<body>As businesses race to embrace AI, security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. How do you balance the benefits of AI with the Risks of AI?</body>

<body>As businesses race to embrace AI, security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. How do you balance the benefits of AI with the Risks of AI?</body>

<body>Evan McHenry, Chief Information Security Officer at Robinhood Markets, joins Business Security Weekly to discuss how to practically implement and secure AI in the enterprise. Evan will share his lessons learned over the last 18 months, including how to communicate with the Board, why you should own Enterprise Architecture and embrace IT, and why you don't have time to argue with your CFO. If you're struggling to balance the benefits of AI with the Risks of AI, this interview is for you.</body>

<body>Evan McHenry, Chief Information Security Officer at Robinhood Markets, joins Business Security Weekly to discuss how to practically implement and secure AI in the enterprise. Evan will share his lessons learned over the last 18 months, including how to communicate with the Board, why you should own Enterprise Architecture and embrace IT, and why you don't have time to argue with your CFO. If you're struggling to balance the benefits of AI with the Risks of AI, this interview is for you.</body>

<body>In the leadership and communications segment, Security spending is growing — except for the typical CISO, What Leaders Need to Know About AI and Psychological Safety, The Cyber Gap, and more!</body>

<body>In the leadership and communications segment, Security spending is growing — except for the typical CISO, What Leaders Need to Know About AI and Psychological Safety, The Cyber Gap, and more!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/bsw">https://www.securityweekly.com/bsw</a> for all the latest episodes!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/bsw">https://www.securityweekly.com/bsw</a> for all the latest episodes!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15162″} podcast from PPWorks

Balancing AI Benefits and Risks as Your Next CISO Could be Artificial Intelligence – Evan McHenry – BSW #466

<body>The overwhelming majority of people, across the full span of their professional lives, operate without formal authority over the domains in which they work (i.e., leadership). Yet followership has almost no sustained literature, no targeted development, and no rigorous framework of its own. If you're not a leader, what does a follower look like?</body>

<body>The overwhelming majority of people, across the full span of their professional lives, operate without formal authority over the domains in which they work (i.e., leadership). Yet followership has almost no sustained literature, no targeted development, and no rigorous framework of its own. If you're not a leader, what does a follower look like?</body>

<body>Kenyada Meadows, CEO &amp; Founder at The Executive Parent Company, joins Business Security Weekly to discuss his book, The PASSENGER Seat, which outlines a framework for followership. Kenyada will outline the nine disciplines of the framework across three dimensions, including:</body>

<body>Kenyada Meadows, CEO &amp; Founder at The Executive Parent Company, joins Business Security Weekly to discuss his book, The PASSENGER Seat, which outlines a framework for followership. Kenyada will outline the nine disciplines of the framework across three dimensions, including:</body>

<ul class="wp-block-list">
<li>(P) Principled Anchoring — Holds values explicitly and specifically enough to guide behavior under pressure; knows the limit line before reaching it.</li>


<li>(A) Accountability — Communicates upward honestly, documents concerns before decisions are made, and owns errors without deflection.</li>


<li>(S) Self-Mastery — Invests deliberately in work, home, and inner domains, so identity — and ethical agency — isn't hostage to institutional threat.</li>


<li>(S) Systems Thinking — Reads the institution analytically — what produces the patterns observed, and where honest information is being filtered.</li>


<li>(E) Emerging Risk Management — Functions as an early-warning system for risks that formal frameworks haven't yet named.</li>


<li>(N) Negotiation — Translates insight and values into institutional impact through credibility, framing, coalition, and timing.
-(G) Guardianship — Protects what the institution stands for over time, especially when no one is watching.</li>


<li>(E) Enablement — Ensures influence strengthens collective capacity rather than merely advancing individual position.</li>


<li>(R) Results-Driven Influence — Binds the other eight disciplines toward outcomes that are genuinely better — not merely visible.</li>
</ul>

<body><ul><li>(P) Principled Anchoring — Holds values explicitly and specifically enough to guide behavior under pressure; knows the limit line before reaching it.</li><li>(A) Accountability — Communicates upward honestly, documents concerns before decisions are made, and owns errors without deflection.</li><li>(S) Self-Mastery — Invests deliberately in work, home, and inner domains, so identity — and ethical agency — isn't hostage to institutional threat.</li><li>(S) Systems Thinking — Reads the institution analytically — what produces the patterns observed, and where honest information is being filtered.</li><li>(E) Emerging Risk Management — Functions as an early-warning system for risks that formal frameworks haven't yet named.</li><li>(N) Negotiation — Translates insight and values into institutional impact through credibility, framing, coalition, and timing.
-(G) Guardianship — Protects what the institution stands for over time, especially when no one is watching.</li><li>(E) Enablement — Ensures influence strengthens collective capacity rather than merely advancing individual position.</li><li>(R) Results-Driven Influence — Binds the other eight disciplines toward outcomes that are genuinely better — not merely visible.</li></ul></body>

<body>In the leadership and communications segment, Stop playing with the CISO role. Fix cybersecurity leadership, What CIO-CISO alignment looks like when it's working, Why judgment is emerging as cybersecurity’s defining skill, and more!</body>

<body>In the leadership and communications segment, Stop playing with the CISO role. Fix cybersecurity leadership, What CIO-CISO alignment looks like when it's working, Why judgment is emerging as cybersecurity’s defining skill, and more! </body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15160″} podcast from PPWorks

Followership, CyberSecurity Leadership, and Judgement as a Defining Skill – Kenyada Meadows – BSW #465

<body>AI is all the hype, but we're currently stuck at the bottom of the 'J' curve. Wild enthusiasm has given way to the reality of costs, benefits, and risks. What's next for AI and companies looking to capitalize on the AI trends?</body>

<body>AI is all the hype, but we're currently stuck at the bottom of the 'J' curve. Wild enthusiasm has given way to the reality of costs, benefits, and risks. What's next for AI and companies looking to capitalize on the AI trends?</body>

<body>John Willis, author, researcher, and technology industry veteran, joins Business Security Weekly to discuss AI's impact on fundraising. John explores what the history of AI can teach us about the current moment, including how to separate genuine technological transformation from hype and better understand where AI may take us next.</body>

<body>John Willis, author, researcher, and technology industry veteran, joins Business Security Weekly to discuss AI's impact on fundraising. John explores what the history of AI can teach us about the current moment, including how to separate genuine technological transformation from hype and better understand where AI may take us next.</body>

<body>Next, it’s time for Security Money. The Index is exploding upwards as the markets continue to climb. Both the Index and the NASDAQ, hit all time highs. The Business Security Weekly crew breaks down funding, acquisitions, and performance of both the public and private markets.</body>

<body>Next, it’s time for Security Money. The Index is exploding upwards as the markets continue to climb. Both the Index and the NASDAQ, hit all time highs. The Business Security Weekly crew breaks down funding, acquisitions, and performance of both the public and private markets.</body>

<body>The Security Weekly 24 Index is made up of the following pure play public security companies:</body>

<body>The Security Weekly 24 Index is made up of the following pure play public security companies:</body>

<body>SAIL Sailpoint Inc
PANW Palo Alto Networks Inc
CHKP Check Point Software Technologies Ltd
RBRK Rubrik Inc
GEN Gen Digital Inc
FTNT Fortinet Inc
AKAM Akamai Technologies Inc
FFIV F5 Inc
ZS Zscaler Inc
OSPN Onespan Inc
LDOS Leidos Holdings Inc
QLYS Qualys Inc
NTSK Netskope Inc
TENB Tenable Holdings Inc
OKTA Okta Inc
S SentinelOne Inc
NET Cloudflare Inc
CRWD Crowdstrike Holdings Inc
NTCT NetScout Systems Inc
VRNS Varonis Systems Inc
RPD Rapid7 Inc
FSLY Fastly Inc
RDWR Radware Ltd
ATEN A10 Networks Inc</body>

<body>SAIL Sailpoint Inc
PANW Palo Alto Networks Inc
CHKP Check Point Software Technologies Ltd
RBRK Rubrik Inc
GEN Gen Digital Inc
FTNT Fortinet Inc
AKAM Akamai Technologies Inc
FFIV F5 Inc
ZS Zscaler Inc
OSPN Onespan Inc
LDOS Leidos Holdings Inc
QLYS Qualys Inc
NTSK Netskope Inc
TENB Tenable Holdings Inc
OKTA Okta Inc
S SentinelOne Inc
NET Cloudflare Inc
CRWD Crowdstrike Holdings Inc
NTCT NetScout Systems Inc
VRNS Varonis Systems Inc
RPD Rapid7 Inc
FSLY Fastly Inc
RDWR Radware Ltd
ATEN A10 Networks Inc</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15158″} podcast from PPWorks

Security Money: The Index Explodes, as the History of AI Teaches Us About Investments – John Willis – BSW #464

<body>Wire fraud, identity spoofing, and PII exposure now top the list of operational risks for private capital. In a world of ongoing fraud risk, fiduciary responsibility doesn’t end with sound investment decisions — it must extend to operational best practices that protect every capital event. But how?</body>

<body>Wire fraud, identity spoofing, and PII exposure now top the list of operational risks for private capital. In a world of ongoing fraud risk, fiduciary responsibility doesn’t end with sound investment decisions — it must extend to operational best practices that protect every capital event. But how?</body>

<body>Todd Sorrel, CEO &amp; Co-Founder at 6lock, joins Business Security Weekly to discuss how ever evolving AI attacks are increasing the chances of wire fraud. From voice cloning to deep fakes to impersonation, trust-based, high-touch controls for money transfer processes are inadequate. Todd will share how Zero Trust and verify principles are the only way to defend against these sophisticated wire fraud attacks.</body>

<body>Todd Sorrel, CEO &amp; Co-Founder at 6lock, joins Business Security Weekly to discuss how ever evolving AI attacks are increasing the chances of wire fraud. From voice cloning to deep fakes to impersonation, trust-based, high-touch controls for money transfer processes are inadequate. Todd will share how Zero Trust and verify principles are the only way to defend against these sophisticated wire fraud attacks.</body>

<body>Optiv: The One Partner to Advise, Deploy and Operate. That’s Cybersecurity Simplified - Black Hat interview with John Hurley, Chief Revenue Officer of Optiv</body>

<body>Optiv: The One Partner to Advise, Deploy and Operate. That’s Cybersecurity Simplified - Black Hat interview with John Hurley, Chief Revenue Officer of Optiv</body>

<body>This segment will focus on Optiv's unmatched ability to advise, deploy and operate complete cybersecurity programs. With more than 6,000 clients and 450 technology partners, Optiv is the one clients trust to handle real-world cyber complexity, reduce risk and deliver real results.</body>

<body>This segment will focus on Optiv's unmatched ability to advise, deploy and operate complete cybersecurity programs. With more than 6,000 clients and 450 technology partners, Optiv is the one clients trust to handle real-world cyber complexity, reduce risk and deliver real results.</body>

<body>Learn why Optiv is the most trusted brand in cyber at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/optivbh">https://securityweekly.com/optivbh</a>.</body>

<body>Learn why Optiv is the most trusted brand in cyber at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/optivbh">https://securityweekly.com/optivbh</a>.</body>

<body>The Shift to Machine-Led Security: What's Next for Cyber Defense - Black Hat interview with Galina Antova, CEO and Co-Founder of Kai</body>

<body>The Shift to Machine-Led Security: What's Next for Cyber Defense - Black Hat interview with Galina Antova, CEO and Co-Founder of Kai </body>

<body>Artificial intelligence is fundamentally changing cybersecurity- not only by making attacks faster and more sophisticated, but also by forcing defenders to rethink how security operations are built. In this conversation, Kai CEO and co-founder Galina Antova discusses why the industry is moving toward machine-led security, what is preventing organizations from trusting autonomous AI, and what recent survey data from hundreds of CISOs reveals about where cybersecurity is headed next.</body>

<body>Artificial intelligence is fundamentally changing cybersecurity- not only by making attacks faster and more sophisticated, but also by forcing defenders to rethink how security operations are built. In this conversation, Kai CEO and co-founder Galina Antova discusses why the industry is moving toward machine-led security, what is preventing organizations from trusting autonomous AI, and what recent survey data from hundreds of CISOs reveals about where cybersecurity is headed next.</body>

<body>To learn more about Kai, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/kaibh">https://securityweekly.com/kaibh</a></body>

<body>To learn more about Kai, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/kaibh">https://securityweekly.com/kaibh</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14898″} podcast from PPWorks

Preventing Wire Fraud and 2 Interviews From BH USA 2026 From Optiv Security and Kai – Todd Sorrel, John Hurley, Galina Antova – BSW #463

Preventing Wire Fraud and 2 Interviews From BH USA 2026 From Optiv Security and Kai – Galina Antova, Todd Sorrel, John Hurley – BSW #463

<body>The threat landscape has become more interconnected, disruptive, and complex. Ransomware is now as much about extortion and data theft as it is about encryption. Supply chain events can create outages that ripple far beyond the initial target, and business interruption increasingly comes from third-party and cloud dependencies. How should CISOs prepare for these scenarios?</body>

<body>The threat landscape has become more interconnected, disruptive, and complex. Ransomware is now as much about extortion and data theft as it is about encryption. Supply chain events can create outages that ripple far beyond the initial target, and business interruption increasingly comes from third-party and cloud dependencies. How should CISOs prepare for these scenarios?</body>

<body>Dan Bowden, Global Business CISO at Marsh, joins Business Security Weekly to discuss how to connect cyber risk to the outcomes boards care about most: resilience, financial exposure, regulatory impact, and reputation. CISOs need to position cyber as an enterprise risk, not a technical risk, that can be measured, prioritized, and managed alongside other strategic risks. Dan will discuss the results of Marsh's Cyber Catalyst research and Global Cyber Claims Report.</body>

<body>Dan Bowden, Global Business CISO at Marsh, joins Business Security Weekly to discuss how to connect cyber risk to the outcomes boards care about most: resilience, financial exposure, regulatory impact, and reputation. CISOs need to position cyber as an enterprise risk, not a technical risk, that can be measured, prioritized, and managed alongside other strategic risks. Dan will discuss the results of Marsh's Cyber Catalyst research and Global Cyber Claims Report.</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/infosecworld2026">https://securityweekly.com/infosecworld2026</a> and save 30% on your ISW pass with code: ISW26-SWSAVINGS</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/infosecworld2026">https://securityweekly.com/infosecworld2026</a> and save 30% on your ISW pass with code: ISW26-SWSAVINGS </body>

<body>The Agent Is the New Insider: Why Human Risk Doesn't Stop at People: Black Hat Interview with Leslie Nielson, CISO at Mimecast</body>

<body>The Agent Is the New Insider: Why Human Risk Doesn't Stop at People: Black Hat Interview with Leslie Nielson, CISO at Mimecast </body>

<body>AI agents now act with the same credentials and access as the humans who deployed them, but without the judgment or accountability that comes with actual employment. Mimecast CISO Leslie Nielsen argues that treating agentic AI as a brand new, standalone security category is the wrong instinct: agents are an extension of human risk, and the controls organizations already use to manage people are the right foundation for managing machines. In this conversation, Nielsen unpacks the growing gap between security leaders who expect AI driven attacks and those who feel prepared for them, and what that gap means for CISOs walking the floor at Black Hat.</body>

<body>AI agents now act with the same credentials and access as the humans who deployed them, but without the judgment or accountability that comes with actual employment. Mimecast CISO Leslie Nielsen argues that treating agentic AI as a brand new, standalone security category is the wrong instinct: agents are an extension of human risk, and the controls organizations already use to manage people are the right foundation for managing machines. In this conversation, Nielsen unpacks the growing gap between security leaders who expect AI driven attacks and those who feel prepared for them, and what that gap means for CISOs walking the floor at Black Hat.</body>

<body>Mimecast's new whitepaper Securing The Agentic Enterprise: <a rel="noreferrer noopener" target="_blank" href="https://assets.mimecast.com/api/public/content/securing-the-agentic-enterprise?v=ea66db05">https://assets.mimecast.com/api/public/content/securing-the-agentic-enterprise?v=ea66db05</a> 
Mimecast's landing page for thought leadership resources: <a rel="noreferrer noopener" target="_blank" href="https://www.workprotected.com/">https://www.workprotected.com/</a> 
Mimecast's State of Human Risk Report: <a rel="noreferrer noopener" target="_blank" href="https://www.mimecast.com/resources/ebooks/state-of-human-risk/">https://www.mimecast.com/resources/ebooks/state-of-human-risk/</a> 
Mimecast's Threat Intelligence Hub: <a rel="noreferrer noopener" target="_blank" href="https://www.mimecast.com/threat-intelligence-hub/">https://www.mimecast.com/threat-intelligence-hub/</a></body>

<body>Mimecast's new whitepaper Securing The Agentic Enterprise: <a rel="noreferrer noopener" target="_blank" href="https://assets.mimecast.com/api/public/content/securing-the-agentic-enterprise?v=ea66db05">https://assets.mimecast.com/api/public/content/securing-the-agentic-enterprise?v=ea66db05</a> 
Mimecast's landing page for thought leadership resources: <a rel="noreferrer noopener" target="_blank" href="https://www.workprotected.com/">https://www.workprotected.com/</a> 
Mimecast's State of Human Risk Report: <a rel="noreferrer noopener" target="_blank" href="https://www.mimecast.com/resources/ebooks/state-of-human-risk/">https://www.mimecast.com/resources/ebooks/state-of-human-risk/</a> 
Mimecast's Threat Intelligence Hub: <a rel="noreferrer noopener" target="_blank" href="https://www.mimecast.com/threat-intelligence-hub/">https://www.mimecast.com/threat-intelligence-hub/</a></body>

<body>For more information about Mimecast please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecastbh">https://securityweekly.com/mimecastbh</a></body>

<body>For more information about Mimecast please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecastbh">https://securityweekly.com/mimecastbh</a></body>

<body>Ransomware Moves up the Org Chart: Managers Are Prime Targets: Black Hat Interview with Brett Stone-Gross, Sr. Director, Threat Intelligence at Zscaler</body>

<body>Ransomware Moves up the Org Chart: Managers Are Prime Targets: Black Hat Interview with Brett Stone-Gross, Sr. Director, Threat Intelligence at Zscaler</body>

<body>When a ransomware attack makes headlines, attention usually turns to the organization that was breached, the systems encrypted, data stolen, and disruption or ransom demand that followed. Less, if anything, is revealed about the employees compromised at the start of the attack, and what makes those individuals valuable targets.</body>

<body>When a ransomware attack makes headlines, attention usually turns to the organization that was breached, the systems encrypted, data stolen, and disruption or ransom demand that followed. Less, if anything, is revealed about the employees compromised at the start of the attack, and what makes those individuals valuable targets.</body>

<body>New Zscaler ThreatLabz research examines this early stage of a real-world ransomware attack.
ThreatLabz identified victims of a campaign associated with a ransomware group known for gaining initial access, stealing large amounts of corporate data, and selectively encrypting critical systems. The findings show who those victims were and how their roles and authority could help an attacker move deeper into an organization.</body>

<body>New Zscaler ThreatLabz research examines this early stage of a real-world ransomware attack.
ThreatLabz identified victims of a campaign associated with a ransomware group known for gaining initial access, stealing large amounts of corporate data, and selectively encrypting critical systems. The findings show who those victims were and how their roles and authority could help an attacker move deeper into an organization.</body>

<body>This is part of ongoing ransomware research by ThreatLabz. The Zscaler ThreatLabz 2026 Ransomware Report, coming in the next two months, will include additional data on ransomware victims, the latest ransomware trends, targets, and tactics, and the risks enterprises should prepare for next.</body>

<body>This is part of ongoing ransomware research by ThreatLabz. The Zscaler ThreatLabz 2026 Ransomware Report, coming in the next two months, will include additional data on ransomware victims, the latest ransomware trends, targets, and tactics, and the risks enterprises should prepare for next.</body>

<body>This segment is sponsored by Zscaler. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/zscalerbh">https://securityweekly.com/zscalerbh</a> to learn more about them!</body>

<body>This segment is sponsored by Zscaler. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/zscalerbh">https://securityweekly.com/zscalerbh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14896″} podcast from PPWorks

Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler – Dan Bowden, Leslie Nielsen, Brett Stone-Gross – BSW #462

Connecting Cyber Risks to Board Outcomes & BHUSA interviews from Mimecast & Zscaler – Leslie Nielsen, Brett Stone-Gross, Dan Bowden – BSW #462

Envision Technologies

Chief Operating Officer

Headshot for Jason Albuquerque from PPWorks

Business Security Weekly

Jason Albuquerque

Cradlepoint

CISO

Headshot for Ben Carr from PPWorks

Ben Carr

Torc Robotics

Argo AI

Headshot for Summer Fowler from PPWorks

Summer Fowler

CyberSaint

Chief Product Officer

Living Security

VP, Product

CyberRisk Alliance

Executive Director

Headshot for Matt Alderman from PPWorks

Matt Alderman

Podcast artwork for Business Security Weekly show.

About bridging the gap between security initiatives and business objectives.

Where Security Meets Business: Aligning Goals, Measuring Success

Episodes