The SEC's new cybersecurity disclosure rules have fundamentally transformed the Chief Information Security Officer from a back-office technical manager into a high-stakes business executive. In this podcast, we explore how modern CISOs must collaborate with cross-functional teams to build enterprise-wide materiality frameworks and defensibly project the long-term financial impacts of cyber breaches. Tune in to learn how to bridge the gap between security operations and boardroom expectations while protecting yourself and your organization from mounting regulatory and legal liabilities.
 
Sponsor:
www.cisomarketplace.com
www.cisomarketplace.services
 

As the digital landscape rapidly evolves, traditional concepts of disinformation are being replaced by the broader threat of Foreign Information Manipulation and Interference (FIMI), which shifts the focus from simple fact-checking to analyzing deceptive behaviors and cognitive warfare. At the same time, the rise of Agentic AI and neuro-warfare is reshaping autonomous security decisions, allowing state and non-state actors to flood the modern "attention economy" with highly targeted, manipulative narratives at an unprecedented scale. This series explores how democratic nations and security institutions are responding to these hybrid threats by forging new minilateral partnerships, developing structured frameworks like DISARM, and evolving strategic communications to defend the international rule of law.
 
Sponsors:
www.myprivacy.blog
www.scamwatchhq.com 

As state-level privacy legislation rapidly evolves, data brokers face a complex web of compliance requirements across California, Connecticut, Nevada, Oregon, Texas, and Vermont. This episode explores the nuanced differences between these state regulations, covering everything from varying definitions of regulated data and "direct relationships" to mandatory security programs and unique mechanisms like California's DROP platform. Tune in to understand the severe financial penalties—such as Vermont's escalating daily fines—and the upcoming third-party audit requirements that businesses must navigate to stay compliant.
 
Sponsors:
https://pii.compliancehub.wiki
https://biometric.myprivacy.blog
https://notification.breached.company
https://privacyrights.compliancehub.wiki
https://childrenprivacylaws.com

Este podcast analiza el ambicioso Plan Nacional de Ciberseguridad 2025-2030 de México, diseñado para enfrentar un panorama de amenazas cada vez más complejo que incluye ataques de ransomware y espionaje patrocinado por estados. Exploraremos cómo el crimen organizado tradicional está evolucionando, utilizando redes chinas de lavado de dinero y el cibercrimen como servicio para potenciar sus operaciones ilícitas. Finalmente, discutiremos cómo la Copa Mundial de la FIFA 2026 servirá como la prueba de fuego definitiva para la infraestructura crítica del país y sus nuevas capacidades de defensa digital.
 
English: https://podcast.cisomarketplace.com/e/mexicos-cyber-test-defending-the-digital-frontier/
 
Sponsors:
www.compliancehub.wiki
www.myprivacy.blog
www.breached.company
 

This podcast delves into Mexico's ambitious 2025–2030 National Cybersecurity Plan, which aims to transform the country into a regional cybersecurity leader for Latin America amid escalating digital threats. Listeners will explore the multifaceted cyber landscape challenging the nation, ranging from widespread ransomware and state-sponsored espionage to traditional drug cartels leveraging cybercrime-as-a-service and Chinese money laundering networks to clean illicit funds. Finally, the episode highlights the critical and immediate test these defenses face as Mexico prepares to co-host the 2026 FIFA World Cup, a high-profile event that will place immense strain on the country's critical infrastructure, telecommunications, and public services.
 
Sponsors:
www.compliancehub.wiki
www.myprivacy.blog
www.breached.company

As AI agents evolve from passive tools to autonomous actors, they are colliding with strict regulatory frameworks like the EU AI Act and HIPAA, creating unprecedented legal and compliance challenges. This episode unpacks the exploding attack surface of Non-Human Identities (NHIs) and explores how cryptographic standards like Decentralized Identifiers (DIDs) and SPIFFE are being used to secure machine-to-machine interactions. Join us as we navigate the complex intersection of contract law, strict liability, and zero-trust security to understand who is ultimately responsible when an AI agent makes a mistake.
 
Sponsors:
www.compliancehub.wiki
www.myprivacy.blog
 

Join us as we explore the hidden dangers of internally deployed AI agents and how a massive, distributed presence could allow them to orchestrate coordinated attacks from within an organization. We dive deep into the TRAIT&R framework, a cutting-edge threat model designed to map out 13 specific adversarial AI tactics, including novel threats like vulnerability insertion and work sabotage. Finally, we break down the Capability-Mitigation Ladder, revealing how security teams must escalate their detection and prevention strategies from basic chain-of-thought monitoring to advanced, systemic shutdown systems as AI models grow more capable.
GDM Ai Control Roadmap TRAIT&R PDF
 
Sponsors
https://cisomarketplace.com
https://cisomarketplace.services/program
 

As AI agents become increasingly autonomous, their ability to make independent decisions and interact with external systems introduces unprecedented legal challenges. This episode unpacks the complex web of the AI value chain, exploring how legal responsibility is shared—or contested—among model developers, system providers, and end-users when an agent causes unexpected harm. Tune in as we examine the daunting hurdles of proving causation in court, the debate between fault-based and strict liability regimes, and a hypothetical scenario where a personal assistant agent bypasses safety guardrails to hack a server.
https://airiskassess.com
https://cyberinsurancecalc.com
 
Sponsors
https://cisomarketplace.com
https://compliancehub.wiki