CISO Insights: Voices in Cybersecurity

This episode investigates why international data protection enforcement currently lags behind the seamless cooperation seen in competition and consumer law. Listeners will discover how legal barriers and resource constraints hinder Data Protection Authorities from effectively sharing investigative information across borders. We conclude by outlining key recommendations from a recent EDPB report, i...

Based on a comprehensive study of espionage cases in Europe from 2008 to 2024, this episode reveals how intelligence services are adapting to the digital age by treating spying like a "gig economy" job. We explore the shift from traditional insiders to "disposable" spies recruited via social media apps like Telegram, often for single, low-level tasks such as sabotage or observation. The discussion...

This series explores the complex battlefield of modern information influence, examining how malign actors exploit cognitive biases and leverage technologies like AI and video games to manipulate public perception and undermine democratic institutions. We delve into the mechanics of these operations—from the creation of data voids and gendered disinformation to the strategic use of fear—and how the...

As autonomous AI agents face sophisticated "Soul Engineering" attacks that subvert their core identities, the recent Moltbook security crisis highlights the urgent need for verifiable data lineage. This episode explores how the ancient Islamic concept of isnād—the rigorous chain of transmission—is being reimagined as a technical architecture to establish provenance, verify "narrator" reputation vi...

2025 marked a record-breaking inflection point for cybersecurity, with over $96 billion in M&A activity driven by the urgent need to secure the "Machine Age" of enterprise AI. We explore why tech giants are aggressively acquiring "Security for AI" startups to build mandatory guardrails against prompt injection and data poisoning, while the "AI for SOC" market remains in an experimental phase d...

This episode uncovers why security experts are calling the OpenClaw and Moltbot ecosystem a "security nightmare," revealing how these autonomous agents act as vulnerable infrastructure rather than simple productivity apps. We explore the novel threat of "time-shifted" memory poisoning, where malicious instructions lie dormant in SOUL.md files to trigger logic bombs days or weeks after infection. F...

This episode uncovers the details behind the coordinated cyber sabotage that struck Polish wind farms, a combined heat and power plant, and a manufacturing firm on December 29, 2025. We explore how attackers exploited vulnerable FortiGate VPNs and default credentials to deploy destructive "DynoWiper" malware and corrupt critical industrial firmware, aiming to permanently disable physical equipment...

The NATO Strategic Communications Centre of Excellence's 2025 experiment reveals how AI has transformed social media bots from simple spammers into sophisticated actors capable of "psychological realism" and seamless integration into authentic human conversations. Researchers demonstrate that for as little as €10, manipulators can now generate mass-scale AI content and route funding through untrac...

This episode explores how Denmark, Estonia, Finland, Iceland, Latvia, Lithuania, Norway, and Sweden are mobilizing a "whole-of-society" defense to protect their democratic institutions from foreign information influence operations. We examine diverse regional strategies, ranging from Lithuania’s volunteer "elves" and Sweden’s Psychological Defence Agency to Finland’s comprehensive security model a...

The global fraud landscape is currently at a turning point known as the Sophistication Shift, where high-volume, "low-effort" scams are being replaced by fewer, sharper, and far more damaging attacks engineered with professionalized precision. Fraudsters have successfully industrialized deception by leveraging a "fraud production ecosystem" that pairs generative AI and deepfakes with autonomous fr...

Jurisdictions worldwide are developing AI governance policies that range from comprehensive "hard law" mandates like the EU’s AI Act to voluntary "soft law" frameworks favored by Singapore and the United Kingdom. While these approaches differ in legal enforceability and centralization, they coincide on core principles such as risk-based management and the establishment of dedicated safety institut...

This podcast explores how African nations have transitioned from fragmented sectoral protections to comprehensive, rights-based data frameworks inspired by global standards like the EU GDPR. We delve into the pivotal role of regional instruments like the Malabo Convention and the rise of "enforcement maturity," where increasingly confident regulators are now holding both global tech giants and gov...

This podcast explores the "decisive role" Swedish businesses play in national resilience, ensuring that vital societal functions like energy, food distribution, and telecommunications continue to operate during armed conflict or severe crisis. We examine how companies prepare for the "two-week" continuity goal by mapping critical dependencies, implementing systematic cybersecurity measures—such as...

Organizations today are struggling with a rapidly growing system of overlapping European frameworks, such as NIS2, DORA, and the GDPR, which often results in duplication of work and high administrative burdens. By adopting a Harmonised Security Management System (HSMS) and the Layered Framework Control Fabric (L-FCF), these entities can implement a "meta-compliance" strategy where a single set of...

We explore the rapid paradigm shift from passive chatbots to autonomous "agentic" AI, where new standards like the Model Context Protocol (MCP) grant systems the power to execute code and access sensitive files. Drawing on a massive empirical study of over 31,000 agent skills and real-world espionage campaigns like GTG-1002, we expose how attackers leverage "tool poisoning" and indirect prompt inj...

Join us as we analyze the 2026 data protection landscape, where a stabilization in aggregate GDPR fines contrasts with a sharp 22% increase in breach notifications fueled by geopolitical tensions. We discuss how the EU's proposed "Digital Omnibus" aims to streamline the complex "Digital Decade" regulations, even as authorities ramp up enforcement against AI systems like Replika and scrutinize "con...

The European Commission has introduced the "Digital Omnibus," a sweeping legislative package designed to streamline digital rules like the GDPR and AI Act to reduce administrative burdens and foster innovation. However, privacy experts warn that shifting to a subjective definition of "personal data" and creating broad commercial exemptions for "scientific research" could severely undermine fundame...

The 2025 CSA and Google Cloud survey reveals a widening gap between the "haves" and "have-nots" of AI readiness, identifying formal governance as the critical "maturity multiplier" that allows organizations to innovate faster while staying secure. Contrary to historical trends where security functions lagged behind new technology, security teams have emerged as early adopters, with over 90% active...

As AI agents move from experimental pilots to production via the Model Context Protocol (MCP), they introduce a fundamental architectural shift where Large Language Models sit at the center of security-critical decisions. This episode unpacks the Coalition for Secure AI’s comprehensive framework, exploring twelve core threat categories that range from novel vectors like tool poisoning and shadow s...

This episode explores the Department of War's strategic pivot to "Agentic Warfare," where proactive AI systems evolve from passive tools into digital staff officers capable of executing complex workflows rather than just generating text. We discuss how commanders are shifting from "in the loop" controllers to "on the loop" mission directors, overseeing a "planning multiverse" that runs millions of...

This series explores the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a stakeholder-first framework designed to help intelligence programs support the specific decisions and actions of those protecting the organization. We guide listeners through the model’s eleven distinct domains and the cyclical five-step implementation process—Prepare, Assess, Plan, Deploy, and Measure—to tra...

Transnational cybercrime has evolved into a globally distributed ecosystem where identity is now "synthetic, scalable and weaponizable" due to the proliferation of deepfakes and camera injection tools targeted at digital verification systems. To counter this, the Cybercrime Atlas fosters global collaboration to map criminal infrastructure and identify technical "choke points," a strategy validated...

This episode explores the newly drafted Cyber AI Profile, a guide designed by the National Institute of Standards and Technology (NIST) to help organizations manage the complex intersection of artificial intelligence and cybersecurity. We break down the three primary focus areas—Secure, Defend, and Thwart—which provide a structured approach to protecting AI system components, leveraging AI for def...

The International Monetary Fund (IMF) actively strengthens the global financial system by evaluating national cyber frameworks through the Financial Sector Assessment Program (FSAP) and providing demand-driven Technical Assistance to address increasingly sophisticated threats. Effective regulation requires a delicate balance between principles-based flexibility and prescriptive rules, while ensuri...

This episode examines how Artificial Intelligence and quantum computing have transitioned from frontier concepts to systemic forces that are fundamentally reshaping geostrategic competition and the nature of modern warfare. We investigate the critical milestone of "Q-Day," the point where the deployment of Shor's algorithm threatens to collapse the cryptographic foundations of digital trust, along...