomplicating their approach. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript

Roger Grimes - AI and the Future of Cybersecurity

Roger A. Grimes, CISO Advisor for KnowBe4, Inc., is the author of 16 books and more than 1,600 articles, with deep expertise in host security and defending against hacker and malware attacks. A frequent speaker at major cybersecurity conferences, Roger is known for his fast-paced, insight-driven presentations packed with practical recommendations. In this episode of The Security Champions Podcast, Roger joins the conversation to explore the impact of AI on cybersecurity, software development, and industry practices. He shares insights on the opportunities and challenges of AI integration, highlights emerging trends, and emphasizes the importance of responsible AI use alongside strong foundational security principles. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Transcript
• Chapters

John Benninghoff - Tapping Other Fields To Approach Security Differently

John Benninghoff is a long-time student and practitioner of managing information risk. His 25-year career in Cybersecurity and SRE spans financial services, retail, government, and health care. He founded Security Differently to advise organizations on how to integrate security into how work is done, quantify risk, improve performance, and make better decisions. John joins the podcast to explore what it means to treat security like other mature safety disciplines. Drawing on safety science, economics, and hands-on AppSec experience, he shares a practical perspective on security as decision support and how empowering developers with the right time and tools leads to stronger security outcomes. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Dustin Lehr & Michael Burch - End of Year Recap 2025

It’s been a momentous year for security champions, developer empowerment, and cultivating security culture. In this special year-in-review episode, hosts Dustin Lehr and Michael Burch look back on the standout conversations and greatest moments from The Security Champions Podcast throughout 2025. Whether you're building a champion program, supporting developers, or shaping appsec strategy, this episode brings together the best of 2025 in one conversation. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

Mark McMillan - Leading with the Carrot: Building Security Culture, Not Just Compliance

Mark McMillan has been building and leading Information Security Champions programs for over five years and has spent nearly a decade shaping cybersecurity culture at Rocket. He's passionate about creating programs that empower, not punish, and help people understand their role in keeping data secure. In this episode of The Security Champions Podcast, Mark shares his journey into the field and what he has learned about fostering engaging and supportive security programs. He contrasts the outdated “stick” approach with a more empowering “carrot” method that fosters trust, ownership, and lasting behavior change. He breaks down how Champions Programs act as powerful networks of internal advocates, strategies for scaling and sustaining them over time, and the importance of continuous improvement and community support. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Dustin Lehr & Michael Burch - Security Champions Summit Recap

In this episode of The Security Champions Podcast, hosts Dustin Lehr and Michael Burch discuss the recent success of the first annual Security Champions Summit. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

Ariel Shin - Beyond Breaking: From Pen Tester to Problem Solver

Ariel Shin is a Security Engineer at Stripe, specializing in threat modeling and proactively identifying and mitigating potential security risks. She is passionate about scaling application security while reducing engineering burdens and strives to create foundations that seamlessly integrate security practices into the development lifecycle. Ariel joined The Security Champions Podcast to share her journey from penetration testing to building scalable, developer-friendly security practices. In this episode, she dives into the often-overlooked "glue work" that holds teams together, challenges common assumptions about threat modeling, and explores how AI is changing the security landscape. From practical strategies to forward-looking insights, Ariel offers a thoughtful perspective on how organizations can embed security into their culture without slowing down innovation. Resources: The Security Champions Summit - https://events.zoom.us/ev/AtVdnJITWfhMUFnsW_M1i4ZmOOhCAmScdyS69xg0oR4tS4iB6WO3~ArhXmQ4WPfpu5UoldBPL0lWGMfMj3PAOBs_PvjGyJLrTp_TfOMbweudy8pDHhHm-Ure1Ej4jX3S_bz70EsiKmB8W4g ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Eva Benn - Embracing Your Own Cybersecurity Identity

Eva Benn is a Principal Security Program Manager for the Microsoft Security and Response Center. She is deeply involved in the security community, having served/serving on the leadership boards of the OWASP Seattle Chapter, WiCyS Western Washington, ISACA Puget Sound Chapter, the EC Council CEH Advisory Board, and the GIAC Advisory Board. She is also a Co-Chair of the Microsoft Women in Security and Co-Founder of Women in Tech Global. Eva joined The Security Champions Podcast to discuss the multitude of pathways into cybersecurity. The conversation dived into overcoming imposter syndrome, reshaping cybersecurity culture, and building a mindset where everyone sees themselves as defenders. Eva highlights the role of psychology in learning and the importance of gamification. Resources: The Security Champions Summit https://events.zoom.us/ev/AtVdnJITWfhMUFnsW_M1i4ZmOOhCAmScdyS69xg0oR4tS4iB6WO3~ArhXmQ4WPfpu5UoldBPL0lWGMfMj3PAOBs_PvjGyJLrTp_TfOMbweudy8pDHhHm-Ure1Ej4jX3S_bz70EsiKmB8W4g Tactical AppSec: The Security Champions' Field Guide: https://info.securityjourney.com/tactical-appsec-field-guide ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Jacob Salassi - Developer Empathy: A Thoughtful Approach to Product Security

Jacob Salassi, former Director of Product Security at Snowflake, joined this episode of The Security Champions Podcast to share insights from his experience leading security transformation at scale. This episode explores the role of empathy in driving security engagement and how security teams can better align with engineering workflows. Jacob discusses the process of building the AppSec program at Snowflake, designing effective code review practices, and navigating organizational challenges. The conversation also touches on the potential of emerging technologies like LLMs and highlights key lessons from Jacob’s career journey and post-Snowflake focus. Resources: The Security Champions Summit: https://events.zoom.us/ev/AtVdnJITWfhMUFnsW_M1i4ZmOOhCAmScdyS69xg0oR4tS4iB6WO3~ArhXmQ4WPfpu5UoldBPL0lWGMfMj3PAOBs_PvjGyJLrTp_TfOMbweudy8pDHhHm-Ure1Ej4jX3S_bz70EsiKmB8W4g Tactical AppSec: A Champions' Field Guide: https://info.securityjourney.com/tactical-appsec-field-guide ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

David Kosorok - Mastering Application Security

David Kosorok, the Director of Information Security Programs at Toast, Inc., has over 25 years of experience in software and security testing - including more than 16 years dedicated to security. He’s led and scaled product security programs across organizations of all sizes, making him a trusted voice in the appsec space. In this episode of The Security Champion’s Podcast, David joined Dustin Lehr to share key insights from his new book ‘Mastering Application Security.’ They dive into what it takes to build a high-performing appsec team, from aligning talent with mission to prioritizing the right initiatives in your appsec program. Resources: BOOK - Mastering Application Security: Building Elite Teams for Tomorrow's Threats: https://www.amazon.com/Mastering-Application-Security-Building-Tomorrows-ebook/dp/B0F512GC8Y/ref=tmm_kin_swatch_0 Security Champions Field Guide: https://info.securityjourney.com/tactical-appsec-field-guide The Security Champion Program Success Guide: https://securitychampionsuccessguide.org/ Follow David on LinkedIn: https://www.linkedin.com/in/kosorok/ Follow Dustin on LinkedIn: https://www.linkedin.com/in/dustinlehr/ Subscribe to Dustin's YouTube channel: https://www.youtube.com/@UCjYquhHrc1GR9nySDNpJtRA ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Dustin Lehr - Code, Culture, and Community

Dustin Lehr joined Security Journey as Director of Application Security Advocacy. With nearly two decades of experience as a software engineer, application architect, and cybersecurity leader, Dustin has ample expertise in the industry. In this episode of The Security Champions Podcast, Dustin joined to explore the interconnected roles of secure code, security-conscious culture, developer behavior, and the proper tooling. Discover practical insights on how to move beyond siloed approaches and create a truly effective strategy for product security. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Roger Grimes - Quantum Security

Roger A. Grimes, Data-Driven Defense Evangelist for KnowBe4, Inc., is the author of 15 books and over 1500 articles. He specializes in host security and preventing hacker and malware attacks. Roger is a frequent speaker at national computer security conferences and his presentations are fast-paced and full of useful facts and recommendations. This episode of The Security Champions Podcast explores the fascinating concepts of quantum mechanics and how they relate to cryptography. It explores topics like quantum entanglement, quantum tunneling, and the mind-boggling reality that a quantum particle can be in all states simultaneously. Also discussed are the potential risks quantum computers pose to existing encryption methods and what you can do to prepare. Podcast Chapters: 0:10 Welcome to the Security Champions Podcast 10:52 Not Here To Do Little Things 15:12 Being a Cybersecurity Evangelist 23:18 What Exactly is Quantum 26:15 Quantum Entanglement 30:28 Two-Photon Double-Slit Experiment 33:21 Quantum Tunneling 35:54 Quantum Particle Can Be All States At All Times 40:30 The Race to Post-Quantum Cryptography 44:57 Quantum Cryptography Could Break All Crypto 49:20 How to Protect Your Organization ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

Adam Bruehl - Secure Code in Medicine

Adam Bruehl, a Senior DevOps Engineer at Security Journey, has a unique blend of expertise ranging from biology to technology. In this episode, Adam dives into the intersection of cybersecurity and medical devices, pharmaceutical research, and patient data. Hear first-hand accounts of security incidents, ethical dilemmas, and the constant battle to balance cutting-edge technology with outdated protocols in an industry where the stakes are life and death. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0

• Chapters

Michael Erquitt - The AI Threat Landscape

Michael Erquitt is a Senior Security Engineer at Security Journey who develops educational content for all of our learners. Michael joined the podcast to discuss the AI Threat Landscape. The discussion starts with the history of the AI threat landscape before moving on to the biggest AI security changes of 2025 and the future of AI and AI security. 0:05 Welcome to The Security Champions Podcast 10:23 The History of the AI Threat Landscape 16:41 Securing AI Compared to Other Technologies 18:53 The Biggest AI Security Changes Expected in 2025 28:20 Number 1 Piece of Advice for 2025 36:47 The Future of AI ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Podcast sponsored by Security Journey, Secure Coding Training for Developers and Everyone in the SDLC. Learn more at securityjourney.com. FOLLOW US to stay up-to-date with new content! LinkedIn (linkedin.com/company/security-journey) Instagram (https://www.instagram.com/securityjourney) YouTube (youtube.com/c/securityjourney) Twitter (twitter.com/SecurityJourney) Online (securityjourney.com) CONTACT: hello@securityjourney.com Get your free VIBE Coding Field Guide: https://hubs.ly/Q043-zdS0