CypherTalk

Oak Security

CypherTalk is a twice-monthly podcast on the realities of cybersecurity and privacy in a world that’s moving faster than our defenses. Hosted by Jade Doherty (who translates technical security into plain English) alongside rotating security and privacy experts — including co-host Stefan Beyer, co-founder of Oak Security — the show explores how modern cybersecurity attacks actually happen: not just through bugs in code, but through people, processes, supply chains, and the tools we rely on every day. The show also looks at the latest trends in privacy and its supporting technologies, such as cryptography and zero-knowledge proofs.  Expect conversations that balance big-picture trends (AI-driven threats, privacy tech like zero-knowledge, shifting security standards) with practical takeaways you can apply immediately — whether you’re a developer, a founder, or simply someone who uses the internet. Less hype. More clarity. Better security and privacy habits.

  1. fa 4 dies

    AI Asssited Security with Prof. Arthur Gervais

    What does it actually mean to be "obsessed with AI for security"? In this episode of CypherTalk, Jade and co-host Stefan Beyer sit down with Prof. Arthur Gervais (UCL, affiliate faculty at UC Berkeley), known for foundational work on MEV, flash loan attacks, and AI-powered smart-contract security. Arthur's core conviction sets the tone: AI is not a zero-sum game. Strong researchers can now find vulnerabilities ten times faster, and the right response is to onboard everyone as fast as possible rather than lock the tools down. The conversation goes deep on A1, the agentic system his team built that turns any LLM into an end-to-end exploit generator with one unambiguous goal: generate a profit. The hard part, he stresses, isn't building it, it's target selection.   Key Topics AI for security enhancement AI-assisted vulnerability detection Real-time blockchain exploit detection   Chapters 00:00 Introduction to AI and Security 02:29 Arthur's Journey into Information Security 05:05 The Role of AI in Security 07:22 A1: The AI Agent for Exploit Generation 09:38 Autonomy and Ethics of AI Agents 11:53 Harnessing AI for Security Audits 14:15 The Evolution of LLMs and Their Impact 16:33 Dealing with False Positives in AI Security 19:06 The Academic Perspective on AI Research 21:42 Comparing LLMs for Security Tasks 24:05 Future Directions in AI and Security 25:26 The Power Dynamics in AI and Cybersecurity 29:04 Balancing Offensive and Defensive Strategies in AI 31:44 Real-Time Defense Mechanisms in Cybersecurity 34:20 The Role of Tooling in Smart Contract Security 39:04 Human Error vs. Automated Security Tools 41:24 AI's Impact on Social Engineering and Human Error 42:53 Emerging Threats from AI in Cybersecurity 44:17 Teaching Blockchain Security: Common Misconceptions 45:23 Future Directions in Blockchain Security Research   Resources and Links Arthur’s website: https://arthurgervais.com/ Arthur’s Google Scholar: https://scholar.google.ch/citations?hl=en&user=jLr_xi4AAAAJ&view_op=list_works&sortby=pubdate Arthur’s X: https://x.com/HatforceSec Oak Security’s Research: https://research.oaksecurity.io/

    49 min

  2. 17 de juny

    Peter Kacherginsky's Quaterly Take on Web3 Security

    In this episode, Jade Doherty and Stefan Beyer interview Peter Kacherginsky, founder of BlockThreat, on his quarterly take on blockchain security and recent exploits. They discuss how to utilize threat intelligence, the shift from smart contracts to operational attacks, and the role of AI in cybersecurity. Topics The shift from smart contract exploits to operational and infrastructure attacks The impact of AI on cybersecurity and defense strategies The importance of architectural security and threat modeling The role of community funding and ethical research in security Predictions for upcoming security challenges in crypto   Chapters 00:00 Introduction to Block Threat and Peter Kachaginski 01:42 Utilizing Threat Intelligence Effectively 04:31 The Impact of Market Conditions on Security 07:43 Shifts in Attack Vectors: From Smart Contracts to Infrastructure 09:35 Analyzing Major Hacks: Drift and Kelp DAO 13:36 The Importance of Architectural Security 16:47 The Evolving Role of Ethical Security Researchers 20:58 The Future of Security in a Rapidly Changing Landscape 30:10 Navigating Ransomware and Legal Implications 34:41 AI's Role in DeFi Security 43:27 Community-Driven Security Initiatives 49:25 Building a Security Mindset in Teams 51:48 The Centralization Dilemma in Security   Resources Block Threat Newsletter - https://blockthreat.com  Oak Security’s report - https://research.oaksecurity.io/  Peter’s X - https://x.com/iphelix

    56 min
  3. SEAL Certifications with Isaac Patka

    2 de juny

    SEAL Certifications with Isaac Patka

    In this episode of CypherTalk, Isaac Patka, co-founder of Shield3 and certification lead at the Security Alliance (SEAL), joins Jade Doherty and Stefan Beyer to discuss the human, operational, and governance risks shaping Web3 security. From early smart contract bug hunting to incident response wargames, SEAL 911, Safe Harbor, and the launch of SEAL certifications, Isaac explains why security is no longer just about audits and code. The conversation explores how DeFi protocols can prepare for real incidents, why operational controls matter as much as smart contract reviews, and how AI is changing the threat landscape for both attackers and defenders. Isaac also shares practical insights on slowing down dangerous protocol actions, designing better incident response processes, and building a more mature security culture across crypto. Enjoyed the episode and want to get SEAL certified? Oak Security is a SEAL-approved provider, and can review and certify your protocol to make sure your operational security is as good as your smart contracts. Get in touch via https://oaksecurity.io/  Key topics Isaac’s path from electrical engineering and semiconductors to Web3 security How smart contract security has changed since the early Ethereum days The difference between audits, war games, threat modeling, and incident response How SEAL 911 helps coordinate emergency response across the crypto ecosystem SEAL certifications and why operational security needs its own standard Why SOC 2 and ISO do not fully capture Web3-specific risks Multisig operations, treasury controls, DNS security, DevOps, and identity management The rise of social engineering, insider threats, and operational attacks North Korea, Lazarus Group, and state-sponsored crypto threats How AI is expanding the attack surface for smaller protocols Why protocols should build in slowness, circuit breakers, and operational controls Sound Bites “An audit tries to prevent an incident and the war game tries to help you deal with an incident.” “Social engineering works for a reason. Humans are fallible.” “What is the slowest I can possibly make this and have it still be functional?” “People don’t think during the design process about where they should build slowness into the protocol.” “The core smart contracts have gotten a lot better, which has pushed the security risks to different parts.” “If more people would care from day one about operational controls or circuit breakers, that’s what I would want.” Resources Isaac Patka X https://x.com/isaacpatka Security Alliance / SEAL https://securityalliance.org/ SEAL Frameworks https://securityalliance.org/frameworks SEAL Incident Response Template https://frameworks.securityalliance.org/incident-management/incident-response-template/overview/ SEAL Certifications https://frameworks.securityalliance.org/certs/overview/ Shield3 https://www.shield3.com/ Oak Security’s State of Web3 Security Report https://research.oaksecurity.io/

    59 min

  4. 22 de maig

    Bug Bounties with Joran Honig

    Summary In this in-depth interview, Joran Honig, a renowned bug bounty hunter and security researcher, shares insights into finding crazy bugs, the differences between audits and bug bounties, and the role of AI in security workflows. Discover practical tips, mental models, and future trends in Web3 security and bug hunting. Key topics Edge case bugs and how to find them Differences between audits, bug bounties, and contest models The role of AI and automation in security research Tools and workflows for effective bug hunting Responsible disclosure and handling uncooperative projects   Sound Bites "AI can increase duplicates." "Grimoire guides audit tasks." "Flows help map complex code."   Resources Joran Honig X https://x.com/joranhonig Grimoire https://github.com/JoranHonig/grimoire Joran’s website https://joranhonig.nl/

    54 min

  5. 11 de maig

    Censorship Resistance with Shayan Eskandari

    Summary In this in-depth interview, Shayan Eskandari shares his journey from security expert to privacy innovator, discussing censorship resistance, Web3 security, and the future of decentralized internet infrastructure. Discover how his project MoaV aims to empower users in restrictive environments and explore the role of blockchain in privacy and decentralization.   Soundbites "My belief in information being free drives everything." "My wife’s experience in Iran inspired Moav." "Privacy in blockchain is a complex, layered issue."   Resources The DAO Security Fund: https://qf.giveth.io/project/cyphertalk-podcast:-security-education-for-ethereum?roundId=16 MoaV https://moav.sh/  Shayan’s website https://shayan.es/ Shayan’s X https://x.com/sbetamc

    56 min

  6. 6 de maig

    The State of Web3 Security with Diogo Patão from rekt.news

    Summary This episode features a deep dive into two newly released reports on Web3 security by rekt.news and Oak Security, insights from industry experts, and discussions on the future of blockchain security. We explore recent hacks, the role of AI, and how the community can enhance security practices.   Soundbites "AI is here to help us, not just to attack." "Human attack vectors dominate the security issues." "Diversify your assets and protocols to stay safe."   Links The DAO Security Fund CypherTalk: https://qf.giveth.io/project/cyphertalk-podcast:-security-education-for-ethereum?roundId=16 Rekt News: https://qf.giveth.io/project/rekt-news-ethereums-security-intelligence-layer?roundId=16   The Reports: Oak Security’s State of Web3 Security: https://research.oaksecurity.io/  Rekt News’ War Room Report: https://github.com/RektHQ/Reports/blob/main/Rekt_Security_Summit_War_Room_Report.pdf

    1 h 4 min

  7. 21 d’abr.

    Auditing Cryptographic Protocols with Nadim Kobeissi

    Summary In this in-depth interview, Nadim Kobeissi shares his extensive experience in cryptography audits, the limitations of formal verification, responsible disclosure practices, and the future of cryptography and security, including post-quantum cryptography and AI's impact on cybersecurity.   Keywords cryptography, security audits, formal verification, post-quantum cryptography, zero-knowledge proofs, responsible disclosure, cryptographic protocols, AI cybersecurity, cryptography research, software security   Key Topics Cryptography audit process and focus areas Limitations of formal verification tools Responsible disclosure methodology Future threats in cryptography including AI and quantum computing Educational tools for understanding cryptographic protocols   Sound Bites "Cryptography is about designing systems that are mathematically sound." "Claims of formal verification being bug-free are often exaggerated." "AI will be used to stockpile vulnerabilities and exploits."   Links Nadim’s website: https://nadim.computer/ Nadim’s LinkedIn: https://www.linkedin.com/in/nadimkobeissi https://symbolic.software/ https://cure53.de/

    54 min

  8. 7 d’abr.

    Password Manager Security and Applied Cryptography with Matilda Backendal

    Summary In this in-depth interview, cryptography researcher Matilda Backendal discusses applied cryptography, end-to-end encryption vulnerabilities, password manager security flaws, and the future of cryptographic research. Gain insights into real-world security challenges and best practices for protecting digital data. Keywords cryptography, end-to-end encryption, cloud storage security, password managers, cryptographic research, privacy, zero-knowledge proofs, digital identity, homomorphic encryption Key topics Applied cryptography and real-world applications Vulnerabilities in end-to-end encryption systems Security flaws in cloud storage and password managers Cryptographic research and formal verification Future trends and challenges in cryptography    Sound bites "Crypto is all around us in daily life." "Most cloud storage isn't end-to-end encrypted by default." "User-chosen passwords are a major security factor." Links Matilda's Website - https://mbackendal.github.io/ Paper - Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers - https://eprint.iacr.org/2026/058

    47 min
Veure-ho tot (13)

Informació

CypherTalk is a twice-monthly podcast on the realities of cybersecurity and privacy in a world that’s moving faster than our defenses. Hosted by Jade Doherty (who translates technical security into plain English) alongside rotating security and privacy experts — including co-host Stefan Beyer, co-founder of Oak Security — the show explores how modern cybersecurity attacks actually happen: not just through bugs in code, but through people, processes, supply chains, and the tools we rely on every day. The show also looks at the latest trends in privacy and its supporting technologies, such as cryptography and zero-knowledge proofs.  Expect conversations that balance big-picture trends (AI-driven threats, privacy tech like zero-knowledge, shifting security standards) with practical takeaways you can apply immediately — whether you’re a developer, a founder, or simply someone who uses the internet. Less hype. More clarity. Better security and privacy habits.

Fitxa tècnica

  • Creació
    Oak Security
  • Anys en actiu
    2 k
  • Episodis
    13
  • Qualificació
    Apte
  • Copyright
    © Copyright 2026 All rights reserved.
  • Lloc web del programa
    CypherTalk
  • Proveïdor