Black Hat

<body>Live from CyberRisk TV at BlackHat 2025, cybersecurity veteran Doug White sits down with Intel 471 CEO Jason Passwaters for an eye-opening conversation on how cybercrime has evolved into a professional, profit-driven ecosystem. From ransomware-as-a-service to agentic AI, this interview pulls back the curtain on the real-world intel enterprises need to defend against today’s most dangerous digital threats.</body>

<body>Live from CyberRisk TV at BlackHat 2025, cybersecurity veteran Doug White sits down with Intel 471 CEO Jason Passwaters for an eye-opening conversation on how cybercrime has evolved into a professional, profit-driven ecosystem. From ransomware-as-a-service to agentic AI, this interview pulls back the curtain on the real-world intel enterprises need to defend against today’s most dangerous digital threats.</body>

<body>Jason shares how threat actors are using business models that rival legitimate startups — complete with support teams and customer service — while enterprise security teams face shrinking budgets and expanding attack surfaces. Learn how modern cyber intelligence tools help businesses shift from passive defense to proactive operationalization, and why third-party vendor exposure might be your biggest unseen risk.</body>

<body>Jason shares how threat actors are using business models that rival legitimate startups — complete with support teams and customer service — while enterprise security teams face shrinking budgets and expanding attack surfaces. Learn how modern cyber intelligence tools help businesses shift from passive defense to proactive operationalization, and why third-party vendor exposure might be your biggest unseen risk.</body>

<body>Whether you're a CISO, risk analyst, or just fascinated by the cyber underground, this discussion breaks down what every enterprise needs to know to stay ahead of tomorrow’s threats.</body>

<body>Whether you're a CISO, risk analyst, or just fascinated by the cyber underground, this discussion breaks down what every enterprise needs to know to stay ahead of tomorrow’s threats.</body>

<body>Verity471: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/verity471">https://www.intel471.com/verity471</a></body>

<body>Verity471: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/verity471">https://www.intel471.com/verity471</a></body>

<body>Bridging the CTI Gap: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/blog/bridging-the-cti-gap-new-exposure-modules-on-verity471-deliver-market-disrupting-views-of-threats">https://www.intel471.com/blog/bridging-the-cti-gap-new-exposure-modules-on-verity471-deliver-market-disrupting-views-of-threats</a></body>

<body>Bridging the CTI Gap: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/blog/bridging-the-cti-gap-new-exposure-modules-on-verity471-deliver-market-disrupting-views-of-threats">https://www.intel471.com/blog/bridging-the-cti-gap-new-exposure-modules-on-verity471-deliver-market-disrupting-views-of-threats</a></body>

<body>Black Basta: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/resources/whitepapers/the-black-basta-blueprint">https://www.intel471.com/resources/whitepapers/the-black-basta-blueprint</a></body>

<body>Black Basta: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/resources/whitepapers/the-black-basta-blueprint">https://www.intel471.com/resources/whitepapers/the-black-basta-blueprint</a></body>

<body>GIR Framework: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/resources/cyber-underground-handbook">https://www.intel471.com/resources/cyber-underground-handbook</a></body>

<body>GIR Framework: <a rel="noreferrer noopener" target="_blank" href="https://www.intel471.com/resources/cyber-underground-handbook">https://www.intel471.com/resources/cyber-underground-handbook</a></body>

<body>This segment is sponsored by Intel471. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/intel471bh">https://securityweekly.com/intel471bh</a> to learn more about them!</body>

<body>This segment is sponsored by Intel471. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/intel471bh">https://securityweekly.com/intel471bh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14194″} podcast from PPWorks

Threat Intelligence

Shaping the Future of Threat Intelligence-driven Cybersecurity – Jason Passwaters – BH25 #2

<body>At Black Hat 2025, live from the Cyber Risk TV studio in Las Vegas, Jackie McGuire sits down with Apiiro Co-Founder &amp; CEO Idan Plotnik to unpack the real-world impact of AI code assistants on application security, developer velocity, and cloud costs. With experience as a former Director of Engineering at Microsoft, Idan dives into what drove him to launch Apiiro — and why 75% of engineers will be using AI assistants by 2028.</body>

<body>At Black Hat 2025, live from the Cyber Risk TV studio in Las Vegas, Jackie McGuire sits down with Apiiro Co-Founder &amp; CEO Idan Plotnik to unpack the real-world impact of AI code assistants on application security, developer velocity, and cloud costs. With experience as a former Director of Engineering at Microsoft, Idan dives into what drove him to launch Apiiro — and why 75% of engineers will be using AI assistants by 2028.</body>

<body>From 10x more vulnerabilities to skyrocketing API bloat and security blind spots, Idan breaks down research from Fortune 500 companies on how AI is accelerating both innovation and risk.</body>

<body>From 10x more vulnerabilities to skyrocketing API bloat and security blind spots, Idan breaks down research from Fortune 500 companies on how AI is accelerating both innovation and risk.</body>

<body>What you'll learn in this interview:</body>

<body>What you'll learn in this interview:</body>

<body>Why AI coding tools are increasing code complexity and risk</body>

<body>Why AI coding tools are increasing code complexity and risk</body>

<body>The massive cost of unnecessary APIs in cloud environments</body>

<body>The massive cost of unnecessary APIs in cloud environments</body>

<body>How to automate secure code without slowing down delivery</body>

<body>How to automate secure code without slowing down delivery</body>

<body>Why most CISOs fail to connect security to revenue (and how to fix it)</body>

<body>Why most CISOs fail to connect security to revenue (and how to fix it)</body>

<body>How Apiiro’s Autofix AI Agent helps organizations auto-fix and auto-govern code risks at scale</body>

<body>How Apiiro’s Autofix AI Agent helps organizations auto-fix and auto-govern code risks at scale</body>

<body>This isn’t just another AI hype talk. It’s a deep dive into the future of secure software delivery — with practical steps for CISOs, CTOs, and security leaders to become true business enablers.</body>

<body>This isn’t just another AI hype talk. It’s a deep dive into the future of secure software delivery — with practical steps for CISOs, CTOs, and security leaders to become true business enablers.</body>

<body>Watch till the end to hear how Apiiro is helping Fortune 500s bridge the gap between code, risk, and revenue.</body>

<body>Watch till the end to hear how Apiiro is helping Fortune 500s bridge the gap between code, risk, and revenue.</body>

<body>Segment Resources:
Apiiro AutoFix Agent. Built for Enterprise Security: <a rel="noreferrer noopener" target="_blank" href="https://youtu.be/f-_zrnqzYsc">https://youtu.be/f-_zrnqzYsc</a> 
Apiiro AutoFix Agent. Built for Enterprise Security (Deep Dive Demo): <a rel="noreferrer noopener" target="_blank" href="https://youtu.be/WnFmMiXiUuM">https://youtu.be/WnFmMiXiUuM</a></body>

<body>Segment Resources:
Apiiro AutoFix Agent. Built for Enterprise Security: <a rel="noreferrer noopener" target="_blank" href="https://youtu.be/f-_zrnqzYsc">https://youtu.be/f-_zrnqzYsc</a> 
Apiiro AutoFix Agent. Built for Enterprise Security (Deep Dive Demo): <a rel="noreferrer noopener" target="_blank" href="https://youtu.be/WnFmMiXiUuM">https://youtu.be/WnFmMiXiUuM</a></body>

<body>This segment is sponsored by Apiiro. Be one of the first to see their new AppSec Agent in action at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/apiirobh">https://securityweekly.com/apiirobh</a>.</body>

<body>This segment is sponsored by Apiiro. Be one of the first to see their new AppSec Agent in action at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/apiirobh">https://securityweekly.com/apiirobh</a>.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14193″} podcast from PPWorks

Application security

AI/ML

AppSec under AI pressure with Idan Plotnik of Apiiro – Idan Plotnik – BH25 #2

<body>Live from Mandalay Bay, Las Vegas — CyberRisk TV dives deep into the evolving landscape of cyber asset visibility, vulnerability management, and exposure prioritization. Host Matt Alderman sits down with J.J. Guy, CEO &amp; Co-Founder of Sevco Security, to unpack a 20-year industry failure finally being addressed: the disconnect between asset inventory, vulnerability visibility, and true cyber risk understanding.</body>

<body>Live from Mandalay Bay, Las Vegas — CyberRisk TV dives deep into the evolving landscape of cyber asset visibility, vulnerability management, and exposure prioritization. Host Matt Alderman sits down with J.J. Guy, CEO &amp; Co-Founder of Sevco Security, to unpack a 20-year industry failure finally being addressed: the disconnect between asset inventory, vulnerability visibility, and true cyber risk understanding.</body>

<body>From the roots of CASM (Cyber Asset Attack Surface Management) to the convergence with CTE (Continuous Threat Exposure), JJ shares how Sevco is tackling today's fragmented environments — spanning cloud, on-prem, mobile, and containers — with a data-first approach. Learn how consolidating asset data, business context, and agent deployment metrics leads to more accurate risk models, powerful executive-level dashboards, and scalable security operations.</body>

<body>From the roots of CASM (Cyber Asset Attack Surface Management) to the convergence with CTE (Continuous Threat Exposure), JJ shares how Sevco is tackling today's fragmented environments — spanning cloud, on-prem, mobile, and containers — with a data-first approach. Learn how consolidating asset data, business context, and agent deployment metrics leads to more accurate risk models, powerful executive-level dashboards, and scalable security operations.</body>

<body>Why CMDBs and traditional scanners are no longer enough</body>

<body>Why CMDBs and traditional scanners are no longer enough</body>

<body>The real reason 20% of machines are invisible to your security stack</body>

<body>The real reason 20% of machines are invisible to your security stack</body>

<body>How multi-source asset fusion is revolutionizing threat exposure</body>

<body>How multi-source asset fusion is revolutionizing threat exposure</body>

<body>Bridging the gap between operational patching and board-level risk quantification</body>

<body>Bridging the gap between operational patching and board-level risk quantification</body>

<body>What Gartner's new Exposure Management Magic Quadrant means for the future</body>

<body>What Gartner's new Exposure Management Magic Quadrant means for the future</body>

<body>Whether you're a CISO, vulnerability analyst, or cloud security architect, this conversation is packed with insights you can't afford to miss.</body>

<body>Whether you're a CISO, vulnerability analyst, or cloud security architect, this conversation is packed with insights you can't afford to miss.</body>

<body>Segment Resources:
How Exposure Management Addresses Five Challenges of Vulnerability Management: <a rel="noreferrer noopener" target="_blank" href="https://www.sevcosecurity.com/exposure-management-addresses-5-challenges-of-vulnerability-management/">https://www.sevcosecurity.com/exposure-management-addresses-5-challenges-of-vulnerability-management/</a></body>

<body>Segment Resources:
How Exposure Management Addresses Five Challenges of Vulnerability Management: <a rel="noreferrer noopener" target="_blank" href="https://www.sevcosecurity.com/exposure-management-addresses-5-challenges-of-vulnerability-management/">https://www.sevcosecurity.com/exposure-management-addresses-5-challenges-of-vulnerability-management/</a> </body>

<body>What should you look for in an Exposure Assessment Platform (EAP)? Read this buyer’s guide to find out: <a rel="noreferrer noopener" target="_blank" href="https://www.sevcosecurity.com/resource-articles/the-exposure-assessment-platform-buyers-guide/">https://www.sevcosecurity.com/resource-articles/the-exposure-assessment-platform-buyers-guide/</a></body>

<body>What should you look for in an Exposure Assessment Platform (EAP)? Read this buyer’s guide to find out: <a rel="noreferrer noopener" target="_blank" href="https://www.sevcosecurity.com/resource-articles/the-exposure-assessment-platform-buyers-guide/">https://www.sevcosecurity.com/resource-articles/the-exposure-assessment-platform-buyers-guide/</a> </body>

<body>Would you like to see the Sevco platform in action? You can take a self-guided tour at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/sevcobh">https://securityweekly.com/sevcobh</a></body>

<body>Would you like to see the Sevco platform in action? You can take a self-guided tour at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/sevcobh">https://securityweekly.com/sevcobh</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14192″} podcast from PPWorks

Vulnerability Management

The End of an Era: Modernizing Vulnerability Management – J.J. Guy – BH25 #2

<body>At Black Hat 2025, Doug White interviews Ted Shorter, CTO of Keyfactor, about the quantum revolution already knocking on cybersecurity’s door. They discuss the terrifying reality of quantum computing’s power to break RSA and ECC encryption—the very foundations of modern digital life. With 2030 set as the deadline for transitioning away from legacy crypto, organizations face a race against time.</body>

<body>At Black Hat 2025, Doug White interviews Ted Shorter, CTO of Keyfactor, about the quantum revolution already knocking on cybersecurity’s door. They discuss the terrifying reality of quantum computing’s power to break RSA and ECC encryption—the very foundations of modern digital life. With 2030 set as the deadline for transitioning away from legacy crypto, organizations face a race against time.</body>

<body>Ted breaks down what "full crypto visibility" really means, why it’s crucial to map your cryptographic assets now, and how legacy tech—from robotic sawmills to outdated hospital gear—poses serious risks. The interview explores NIST's new post-quantum algorithms, global readiness efforts, and how Keyfactor’s acquisitions of InfoSec Global and Cipher Insights help companies start the quantum transition today—not tomorrow.</body>

<body>Ted breaks down what "full crypto visibility" really means, why it’s crucial to map your cryptographic assets now, and how legacy tech—from robotic sawmills to outdated hospital gear—poses serious risks. The interview explores NIST's new post-quantum algorithms, global readiness efforts, and how Keyfactor’s acquisitions of InfoSec Global and Cipher Insights help companies start the quantum transition today—not tomorrow.</body>

<body>Don’t wait for the breach. Watch this and start your quantum strategy now.</body>

<body>Don’t wait for the breach. Watch this and start your quantum strategy now.</body>

<body>If digital trust is the goal, cryptography is the foundation.</body>

<body>If digital trust is the goal, cryptography is the foundation.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.keyfactor.com/digital-trust-digest-quantum-readiness">http://www.keyfactor.com/digital-trust-digest-quantum-readiness</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.keyfactor.com/press-releases/keyfactor-acquires-infosec-global-and-cipherinsights/">https://www.keyfactor.com/press-releases/keyfactor-acquires-infosec-global-and-cipherinsights/</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.keyfactor.com/digital-trust-digest-quantum-readiness">http://www.keyfactor.com/digital-trust-digest-quantum-readiness</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.keyfactor.com/press-releases/keyfactor-acquires-infosec-global-and-cipherinsights/">https://www.keyfactor.com/press-releases/keyfactor-acquires-infosec-global-and-cipherinsights/</a></body>

<body>For more information about Keyfactor’s latest Digital Trust Digest, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/keyfactorbh">https://securityweekly.com/keyfactorbh</a></body>

<body>For more information about Keyfactor’s latest Digital Trust Digest, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/keyfactorbh">https://securityweekly.com/keyfactorbh</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14191″} podcast from PPWorks

Data Security

Unified Cryptographic Management: The Foundation of Digital Trust in the Quantum Era – Ted Shorter – BH25 #2

Identity

IAM Technologies

News

BSides LV: How to control non-human identities before they control us

Security Staff Acquisition & Development

Training

Career Management

BSides LV: Cybersecurity not ready for dark new breed of hacker recruits

<body>Cyberproof takes center stage at Black Hat 2025, as Yuval Wollman, President of CyberProof, joins host Doug White live from the Cyber Risk TV studio in Las Vegas. In this eye-opening interview, Yuval unpacks how AI agents are not only expanding the attack surface—but reshaping the entire cyber threat landscape.</body>

<body>Cyberproof takes center stage at Black Hat 2025, as Yuval Wollman, President of CyberProof, joins host Doug White live from the Cyber Risk TV studio in Las Vegas. In this eye-opening interview, Yuval unpacks how AI agents are not only expanding the attack surface—but reshaping the entire cyber threat landscape.</body>

<body>Discover how ransomware-as-a-service platforms like Funksec and Dragonforce are operating with enterprise-level precision. Learn about the role of agentic AI, geopolitical cyber warfare, and why today's hackers offer better customer support than airlines. This isn’t your typical cyber chat—this is a deep dive into the new economy of cybercrime, now ranked as the third-largest economy in the world.</body>

<body>Discover how ransomware-as-a-service platforms like Funksec and Dragonforce are operating with enterprise-level precision. Learn about the role of agentic AI, geopolitical cyber warfare, and why today's hackers offer better customer support than airlines. This isn’t your typical cyber chat—this is a deep dive into the new economy of cybercrime, now ranked as the third-largest economy in the world.</body>

<body>Whether you're a CISO, security pro, or just trying to keep your business secure, this is a must-watch conversation on how exposure management and real-time threat detection are essential in defending against nation-state attacks and AI-driven breaches.</body>

<body>Whether you're a CISO, security pro, or just trying to keep your business secure, this is a must-watch conversation on how exposure management and real-time threat detection are essential in defending against nation-state attacks and AI-driven breaches.</body>

<body>This segment is sponsored by CyberProof. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/cyberproofbh">https://securityweekly.com/cyberproofbh</a> to learn more about them!
Watch all Black Hat 2025 coverage: Securityweekly.com/Blackhat</body>