This episode deep dives into the tense "cat-and-mouse" game between regulators and tech giants following the implementation of Australia's historic under-16 social media ban in December 2025. We expose the "poor practices" uncovered by the eSafety Commissioner's active investigations, showing how platforms allowed underage children double-digit attempts to bypass facial age scans and even demanded formal lawyer letters from parents trying to shut down their kids' profiles. Finally, we analyze the major August 2026 escalations, detailing why Australia doubled its non-compliance fines to AUD $99 million and how New Zealand's new ban threatens platforms with penalties of up to 10% of their global revenue.
 
Sponsors:
www.cisomarketplace.com
www.compliancehub.wiki
www.myprivacy.blog 

As autonomous AI agents rapidly compress the timeline between vulnerability and exploit, CISOs and security leaders must transition from traditional perimeter-based security to a dedicated agentic Zero Trust framework. This episode details how to deploy robust, enterprise-ready controls—including identity-based isolation, Just-In-Time (JIT) access, and advanced runtime defenses like Spotlighting and constitutional classifiers—to neutralize prompt injection and secure agent workloads. Finally, we explore why cryptographic "hard barriers" are fundamentally superior to temporary friction-based controls.
 
Sponsor:
www.cisomarketplace.com
 

As artificial intelligence shifts from passive conversational tools to autonomous agents capable of independent system execution, establishing secure boundaries for identity, delegation, and authorization has emerged as a paramount federal priority. This episode explores the National Institute of Standards and Technology's (NIST) AI Agent Standards Initiative, detailing how the agency is coordinating industry-led standards, open-source community protocols, and fundamental cryptographic research. We examine the real-world implications of this framework for high-stakes sectors like finance and healthcare, highlighting how organizations can apply emerging identity guidelines to protect multi-agent environments from session hijacking and unauthorized tool execution.
 
Sponsors:
www.vibehack.dev
www.airiskassess.com
www.cisomarketplace.com/blog 

As AI deployments transition from basic chatbot interfaces into autonomous agents capable of executing complex real-world workflows, organizations are discovering that traditional input filtering can no longer guarantee safety. This podcast explores the critical security boundaries mapped across OWASP's main AI safety directories: the GenAI LLM Top 10, the Agentic Applications Top 10, and the newly released Agentic Skills Top 10. Join us as we dissect core vulnerabilities like malicious skills, over-privileged credentials, and supply chain compromises, outlining how security teams can build robust, system-level boundaries to control the blast radius when a model is inevitably fooled.
 
Sponsors:
www.vibehack.dev
www.airiskassess.com
www.cisomarketplace.com 

Welcome to the frontline of digital and physical supply chain security, where geopolitical shifts, software vulnerabilities, and complex regulatory mandates like the EU Cyber Resilience Act are rewriting the rules of corporate survival. In each episode, we dissect how modern enterprises move beyond basic third-party checklists to map nested fourth-party dependencies, deploy Software Bills of Materials (SBOMs), and manage algorithmic risks. Packed with actionable insights for CISOs and procurement teams, this show provides the tactical playbooks needed to build secure, transparent, and always-on global networks.
 
Sponsors:www.cisomarketplace.com
www.breached.company
www.compliancehub.wiki 

As machine identities outnumber human employees by up to 100-to-1, modern cybersecurity has shifted from guarding human logins to managing a sprawling, unmonitored web of non-human credentials This podcast explores how the rise of Shadow AI and autonomous agents has transformed static secrets sprawl into an active, machine-speed threat vector capable of executing full kill chains without malware. Listeners will discover how leading security teams are moving beyond passive secrets scanning to enforce ephemeral workload federation and deterministic, action-layer constraints.
 
Sponsors:
www.vibehack.dev
www.cisomarketplace.com
www.compliancehub.wiki 
www.airiskassess.com
 

As Japan pushes to become the world’s most “AI-friendly” country to combat severe demographic decline under its Society 5.0 vision, the government has introduced a light-touch, pro-innovation regulatory framework that actively reduces data consent requirements to support domestic model development. However, this rapid digital transition has created a sharp tension between preserving national technological sovereignty—articulated in stark ministerial warnings about Japan becoming an "AI colony"—and protecting the privacy of its citizens. Sociological and media policy researchers warn that this soft-law approach has created a significant "vulnerability gap," disproportionately shifting the burden of proof and routes of redress onto marginalized groups, including elderly citizens facing digital exclusion, women confronting algorithmic harassment, and creators fighting for likeness and voice protections.
 
Sponsors:
www.cisomarketplace.com
www.myprivacy.blog
www.compliancehub.wiki 

Step into the hyper-accelerated reality of 2026, where traditional firewalls have fallen and identity has become the new corporate perimeter. We deconstruct how elite extortion syndicates like ShinyHunters use AI-powered voice-cloning vishing to compromise administrative Single Sign-On accounts, turning a single login into a multi-SaaS data shopping spree. From the devastating Handala remote-wipe attack that wiped 200,000 Stryker devices globally overnight using Microsoft Intune, to the post-acquisition exploitation of Abbott Laboratories’ legacy systems, we unpack the raw statistics, technical entry vectors, and geopolitical chess matches defining the modern threat landscape.
 
Sponsors:
www.cisomarketplace.com
www.breached.company
www.scamwatchhq.com