Thales Security Sessions

Software monetization isn’t just about selling more subscriptions—it’s about survival. In today’s fast-moving digital economy, companies that fail to capture, protect, and maximize the value of their software risk falling behind, losing revenue, and even compromising security. From industrial automation to cutting-edge AI in healthcare, software isn’t just a product—it’s the backbone of modern bus...

Cybersecurity is at a crossroads, and so are the women in it. While progress is visible, the numbers tell a different story—women’s representation in cyber is stagnating, and in some cases, even declining. Why is that happening? What barriers still stand in the way, and what can we do about it? In this episode, we sit down with two powerhouse women in the field—Jane Frankland and Kate Barecchia—to...

What happens when a 10-year NFL veteran swaps the gridiron for the world of cybersecurity? In this episode, we sit down with John Fina, a former professional football player who’s made a remarkable transition from defending end zones to defending corporate networks. John shares how lessons from the field—like strategic thinking, relentless diligence, and studying opponents inside and out—gave him...

What does 2025 have in store for us? If it is anything like 2024, it will be interesting times indeed. In this episode, host Steve Prentice has a virtual fireside chat with David Holmes, CTO for Application Security, Imperva, a Thales company. The two of them chat about Salt Typhoon, ransomware, AI as a threat surface, quantum computing, the software supply chain, the importance of having a breach...

Data sovereignty has three dimensions: data residency, access to data, and stewardship of data. Besides deciding where to store data, it is essential to determine who can have access to it - which becomes more crucial as we consider priorities such as access to cloud across national borders, as well as using the data for training AI models. Furthermore, many organizations do not have complete know...

The quantum computing revolution is almost upon us, and this means a new world of cryptography, cybersecurity and, of course, cybercrime. Not all of us are aware of the magnitude of the change that needs to be made. It’s not like swapping out one component of a network for a newer bigger one. There are many small parts holding the cyber world together. Moving toward the age of post quantum cryptog...

Passkeys are a groundbreaking technology that leaves traditional passwords in the dust. They are designed to be resistant to phishing attacks thanks to their relationship to specific websites or services, and they significantly reduce the risk of credential theft. As organizations struggle with the noise of cybersecurity issues such as ransomware and social engineering, the widescale adoption of p...

Cloud technology may be efficient and vital to the global economy, but it comes at a substantial cost in terms of the power to make it run. This will only increase as more sophisticated forms of computing such as AI become normalized. But there are solutions for making this elastic and ubiquitous technology more ecologically responsible, ranging from using innovative cooling techniques through to...

Information and communication technology (ICT) risk management is a vital part of daily practice for organizations in any industry. For those in the EU financial sector, a new set of regulations is being put in place in the form of the Digital Operational Resilience Act aka DORA. But it doesn’t just affect European financial companies – it affects anyone in the world that does business with them,...

In discussing the recent acquisition of Imperva into the Thales fold, Nanhi Singh, VP Application Security and Customer Success at Imperva, and Todd Moore, Global Head of Data Security Products at Thales, dive deep into the many areas of security that will be positively affected, including APIs, bots and of course, generative AI. This is not a self-congratulation conversation: it’s a roadmap for h...

Guests: James Leaton Gray, Director at The Privacy Practice, a firm that specializes in privacy and data protection and Haider Iqbal Manager of Product Marketing for Thales Identity and Access Management business. Trust is vital to the relationship between companies and their customers, especially when it comes to protecting data. But companies have been traditionally confronted by a resistance on...

We had a great year talking with experts on a range of security topics, so who better to turn to for prognostications for the new year? Here’s a collection of predictions from some of our guests.

The practice of using different passwords for the hundreds or thousands of online locations we visit has grown quite out of control and long ago fell short of being a practical or secure process. In this episode, we discuss the practicality of Self-Sovereign Identities, in which a person’s individual, identifiable self is based on attributes and behaviours rather than centrally stored data. Is thi...

The data about ourselves is willingly submitted to organizations every time we make a purchase, open an account, or simply move around, online and in-person. Where does it go? Who owns it? What do they do with it? Steve Prentice talks with Justin Sherman, who thinks we should be more proactive about understanding the roles data brokers play in our lives and our futures.

The concepts behind Diversity, Equity, and Inclusion have been practiced by some organizations in the past, but in this new era where the border lines between work and life are becoming increasingly blurred, and where technologies are helping people contribute in ways never seen before, it’s a good time to reassess what DEI is and how central it is to an organization. Dwan Jones of ISC2 brings her...

Is there such a thing as a quantum computing cryptopocalypse? Will we see the end of current security practices within the next few years, and what does this mean for the data that organizations would like to keep safe for longer than that? Nemertes CEO Johna Till Johnson and Bob Burns, Chief Product Security Officer at Thales, join host Steve Prentice to explain it all, and – of course – what you...

Cloud continues to evolve, but so too do the human organizations that depend on it. Companies expand into new territories, they buy other companies, or get bought, and the vendors with whom they drew up contracts also change, evolve, and farm out work. It’s a landscape of shifting sands where you can never be quite sure of who you’re really dealing with. Host Steve Prentice invites Sean Heide from...

When you are a hammer, everything looks like a nail. Cybercriminals continue to succeed in discovering flaws and weaknesses in every connected technology. From zero days to SQL injection, what most people see as technology designed to perform a specific task, they see as a door, a window, or even a simple crack through which they can gain access. On this episode, host Steve Prentice talks with Ama...

Companies and cloud providers around the world are tackling the thorny issue of digital sovereignty, seeking to protect their customer’s data as it travels across physical borders, while simultaneously respecting the various data privacy laws already in place. But digital sovereignty is not just a matter of location. On this episode, host Steve Prentice talks with Nellie Porter, head of product, G...

Over the past few years, the definition of the chief information security officer (CISO) has changed as business environments have evolved. With digital transformation, cloud and hybrid working taking an increasingly dominant role in the day-to-day operations of the typical organization, the CISO has a unique and highly valuable role to play. However, a shortage of qualified IT workers at a time o...

Today, data breaches are so endemic that it could be argued that consumers are becoming numb to the effects – they change their passwords, get a few reassuring emails from the company and more often than not nothing comes of it. Of course, businesses will feel the impact, and perhaps after repeated breaches consumers might start getting worried, but is the idea that a large data breach could seal...

For this episode, Kevin Williams, VP Americas Sales at Thales Cloud Protection & Licensing and Michael Bahar, Partner & Co-Lead of Global Cybersecurity and Data Privacy at Eversheds Sutherland, join Neira Jones to discuss the current cybersecurity, privacy and regulatory landscape in the Americas.

More digital has meant mean more cloud. The pandemic and the shift to hybrid working has prompted an acceleration in the adoption of cloud technologies by IT leaders worldwide, which looks set to continue for the foreseeable future. Previously, organizations have primarily looked at new application development and deployment for cloud, taking a ‘cloud first’ approach. However many have now pivoted...

In this episode, we discuss what we mean by cyber insurance, and why are we seeing more companies take out policies. We will also look at what types of threats are covered and how cyber insurance jurisdiction works across different regions. The experts joining, Neira Jones, for this episode are Danna Bethlehem, Product Marketing Director at Thales and Anthony Dagostino, CEO and Co-Founder, Converg...

In this episode we explore the typical style of ransomware attacks, look at who is carrying them out, and discuss some best practice protective strategies Joining our regular host, Neira Jones, for this episode are Paul Chichester, Director of Operations of the UK National Cyber Security Centre, and Bob Burns, Chief Product Security Officer at Thales.