エピソード

  • EP 20 - Why agentic AI is changing the security risk equation
    2025/11/26

    As organizations race to unlock the potential of agentic AI, a new security risk equation is emerging. In this episode of Security Matters, host David Puner sits down with Lavi Lazarovitz, Vice President of Cyber Research at CyberArk Labs, to explore how AI agents are transforming the threat landscape. Discover why identity and privileged access are now at the fault line of enterprise security, how attackers are already exploiting overprivileged AI agents, and what security teams must rethink before scaling AI across the business. Packed with real-world examples, expert insights, and practical advice, this episode is essential listening for anyone navigating the evolving intersection of AI and cybersecurity.

    続きを読む 一部表示
    45 分
  • EP 19 - Trust under attack: Spies, lies, and the new face of cybercrime
    2025/11/12

    Eric O’Neill, former FBI ghost and author of “Spies, Lies & Cybercrime,” joins host David Puner to take a deep dive into the mindset and tactics needed to defend against today’s sophisticated cyber threats. Drawing on O’Neill’s experience catching spies and investigating cybercriminals, the conversation explains how thinking like an attacker can help organizations and individuals stay ahead. The episode covers actionable frameworks, real-world stories, and practical advice for building cyber resilience in an age of AI-driven scams and industrialized ransomware.

    続きを読む 一部表示
    54 分
  • EP 18 - The humanity of AI agents: Managing trust in the age of agentic AI
    2025/10/28

    In this episode of Security Matters, host David Puner sits down with Yuval Moss, CyberArk’s VP of Solutions for Global Strategic Partners, to explore the fast-evolving world of agentic AI and its impact on enterprise security. From rogue AI agents deleting production databases to the ethical blind spots of autonomous systems, the conversation dives deep into how identity and Zero Trust principles must evolve to keep pace. Yuval shares insights from his 25-year cybersecurity journey, including why AI agents behave more like humans than machines—and why that’s both exciting and dangerous. Whether you're a security leader, technologist or curious listener, this episode offers practical guidance on managing AI agent identities, reducing risk, and preparing for the next wave of autonomous innovation.

    Explore more of Yuval’s thinking on agentic AI and identity-first security in these recent articles:

    • The life and death of an AI agent: Identity security lessons from the human experience
    • When AI Agents Mirror Humanity’s Best Behaviors…and Worst Behaviors
    • The Agentic AI Revolution: 5 Unexpected Security Challenges
    続きを読む 一部表示
    43 分
  • EP 17 - Privilege creep and the machine identity surge: Securing the modern enterprise
    2025/10/09

    In this episode of Security Matters, Chris Schueler, CEO of Cyderes, joins host David Puner for a dive into the evolving challenges of enterprise security. The conversation explores the dangers of privilege creep, the explosion of machine identities, and why accountability at every point of interaction is essential for building resilient teams and systems. Chris shares insights on the risks of unmanaged access, the impact of AI and automation on both defense and attack strategies, and practical advice for CISOs and boards on managing identity risk while enabling business transformation.

    Whether you’re a security leader, practitioner, or simply interested in the future of cybersecurity, this episode delivers actionable guidance and fresh perspectives on safeguarding your organization’s reputation, continuity, and trust.

    続きを読む 一部表示
    50 分
  • EP 16 - Sensing the signals: The hidden risks in digital supply chains
    2025/09/25

    Modern digital supply chains are increasingly complex and vulnerable. In this episode of Security Matters, host David Puner is joined by Retsef Levi, professor of operations management at the MIT Sloan School of Management, to explore how organizations can “sense the signals” of hidden risks lurking within their software supply chains, from open source dependencies to third-party integrations and AI-driven automation.

    Professor Levi, a leading expert in cyber resilience and complex systems, explains why traditional prevention isn’t enough and how attackers exploit unseen pathways to infiltrate even the most secure enterprises. The conversation covers the critical need for transparency, continuous monitoring, and rapid detection and recovery in an era where software is built from countless unknown components.

    Key topics include:

    • How to sense early warning signs of supply chain attacks
    • The role of AI and automation in both risk and defense
    • Best practices for mapping and securing your digital ecosystem
    • Why resilience—not just prevention—must be at the core of your security strategy

    Whether you’re a CISO, IT leader or security practitioner, this episode will help you rethink your approach to digital supply chain risk and prepare your organization for what’s next.

    Subscribe to Security Matters for expert insights on identity security, cyber resilience and the evolving threat landscape.

    続きを読む 一部表示
    49 分
  • EP 15 - Why banks need to treat machine identities like VIPs
    2025/09/10

    In this episode of Security Matters, host David Puner speaks with Andy Parsons, CyberArk’s Director of EMEA Financial Services and Insurance, whose career spans from the British Army to CISO and CTO roles in global financial institutions. Andy shares hard-earned lessons on leadership, risk management, and the evolving cybersecurity landscape in banking—from insider threats to machine identity governance and the rise of agentic AI.

    Discover why “you can’t secure what you can’t see,” how manual processes fail at scale, and why treating machine identities as “first-class citizens” is no longer optional. Andy also explores the privileged access paradox, dynamic access management, and how AI is reshaping compliance, trading, and operational resilience.

    Whether you're a security leader, technologist, or financial executive, this episode offers strategic insights and practical steps to future-proof your organization in an era of accelerating digital risk.

    続きを読む 一部表示
    45 分
  • EP 14 - Beyond secrets: Securing the future of machine identity
    2025/08/27

    In this episode of Security Matters, host David Puner sits down with Matt Barker, CyberArk’s VP and Global Head of Workload Identity Architecture, for a deep dive into the exploding world of machine identities and the urgent need to rethink how to secure them. From his journey co-founding Jetstack and creating Cert Manager to leading CyberArk’s efforts in workload identity, Matt shares insights on why secrets-based security is no longer sustainable—and how open standards like SPIFFE are reshaping the future of cloud-native and AI-driven environments.

    Discover how machine identities now outnumber humans 80 to 1, why leaked secrets are a "hacker’s buffet," and how workload identity is becoming a cornerstone of Zero Trust architecture. Whether you're a CISO, platform engineer, or just curious about the next frontier in cybersecurity, this episode offers actionable advice and a compelling vision for securing the age of AI agents.

    続きを読む 一部表示
    46 分
  • EP 13 - Pizza parties and profit margins: The business of cybercrime
    2025/08/12

    Cybercriminals today operate more like startups than stereotypes—complete with org charts, sprint cycles, and pizza parties to celebrate successful breaches. In this episode of Security Matters, host David Puner talks with former CISO and U.S. Air Force veteran Ian Schneller about the evolving sophistication of threat actors and what it takes to stay ahead.

    From zero-day vulnerabilities and machine identity risks to AI-powered attacks and insider threats, Ian shares practical strategies drawn from his experience in military intelligence, offensive cyber operations, and corporate security leadership. Learn how to build resilience, translate cyber risk into business outcomes, and lead with mission-driven clarity in a threat landscape that never slows down.

    続きを読む 一部表示
    40 分