Black Hat

<body>In this must-see BlackHat 2025 interview, Doug White sits down with Michael Callahan, CMO at Salt Security, for a high-stakes conversation about Agentic AI, Model Context Protocol (MCP) servers, and the massive API security risks reshaping the cyber landscape.</body>

<body>In this must-see BlackHat 2025 interview, Doug White sits down with Michael Callahan, CMO at Salt Security, for a high-stakes conversation about Agentic AI, Model Context Protocol (MCP) servers, and the massive API security risks reshaping the cyber landscape.</body>

<body>Broadcast live from the CyberRisk TV studio at Mandalay Bay, Las Vegas, the discussion pulls back the curtain on how autonomous AI agents and centralized MCP hubs could supercharge productivity—while also opening the door to unprecedented supply chain vulnerabilities. From “shadow MCP servers” to the concept of an “API fabric,” Michael explains why these threats are evolving faster than traditional security measures can keep up, and why CISOs need to act before it’s too late.</body>

<body>Broadcast live from the CyberRisk TV studio at Mandalay Bay, Las Vegas, the discussion pulls back the curtain on how autonomous AI agents and centralized MCP hubs could supercharge productivity—while also opening the door to unprecedented supply chain vulnerabilities. From “shadow MCP servers” to the concept of an “API fabric,” Michael explains why these threats are evolving faster than traditional security measures can keep up, and why CISOs need to act before it’s too late.</body>

<body>Viewers will get rare insight into the parallels between MCP exploitation and DNS poisoning, the hidden dangers of API sprawl, and why this new era of AI-driven communication could become a hacker’s dream. Whether you’re a security leader, developer, or tech enthusiast, this conversation will leave you both fascinated and just a little bit scared—in the best way.</body>

<body>Viewers will get rare insight into the parallels between MCP exploitation and DNS poisoning, the hidden dangers of API sprawl, and why this new era of AI-driven communication could become a hacker’s dream. Whether you’re a security leader, developer, or tech enthusiast, this conversation will leave you both fascinated and just a little bit scared—in the best way.</body>

<body>Segment Resources:
Blog: <a rel="noreferrer noopener" target="_blank" href="https://salt.security/blog/when-ai-agents-go-rogue-what-youre-missing-in-your-mcp-security">https://salt.security/blog/when-ai-agents-go-rogue-what-youre-missing-in-your-mcp-security</a>
Survey Report: <a rel="noreferrer noopener" target="_blank" href="https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html">https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html</a></body>

<body>Segment Resources:
Blog: <a rel="noreferrer noopener" target="_blank" href="https://salt.security/blog/when-ai-agents-go-rogue-what-youre-missing-in-your-mcp-security">https://salt.security/blog/when-ai-agents-go-rogue-what-youre-missing-in-your-mcp-security</a>
Survey Report: <a rel="noreferrer noopener" target="_blank" href="https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html">https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html</a></body>

<body>This segment is sponsored by Salt Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/saltbh">https://securityweekly.com/saltbh</a> for a free API Attack Surface Assessment!</body>

<body>This segment is sponsored by Salt Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/saltbh">https://securityweekly.com/saltbh</a> for a free API Attack Surface Assessment! </body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14201″} podcast from PPWorks

AI/ML

API security

Agentic AI is Here—Are Your APIs Ready? – Michael Callahan – BH25 #3

<body>From the heart of BlackHat 2025 in Las Vegas, Jackie McGuire sits down with Jawahar Sivasankaran, President at Cyware, for an unmissable deep dive into the future of Cyber Threat Intelligence (CTI), agentic AI, and open-source security innovation. With nearly three decades of experience spanning hands-on engineering, go-to-market leadership, and cutting-edge product strategy, Jawahar shares insider insights on how CTI is evolving from fragmented alerts to unified, automated threat intelligence platforms.</body>

<body>From the heart of BlackHat 2025 in Las Vegas, Jackie McGuire sits down with Jawahar Sivasankaran, President at Cyware, for an unmissable deep dive into the future of Cyber Threat Intelligence (CTI), agentic AI, and open-source security innovation. With nearly three decades of experience spanning hands-on engineering, go-to-market leadership, and cutting-edge product strategy, Jawahar shares insider insights on how CTI is evolving from fragmented alerts to unified, automated threat intelligence platforms.</body>

<body>Viewers will discover:
Why alert fatigue is still crippling SOC teams—and how to fix it.
The real-world impact of agentic AI in security operations.
How model context protocol (MCP) and open-source collaboration are reshaping interoperability.
Practical steps for CISOs to get high-value CTI results without a seven-figure budget.</body>

<body>Viewers will discover:
Why alert fatigue is still crippling SOC teams—and how to fix it.
The real-world impact of agentic AI in security operations.
How model context protocol (MCP) and open-source collaboration are reshaping interoperability.
Practical steps for CISOs to get high-value CTI results without a seven-figure budget.</body>

<body>Whether you’re a security leader, AI innovator, or just fascinated by the next wave of cyber defense, this conversation delivers actionable strategies, industry foresight, and a candid look at where AI and human expertise must meet.</body>

<body>Whether you’re a security leader, AI innovator, or just fascinated by the next wave of cyber defense, this conversation delivers actionable strategies, industry foresight, and a candid look at where AI and human expertise must meet.</body>

<body>Recorded live at Cyber Risk TV Studios, Mandalay Bay, during BlackHat 2025.</body>

<body>Recorded live at Cyber Risk TV Studios, Mandalay Bay, during BlackHat 2025.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.cyware.com/resources/security-guides/cyber-threat-intelligence/what-is-threat-intelligence-management">https://www.cyware.com/resources/security-guides/cyber-threat-intelligence/what-is-threat-intelligence-management</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.cyware.com/resources/security-guides/cyber-threat-intelligence/what-is-threat-intelligence-management">https://www.cyware.com/resources/security-guides/cyber-threat-intelligence/what-is-threat-intelligence-management</a></body>

<body>To explore Cyware’s new Intelligence Suite, CTI automation capabilities, and open-source AI integration protocol, visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cywarebh">https://securityweekly.com/cywarebh</a>.</body>

<body>To explore Cyware’s new Intelligence Suite, CTI automation capabilities, and open-source AI integration protocol, visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cywarebh">https://securityweekly.com/cywarebh</a>.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14200″} podcast from PPWorks

Threat Intelligence

Agentic AI driven Cyber Threat Intelligence: Building on a strong foundation – Jawahar “Jawa” Sivasankaran – BH25 #3

<body>Live from BlackHat 2025 in Las Vegas, cybersecurity host Jackie McGuire sits down with Seemant Sehgal, founder of BreachLock, to unpack one of the most pressing challenges facing SOC teams today: alert fatigue—and its even more dangerous cousin, vulnerability fatigue.</body>

<body>Live from BlackHat 2025 in Las Vegas, cybersecurity host Jackie McGuire sits down with Seemant Sehgal, founder of BreachLock, to unpack one of the most pressing challenges facing SOC teams today: alert fatigue—and its even more dangerous cousin, vulnerability fatigue.</body>

<body>In this must-watch conversation, Seemant reveals how his groundbreaking approach, Adversarial Exposure Validation (AEV), flips the script on traditional defense-heavy security strategies. Instead of drowning in 10,000+ “critical” alerts, AEV pinpoints what actually matters—using Generative AI to map realistic attack paths, visualize kill chains, and identify the exact vulnerabilities that put an organization’s crown jewels at risk.</body>

<body>In this must-watch conversation, Seemant reveals how his groundbreaking approach, Adversarial Exposure Validation (AEV), flips the script on traditional defense-heavy security strategies. Instead of drowning in 10,000+ “critical” alerts, AEV pinpoints what actually matters—using Generative AI to map realistic attack paths, visualize kill chains, and identify the exact vulnerabilities that put an organization’s crown jewels at risk.</body>

<body>From his days leading cybersecurity at a major global bank to pioneering near real-time CVE validation, Seemant shares insights on scaling offensive security, improving executive buy-in, and balancing automation with human expertise. Whether you’re a CISO, SOC analyst, red teamer, or security enthusiast, this interview delivers actionable strategies to fight fatigue, prioritize risks, and protect high-value assets.</body>

<body>From his days leading cybersecurity at a major global bank to pioneering near real-time CVE validation, Seemant shares insights on scaling offensive security, improving executive buy-in, and balancing automation with human expertise. Whether you’re a CISO, SOC analyst, red teamer, or security enthusiast, this interview delivers actionable strategies to fight fatigue, prioritize risks, and protect high-value assets.</body>

<body>Key topics covered:
The truth about alert fatigue &amp; why it’s crippling SOC efficiency
How AI-driven offensive security changes the game
Visualizing kill chains to drive faster remediation
Why fixing “what matters” beats fixing “everything”
The future of AI trust, transparency, and control in cybersecurity</body>

<body>Key topics covered:
The truth about alert fatigue &amp; why it’s crippling SOC efficiency
How AI-driven offensive security changes the game
Visualizing kill chains to drive faster remediation
Why fixing “what matters” beats fixing “everything”
The future of AI trust, transparency, and control in cybersecurity</body>

<body>Watch now to discover how BreachLock is redefining offensive security for the AI era.</body>

<body>Watch now to discover how BreachLock is redefining offensive security for the AI era.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.breachlock.com/products/adversarial-exposure-validation/">https://www.breachlock.com/products/adversarial-exposure-validation/</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.breachlock.com/products/adversarial-exposure-validation/">https://www.breachlock.com/products/adversarial-exposure-validation/</a></body>

<body>This segment is sponsored by Breachlock. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/breachlockbh">https://securityweekly.com/breachlockbh</a> to learn more about them!</body>

<body>This segment is sponsored by Breachlock. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/breachlockbh">https://securityweekly.com/breachlockbh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14199″} podcast from PPWorks

Attack surface management

Fix What Matters With Adversarial Exposure Validation (AEV) – Seemant Sehgal – BH25 #3

<body>At BlackHat 2025 in Las Vegas, Matt Alderman sits down with Michael Leland, VP Field CTO at Island, to tackle one of cybersecurity’s most urgent realities: compromised credentials aren’t a possibility — they’re a guarantee. From deepfakes to phishing and malicious browser plug-ins, attackers aren’t “breaking in” anymore… they’re logging in.</body>

<body>At BlackHat 2025 in Las Vegas, Matt Alderman sits down with Michael Leland, VP Field CTO at Island, to tackle one of cybersecurity’s most urgent realities: compromised credentials aren’t a possibility — they’re a guarantee. From deepfakes to phishing and malicious browser plug-ins, attackers aren’t “breaking in” anymore… they’re logging in.</body>

<body>Michael reveals how organizations can protect stolen credentials from being used, why the browser is now the second weakest link in enterprise security, and how Island’s enterprise browser can enforce multi-factor authentication at critical moments, block unsanctioned logins in real time, and control risky extensions with live risk scoring of 230,000+ Chrome plug-ins.</body>

<body>Michael reveals how organizations can protect stolen credentials from being used, why the browser is now the second weakest link in enterprise security, and how Island’s enterprise browser can enforce multi-factor authentication at critical moments, block unsanctioned logins in real time, and control risky extensions with live risk scoring of 230,000+ Chrome plug-ins.</body>

<body>Key takeaways:
Why credential compromise is inevitable — and how to stop credential use
How presentation layer DLP prevents data leaks inside and outside apps
Real-time blocking of phishing logins and unsanctioned SaaS access
Plug-in risk scoring, version pinning, and selective extension control
Enabling BYOD securely — even after a catastrophic laptop loss
Why many users never go back to Chrome, Edge, or Safari after switching</body>

<body>Key takeaways:
Why credential compromise is inevitable — and how to stop credential use
How presentation layer DLP prevents data leaks inside and outside apps
Real-time blocking of phishing logins and unsanctioned SaaS access
Plug-in risk scoring, version pinning, and selective extension control
Enabling BYOD securely — even after a catastrophic laptop loss
Why many users never go back to Chrome, Edge, or Safari after switching</body>

<body>Filmed at Mandalay Bay, Las Vegas, this conversation goes beyond awareness training and into practical, policy-driven defense that works in today’s AI-enhanced threat landscape.</body>

<body>Filmed at Mandalay Bay, Las Vegas, this conversation goes beyond awareness training and into practical, policy-driven defense that works in today’s AI-enhanced threat landscape.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.island.io/blog/how-the-enterprise-browser-neutralizes-the-risks-of-compromised-credentials">https://www.island.io/blog/how-the-enterprise-browser-neutralizes-the-risks-of-compromised-credentials</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.island.io/blog/how-the-enterprise-browser-neutralizes-the-risks-of-compromised-credentials">https://www.island.io/blog/how-the-enterprise-browser-neutralizes-the-risks-of-compromised-credentials</a></body>

<body>This segment is sponsored by Island. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/islandbh">https://securityweekly.com/islandbh</a> to learn more about them!</body>

<body>This segment is sponsored by Island. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/islandbh">https://securityweekly.com/islandbh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14198″} podcast from PPWorks

Endpoint/Device Security

How the Enterprise Browser Neutralizes the Risks of Compromised Credentials – Michael Leland – BH25 #3

<body>From the buzzing floors of BlackHat 2025 in Las Vegas, CyberRisk TV brings you an exclusive sit-down with Danny Jenkins, CEO &amp; Co-Founder of ThreatLocker. In this high-energy interview, host Doug White dives deep into the real-world challenges of FedRAMP compliance, the million-dollar prep lessons, and the critical importance of secure configurations.</body>

<body>From the buzzing floors of BlackHat 2025 in Las Vegas, CyberRisk TV brings you an exclusive sit-down with Danny Jenkins, CEO &amp; Co-Founder of ThreatLocker. In this high-energy interview, host Doug White dives deep into the real-world challenges of FedRAMP compliance, the million-dollar prep lessons, and the critical importance of secure configurations.</body>

<body>Danny shares unfiltered insights into Defense Against Misconfigurations — ThreatLocker’s new approach that helps organizations lock down endpoints, enforce application control, and spot hidden risks before attackers do. From Russian-made 7Zip to Chinese coupon clippers lurking in browsers, the conversation reveals shocking examples of threats hiding in plain sight.</body>

<body>Danny shares unfiltered insights into Defense Against Misconfigurations — ThreatLocker’s new approach that helps organizations lock down endpoints, enforce application control, and spot hidden risks before attackers do. From Russian-made 7Zip to Chinese coupon clippers lurking in browsers, the conversation reveals shocking examples of threats hiding in plain sight.</body>

<body>Whether you’re a cybersecurity pro, IT leader, or compliance specialist, this interview offers a rare, behind-the-scenes look at the pain, process, and payoff of operating at the highest security standards in the industry.</body>

<body>Whether you’re a cybersecurity pro, IT leader, or compliance specialist, this interview offers a rare, behind-the-scenes look at the pain, process, and payoff of operating at the highest security standards in the industry.</body>

<body>Watch to learn:
What FedRAMP really means (and why it’s so expensive)
How auditors can make or break your compliance process
Why DAC is changing how companies approach endpoint security
Real stories from the frontlines of threat detection</body>

<body>Watch to learn:
What FedRAMP really means (and why it’s so expensive)
How auditors can make or break your compliance process
Why DAC is changing how companies approach endpoint security
Real stories from the frontlines of threat detection</body>

<body>Recorded live at Black Hat USA 2025 — Mandalay Bay, Las Vegas</body>

<body>Recorded live at Black Hat USA 2025 — Mandalay Bay, Las Vegas</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://threatlocker.com/platform/defense-against-configuration?utm_source=cyber_risk_alliance&amp;utm_medium=sponsor&amp;utm_campaign=black_hat_25_q3_25&amp;utm_content=black_hat_25&amp;utm_term=podcast">https://threatlocker.com/platform/defense-against-configuration?utmsource=cyberriskalliance&amp;utmmedium=sponsor&amp;utmcampaign=blackhat25q325&amp;utmcontent=blackhat25&amp;utm_term=podcast</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://threatlocker.com/platform/defense-against-configuration?utm_source=cyber_risk_alliance&amp;utm_medium=sponsor&amp;utm_campaign=black_hat_25_q3_25&amp;utm_content=black_hat_25&amp;utm_term=podcast">https://threatlocker.com/platform/defense-against-configuration?utmsource=cyberriskalliance&amp;utmmedium=sponsor&amp;utmcampaign=blackhat25q325&amp;utmcontent=blackhat25&amp;utm_term=podcast</a></body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlockerbh">https://securityweekly.com/threatlockerbh</a> to learn more about them!</body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlockerbh">https://securityweekly.com/threatlockerbh</a> to learn more about them!</body>

Black Hat

Agentic AI is Here—Are Your APIs Ready? – Michael Callahan – BH25 #3

Agentic AI driven Cyber Threat Intelligence: Building on a strong foundation – Jawahar “Jawa” Sivasankaran – BH25 #3

Fix What Matters With Adversarial Exposure Validation (AEV) – Seemant Sehgal – BH25 #3

How the Enterprise Browser Neutralizes the Risks of Compromised Credentials – Michael Leland – BH25 #3

Securing What Runs: The New CISO Priority – Danny Jenkins – BH25 #3

Amazon ECS privilege escalation risk described at Black Hat USA 2025

The software supply chain and cybersecurity

Fast Five

Selected by the SC Media Editorial team every Tuesday.