Traditional annual compliance training often fails to prepare organizations for chaotic, high-pressure cyber incidents. Incident Response (IR) "Game Day" exercises and tabletop drills simulate live ransomware attacks, deepfake executive requests, and supply chain breaches in a controlled environment. This episode breaks down how to design realistic tabletop scenarios that test communication trees, decision velocity, and cross-department coordination between IT, Legal, and Communications.
Week 2 Bonus Code: ' CALLBACK ' 
Week 3 Bonus Code: ' PASSKEYS '
Week 1 + 2 Contest/Skills winner is William W, for a tabletop called “Deepfake CFO Call.” A treasury team gets a Teams call from their CFO, on camera, asking for a $1.86 million wire. It isn’t her. The attacker reset her MFA weeks earlier with a cloned voice. It scored 90 out of 100. Congrats, William. https://tabletopsec.com/ 
Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.
Buy Nitrokey direct: https://securitygadgets.shop/nitrokey 
Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityNo purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As traditional network boundaries dissolve, enterprise security relies entirely on identity verification, cryptographic credentials, and continuous human risk management. This Week 2 capstone episode synthesizes passkey adoption, machine identity governance, and Shadow AI guardrails into a cohesive Identity-First Zero Trust architecture. Listeners will learn how to leverage these identity controls as a launchpad for Week 3's focus on Incident Response Game Day and active threat containment.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Even when attackers successfully impersonate executives or hijack legitimate communication accounts, robust procedural controls can halt unauthorized transactions. Dual authorization mandates that high-risk actions—such as modifying supplier bank accounts or executing large wire transfers—require independent approval from two separate personnel. This episode provides step-by-step guidance for building resilient financial workflows that withstand synthetic social engineering and executive impersonation.
 
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Modern infostealers bypass initial multi-factor authentication by stealing active browser session cookies, allowing adversaries to hijack authenticated cloud sessions. To neutralize session theft, emerging standards like Device Bound Session Credentials (DBSC) cryptographically pair SaaS session tokens to the endpoint hardware's Trusted Platform Module (TPM). This episode explains how hardware-bound session tokens prevent stolen cookies from functioning on attacker devices, closing the gap in post-authentication defense.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

While enterprise teams adopt AI tools to boost productivity, inserting corporate IP, customer PII, or proprietary code into unvetted public LLMs creates severe data leakage risks. Shadow AI risk management requires visibility into unauthorized AI tool usage without stifling employee efficiency or creativity. This episode establishes practical guidelines for local prompt scrubbing, safe AI usage policies, and selecting enterprise-grade AI platforms with guaranteed data privacy.
 
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Machine identities—including API keys, service accounts, automated scripts, and AI agents—now outnumber human employees in enterprise environments by over ten to one. Threat actors increasingly target these non-human identities because they often possess elevated privileges without multi-factor authentication or session expiration constraints. This episode examines strategies for discovering orphaned API tokens, enforcing zero-trust access for automated workflows, and auditing non-human identity lifecycle management.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As adversary-in-the-middle (AiTM) phishing kits routinely bypass SMS and push-based multi-factor authentication, enterprise security is pivoting toward cryptographic passkeys. Built on FIDO2 and WebAuthn standards, passkeys bind authentication directly to the official domain and hardware enclave, rendering credential harvesting impossible. This episode breaks down device-bound versus synced passkeys and outlines how organizations can transition seamlessly from legacy passwords to phishing-resistant authentication.
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth
Https://securitygadgets.shop/nitrokey

As AI makes synthetic voices and videos indistinguishable from reality, cybersecurity enters the era of "Sensorial Zero Trust"—where human senses can no longer serve as the primary security filter. This Week 2 capstone episode synthesizes voice, video, and helpdesk attack vectors into a unified defense model centered on cryptographic verification and strict procedural controls. Listeners will learn how to bridge Week 2's multi-channel lessons into Week 3's focus on identity management, passkeys, and safe Shadow AI usage.
 
Week 1 Bonus Code: ' PHISHPROOF ' 
Week 2 Bonus Code: ' CALLBACK ' 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth