https://ysecurity.io/podcast/2026-11-10T08:00:00.000Zhttps://ysecurity.io/podcast/1-anand-ganesh-founding-software-architect-at-hammerspace-data-as/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/2-andrew-gontarczyk-ciso-of-pure-storage-building-a-security-team/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/3-daniel-feldman-cloud-security-architect-at-hpe-service-with-and/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/4-wesley-belleman-of-california-air-national-guard-and-palo-alto/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/5-leigh-honeywell-founder-and-ceo-of-tall-poppy-the-human-side-of/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/6-prakash-darji-general-manager-of-digital-experience-at-pure-the/2021-07-26T07:00:00.000Zhttps://ysecurity.io/podcast/7-michael-brooks-vciso-and-director-of-cyber-risk-services-at/2021-08-10T07:00:00.000Zhttps://ysecurity.io/podcast/8-fredrick-lee-cso-of-gusto-why-is-authentic-diversity-essential/2021-08-24T07:00:00.000Zhttps://ysecurity.io/podcast/9-dylan-ayrey-founder-and-ceo-of-truffle-security-how-open-source/2021-09-07T07:00:00.000Zhttps://ysecurity.io/podcast/10-michael-malone-founder-and-ceo-of-smallstep-certificates-x-509/2021-11-15T08:00:00.000Zhttps://ysecurity.io/podcast/11-robert-rounsavall-co-founder-of-trapezoid-inc-firmware-to/2021-12-28T08:00:00.000Zhttps://ysecurity.io/podcast/12-founder-dan-sherry-and-co-founder-grace-chi-deep-dive-into/2022-01-20T08:00:00.000Zhttps://ysecurity.io/podcast/13-paul-nguyen-co-founder-and-co-ceo-of-permiso-security-on/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/14-biff-clark-cybersecurity-specialist-and-owner-of-coefficient-of/2022-03-01T08:00:00.000Zhttps://ysecurity.io/podcast/15-salesforce-security-engineer-benjamin-schmoker-scott-navigating/2022-04-02T07:00:00.000Zhttps://ysecurity.io/podcast/16-will-butler-red-team-at-robinhood-and-co-founder-of-from-hacking/2022-05-01T07:00:00.000Zhttps://ysecurity.io/podcast/17-sean-cassidy-head-of-security-at-asana-crafting-security/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/18-anders-eknert-developer-advocate-at-styra-on-evolved/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/19-aaron-painter-founder-and-ceo-of-nametag-on-redefining/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/20-benoit-chevallier-mames-team-lead-of-machine-learning-at-zama-on/2022-09-02T07:00:00.000Zhttps://ysecurity.io/podcast/21-sergej-dechand-co-founder-and-ceo-of-code-intelligence-on-the/2022-09-09T07:00:00.000Zhttps://ysecurity.io/podcast/22-michael-crandell-ceo-at-bitwarden-inc-on-open-source-security/2022-10-01T07:00:00.000Zhttps://ysecurity.io/podcast/23-david-mraihi-cpso-at-rivian-on-cryptography-cars-and-the-craft/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/24-aman-lachapelle-early-engineer-at-modular-ai-on-redefining-ai/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/25-david-gurle-founder-and-executive-chairman-at-hive-on-empathy/2022-11-16T08:00:00.000Zhttps://ysecurity.io/podcast/26-andrew-spangler-head-of-security-and-compliance-at-harness-on-in/2022-12-01T08:00:00.000Zhttps://ysecurity.io/podcast/27-colin-bitterfield-head-of-security-acting-ciso-people-data-labs/2023-01-16T08:00:00.000Zhttps://ysecurity.io/podcast/28-david-carpe-how-to-network-and-the-myth-of-the-great-silent/2023-05-19T07:00:00.000Zhttps://ysecurity.io/podcast/29-rod-schultz-vp-of-product-at-dust-identity/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/30-dominik-sch-rmann-co-founder-and-ceo-of-heylogin/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/31-sergey-stelmakh-head-of-security-engineering-at-yugabyte-on-vs/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/32-kevin-kane-founder-and-ceo-of-american-binary-on-cryptography/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/33-elizabeth-nammour-co-founder-and-ceo-of-teleskope-navigating/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/34-ganesh-krishnan-co-founder-and-ceo-of-anzenna-on-cyber-security/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/35-aviv-grafi-founder-and-innovator-at-votiro-from-idf-8200-to/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/36-feross-aboukhadijeh-founder-and-ceo-of-socket-dev-a-startup-and/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/37-founders-guide-to-compliance-the-introduction-soc2-iso-nist-pci/2024-02-25T08:00:00.000Zhttps://ysecurity.io/podcast/38-nick-sullivan-on-cryptography-cloudflare-and-building-a-better/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/39-steve-orrin-federal-cto-at-intel-on-tech-trust-and/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/40-jose-arrieta-imagineer-former-chief-information-officer-and-data/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/41-michael-moore-chief-privacy-officer-at-lacework-securing-the/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/42-avery-pennarun-co-founder-and-ceo-of-tailscale-the-anti-google-a/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/43-evan-driscoll-and-dion-almaer-unleash-augments-software-with-ai/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/44-benoit-chevallier-mames-vp-privacy-preserving-cloud-and-ml-at-of/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/45-craig-goodwin-co-founder-and-ceo-of-bleach-cyber-imagine-but-not/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/46-polina-morozov-security-recruiter-at-grammarly-on-navigating-and/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/47-clea-ostendorf-ciso-of-code42-securing-the-unseen-on-the-of-data/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/48-dr-georgianna-chief-technologist-at-foundation-for-defensive-and/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/49-vivek-ramachandran-founder-and-ceo-of-squarex-pioneering-browser/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/50-alan-braithwaite-co-founder-and-cto-at-runreveal-siem-doesnt-to/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/51-tony-thai-founder-and-ceo-of-hyperdraft-revolutionizing-legal/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/52-suha-can-ciso-at-grammarly-safeguarding-user-data-in-enterprise/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/53-lorenzo-thione-co-founder-and-chairman-of-startout-on-ais-role/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/54-simon-wijckmans-founder-and-ceo-of-cside-dev-revolutionizing/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/55-haseeb-awan-founder-and-ceo-of-efani-revolutionizing-mobile-for/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/56-kayne-mcgladrey-field-ciso-at-hyperproof-sec-10-k-and-leaders/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/57-vijay-balasubramaniyan-co-founder-and-ceo-of-pindrop-security/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/58-jacob-berry-field-ciso-at-clumio-on-balancing-security-with-in/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/59-neil-serebryany-founder-and-ceo-of-calypsoai-securing-ais-future/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/60-damon-fleury-cpo-at-spycloud-on-navigating-the-darknet-to-combat/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/61-the-father-of-ssl-passwords-are-holding-us-back/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/62-the-4-hour-ai-scam-hackers-steal-millions-and-no-one-sees-it/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/63-buying-more-security-tools-you-might-be-making-things-worse/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/64-building-a-billion-dollar-security-company-lessons-from-dratas/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/65-yaron-singer-cisco-the-hard-truth-about-deploying-ai-today/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/66-ai-expert-michal-pechoucek-how-ai-is-targeting-your-mind-now/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/67-gadi-bashvitz-how-bright-security-is-redefining-appsec-for/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/68-from-netflix-to-startup-ceo-travis-mcpeak-is-redesigning-for/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/69-cryptography-and-web3-expert-security-vs-speed-is-a-false-choice/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/70-the-ai-governance-expert-3-things-every-business-needs-to-trust/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/71-how-startups-can-fight-ai-deepfake-fraud/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/72-the-security-risk-no-one-sees-coming-with-ai-agents-traceforce/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/73-how-free-ai-tools-become-expensive-mistakes/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/74-augment-code-ai-agents-engineered-to-ship/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/75-how-to-use-ai-without-giving-up-your-data/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/76-the-critical-security-stage-every-startup-skips/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/77-inside-augment-code-why-security-starts-at-line-one/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/78-invisible-security-the-future-of-authentication-and-trust/2026-11-01T07:00:00.000Zhttps://ysecurity.io/podcast/79-ai-at-brinks-home-lower-costs-better-customer-support/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/80-think-like-a-hacker-why-curiosity-drives-innovation-and-security/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/81-how-to-put-ai-agents-safely-into-production/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/82-automating-app-security-for-modern-dev-teams/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/M8xn6Xm515s/hqdefault.jpg82. Automating app security for modern dev teamsRejah Rehim was a penetration tester who kept watching teams ship every week and pentest once a quarter. He co-founded Beagle Security to run application pentests from the CI/CD pipeline, and he’s direct about where automation still stops. Also in here, Jon’s run-ins with AI guardrails and why attackers don’t have that problem, and how a bootstrapped company spent two years finding its first paying customer. With hosts Jon McLachlan and Sasha Sinkevich.https://www.youtube.com/embed/M8xn6Xm515s17052026-10-18T19:18:24-07:00https://ysecurity.io/podcast/83-how-small-companies-can-make-their-security-doable/2026-11-02T08:00:00.000Zhttps://ysecurity.io/podcast/84-what-gets-missed-when-nobody-reviews-the-code/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/G1ckQvAlmzw/hqdefault.jpg84. What gets missed when nobody reviews the codeJack Cable found his first vulnerability at 15 by typing negative one dollar into a crypto site's payment API. He won Hack the Air Force in high school, led on Secure by Design at CISA, and co-founded Corridor because the bugs attackers exploit are still mostly the ones the industry has known how to prevent for decades. With host Jon McLachlan he talks about scanners that don't understand the code, the pull requests nobody can review, knowing which findings to fix, why defenders should get AI tools first, and a future where most code isn't written by humans.https://www.youtube.com/embed/G1ckQvAlmzw22702026-10-16T09:17:12-07:00https://ysecurity.io/podcast/85-how-companies-lose-197-million-in-seconds/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/kWbFINoQk9I/hqdefault.jpg85. How Companies lost $197 Million in SecondsChanni Greenwall deployed a side project on chain to learn how it worked, then went looking for the security stack she assumed had to exist underneath hundreds of billions of dollars. What she found was audits, at 25 to 250 thousand dollars a pass.https://www.youtube.com/embed/kWbFINoQk9I22572026-08-28T11:36:50-07:00https://ysecurity.io/podcast/86-ex-fbi-agent-the-biggest-security-threat-is-the-human-behind-the/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/sFKnRwgPqYk/hqdefault.jpg86. Ex-FBI Agent: Bank Employees Are Selling Account Access on TelegramTrevor Hilligoss wanted to be an FBI agent and got told at a career fair that his sociology degree wouldn't get him there. Army CID and an FBI cyber task force later, he runs the research group at SpyCloud, and his argument on this episode is that most companies are worrying about the wrong adversary. Unless your organization is best known by a three-letter acronym, he says, forget APT whatever. Worry about the 19-year-old on a 2006 Acer with all the time in the world. The named groups are the plane crash. You're more likely to be wrecked driving to the airport. He and Jon and Sasha get into the phishing kits that proxy your login and lift the authentication cookie so your MFA never mattered, why the RedLine takedown under Operation Magnus was a real win that didn't fix the problem, what an insider threat ad from a bank employee looks like on Telegram, and why almost no infostealer infection was ever aimed at you.https://www.youtube.com/embed/sFKnRwgPqYk23612026-08-28T07:41:50-07:00https://ysecurity.io/podcast/87-escape-the-ticket-trap-how-ai-agents-are-replacing-manual-devops/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/XdZW3XtgOpY/hqdefault.jpg87. Escape the Ticket Trap: How AI Agents Are Replacing Manual DevOpsVenkat Thiruvengadam joined a Microsoft research group out of college and the group became Azure. He watched it go from about 100 servers in Redmond to 5 million virtual machines, and the number he still brings up is that one engineer could run 50,000 workloads. Then he moved to the Bay Area and found teams putting one DevOps person behind every 15 to 20 engineers. Venkat is the founder and CEO of DuploCloud, which runs agentic DevOps inside the customer's own cloud account. A couple hundred customers, 97% of them in a regulated industry. His pitch to a buyer is that your Vanta goes green, because the GRC tool collects the evidence and DuploCloud implements the control underneath it. He and Jon get into why other AI SRE platforms stop at read-only, why DuploCloud gives its agents away and keeps the orchestration, why the models are this decade's internet and most AI apps are the dot-coms, and why AI coding tools still don't work on an existing code base. Venkat's ask: somebody build a next-generation Kafka for agents. With host Jon McLachlan.https://www.youtube.com/embed/XdZW3XtgOpY22422026-08-28T07:09:55-07:00https://ysecurity.io/podcast/88-how-illumio-stops-hackers-when-the-front-door-fails/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/dJd_25vdLJQ/hqdefault.jpg88. How Illumio Stops Hackers When the “Front Door” Fails (with Andrew Rubin)The perimeter will fail. What matters is whether your business turns one incident into a disaster. Andrew Rubin, Founder and CEO of Illumio, explains how breach containment reduces blast radius, why category timing is “luck,” and what leaders must do as AI speeds up attackers and defenders. Listen for a founder-level playbook on building security that scales with growth.https://www.youtube.com/embed/dJd_25vdLJQ27322026-08-28T05:31:05-07:00https://ysecurity.io/podcast/89-ai-agents-will-delete-your-database-and-then-lie-about-it/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/06T52YmIWbI/hqdefault.jpg89. AI Agents Will Delete Your Database. And Then Lie About It (with Graham Neray)AI agents can delete your production database and tell you everything is fine. Graham Neray, Co-Founder and CEO of Oso, breaks down why AI agents introduce a new level of risk for growing SaaS companies. If you’re adding AI to your product, moving upmarket, or selling into regulated industries, your authorization model is no longer a backend detail. It’s a growth dependency. Listen in to learn how automating least privilege protects your product, your customers, and your revenue. With hosts Jon McLachlan and Sasha Sinkevich.https://www.youtube.com/embed/06T52YmIWbI22352026-06-16T09:16:29-07:00https://ysecurity.io/podcast/90-how-two-marines-cracked-the-defense-tech-industry-reveal/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/tP0TZthvMLU/hqdefault.jpg90. How Two Marines Cracked the Defense Tech Industry (Reveal Technologies)Most security decisions fail when the people doing the work don’t have the information they need. Garrett Smith, Founder and CEO of Reveal Technology and a Marine Corps Reserve Lieutenant Colonel, explains how bottom-up product design changes defense outcomes, and what business leaders can learn about building technology people actually adopt. Listen to learn how compliance, procurement, and mission pressure shape what ships and what stalls.https://www.youtube.com/embed/tP0TZthvMLU25512026-06-17T11:12:43-07:00https://ysecurity.io/podcast/91-why-asking-developers-to-fix-everything-is-a-bad-idea/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/NqoIm4eqT9o/hqdefault.jpg91. Why Asking Developers To Fix Everything Is... A Bad Idea (with Neatsun Ziv)Is your security team drowning in noise while your developers struggle to keep up? Neatsun Ziv, CEO of Ox Security, explains why traditional "Shift Left" strategies have failed and how applying business context can help your team focus on the vulnerabilities that actually matter. Listen to the full episode to learn how to turn security into a competitive advantage.https://www.youtube.com/embed/NqoIm4eqT9o21752026-06-17T11:12:49-07:00https://ysecurity.io/podcast/92-the-real-problem-isnt-deepfakes-its-identity/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/4Zrb6dKwOCI/hqdefault.jpg92: The Real Problem Isn't Deepfakes. It's Identity (with Jasson Casey)You can have perfect infrastructure, and still be talking to the wrong person. Jasson Casey of Beyond Identity breaks down why identity, not infrastructure, is the real security boundary, how passwords created today's vulnerabilities, and what a future without moving secrets looks like. With host Sasha Sinkevich.https://www.youtube.com/embed/4Zrb6dKwOCI23142026-06-17T20:47:04-07:00https://ysecurity.io/podcast/93-the-conversation-nobodys-having-about-ai/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/wu_2Jf8kg1E/hqdefault.jpg93. The Conversation Nobody’s Having About AI (with Jacob Andra and Stephen Karafiath)The biggest AI mistake companies make isn't picking the wrong tool, it's not understanding the dependencies underneath it. Jacob Andra and Stephen Karafiath of Talbot West share how they map entire organizations to find the right AI entry point, why LLMs are overhyped, and what technologies are actually underrated right now. With hosts Jon McLachlan and Sasha Sinkevich.https://www.youtube.com/embed/wu_2Jf8kg1E27252026-06-17T20:47:01-07:00https://ysecurity.io/podcast/94-how-one-unsecured-printer-can-take-down-11-000-devices/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/i4QC7lwU9M0/hqdefault.jpg94. How one unsecured printer can take down 11,000 devices (with Jim LaRoe, Symphion, Inc.)Your printers know your passwords. They store credentials for your email server, your file shares and your LDAP directory. Jim LaRoe, founder and chief executive of Symphion, tells host Jon McLachlan why 99% of enterprise printers sit at factory defaults, why nobody owns their security, how a technician's reset undoes the hardening, and what a single forgotten device can cost.https://www.youtube.com/embed/i4QC7lwU9M024982026-05-11T08:38:08-07:00https://ysecurity.io/podcast/95-stop-saying-no-how-security-leaders-enable-ai-instead-of-it/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/5rIWmd68CUY/hqdefault.jpg95. Stop Saying No: How Security Leaders Enable AI Instead of Blocking ItSecurity incidents don't end when the threat is contained. They end when you can confirm no sensitive data left the building and most teams can't confirm that. Pranava Adduri and George Gerchow of Bedrock Data joined the show to talk through what data visibility actually looks like at enterprise scale, why the office of no is dead, and what a DBOM has to do with AI compliance. Together they make the case that data-first security isn't just a better posture, it's the only posture that survives an AI-driven enterprise. With host Jon McLachlan.https://www.youtube.com/embed/5rIWmd68CUY23912026-06-11T09:11:53-07:00https://ysecurity.io/podcast/96-they-dont-need-to-hack-you-now-they-just-need-to-wait/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/VdIhppPmXSQ/hqdefault.jpg96. They Don't Need to Hack You Now. They Just Need to Wait. (with Kevin Kane)Google has said to be concerned about quantum computing by 2029. Kevin Kane, Co-Founder and CEO of American Binary, argues that timeline is already too relaxed and that companies treating post-quantum as a future problem are the ones most exposed right now. He breaks down what a real quantum-resilient architecture takes, why formal verification matters, and what harvest attacks mean for every encrypted message sent today.https://www.youtube.com/embed/VdIhppPmXSQ15622026-06-11T09:11:59-07:00https://ysecurity.io/podcast/97-the-god-level-hacker-how-one-founder-is-building-the-worlds-most/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/TAFCw25icUQ/hqdefault.jpg97. The God-Level Hacker: How One Founder Is Building the World's Most Powerful Offensive Cyber ToolA hacker who got kicked out of college for finding their vulnerabilities, became a national hacking champion, and is now building what he calls a sovereign-level cyber weapon. Alexis Lingad, founder of Kinosec, built an autonomous AI system that chains exploits across web, IoT, and physical infrastructure the same way a real attacker would, and he's already using it to sell AI pen testing to enterprise security teams. Tune in to hear how he's building the weapon before the bad guys do. With hosts Jon McLachlan and Sasha Sinkevich.https://www.youtube.com/embed/TAFCw25icUQ21372026-06-16T08:16:37-07:00https://ysecurity.io/podcast/98-how-browser-security-became-the-new-battleground-for-enterprise/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/O2RjTgSUwpE/hqdefault.jpg98. How Browser Security Became the New Battleground for Enterprise AIWhat if 80% of your security budget is protecting the wrong thing? Or Eshed built LayerX after realizing that firewalls and network tools were blind to exactly where breaches actually happen, in the browser. In this episode, Or breaks down how to build a future-proof security strategy around where employees actually work. Tune in. With host Jon McLachlan.https://www.youtube.com/embed/O2RjTgSUwpE25232026-06-30T08:35:59-07:00https://ysecurity.io/podcast/99-ai-onboarding-is-a-security-problem-not-a-feature/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/OHt7CgtxEEA/hqdefault.jpg99. AI Onboarding Is a Security Problem, Not a Feature (with Ged Ossman)Enterprises blame vendors. Vendors blame enterprises. Nobody does a pre-flight check. Ged Ossman, founder of Interf, joins the show to explain why AI adoption keeps stalling out mid-flight, and how a shared protocol for agent context and permissions could finally fix the trust gap between security teams and AI vendors. Recorded in January 2026.https://www.youtube.com/embed/OHt7CgtxEEA25902026-07-14T08:13:44-07:00https://ysecurity.io/podcast/100-why-your-employees-favorite-ai-tool-might-be-leaking-your-data/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/9rikli16chU/hqdefault.jpg100. Watch One Sentence Break One of the Most Popular MCPsEvery employee at your company probably has ChatGPT, Claude, and Gemini installed, and nobody's tracking what data goes where. Xia Hua, co-founder and CEO of Traceforce, returns to the show a year after her first appearance. She brought MCP X-Ray, Traceforce's open source scanner, and used it live on Playwright, one of the most widely used MCPs. The prompt injection flaw it found can be triggered with a single sentence. We also cover Anthropic's November report on the espionage campaign that used Claude and MCPs against about 30 organizations. The back half of the conversation gets into AI tool fatigue inside security teams and what an enterprise buyer will ask about your AI stack this year.https://www.youtube.com/embed/9rikli16chU24672026-07-28T19:45:26-07:00https://ysecurity.io/podcast/101-hacking-ai-is-now-a-tiktok-skill/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/MiDoysjwmrQ/hqdefault.jpg101. Hacking AI is now a TikTok skill. Mighty's founders on prompt injectionAnyone can hack an AI now. Job applicants do it with white text on a resume. TikTok teaches it for customer service bots. Mighty co-founders Johnny Hung and Munam Wasi build the layer that catches prompt injection before it reaches the model, one line of code at input and output, small models retrained on fresh attacks about every week, and a plain allow, warn, or block back to your app. With hosts Jon McLachlan and Sasha Sinkevich, they get into multi-turn crescendo attacks, session-level blocking, why frontier models overthink and get bypassed, DEF CON's agentic security findings, their open source Go guard, and why the endgame for AI security looks like SSL. Invisible, everywhere, and nobody has to think about it.https://www.youtube.com/embed/MiDoysjwmrQ26642026-08-11T09:11:42-07:00https://ysecurity.io/podcast/102-ciso-does-not-spell-ceo/2026-08-25T07:00:00.000Zhttps://ysecurity.io/podcast/103-your-zero-trust-is-running-on-a-sticker/2026-09-08T07:00:00.000Zhttps://ysecurity.io/podcast/104-why-a16zs-ciso-doesnt-trust-the-approve-button/2026-09-22T07:00:00.000Zhttps://i.ytimg.com/vi/my6Rie4TR0s/hqdefault.jpg104. Why the a16z CISO doesn’t trust the approve buttonYashvier Kosaraju, who goes by Yash, is the Chief Information Security Officer of a16z. He and host Jon McLachlan start with the question founders actually bring him, which is when to make a first security hire and why that is a different question from when to hire a head of security. Then the AI half. Prompt injection is unsolved, and the accept-this-action prompt everyone treats as the control stops working around the third click. His team's answer is to adopt AI at full speed and scope it tightly, and to run a vendor review that asks what the tool can reach and whether it writes back, alongside the pen test report everyone already asks for.https://www.youtube.com/embed/my6Rie4TR0s22882026-09-22T08:03:08-07:00https://ysecurity.io/podcast/105-shrink-what-a-breach-can-reach/2026-11-02T08:00:00.000Zhttps://i.ytimg.com/vi/E1wyHhMKGXk/hqdefault.jpg105. What AI changes once an attacker is inside (with Yair Grindlinger)Yair Grindlinger, co-founder and chief executive of Surf AI, says that once an attacker is inside, artificial intelligence makes reaching and exfiltrating valuable data far faster and easier than it has ever been. His answer is to do everything you can to reduce the risk of a breach, then spend as much time, if not more, reducing the blast radius. With host Jon McLachlan he also covers internet security weather, what security analysts are happiest to hand to agents, and why he's an optimist about where defenders end up.https://www.youtube.com/embed/E1wyHhMKGXk17612026-10-06T08:46:44-07:00https://ysecurity.io/podcast/106-the-prompt-injection-hiding-in-the-fine-print/2026-10-29T07:00:00.000Zhttps://i.ytimg.com/vi/K7t4gLoDO6Y/hqdefault.jpg106. Why the cost of breaking in is going to zero (with Jesse Anglen)Jesse Anglen, co-founder and chief executive of Ruh.ai, never learned serious black-hat hacking, and with the models available today he says he wouldn't need to. With host Jon McLachlan he walks through a prompt injection that takes one line of fine print on a website to turn somebody's coding agent against its own credentials, and the guard agent he and his chief technology officer came up with to catch it, including where it breaks.https://www.youtube.com/embed/K7t4gLoDO6Y25892026-10-20T07:24:22-07:00https://ysecurity.io/podcast/107-programming-living-neurons-in-python/2026-11-10T08:00:00.000Zhttps://i.ytimg.com/vi/g2FdEMbWyMY/hqdefault.jpg107. Can you build a computer out of living neurons? (with Ewelina Kurtys)Ewelina Kurtys of FinalSpark on why the company is trying to build computers out of living neurons, aiming for 1 million times less energy than silicon. Jon suggests it's a contest with quantum computing, and she turns that down. His own point is that quantum will have a huge impact on security, because of what it does to the traditional asymmetric key algorithms. On biocomputing, she says it's too early to tell. At least for now, everything in the lab talks to the outside world through silicon, so she thinks maybe not many things change for security. Later she explains how the team writes Python to send the neurons electrical and chemical signals and measure the response.https://www.youtube.com/embed/g2FdEMbWyMY17082026-11-03T08:41:07-08:00https://ysecurity.io/podcast/108-how-apples-former-cso-tells-a-neighbor-from-a-threat/2026-11-10T08:00:00.000Zhttps://i.ytimg.com/vi/NaRzFMs7OVY/hqdefault.jpg108. Why are people turning against the tech industry? (with Thomas Moyer)Thomas Moyer spent 20 years at Apple and ran security as its Chief Security Officer for more than 13 of them. He tells the story of his first meeting with Tim Cook and how he built Apple's crisis management program. Also in here, why he thinks people are turning against the tech industry, and what he'd tell Flock's founder.https://www.youtube.com/embed/NaRzFMs7OVY30932026-11-10T11:49:14-08:00