The Secure Disclosure

Mackenzie Jackson

Cyber, Sake, News, Research and more The Disclosure is a weekly cybersecurity podcast that brings the latest in news, research, and leaders into a 45-minute podcast. Hosted by Mackenzie Jackson, we bring new guests each week to share their research and expertise in the space.

  1. Solving the Supply Chain Security & Malware Crisis w/John Amaral

    2 dage siden

    Solving the Supply Chain Security & Malware Crisis w/John Amaral

    In this episode of the Secure Disclosure Podcast , host McKenzie sits down with John Amaral, Co-founder and CTO of Root.io. They dive deep into the increasingly complex landscape of open-source supply chain attacks , examining how threat actors like Team PCP leverage AI to weaponize entire package ecosystems. John explains how Root's agentic software factory solves cascading CVE backlogs through precision pinning and automated patch backporting —all capped off with a massive industry merger announcement.Keep your supply chain secure from code to cloud with Aikido Security. Start protecting your ecosystem for free at aikido.dev.

    36 min.
  2. AI is an Amplifier: Why Bad Infrastructure Gets ‘Wronger’ Faster w/ Abdel SGHIOUAR

    25. jun.

    AI is an Amplifier: Why Bad Infrastructure Gets ‘Wronger’ Faster w/ Abdel SGHIOUAR

    In this episode of The Secure Disclosure, Mackenzie sits down with Abdel Sghiouar, Senior Cloud Developer Advocate at Google and co-host of the Kubernetes Podcast. Together, they unpack the messy, high-stakes intersection of AI agents and Kubernetes cluster operations. Abdel breaks down the "Autonomy Catch-22", the technical paradox where an agent's capability to act independently is precisely what makes it a massive security liability. They explore real-world risks like prompt poisoning, how next-gen models like Gemini 3.5 Flash are aggressively ignoring user instructions, and the threat of over-privileged autonomous tools deleting production databases. From tactical mitigation strategies like "hook engineering" to managing massive cognitive overload and false positives for SRE teams, this conversation offers a grounded reality check on the future of cloud-native infrastructure.

    30 min.
  3. Your Microphone Became a Keylogger w/ David vonThenen

    16. jun.

    Your Microphone Became a Keylogger w/ David vonThenen

    In this episode of The Secure Disclosure, we sit down in Copenhagen with David vonThenen, a keynote speaker and machine learning expert conducting groundbreaking—and terrifying—research. David breaks down his latest work on acoustic keystroke logging: training machine learning models from scratch using PyTorch to identify exactly what you are typing purely by the acoustic signature of your keyboard clicks. From hitting 100% accuracy over Zoom calls to tracing the roots of low-tech Cold War espionage, David explains how computational power has evolved, the threat this poses to corporate environments, and how we can use "digital interference" to fight back against pervasive data tracking.Sponsor Link Protect your code from cloud to deployment with Aikido Security, the leader in AI pen-testing and supply chain defense—start for free at https://aikido.dev.

    26 min.
  4. Understand the Software Supply Chain Chaos w/ Roeland Delrue

    9. jun.

    Understand the Software Supply Chain Chaos w/ Roeland Delrue

    Supply chain security is evolving at a terrifying pace. In this episode of The Security Disclosure, Roeland Delrue (COO and co-founder of Aikido Security) breaks down why attackers have shifted their crosshairs from cloud infrastructure directly onto the individual developer's machine.We dive deep into how malicious JavaScript packages, VS Code extensions, and Chrome extensions manage to slip past traditional endpoint software like CrowdStrike or McAfee, and discuss the practical, counterintuitive steps security teams can take right now to protect themselves. Roeland also shares a surprisingly candid take on why open-source marketplaces like NPM and PyPI need to step up, why giving threat actors "oxygen" on social media does more harm than good, and plays a brutal round of tech "Would You Rather."

    30 min.
  5. Prompt Injection Might Never Be Solved w/ Paul Vann

    28. maj

    Prompt Injection Might Never Be Solved w/ Paul Vann

    In this episode of Secure Disclosure, host Matt sits down with Paul Van, CEO and founder of Validia, to explore the frontier of AI security. Instead of focusing on how bad actors use AI tools, they dive deep into how to protect the AI models themselves from the inside out. From the unsolvable nature of prompt injections and the rise of distillation attacks to the reality of a "machine vs. machine" security landscape, Paul breaks down why traditional firewalls fail and how a model's behavioral "trauma response" might just be the key to defending LLMs. 🛡️ Support Our Sponsor:Stay Secure with Aikido security at https://aikido.dev

    31 min.
  6. AI Broke the Security Ecosystem w/ Chris Hughes

    22. maj

    AI Broke the Security Ecosystem w/ Chris Hughes

    In this episode of The Secure Disclosure, host sits down with Chris Hughes founder of Resilient Cyber, CISA Cyber Innovation Fellow, and a leading voice in cybersecurity. We dive deep into the chaotic and rapidly shifting landscape of software supply chain security, the sudden operational struggles of the National Vulnerability Database (NVD), and how AI is completely rewriting the rules of vulnerability management. From the technical and social engineering risks plaguing open-source software to the "human-in-the-loop" delusion, Chris shares his honest, unfiltered takes on where the industry is heading and why things will likely get worse before they get better. The episode wraps up with a chaotic round of "Would You Rather," forcing Chris to choose between missing firewalls, permanent vulnerability freezes, and total AI "vibe coding."

    32 min.
  7. PostHog is placing a wild bet on AI Coding w/ James Hawkins

    15. maj

    PostHog is placing a wild bet on AI Coding w/ James Hawkins

    In this episode of Secure Disclosure, James Hawkins, the co-founder and co-CEO of PostHog, dives into the "radical transparency" that turned a pivoted startup into a billion-dollar open-source powerhouse. James shares his unfiltered thoughts on why most B2B software pricing is a scam, why "collaboration" is often just a form of procrastination, and how AI is fundamentally changing the role of the engineer from a code-writer to a product-architect.The conversation gets spicy as they discuss the security risks of open-source software in the age of AI, the controversy surrounding "vibe coding," and PostHog’s ambitious bet on a future where you might code via Slack, or even a phone call.

    38 min.
  8. AI Panic is Driving Shadow IT w/ Noora Ahmed-Moshe

    6. maj

    AI Panic is Driving Shadow IT w/ Noora Ahmed-Moshe

    In this episode, we sit down with tech veteran and behavioral science enthusiast Noora Ahmed-Moshe to tackle the growing phenomenon of Shadow AI. As employees scramble to stay relevant in an AI-driven world, many are turning to unsanctioned tools, and bringing sensitive company data with them. Noora explains why "banning" these tools is a losing game and how organizations can bridge the gap between security and productivity. We dive into the "human layer" of cybersecurity, the million-dollar risk of AI note-takers, and how fostering psychological safety is the ultimate defense against the next big breach.

    26 min.
Se alle (43)

Om

Cyber, Sake, News, Research and more The Disclosure is a weekly cybersecurity podcast that brings the latest in news, research, and leaders into a 45-minute podcast. Hosted by Mackenzie Jackson, we bring new guests each week to share their research and expertise in the space.

Oplysninger

  • Skaber
    Mackenzie Jackson
  • Aktive år
    2025 - 2026
  • Episoder
    43
  • Vurdering
    Anstødeligt
  • Copyright
    © Mackenzie Jackson
  • Websted for serie
    The Secure Disclosure

Måske vil du også synes om