Shows / Security Insights
Security Insights
A podcast that takes a deeper look at today’s most important issues in cyber security, and beyond.
Episodes
- Security Insights
CISO Interview: Richard Marcus, Optro
Cybersecurity and governance, risk and compliance are converging, driven by developments in technology, and a shared threat. But how do organisations handle…
- Security Insights
Datalakes: a vital resource or security threat?
Businesses are capturing, and storing, ever larger volumes of data. These data sources are vital for decision making, and of course for AI. But they can pose…
- Security Insights
Cyber threats, budgets and frameworks
In the face of growing cyber threats, the obvious step is to ask for more budget. But does spending more on security tools always improve an organisation’s…
- Security Insights
Cyber resilience: do boards fall short?
A recent survey suggests that, in the UK at least, boards overestimate their organisations' ability to withstand a cyber attack. And they overstate their…
- Security Insights
AI: Cybsersecurity's friend, or foe?
Recent incidents show the risks AI can pose to cybersecurity. At the same time, the security industry is putting a lot of store on AI as a way to bolster…
- Security Insights
Hiding in silos: cyber and physical security
Physical and cyber security are separate disciplines. But are they converging, and what can they learn from each other? Do changes in the threat landscape…
- Security Insights
Shadow IT, shadow AI: a new security frontier?
Is shadow AI today as great a risk as shadow IT was over the last decade? And have we learned the security lessons from previous IT transformations, including…
- Security Insights
AI vs CNI: Rob Demain, e2e-assure
According to the NCSC, there were over 200 attacks against UK critical national infrastructure last year. Some three quarters of these are thought to be linked…
- Security Insights
Disrupting a phishing group: an insider story
In this episode, we hear how security researchers and law enforcement worked together to disrupt Tycoon 2FA, a phishing as a service group. How did they…
- Security Insights
Cyber resilience, Resilient You
In this episode we welcome back the Cyber Agony Aunts, Amelia Hewitt and Rebecca Taylor. As the UK's Cybersecurity and Resilience Bill works its way through…
- Security Insights
Founder interview: Benny Czarny, OPSWAT
Cybersecurity has its share of innovators, inventors and, of course, entrepreneurs. Benny Czarny created OPSWAT more than 20 years ago, to develop a common…
- Security Insights
In plain sight: hunting secrets shared in code
Security researchers have found millions of hard-coded secrets, in plain text, across both public and private code repositories. These include credentials, API…
- Security Insights
Security through community: Ameet Jugnauth, ISACA
How can cybersecurity professionals "engineer" resilience? And why is an effective community an increasingly important part of our defence against cyber…
- Security Insights
Resilience, recovery and living through a cyber attack: VNOG
How do you live through a cyber attack, and recover from it? What lessons can you learn? And why is resilience moving up the cybersecurity agenda? In this…
- Security Insights
Quantum, cryptography and Q Day: are we ready?
Soon, quantum computers will be able to decrypt "production grade" encryption, putting both privacy and security at risk. But how close is "Q Day", and is a…
- Security Insights
DDoS: complex attacks, persistent threats
DDoS attacks have posed a threat since the late 1990s. And distributed denial of service attacks have proven to be hard to prevent, and to deter. Security…
- Security Insights
CISO Interview: Mike Baker, DXC Technology
In this CISO interview, we discuss the role of a CISO in a global technology services business, the changing threat landscape -- from geopolitics to the growth…
- Security Insights
Insights Interview: Haider Pasha, CSO EMEA and LATAM, Palo Alto Networks
Over the last few years, we’ve seen the resurgence of geopolitics as a driver for cybersecurity, especially in Europe. But the return of war to the continent…
- Security Insights
Inside threat intelligence: Rafe Pilling, Sophos
What, exactly, is threat intelligence? And how do CISOs use it? Security teams now have access to multiple sources of information on threats and threat actors…
- Security Insights
Sovereignty, resilience and data: Keepit CISO Kim Larsen
What is digital sovereignty, how does it relate to data sovereignty, and to resilience? In this CISO Interview, we speak to Kim Larsen, CISO at Keepit, a…
- Security Insights
Cybersecurity skills: a people shortage, or a skills gap?
The cybersecurity skills gap might be narrowing. According to the latest Cybersecurity Workforce Study, from ISC2, CISOs are less concerned about the number of…
- Security Insights
Politics, geography, AI and cyber threats: 2026 and beyond.
In the first episode of Series 7 of Security Insights,we welcome back Charl van der Walt, head of security research at Orange Cyber Defense. We discuss the key…
- Security Insights
Resilience in cyber: an agony aunt's view
Cybersecurity is about building resilient organisations. But this is impossible without resilient people. Cyber defence is often a highly pressured working…
- Security Insights
Calm under fire: the importance of cyber resilience
Cybersecurity is changing its focus. Increasingly, it is less about defence and more about resilience. Organisations have to be able to withstand and recover…
- Security Insights
Insights Interview: Chris Dimitriadis, ISACA
This year has not been easy for cybersecurity teams. Businesses continue to face cybercrime and state-sponsored attacks, especially ransomware. AI is proving…
- Security Insights
Ukraine, cyberwar and CNI
Critical infrastructure is on the front line of the war in Ukraine. And as the conflict approaches its fourth year, there is little sign of that changing…
- Security Insights
Bug bounties: risks and rewards
A growing number of organisations now offer "bug bounties", paying hackers or security researchers rewards for finding vulnerabilities. But how do these…
- Security Insights
DDoS, geopolitics and AI
DDoS – or distributed denial of service attacks – remain a serious source of disruption across the internet. DDoS attacks continue to grow in their frequency…
- Security Insights
Cyber skills: a crisis of our own making?
Is cybersecurity's skills crisis one of its own making? And why have initiatives to close the skills gap made relatively little impact? In this episode, our…
- Security Insights
Defending education: countering the cyber threat
Education is increasingly in the crosshairs for malicous actors. Along with other public sector bodies, schools, colleges and universities are being targeted…
- Security Insights
Vulnerabilities, CVEs and the attack surface
In this episode, we discuss whether vulnerability scores are still a viable tool when it comes to measuring cyber threats. Both CVEs and CVSS are core security…
- Security Insights
Human risk factors: cybersecurity's weak spot
More than three quarters of security breaches result from human behaviour. But as an industry, we focus far more on technical security measures, than on the…
- Security Insights
AI, Testing and Red Teaming, with Peter Garraghan
Artificial intelligence is often described as a "black box". We can see what we put in, and what comes out. But not how the model comes to its results. And…
- Security Insights
Non-human identities: the rise of the machines
Non-human identities now vastly outnumber human actors on the internet, perhaps by as many as 50 to one. APIs, online devices and service calls now dominate…
- Security Insights
Balancing risk and security: Rich Seiersen
Managing cybersecurity is increasingly about managing risk. It's not possible to stop every attack or prevent every breach. So CISOs need to link the…
- Security Insights
Cyber Security Foundations: security by the book
Can a book hold the answers to our cybersecurity challenges? Perhaps not. But a new book from the Information Security Group at Royal Holloway, University of…
- Security Insights
Verizon's DBIR: tracking security threats
Verizon's Data Breach Investigations Report is one of the longest-running research studies in the industry. This year's report is the 18th and tracks over…
- Security Insights
Beyond the Titanic: Cybersecurity in Northern Ireland
In this episode, we look at the growth of the cybersecurity industry in Northern Ireland. What are the reasons for its success, and why does cyber play an…
- Security Insights
CISO Interview: Mandy Andress, Elastic
Our guest this week is Mandy Andress is CISO at Elastic. Elastic describes itself as a “search AI company”, and is very much at the forefront of modernising…
- Security Insights
Insights Interview: Claudia Natanson, UK Cyber Security Council
Dr Claudia Natanson is CEO at the UK Cyber Security Council. The Council, which is funded by the Government's Department for Science, Innovation and…
- Security Insights
Episode 125: Insights Interview, with James Bore
Our guest for the 125th episode of Security Insights is James Bore. A well-known industry figure and speaker on cybersecurity, James runs the family…
- Security Insights
Why CISOs quit: cyber's leadership crisis
Are CISOs leaving the industry in droves? One survey suggests that as many as one in four senior cybersecurity leaders plans to leave the profession. The…
- Security Insights
Stress testing cyber defences
How far should you push security tests? Sometimes, the answer is "to the limit". In this episode we look at stress testing in cybersecurity. Putting systems…
- Security Insights
Fighting Ransomware, with Raj Samani
Ransomware remains one of the greatest cyber threats to organisations. Certainly, it is the threat at the top of most boards' agendas. The reasons are clear…
- Security Insights
The eye of the storm: dealing with a cyber crisis
What happens when a cyber attack hits? What is it like to be in the eye of the storm, and how can security teams prepare? A cyber attack is inevitably a highly…
- Security Insights
CISO Interview: Jack Mersey Westbury Street Holdings
In a new series of interviews with cybersecurity leaders, we meet Jack Mersey, CISO at Westbury Street Holdings. In an in-depth interview, he discusses threats…
- Security Insights
Hacktivism's changing faces
Hacktivist groups have been around almost as long as the public internet. But their make up, and their goals, have changed. Hacktivism is no longer about…
- Security Insights
Security and AI: Jon France, CISO, ISC2
AI poses risks to security, through possible flaws in the applications themselves, and by AI being used by threat actors to develop malware and improve their…
- Security Insights
Cyber stress: are we burning out?
Is stress unavoidable, if you work in cyber? And does workplace stress in the industry threaten security? Stress and burnout among cyber teams are now a real…
- Security Insights
Insights Interview: Geopolitics and cyber threats, with the ISF's Steve Durbin
Geopolitics is increasingly influencing cybersecurity. The growth of online espionage, the potential for attacks by state actors, and governments turning a…
- Security Insights
Deepfakes: uncovering the security risks
There's a lot being said (and written) about deepfakes. And there is no doubt that they can now be very convincing, to the point where they can deceive the…
- Security Insights
SaaS and security: shared responsibility, or hidden risks?
Software as a service, or SaaS, has been a huge success. There are now some 30 thousand SaaS applications on the market worldwide. These cover everything from…
- Security Insights
Investing in cyber: should we follow the money?
Europe's cybersecurity industry is worth some $50bn and is growing at 10% a year. It's also pretty fragmented – at least when it comes to vendors. Europe --…
- Security Insights
Cyber escape rooms - and experiential learning
Conventional security training leaves a lot to be desired. So what can CISOs do, to deliver training and security awareness in a way that is effective, and…
- Security Insights
Human Risk Management: tackling cybersecurity's weak spot
How do we manage the risks posed by human behaviour? In this, the second of our short series exploring the links between human behaviour and security, we look…
- Security Insights
Mind games: the psychology of cybersecurity
How important is human behaviour in cybersecurity? How well do we know our people, and do we understand the risks posed by individuals' actions? Research…
- Security Insights
AI: chatbots, cut and paste, and data leaks
Our guest for this episode is Tim Freestone, of Kiteworks. He’s a long-standing expert in data protection and data privacy. And he's been following the growth…
- Security Insights
IT, OT, and CNI: a hidden threat?
Any advanced economy relies on the smooth running of its infrastucture. And whether it’s transport, logistics, healthcare, the banking system, manufacturing –…
- Security Insights
Ransomware: can transparency bring security?
It's hard to put an exact figure on ransomware attacks. All the available research shows incidents continue to grow year on year, and that the vast majority of…
- Security Insights
Cyber war: new lessons from history?
The idea of cyber war is not new; researchers first suggested the concept 30 years ago. Since then, there's been a debate on what cyber war means and what can…