CyberRisk TV at BlackHat 2025 – Day 3

From sizzling 97° heat to the electric energy of Black Hat Las Vegas 2025, Matt Alderman and Doug White take viewers on a behind-the-scenes tour of one of cybersecurity’s biggest weeks. Between packed vendor floors, secret Vegas shortcuts, wild private parties, and the looming DEF CON chaos, they share the untold stories only insiders know. From B-Sides to Hakasan, it’s a non-stop ride through the ultimate hacker playground. Whether it’s testing Black Hat’s new podcast pods, navigating Mandalay Bay like a pro, or chasing down elusive co-hosts (Schrödinger’s Jeff, anyone?), this is your VIP pass to the heart of the action. Stay tuned for exclusive interviews, insider tips, and a glimpse at the cybersecurity community like never before.

Access all the BlackHat 2025 Coverage here: https://securityweekly.com/blackhat

From the buzzing floors of BlackHat 2025 in Las Vegas, CyberRisk TV brings you an exclusive sit-down with Danny Jenkins, CEO & Co-Founder of ThreatLocker. In this high-energy interview, host Doug White dives deep into the real-world challenges of FedRAMP compliance, the million-dollar prep lessons, and the critical importance of secure configurations.

Danny shares unfiltered insights into Defense Against Misconfigurations — ThreatLocker’s new approach that helps organizations lock down endpoints, enforce application control, and spot hidden risks before attackers do. From Russian-made 7Zip to Chinese coupon clippers lurking in browsers, the conversation reveals shocking examples of threats hiding in plain sight.

Whether you’re a cybersecurity pro, IT leader, or compliance specialist, this interview offers a rare, behind-the-scenes look at the pain, process, and payoff of operating at the highest security standards in the industry.

Watch to learn: What FedRAMP really means (and why it’s so expensive) How auditors can make or break your compliance process Why DAC is changing how companies approach endpoint security Real stories from the frontlines of threat detection

Recorded live at Black Hat USA 2025 — Mandalay Bay, Las Vegas

Segment Resources: https://threatlocker.com/platform/defense-against-configuration?utmsource=cyberriskalliance&utmmedium=sponsor&utmcampaign=blackhat25q325&utmcontent=blackhat25&utm_term=podcast

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlockerbh to learn more about them!

At BlackHat 2025 in Las Vegas, Matt Alderman sits down with Michael Leland, VP Field CTO at Island, to tackle one of cybersecurity’s most urgent realities: compromised credentials aren’t a possibility — they’re a guarantee. From deepfakes to phishing and malicious browser plug-ins, attackers aren’t “breaking in” anymore… they’re logging in.

Michael reveals how organizations can protect stolen credentials from being used, why the browser is now the second weakest link in enterprise security, and how Island’s enterprise browser can enforce multi-factor authentication at critical moments, block unsanctioned logins in real time, and control risky extensions with live risk scoring of 230,000+ Chrome plug-ins.

Key takeaways: Why credential compromise is inevitable — and how to stop credential use How presentation layer DLP prevents data leaks inside and outside apps Real-time blocking of phishing logins and unsanctioned SaaS access Plug-in risk scoring, version pinning, and selective extension control Enabling BYOD securely — even after a catastrophic laptop loss Why many users never go back to Chrome, Edge, or Safari after switching

Filmed at Mandalay Bay, Las Vegas, this conversation goes beyond awareness training and into practical, policy-driven defense that works in today’s AI-enhanced threat landscape.

Segment Resources: https://www.island.io/blog/how-the-enterprise-browser-neutralizes-the-risks-of-compromised-credentials

This segment is sponsored by Island. Visit https://securityweekly.com/islandbh to learn more about them!

Live from BlackHat 2025 in Las Vegas, cybersecurity host Jackie McGuire sits down with Seemant Sehgal, founder of BreachLock, to unpack one of the most pressing challenges facing SOC teams today: alert fatigue—and its even more dangerous cousin, vulnerability fatigue.

In this must-watch conversation, Seemant reveals how his groundbreaking approach, Adversarial Exposure Validation (AEV), flips the script on traditional defense-heavy security strategies. Instead of drowning in 10,000+ “critical” alerts, AEV pinpoints what actually matters—using Generative AI to map realistic attack paths, visualize kill chains, and identify the exact vulnerabilities that put an organization’s crown jewels at risk.

From his days leading cybersecurity at a major global bank to pioneering near real-time CVE validation, Seemant shares insights on scaling offensive security, improving executive buy-in, and balancing automation with human expertise. Whether you’re a CISO, SOC analyst, red teamer, or security enthusiast, this interview delivers actionable strategies to fight fatigue, prioritize risks, and protect high-value assets.

Key topics covered: The truth about alert fatigue & why it’s crippling SOC efficiency How AI-driven offensive security changes the game Visualizing kill chains to drive faster remediation Why fixing “what matters” beats fixing “everything” The future of AI trust, transparency, and control in cybersecurity

Watch now to discover how BreachLock is redefining offensive security for the AI era.

Segment Resources: https://www.breachlock.com/products/adversarial-exposure-validation/

This segment is sponsored by Breachlock. Visit https://securityweekly.com/breachlockbh to learn more about them!

From the heart of BlackHat 2025 in Las Vegas, Jackie McGuire sits down with Jawahar Sivasankaran, President at Cyware, for an unmissable deep dive into the future of Cyber Threat Intelligence (CTI), agentic AI, and open-source security innovation. With nearly three decades of experience spanning hands-on engineering, go-to-market leadership, and cutting-edge product strategy, Jawahar shares insider insights on how CTI is evolving from fragmented alerts to unified, automated threat intelligence platforms.

Viewers will discover: Why alert fatigue is still crippling SOC teams—and how to fix it. The real-world impact of agentic AI in security operations. How model context protocol (MCP) and open-source collaboration are reshaping interoperability. Practical steps for CISOs to get high-value CTI results without a seven-figure budget.

Whether you’re a security leader, AI innovator, or just fascinated by the next wave of cyber defense, this conversation delivers actionable strategies, industry foresight, and a candid look at where AI and human expertise must meet.

Recorded live at Cyber Risk TV Studios, Mandalay Bay, during BlackHat 2025.

Segment Resources: https://www.cyware.com/resources/security-guides/cyber-threat-intelligence/what-is-threat-intelligence-management

To explore Cyware’s new Intelligence Suite, CTI automation capabilities, and open-source AI integration protocol, visit https://securityweekly.com/cywarebh.

In this must-see BlackHat 2025 interview, Doug White sits down with Michael Callahan, CMO at Salt Security, for a high-stakes conversation about Agentic AI, Model Context Protocol (MCP) servers, and the massive API security risks reshaping the cyber landscape.

Broadcast live from the CyberRisk TV studio at Mandalay Bay, Las Vegas, the discussion pulls back the curtain on how autonomous AI agents and centralized MCP hubs could supercharge productivity—while also opening the door to unprecedented supply chain vulnerabilities. From “shadow MCP servers” to the concept of an “API fabric,” Michael explains why these threats are evolving faster than traditional security measures can keep up, and why CISOs need to act before it’s too late.

Viewers will get rare insight into the parallels between MCP exploitation and DNS poisoning, the hidden dangers of API sprawl, and why this new era of AI-driven communication could become a hacker’s dream. Whether you’re a security leader, developer, or tech enthusiast, this conversation will leave you both fascinated and just a little bit scared—in the best way.

Segment Resources: Blog: https://salt.security/blog/when-ai-agents-go-rogue-what-youre-missing-in-your-mcp-security Survey Report: https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html

This segment is sponsored by Salt Security. Visit https://securityweekly.com/saltbh for a free API Attack Surface Assessment!

Live from the CyberRisk TV studio at Black Hat 2025 in Las Vegas, host Matt Alderman sits down with Matt Muller, Field CISO at Tines, for a deep-dive into how Security Operations Centers must evolve. From blowing up the outdated tier system to empowering junior analysts with AI, this conversation uncovers the real strategies driving next-gen cyber defense.

Muller explains why traditional SOC models create burnout, how AI can flatten team structures, and why measuring the right metrics—like Mean Time to Detect—is critical for success. They tackle the balance of human + AI orchestration, the security challenges of non-human identities, and how to rethink access controls for a machine-augmented future.

If you care about SOC transformation, AI-driven security workflows, and cyber resilience at scale, this is the conversation you can’t afford to miss.

Watch until the end for practical insights you can start applying today in your own security operations.

This segment is sponsored by Tines. Visit https://securityweekly.com/tinesbh to learn more about them!

At BlackHat 2025, the conversations got intense — and a little hilarious. Matt Alderman and Dr. Doug White closed out the week with a deep dive into the future of the internet, AI security, and the mysterious Model Context Protocol (MCP) — all while debating the fate of the Luxor Hotel and why Mandalay Bay’s lampshades are “tamperproof.”

From quantum computing disrupting HTTPS to agentic AI identity management and the browser plugin privacy crisis, they connect the dots on how security, trust, and monetization might change forever. Expect sharp insights, bold predictions, and a few laugh-out-loud moments about ice buckets, trash cans, and the bathroom wall problem of data privacy.

If you care about cybersecurity trends, internet infrastructure shifts, or just want to hear two pros riff on the weirdest rumors in Vegas, this is the wrap-up you don’t want to miss.