Explore the systematic RESIST 3 framework, which guides government communicators through six sequential steps designed to build resilience against the impacts of manipulated, false, and misleading information (MDM). This episode details the crucial "Recognise" stage, where communicators use the FIRST indicators (Fabrication, Identity, Rhetoric, Symbolism, Technology) to identify the components of compromised messages and coordinated behavior. We show how utilizing Impact Analysis and structured evaluation ultimately supports better decisions on prioritizing resources and ensures continuous improvement in counter-disinformation efforts.
https://www.compliancehub.wiki/building-resilience-against-information-threats-a-deep-dive-into-the-uk-governments-resist-3-framework
https://www.myprivacy.blog/the-silent-war-psychological-operations-from-the-kgb-to-tiktok
https://www.compliancehub.wiki/the-white-house-influencer-pipeline-how-the-biden-administration-revolutionized-government-communications-through-social-media
www.securitycareers.help/briefing-document-the-resist-3-framework-for-countering-information-threats
Sponsor:
www.cisomarketplace.com 
www.myprivacy.blog
www.compliancehub.wiki 

The 2025 OWASP Top 10 reveals a fundamental shift in application security, showing how threats have transformed from simple code flaws like buffer overflows to exploiting the systemic complexity of cloud-native and microservices architectures. This newest list confirms the continued dominance of Broken Access Control (A01) and spotlights the critical surge of Security Misconfiguration (A02) to the number two spot, reflecting that infrastructure has become the primary attack surface. We examine why Software Supply Chain Failures (A03) became the new perimeter—despite limited presence in collected data—and discuss how integrating DevSecOps practices is the only way to meet modern development velocity.
 
Sponsors:https://cloudassess.vibehack.dev
https://vibehack.dev
https://airiskassess.com
https://compliance.airiskassess.com
https://devsecops.vibehack.dev

APIs are the "nervous system" of modern applications, making them the number one attack vector, with flaws like Broken Object Level Authorization (BOLA), Broken Object Property Level Authorization (BOPLA), and Broken Function Level Authorization (BFLA) accounting for a high percentage of breaches. This episode delves into the multi-layered "defense-in-depth" strategies required to mitigate these threats, focusing on input validation, rate limiting, and centralized enforcement via API Gateways We explore how integrating security testing into the CI/CD pipeline and maintaining a proper inventory helps organizations eliminate "shadow" or "zombie" APIs and build a true culture of digital resilience.
 
Sponsors:https://cloudassess.vibehack.dev
https://vibehack.dev
https://airiskassess.com
https://compliance.airiskassess.com
https://devsecops.vibehack.dev

Driven by a market anticipated to exceed USD 40.6 billion by 2030, DevSecOps Engineers are crucial experts who bridge the gaps between software development, security protocols, and operational efficiency. Successful implementation relies on a socio-technical work system that emphasizes cultural transformation, shared security responsibility, and procedural excellence by embedding security ("shifting left") into the Software Development Lifecycle. This episode delves into the key requirements for professionals in 2025, from mastering automation tools like Terraform and ensuring robust container security (Kubernetes/Docker) to leveraging application scanning with tools like SonarQube and Trivy.
 
Sponsors:https://cloudassess.vibehack.dev
https://vibehack.dev
https://airiskassess.com
https://compliance.airiskassess.com
https://devsecops.vibehack.dev

The Google Threat Intelligence Group (GTIG) has identified a significant shift where adversaries are now deploying novel AI-enabled malware in active operations, moving beyond simple productivity gains observed in 2024. This new operational phase includes "Just-in-Time" AI malware, such as PROMPTFLUX and PROMPTSTEAL, that utilize Large Language Models (LLMs) during execution to dynamically obfuscate code, regenerate themselves, or generate malicious commands, representing a significant step toward more autonomous and adaptive malware. Furthermore, state-sponsored actors are using social engineering pretexts—like posing as students or "capture-the-flag" participants—to persuade AI systems like Gemini to bypass safety guardrails, even as Google disrupts accounts and strengthens its models and the Secure AI Framework (SAIF).
https://breached.company/the-ai-productivity-paradox-in-cybersecurity-why-threat-actors-havent-changed-the-game-yet
https://www.hackernoob.tips/five-novel-ai-powered-malware-families-that-are-redefining-cyber-threats-in-2025
 
Sponsors:
www.breached.company
www.cisomarketplace.com
 

Cybersecurity leaders, including CISOs, face overwhelming job demands and chronic stress, with up to 80% classifying themselves as “highly stressed” due to resource limitations and the ceaseless evolution of threats. This pressure is compounded by alert fatigue—where the relentless influx of noisy, often false-positive alerts causes mental and operational exhaustion—and a lack of formal support, leading to high attrition and cognitive symptoms like difficulty concentrating. We explore how Agentic AI automation transforms operations by handling routine triage and "grunt work", and why proactive executive backing, including fostering work-life balance and a no-blame culture, is essential to retaining talent and preserving organizational security.
 
Sponsor:
www.cisomarketplace.com 
https://cyberboard.cisomarketplace.com
https://peersight.cisomarketplace.com
https://vrm.cisomarketplace.services
 

The COVID-19 pandemic introduced unprecedented volatility and uncertainty (VUCA) to global supply chains, forcing retailers to rapidly pivot their operational strategies to manage severe disruption. This episode explores interview findings revealing how supply chain professionals effectively utilized a blend of proactive strategies, such as digital technology adoption and supplier collaboration, with reactive contingency planning to maintain business continuity. We detail the critical importance of enhanced supply chain visibility, organizational agility, and strategic knowledge management in enabling organizations to recover quickly and achieve sustainable long-term resilience.
 
Sponsors:
https://vrm.cisomarketplace.services
https://vendorscope.cisomarketplace.com
 

Municipalities face escalating cyber threats like devastating ransomware attacks, which have cost cities like Atlanta millions of dollars in recovery and disrupted essential public services. This vulnerability is amplified by the mass deployment of interconnected IoT devices and the convergence of traditional IT with sensitive Operational Technology (OT), blurring security boundaries and expanding the potential attack surface. We explore essential strategies, from embracing Zero Trust Architecture to establishing integrated governance, vital for city leaders and IT teams seeking to build cyber-resilient communities and protect critical infrastructure.
 
Sponsor:
https://cybersafe.city
https://www.secureiot.house
https://www.secureiotoffice.world