KBKAST

KBI.Media

Unlike every other security podcast, we don’t get stuck down in the technical weeds. Our remit is to speak with experts around the globe at the strategic level – how security technology can improve the experience and risk optimisation for every organisation. The Voice of Cyber® - In Partnership with Vanta

  1. 11h ago

    Episode 394 Deep Dive: Andre Durand | Only as Trustworthy as Your Next Action - Zero Trust for AI Agents

    KB sits down with Andre Durand, founder and CEO of Ping Identity, to talk about who gave an AI agent its authority, and who answers for it when something goes wrong. They start with liability and why it has to trace back to a person, since agents face no consequences. From there they get into why logging in was good enough for people but isn't for agents, and why Andre thinks authorization, checked on every action, becomes the new gate. KB pushes on human in the loop, rubber-stamp approvals and the self-driving car comparison, then they move to models that collude to get around permissions, agents that can approve their own privilege escalation, and why a one-time passcode no longer proves a human is at the keyboard. They finish on what the next six months look like as companies try to work out which agents are already inside.   About Andre: Andre Durand founded Ping Identity in 2002 with a mission to secure the internet through identity. Today, Ping Identity is a leader in securing digital identities for the world’s largest enterprises  The company’s technology lets enterprises combine Ping’s identity solutions with third-party services they already use to remove passwords, prevent fraud, support Zero Trust, or anything in between. In addition, Andre previously founded the identity industry conference, Identiverse, to accelerate the adoption of identity and serve as a community resource for professionals serving the identity industry. Prior to Ping Identity, Andre founded Jabber to commercialise the Jabber open source instant messaging platform which was acquired by Cisco in 2008. Andre serves on the board of Jamf and in his spare time focuses on causes related to children in the foster care system, building great culture and creating opportunities for entrepreneurs. He holds a BA in Biology and Economics from the University of California at Santa Barbara. Keywords: AI agents, agentic AI, identity security, identity and access management, IAM, zero trust, authorization, fine-grained authorization, authentication, accountability, liability, human in the loop, human oversight, MFA fatigue, least privilege, standing privilege, privilege escalation, segregation of duties, AI collusion, model drift, AI bias, agent registry, agent discovery, observability, biometrics, OTP, computer-using agents, Air Canada, Ping Identity, CISO, board, KBKast

  2. 5d ago

    From The Field at NetApp Insight 2026 | The View From the Top: George Kurian, César Cernuda & Alvaro Celis on Getting AI Into Production

    Recorded at NetApp INSIGHT 2026, NetApp’s annual customer conference at MGM Grand in Las Vegas from 29 September to 1 October, this From The Field episode brings together three of the company’s senior leaders. This year’s INSIGHT centred on AI, cyber resilience and intelligent data infrastructure, with launches including the NetApp platform with its AI Data Engine (AIDE) and NetApp Novus. CEO George Kurian explains NetApp’s shift from storage provider to data platform, why curated context matters more than models, and the thinking behind Novus. President César Cernuda tackles why AI pilots stall before production, arguing for trusted, accessible data and zero-copy access to it wherever it lives. Chief Partner and Ecosystem Officer Álvaro Celis explores whether ecosystems simplify modernisation or just add vendors, and why execution at scale decides the answer. Together, they offer a view from the top of what it takes to turn AI ambition into results.

  3. Oct 28

    Episode 393 Deep Dive: Karim Toubba | You Can't Govern What You Can't See - Why Shadow AI Is Security's Biggest Blind Spot

    Karim Toubba has spent 29 years in cyber, and he says shadow AI is the biggest risk he’s seen in that time. Boards want AI everywhere, and security teams that used to say no are being overruled. Karim explains why the privileged access model falls over when one person could have 100 or more agents working for them, and why governance has to start with knowing what AI is actually in use. He and KB also get into companies cutting tools and teams before the token economics are clear, and why Karim’s advice is to move fast, but not through a one-way door. About Karim: Karim Toubba is the Chief Executive Officer of LastPass, having joined the company in 2022. A cybersecurity industry veteran with over 25 years of experience within the sector, Karim brings proven leadership and innovation to the security market with a focus on creating products that solve real-world challenges yet form the foundation for lasting change. Keywords: shadow AI, AI governance, agentic AI, AI agents, identity security, non-human identity, privileged access management, PAM, agent identity, AI visibility, AI adoption, governance theatre, data governance, token economics, AI costs, frontier models, multi-model, vibe coding, SaaS, vendor pressure, process re-engineering, LastPass, Karim Toubba, CISO, board, KBKast

  4. Oct 26

    Episode 392 Deep Dive: John Jester | Recovery Isn’t Enough - Business Continuity in the Agentic Era

    Getting data back after an attack used to be the finish line. Now boards want proof the business keeps running while it happens. KB sits down with John Jester, Chief Revenue Officer at Veeam, to talk about that shift. John explains why some companies pay ransoms even when they could recover, because recovery was simply too slow. He also covers why AI agents with too much access now cause more problems than attackers do. In one forum he ran, two-thirds of the Fortune 500 CISOs in the room had reported a data leak to their board or a regulator. And he makes the case for precision recovery: undoing a single agent’s mistakes without rolling back everything. About John: John Jester is Veeam’s Chief Revenue Officer (CRO) and is responsible for the company’s go-to-market (GTM) growth strategy and helping build upon Veeam’s position as the #1 provider of Data Resilience, spanning Cloud, Virtual, Physical, Hybrid, SaaS, and Kubernetes. John joined Veeam from a successful tenure at Google Cloud, where he helped build the GTM organization through his leadership of the Customer Experience function. In this role, he drove cloud adoption and business value for customers, supporting Google Cloud’s growth to over $23B ARR. Prior to Google, John spent 20 years at Microsoft leading sales organizations and reimagining the GTM across the customer lifecycle. His most recent role was Corporate Vice President of Worldwide Customer Success, where he established a new organization to drive adoption of Microsoft’s cloud services. Throughout his career, John has worked closely with partners and sees them as integral to crafting solutions for customers. John earned his bachelor’s degree in electrical engineering and a master’s degree in business administration from George Mason University. Keywords: business continuity, cyber resilience, ransomware recovery, AI agents, AI governance, precision recovery, data leakage, shadow AI, Veeam, Coveware, Securiti AI, CISO

  5. Oct 23

    From The Field at DASH 2026 | Olivier Pomel & Alexis Lê-Quôc on Betting Datadog on One Platform

    In this episode of From The Field, recorded at DASH by Datadog in New York City, KB sits down with both of Datadog’s co-founders. First up is Olivier Pomel, Co-founder and CEO. He talks through the new security launches, including AI Guard and Bits AI for security, and explains why an observability background gave Datadog its right to win in security. He also covers why Datadog rebuilds acquisitions on its own platform instead of bolting them on, and why he expects security tooling to consolidate the way observability did. Then KB is joined by Alexis Lê-Quôc, Co-founder and CTO. He argues that AI has shrunk the gap between disclosure and exploit from weeks to hours. He explains why detection now has to be agentic, and why deciding which assets matter is still a human call. He also makes the case that lasting change comes from the teams on the ground.

  6. Oct 21

    Episode 391 Deep Dive: Skip Mann | Held to a Higher Standard - What Lenovo Learned From Constant Scrutiny

    KB sits down with Skip Mann, Lenovo’s Vice President of Enterprise Security Strategy, Assurance and Trust, to talk about how a company working across 180 markets and thousands of suppliers proves it can be trusted. They start with why nobody at that scale can verify everything, and why Skip says trust has to rest on evidence rather than assumptions. From there they get into why attackers don’t care how security teams are split up, and what customers should ask to see before trusting any vendor. KB asks how a company with deep roots in China handles government scrutiny, and Skip explains why Lenovo welcomes it, from the EU Cyber Resilience Act to repeated CFIUS reviews by the US government. They finish on supply chain resilience, how to do due diligence without drowning in scorecard tools, and the new trust questions AI is raising. About Skip: Skip Mann, Vice President, Enterprise Security Strategy, Assurance, & Trust Chief Security Office & Chief AI Office, Lenovo Skip Mann oversees four integrated functions – strategy and alignment, governance and assurance, trust and advocacy, and CSO operations – driving enterprise-wide security outcomes across Lenovo’s cyber, physical, supply chain, product, and responsible AI domains to advance resilience, regulatory alignment, and stakeholder trust. With more than 34 years in the security profession and 18 years in executive leadership, Skip is recognized as a thought leader in enterprise risk, organizational resilience, and security transformation. He is known for developing high performing teams and advancing converged, risk-informed security programs across global enterprises. Prior to joining Lenovo, Skip held senior roles within the US Department of Homeland Security and U.S. Department of Defense, including the US Army Headquarters in Washington D.C., United States Africa Command, United States European Command, and the Central United States Registry. Keywords: trust, assurance, supply chain security, supply chain resilience, third-party risk, due diligence, vendor risk management, GRC, certifications, NIST, ISO, EU Cyber Resilience Act, CRA, ENISA, EU AI Act, CFIUS, national security, geopolitics, converged security, physical security, operational resilience, Secure by Design, CISA, public-private partnership, coordinated vulnerability disclosure, AI governance, responsible AI, Lenovo, CISO, board, KBKast

  7. Oct 19

    Episode 390 Deep Dive: Michael Pastor | Nobody Will Blame the AI - Liability, Reasonable Care and Your Vendor Contracts

    KB sits down with Michael Pastor, Dean for Technology Law Programs at New York Law School and former General Counsel of New York City Cyber Command, to talk about who is accountable when AI gets it wrong. They start with Mythos-class tools and what they mean for the legal standard of reasonable security. Michael argues the test is effectiveness and what your people can validate, not cost, and that "I trusted the technology" won't survive discovery. From there they get into whether AI could help settle disputes between counterparties, how courts might handle highly technical cyber cases, and why Michael wants to retire the phrase "human in the loop" in favour of real oversight by people with context. They finish on contracts - what general counsel should demand from AI vendors now, why renewals are about to get harder, and why Michael is still optimistic about where it all lands. About Michael: Michael Pastor is a Professor of Law from Practice. He serves as New York Law School's Dean for Technology Law Programs, the Director of the James Tricarico Jr. Institute for the Business of Law and In-House Counsel, and Co-Director of the Innovation Center for Law and Technology. He teaches the In-House Counsel Experience Seminar and Drafting Contracts: Technology Transactions. Professor Pastor previously served as the General Counsel of the New York City Department of Information Technology and Telecommunications (DoITT) and the New York City Cyber Command (NYC3). Keywords: reasonable security, standard of care, AI liability, general counsel, legal counsel, technology contracts, AI vendor contracts, vendor management, audit rights, breach notification, human in the loop, human oversight, NYDFS, cybersecurity regulation, vulnerability management, Mythos, AI validation, contract renewal, privacy by design, security by design, New York City Cyber Command, CISO, board, KBKast

  8. Oct 14

    Episode 389 Deep Dive: Omar Santos | Attackers Already Have It - What New Frontier Models Mean for Your Security Strategy

    In the first weeks of March, Omar Santos got early access to the model that became Anthropic’s Mythos. About an hour of testing was enough to convince him cybersecurity had changed for good. Omar, a Distinguished Engineer in AI Security Engineering at Cisco and co-chair of the Coalition for Secure AI, says his bigger worry is how fast everyone else is catching up. Open weight models are closing in on the frontier labs, so attackers no longer need access to Mythos to find and exploit vulnerabilities. KB and Omar get into why Cisco won’t send a finding to engineering without proof of an active exploit, how a public open source fix gives attackers a ready-made recipe, and why a library a student abandoned years ago could be running inside your patient records system. Omar wants defenders to go further than finding and fixing faster. That means refactoring code, adding compensating controls, and turning the risk register from an annual exercise into something that runs continuously. About Omar: Omar Santos is a Distinguished Engineer at Cisco, focused on AI security, cybersecurity research, incident response and vulnerability disclosure. He co-chairs the Coalition for Secure AI (CoSAI) and the FIRST PSIRT Special Interest Group, sits on the board of OASIS Open, and chairs the OpenEoX and CSAF technical committees, where his work led to CSAF becoming an ISO standard. He also led the DEF CON Red Team Village for several years. Omar has written more than 25 books, 21 video courses and over 50 research papers, and holds multiple patents. Before Cisco, he served in the United States Marines. Keywords: Mythos, Anthropic, Project Glasswing, frontier AI, open weight models, AI security, AI in cybersecurity, vulnerability management, zero days, exploit development, open source security, software supply chain, SBOM, OpenEoX, CSAF, CodeGuard, Coalition for Secure AI, CoSAI, Cisco, compensating controls, eBPF, secure by design, zero trust, incident response, threat hunting, continuous assessment, risk register, GRC, CISO, board, KBKast

See All (449)

5
out of 5
6 Ratings

About

Unlike every other security podcast, we don’t get stuck down in the technical weeds. Our remit is to speak with experts around the globe at the strategic level – how security technology can improve the experience and risk optimisation for every organisation. The Voice of Cyber® - In Partnership with Vanta

Information

  • Creator
    KBI.Media
  • Years Active
    2018 - 2026
  • Episodes
    449
  • Rating
    Clean
  • Copyright
    © 2025 KBI.Media
  • Show Website
    KBKAST

You Might Also Like