# security podcast (audio feeds) — RSS Amplifier Recent posts from the 3 feeds in the RSS Amplifier directory that cover security podcast. Page: Feed: --- ## [Shadow AI & Sandbox Escapes: Why You Need an Agentic Control Plane?](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/Shadow-AI--Sandbox-Escapes-Why-You-Need-an-Agentic-Control-Plane-e3niod5) _2026-08-18 · TechRiot.io · Cloud Security Podcast_ When Claude Cowork hits a roadblock, it doesn't give up, it writes a custom Python script and downloads an untrusted NPM package just to bypass its restrictions and finish its goal. Are your security tools close enough to stop it? In this episode, Ashish sits down with Michael Leland , VP, Field CTO at Island , to discuss the critical need for an Agentic Control Plane. Michael breaks down why… [Listen](https://anchor.fm/s/10fb9928/podcast/play/124395365/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-7-18%2F430078301-44100-2-e2c10fef2471.mp3) ## [Flock Cameras Exposed: Traffic Tickets, ALPRs, and Vehicle Surveillance](https://sharedsecurity.net/2026/08/17/flock-cameras-exposed-traffic-tickets-alprs-and-vehicle-surveillance/) _2026-08-17 · Tom Eston, Kevin Tackett, and Scott Wright · Shared Security Podcast_ Flock cameras and automated license plate readers are often sold as tools for finding stolen cars, wanted suspects, missing people, and serious threats. But what happens when that same infrastructure starts being used for everyday traffic enforcement, broader vehicle surveillance, or searchable location databases? In this episode, Tom, Kevin, and Scott discuss a 404 Media report about police… [Listen](https://media.transistor.fm/a880f103/12d8120d.mp3) ## [GrapheneOS Phone Wipe Case: When Privacy Tools Become Evidence](https://sharedsecurity.net/2026/08/10/grapheneos-phone-wipe-case-when-privacy-tools-become-evidence/) _2026-08-10 · Tom Eston and Scott Wright · Shared Security Podcast_ A federal case involving a GrapheneOS phone wipe during an airport search raises a bigger question for privacy-minded users: can using strong mobile security features be treated as evidence of criminal intent? Tom and Scott break down what happened, why border searches are different, and what this could mean for secure phones and everyday privacy. Tom and Scott also discuss duress codes, realistic… [Listen](https://media.transistor.fm/d690d1b5/5ffa685f.mp3) ## [How Adobe Uses AI Agents for building a WAF Pipeline?](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/How-Adobe-Uses-AI-Agents-for-building-a-WAF-Pipeline-e3msljq) _2026-08-04 · TechRiot.io · Cloud Security Podcast_ When vulnerability disclosures shrink the wild exploit window down to less than 24 hours (or even minutes), traditional manual patching and WAF rule creation simply cannot keep up. In this episode, Ashish sits down with Ammar Alim (Product Security Engineering Lead at Adobe ) to break down how to build an automated, agentic WAF pipeline. Ammar shares how his team manages the scale and complexity… [Listen](https://anchor.fm/s/10fb9928/podcast/play/123671610/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-7-3%2F429091783-44100-2-4e7c15ecfb54b.mp3) ## [OpenAI Says Its AI Hacked Another Company on Its Own](https://sharedsecurity.net/2026/08/03/openai-says-its-ai-hacked-another-company-on-its-own/) _2026-08-03 · Tom Eston, Scott Wright, Kevin Tackett · Shared Security Podcast_ OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent, an agent following bad scope boundaries, or a warning about giving AI systems real tools and permissions? Tom, Scott, and Kevin discuss why anthropomorphizing AI makes the story harder to evaluate, what companies should… [Listen](https://media.transistor.fm/e1282a93/b6456081.mp3) ## [Why Runtime Agents Are Replacing Static Posture Checks](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/Why-Runtime-Agents-Are-Replacing-Static-Posture-Checks-e3mk7t5) _2026-07-28 · TechRiot.io · Cloud Security Podcast_ The attack window from the discovery of a vulnerability to its exploitation has shrunk to less than 24 hours and sometimes down to just 25 minutes. Is your security team prepared for the speed of AI-driven attacks? In this episode, Ashish sits down with Sarit Tager , who leads Cortex Cloud product management at Palo Alto Networks , to discuss why the post-Mythos era is forcing Cloud Security and… [Listen](https://anchor.fm/s/10fb9928/podcast/play/123395429/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-6-27%2F428717083-44100-2-f9d4b7c591eee.mp3) ## [Your Monitor Can Install Adware Now?](https://sharedsecurity.net/2026/07/27/your-monitor-can-install-adware-now/) _2026-07-27 · Tom Eston, Scott Wright, and Kevin Tackett · Shared Security Podcast_ You plug in a new monitor. Windows detects the hardware, pulls down a vendor companion app, and the first thing you see is… a McAfee ad. That’s the story that kicks off this episode, but the bigger issue is not just one annoying popup. Hardware setup has become a software delivery channel. Drivers, companion apps, RGB utilities, printer suites, vendor dashboards, trialware, telemetry, ads, and… [Listen](https://media.transistor.fm/7bf5eb3e/12712533.mp3) ## [Surveillance Pricing: When Your Data Sets the Price](https://sharedsecurity.net/2026/07/20/surveillance-pricing-when-your-data-sets-the-price/) _2026-07-20 · Tom Eston and Scott Wright · Shared Security Podcast_ This week on Shared Security, Tom and Scott dig into surveillance pricing: the use of personal data, behavioral profiles, shopping history, location signals, income assumptions, household information, and AI-driven targeting to decide what price or discount different people see for the same product. The conversation connects New Jersey’s proposed grocery surveillance-pricing ban, Consumer… [Listen](https://media.transistor.fm/6da0698d/95bec852.mp3) ## [Signal Phishing and Russian Intelligence Targeting Messaging Apps](https://sharedsecurity.net/2026/07/13/signal-phishing-and-russian-intelligence-targeting-messaging-apps/) _2026-07-13 · Tom Eston and Kevin Tackett · Shared Security Podcast_ Russian intelligence services are targeting Signal, WhatsApp, and Telegram users — not by breaking encryption, but by stealing accounts through phishing, QR code tricks, linked-device abuse, and backup recovery key theft. Tom and Kevin break down the FBI warning, the $10 million Rewards for Justice bounty, and the practical security lesson for anyone relying on encrypted messaging: your app can be… [Listen](https://media.transistor.fm/8199e965/a76162c9.mp3) ## [The Hidden Cost of BlackBox AI: Bridging Cloud and Code Security](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/The-Hidden-Cost-of-BlackBox-AI-Bridging-Cloud-and-Code-Security-e3lsevn) _2026-07-09 · TechRiot.io · Cloud Security Podcast_ Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI seems like a magic bullet, simply wrapping an out-of-the-box LLM around your code can result in confident hallucinations and astronomical costs extrapolating to as much as $52 million a year for a large enterprise using… [Listen](https://anchor.fm/s/10fb9928/podcast/play/122616247/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-6-9%2F427668412-44100-2-f8642faa86e7b.mp3) ## [Open directory of blogs (Sponsored)](https://crawlproof.com/a/jE707Xgp6vqd) _2026-07-09 · **Sponsored**_ Drop URLs or OPML — get per-blog pages plus machine-readable JSON, OPML, text ## [The Supreme Court Just Put Limits on Geofence Warrants](https://sharedsecurity.net/2026/07/06/the-supreme-court-just-put-limits-on-geofence-warrants/) _2026-07-06 · Tom Eston and Scott Wright · Shared Security Podcast_ The Supreme Court says constitutional privacy protections can apply to cellphone location history and geofence warrant data. Tom Eston and Scott Wright discuss the privacy implications of geofence warrants — requests that can sweep up information about many people near a location, not just a named suspect — and why this ruling matters for anyone carrying a smartphone. They also connect the ruling… [Listen](https://media.transistor.fm/528abe60/68839f8b.mp3) ## [Who Governs Your AI Agents? Identity, Offboarding & Open Standards](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/Who-Governs-Your-AI-Agents--Identity--Offboarding--Open-Standards-e3lipr7) _2026-07-02 · TechRiot.io · Cloud Security Podcast_ Are overprivileged AI agents the biggest emerging threat in cybersecurity? In a recent high-profile attack, a vibe-coding company had its entire source code stolen because an attacker exploited a long-lived, overprivileged token tied to a third-party AI agent. In this episode, Ashish sits down with Ely Kahn, CPO at Okta, to unpack the challenge of managing Non-Human Identities (NHI) in the AI era.… [Listen](https://anchor.fm/s/10fb9928/podcast/play/122299687/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-6-2%2F427241646-44100-2-5d41d9fcb2d86.mp3) ## [Jay Beale on Kubernetes, DEF CON, and AI Attack Paths](https://sharedsecurity.net/2026/06/29/jay-beale-on-kubernetes-def-con-and-ai-attack-paths/) _2026-06-29 · Tom Eston, Kevin Tackett, and Jay Beale · Shared Security Podcast_ This week on Shared Security, Tom and Kevin sit down with Jay Beale — founder of InGuardians, long-time Black Hat trainer, creator/contributor behind Kubernetes security training, and part of the team behind the DEF CON Kubernetes CTF. Jay shares stories from decades of offensive security work, including the time Tom hired him for a physical penetration test and Jay somehow ended up inside a call… [Listen](https://media.transistor.fm/54f2221b/ff33769b.mp3) ## [AI-Powered Forensics: How Attackers Automate Breaches](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/AI-Powered-Forensics-How-Attackers-Automate-Breaches-e3l6etn) _2026-06-23 · TechRiot.io · Cloud Security Podcast_ AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with Simon Biggs, Cyber Incident Response Specialist at Varonis, about how AI is accelerating the attack lifecycle. Simon explains how attackers are using AI kits to instantly set up ephemeral phishing portals, query SQL… [Listen](https://anchor.fm/s/10fb9928/podcast/play/121895287/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-5-23%2F426696759-44100-2-04d5128b1a634.mp3) ## [Can the Government Shut Down Frontier AI Overnight?](https://sharedsecurity.net/2026/06/22/can-the-government-shut-down-frontier-ai-overnight/) _2026-06-22 · Tom Eston, Kevin Tackett, and Scott Wright · Shared Security Podcast_ The U.S. government reportedly ordered Anthropic to suspend access to two of its newest frontier AI models, Fable 5 and Mythos 5, citing national security concerns tied to a possible jailbreak. Anthropic complied, but pushed back on the reasoning, arguing that the reported behavior was narrow and that similar capabilities already exist in other advanced AI models. In this episode, Tom, Scott, and… [Listen](https://media.transistor.fm/a0c924cd/3f4a6f1f.mp3) ## [The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/The-4-Pillars-of-AI-SOCFrom-Threat-Hunting-to-Vibe-Hunting-e3kpdjl) _2026-06-16 · TechRiot.io · Cloud Security Podcast_ Threat hunting has officially evolved into "vibe hunting". However, if your AI security tools lack the right semantic context, they might be doing more harm than good. In this episode, Ashish sits down with Aqsa Taylor , Chief Security Evangelist at Exaforce , to discuss the rapidly changing landscape of Security Operations Centers. Aqsa explains how her team coined the term "vibe hunting" after… [Listen](https://anchor.fm/s/10fb9928/podcast/play/121467957/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-5-14%2F426133622-44100-2-172b3c95b88ee.mp3) ## [Guarding AI Agents: Boundaries and Safeguards](https://share.transistor.fm/s/2ae5e504) _2026-06-15 · Tom Eston · Shared Security Podcast_ AI agents are useful, but they become risky when they can take action in real systems. In this episode, Tom Eston discusses recent reporting about attackers tricking Meta’s AI support chatbot into helping hijack Instagram accounts, and why that story matters far beyond social media. Tom explains practical guardrails for AI agents: read-only access first, human approval for consequential actions,… [Listen](https://media.transistor.fm/2ae5e504/8b2ebbca.mp3) ## [Native Cloud Firewalls Falling Short in a Multicloud World](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/Native-Cloud-Firewalls-Falling-Short-in-a-Multicloud-World-e3kljmd) _2026-06-11 · TechRiot.io · Cloud Security Podcast_ As enterprises expand across multiple cloud environments, on-premise data centers, and dynamic AI workloads, traditional perimeter defenses and siloed cloud-native tools are no longer enough to secure the modern network. In this episode, Ashish sits down with Murali Rathinasamy, Senior Director of Product at Cisco, to break down the next evolution of network security: the Hybrid Mesh Firewall.… [Listen](https://anchor.fm/s/10fb9928/podcast/play/121343117/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-5-11%2F425961646-44100-2-8ad04019e8b4f.mp3) ## [How AI Agents Will Negotiate Your Vendor Contracts](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/How-AI-Agents-Will-Negotiate-Your-Vendor-Contracts-e3jvrpr) _2026-05-27 · TechRiot.io · Cloud Security Podcast_ Third-Party Risk Management (TPRM) has historically been a tedious, 200-page paper exercise that felt like being catapulted back to 1979. But AI is changing that. In this episode, Ashish sits down with Igor Andriushchenko (CISO at Lovable) and Jasper Mills (CEO of Ethira) to discuss the collision of TPRM and AI. We dive into the hidden risks of Shadow AI, exploring the chaos that ensues when… [Listen](https://anchor.fm/s/10fb9928/podcast/play/120630523/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-4-27%2F425009259-44100-2-f73c40082d8a2.mp3) ## [Save with community-voted codes (Sponsored)](https://crawlproof.com/a/A3Lj9HMJnVTh) _2026-05-27 · **Sponsored**_ Search thousands of community-verified coupon codes — 100% free, no account needed. ## [How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability](https://podcasters.spotify.com/pod/show/cloudsecuritypodcast/episodes/How-Claude-Mythos-Changes-Vulnerability-Management-From-CVSS-to-Exploitability-e3isid1) _2026-05-05 · TechRiot.io · Cloud Security Podcast_ Is your vulnerability management program ready for something like Claude Mythos? The old days of treating vulnerabilities as temporal events (like Heartbleed or Log4J) and patching them on a leisurely 30, 60, or 90-day cycle are officially over. In this episode, Ashish sits down with Brad Hibbert, COO and Chief Strategy Officer at Brinqa. Brad explains how the release of Anthropic's Claude Mythos,… [Listen](https://anchor.fm/s/10fb9928/podcast/play/119474017/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-4-4%2F423452892-44100-2-011f9512d981f.mp3)