Security Conversations - A Securityweek Podcast

In today's digital age, cybersecurity is more critical than ever, and organizations must prioritize resilience to protect themselves against evolving threats. In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience in the field. We'll explore governance challenges, the importance of adapting to rapid technological advancements, and actionable strategies organizations can implement to enhance their cybersecurity posture.Discover insights from cybersecurity expert Edna Conway as she discusses evolving governance, AI advancements, supply chain resilience, and the critical role of collaboration in safeguarding digital ecosystems. This episode offers strategic perspectives for boards, leaders, and tech enthusiasts navigating rapid technological change. (SecurityWeek TV)Follow SecurityWeek on LinkedIn

Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up?In this exclusive SecurityWeek interview, Brian “SchleiF” Schleifer sits down with Clint Bodungen, Director of AI/ML Engineering at Arcovo, founder of ThreatGen, and one of the industry’s leading voices in industrial cybersecurity.Together they tackle why traditional governance often fails practitioners, how cybersecurity has evolved over the past two decades, and why the biggest vulnerability is still people not technology. Clint also shares, for the first time publicly, the story behind the MindStone Agent, his open-source agentic AI project designed to bring persistent memory, identity, and continuity to AI assistants. The conversation concludes with a real-world ransomware response where autonomous AI agents coordinated incident response, forensic analysis, recovery, and infrastructure migration with minimal human intervention.Follow SecurityWeek on LinkedIn

In this episode of the SecurityWeek Podcast, we speak with Rod Locke of Fortinet about the growing importance of IEC 62443 standards in operational technology (OT) security. The conversation explores secure-by-design principles, IEC 62443-4-1 certification, long-term security support for industrial systems, and how critical infrastructure operators can evaluate vendor security practices as IT and OT environments continue to converge. Follow SecurityWeek on LinkedIn

Andrew McPhee, Industrial IoT Security Solution Manager at Cisco, joins the SecurityWeek podcast and dives into why traditional monitoring and SPAN-based approaches fail to deliver true visibility in industrial environments, and how network-native security embeds inspection, segmentation, and protection directly into the network. We discuss real-world implementation challenges, economic tradeoffs, and how to move from visibility to action without disrupting operations.  (Want to continue the discussion? Contact Cisco.)Follow SecurityWeek on LinkedIn

In a world where cyber risk is business risk, today's Chief Information Security Officers are not just defenders of data—they are strategic partners driving organizational resilience. Moderated by Gartner's Ash Ahuja, this candid conversation explores how security leaders are balancing innovation with risk management, influencing board-level decision-making, and navigating complex threat environments in 2025.Ash Ahuja, VP & Executive Partner, Security & Risk Management - GartnerTim Silverline, VP of Security, Rocket LawyerJarell Mikell, Executive Director - Power Systems & Gas Cybersecurity - Southern CompanyThis session took place at SecurityWeek's CISO Forum at the Ritz-Carlton, Half Moon Bay in August 2025.Follow SecurityWeek on LinkedIn

In this fireside chat, we speak with Phil Venables, Chief Information Security Officer of Google Cloud. Venables leads the risk, security, compliance, and privacy teams for Google Cloud. Before joining Google, he was a Partner at Goldman Sachs where he held multiple roles over a long career, initially as their first Chief Information Security Officer, a role he held for 17 years. (Session recorded at SecurityWeek's 2024 Cloud & Data Security Summit)Follow SecurityWeek on LinkedIn

In this session SecurityWeek speaks to Bennett Pursell, Ecosystem Strategist at the Open Source Security Foundation (OpenSSF) about OpenSSF Siren, a community data-sharing initiative aimed at bolstering the defenses of open source projects worldwide. In this fireside chat, Pursell discusses the origins and goals of OpenSSF Siren, exploring transparent access to data that can help small- and medium-sized businesses during active incidents. Pursell also shares insights on the value of threat intelligence, the shelf life of IOC (indicators of compromise) and how businesses with limited resources can mitigate exposure to risk.(Recorded at SecurityWeek's 2024 Threat Detection & Incident Response Summit)Follow SecurityWeek on LinkedIn

In this exclusive fireside chat, SecurityWeek editor-at-large Ryan Naraine interviews Abhishek Arya, Director of Engineering on Google’s open source and supply chain security teams.  We cover the evolving landscape of Software Supply Chain security, highlighting key advancements, challenges, research priorities, and much more. Session recoredef for SecurityWeek's 2024 Supply Chain Security Summit.Follow SecurityWeek on LinkedIn

In this episode, SecurityWeek editor-at-large Ryan Naraine interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape. We discuss the evolution of cyber resilience, the challenges of merging IT and OT governance structures, process integrations for IT/OT security strategy, consolidated tech stacks for IT and OT, and the role of next-generation firewalls in an integrated IT/OT world.Follow SecurityWeek on LinkedIn

Enjoy this fireside chat with Jason Chan, former head of information security at Netflix and operating advisor, Bessemer Venture Partners. Jason joins SecurityWeek editor-at-large Ryan Naraine for a frank discussion on the state of vulnerability management and software development, multi-cloud deployments and expanding attack surfaces, the cyber startup vendor ecosystem, Microsoft's booming cybersecurity business, and some areas still ripe for innovation. (Recorded at SecurityWeek's 2023 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn

In this interview from SecurityWeek's 2022 Threat Hunting Summit, Steve Mancini, head of Information Security at Guardant Health, discusses his personal mission to help secure healthcare data in the cancer research space and how threat hunting and threat intelligence fits into a modern cybersecurity program.Mancini  discusses a career in the cybersecurity trenches -- managing threat intel at Intel Corp. before pivoting into the CISO chair to building and and security programs.  Attendees can expect an engaging conversation on the CISO's decision-making process, best practices for securing corporate assets and data, the EDR and anti-malware landscape, and frameworks for measuring program success.Follow SecurityWeek on LinkedIn

In this fireside chat from SecurityWeek's CISO Forum, Luta Security chief executive Katie Moussouris  shares lessons from her work creating bug bounty and vulnerability disclosure programs for some of the biggest organizations in the world. Join this session to learn about the value -- and pitfalls -- of bug bounty programs, best practices around managing the flow of vulnerability data, and security response priorities.Follow SecurityWeek on LinkedIn

Enjoy this engaging fireside chat on security leadership with Adam Ely, Chief Information Security Officer at Fidelity Investments.At SecurityWeek's 2022 CISO Forum, SecurityWeek's editor-at-large Ryan Naraine hosted a discussion with Adam on the role of the modern CISO, the challenges of building a mature risk management program, communications challenges in large organizations, mentorship and staff retention, and much more.  Follow SecurityWeek on LinkedIn

For the modern CISO, it's impossible to avoid news headlines and warnings about 'cyberwar' and nation-state APT attacks that require urgent attention. From the latest zero day exploit discovery to advisories from intelligence agencies, security leaders are often overwhelmed and unable to filter through the noise to make informed decisions.In this discussion from SecurityWeek's Threat Intelligence Summit, threat intel and detection and response practitioners will help explain the current threat landscape, the surge in zero-day exploit discoveries, the blurring of lines between APTs and ransomware attacks, and much more.Guests: Allison Wikoff, Global Threat Intelligence Lead at PwCSilas Cutler, Senior Director for Cyber Threat Research and Analysis at the Institute for Security and Technology.Follow SecurityWeek on LinkedIn

Enjoy this exclusive fireside chat with Shane Huntley, head of Google's TAG (Threat Analysis Group). In this session from SecurityWeek's Threat Intelligence Summit, we have a frank discussion on the science of threat intelligence, the cloudy nature of the APT landscape, the surge in big-game ransomware and nation-state malware activity worth tracking.Follow SecurityWeek on LinkedIn

[Breaking News Podcast] Sergio Caltagirone, VP of Threat Intelligence at industrial cybersecurity firm Dragos, discusses the U.S. government's joint advisory on the discovery of rare custom malware known as Pipedream/Incontroller, which is capable of doing damage to ICS/SCADA installations.Follow SecurityWeek on LinkedIn

In this security leadership fireside chat, McDonald’s CISO Shaun Marion joins SecurityWeek’s Ryan Naraine to discuss the role of the modern CISO, the challenges of building a mature risk management program, securing multi-cloud deployments, supply chain anxieties, and much more. (Source: SecurityWeek’s 2022 Attack Surface Management Summit)Follow SecurityWeek on LinkedIn

On this special edition of SecurityWeek's spotlight podcast, Corey Marshall, Director of Security Architecture at F5, discusses how Zero Trust can be used as a powerful strategy to help businesses stay secure amidst rapid digital transformation and expanding network attack surface.Follow SecurityWeek on LinkedIn

Thomas Rid, Professor in the Department of War Studies at King’s College London, joins Ryan Naraine on the podcast to discuss his new book, the lack of nuance in the crypto debate and the future of global cyber conflict. Follow SecurityWeek on LinkedIn

Infosec veteran and former CEO of WhiteHat Security Jeremiah Grossman joins Ryan Naraine on the podcast to talk about the parallels between jiu-jitsu and computer security and the ongoing cat-and-mouse game between attackers and defenders. Follow SecurityWeek on LinkedIn