While fault-tolerant quantum computers are still evolving, threat actors are actively harvesting encrypted corporate communication today to decrypt it later once quantum processing arrives. Transitioning enterprise infrastructure to Post-Quantum Cryptography (PQC) standards requires identifying legacy RSA/ECC algorithms and building crypto-agile architectures. This episode explains national PQC migration timelines and provides actionable steps to evaluate cryptographic exposure across enterprise assets.
Week 3 Bonus Code: ' PASSKEYS '
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
 
Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityNo purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Modern enterprise software relies heavily on third-party dependencies, making developer pipelines and CI/CD workflows primary targets for supply chain attacks. Adversaries inject malicious code into open-source repositories, exploit unrotated API tokens in public cloud spaces, or manipulate build pipelines to compromise downstream targets. This episode outlines best practices for securing developer environments, enforcing automated dependency scanning, and managing secret rotation across automation platforms.
Week 3 Bonus Code: ' PASSKEYS '
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
Buy Nitrokey direct: https://securitygadgets.shop/nitrokey 
Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityNo purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Advanced nation-state threat actors like Volt Typhoon avoid traditional malware downloads, instead "living off the land" by misusing legitimate built-in administrative tools like PowerShell and WMI. By disguising malicious actions inside normal network administration traffic, adversaries pre-position themselves within critical infrastructure and enterprise networks undetected. This episode examines behavioral detection techniques and baseline monitoring to catch stealthy lateral movement before operational impact occurs.
Week 2 Bonus Code: ' CALLBACK ' 
Week 3 Bonus Code: ' PASSKEYS '
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
Buy Nitrokey direct: https://securitygadgets.shop/nitrokey 
Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityNo purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Traditional annual compliance training often fails to prepare organizations for chaotic, high-pressure cyber incidents. Incident Response (IR) "Game Day" exercises and tabletop drills simulate live ransomware attacks, deepfake executive requests, and supply chain breaches in a controlled environment. This episode breaks down how to design realistic tabletop scenarios that test communication trees, decision velocity, and cross-department coordination between IT, Legal, and Communications.
Week 2 Bonus Code: ' CALLBACK ' 
Week 3 Bonus Code: ' PASSKEYS '
Week 1 + 2 Contest/Skills winner is William W, for a tabletop called “Deepfake CFO Call.” A treasury team gets a Teams call from their CFO, on camera, asking for a $1.86 million wire. It isn’t her. The attacker reset her MFA weeks earlier with a cloned voice. It scored 90 out of 100. Congrats, William. https://tabletopsec.com/ 
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
Buy Nitrokey direct: https://securitygadgets.shop/nitrokey 
Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityNo purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As traditional network boundaries dissolve, enterprise security relies entirely on identity verification, cryptographic credentials, and continuous human risk management. This Week 2 capstone episode synthesizes passkey adoption, machine identity governance, and Shadow AI guardrails into a cohesive Identity-First Zero Trust architecture. Listeners will learn how to leverage these identity controls as a launchpad for Week 3's focus on Incident Response Game Day and active threat containment.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Even when attackers successfully impersonate executives or hijack legitimate communication accounts, robust procedural controls can halt unauthorized transactions. Dual authorization mandates that high-risk actions—such as modifying supplier bank accounts or executing large wire transfers—require independent approval from two separate personnel. This episode provides step-by-step guidance for building resilient financial workflows that withstand synthetic social engineering and executive impersonation.
 
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Modern infostealers bypass initial multi-factor authentication by stealing active browser session cookies, allowing adversaries to hijack authenticated cloud sessions. To neutralize session theft, emerging standards like Device Bound Session Credentials (DBSC) cryptographically pair SaaS session tokens to the endpoint hardware's Trusted Platform Module (TPM). This episode explains how hardware-bound session tokens prevent stolen cookies from functioning on attacker devices, closing the gap in post-authentication defense.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

While enterprise teams adopt AI tools to boost productivity, inserting corporate IP, customer PII, or proprietary code into unvetted public LLMs creates severe data leakage risks. Shadow AI risk management requires visibility into unauthorized AI tool usage without stifling employee efficiency or creativity. This episode establishes practical guidelines for local prompt scrubbing, safe AI usage policies, and selecting enterprise-grade AI platforms with guaranteed data privacy.
 
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth