Unsafe: A Cybersecurity Podcast

Gregory Flatt
  • 0.0 (0)
  • Technology

A Cybersecurity Podcast

Episodes

  1. 2d ago ·  Video

    Prompt Injection Exploits: The CVE That Weaponized the AI Coding Workflow

    A hidden settings.json file was all it took to turn a normal GitHub download into full remote code execution, and Checkpoint found it inside Claude Code. Adam Forrester, from Checkpoint, joins the show to break down a supply-chain vulnerability in the AI coding assistant Claude Code, where an unvalidated settings file let attackers hide commands inside an otherwise ordinary-looking Git repository, no phishing required. We dig into how the exploit works, why it had to be patched twice, how it connects to the wider problem of prompt injection, and why NIST has shown AI guardrails can never fully close the gap. We also talk through BYOD, shadow AI use in the workplace, and what small and medium businesses without enterprise security budgets can actually do to reduce their exposure. Key Takeaways: An unvalidated settings file in Claude Code allowed hidden commands to execute the moment a project was run, a new twist on supply-chain attacks.Guardrails alone can't solve this: NIST research shows full AI safety coverage is mathematically out of reach.Smaller businesses face the same risk as enterprises but with far less budget for AI-specific security tooling.

  2. Aug 19 ·  Video

    Breaking Into Cybersecurity: Curiosity Beats Credentials

    Cybersecurity careers rarely follow a straight line—and a degree or a stack of certifications is only part of the story. In Season 1, Episode 3 of Unsafe: A Cybersecurity Podcast, Greg and Caz compare the unconventional paths that brought them into the field and ask what actually makes a candidate stand out. From career changers and home labs to practical experience, professional communities, and the pressure to keep learning, they explore why curiosity and enthusiasm can matter as much as what appears on a résumé. The work can be fascinating, demanding, occasionally brutal, and definitely not for the faint of heart. So how do you know whether cybersecurity is the right career—or simply the career everyone thinks they want? Subscribe to Unsafe for candid conversations about cybersecurity and the realities behind the job description.

  3. Aug 13 ·  Video

    Identity Theft in Real Life: Your Information Is Already Out There

    Identity theft does not always begin with malware, a hacked inbox, or a stolen password. Sometimes it begins with a convincing fake ID, enough personal information to answer a few questions, and an employee trying to be helpful. In Season 1, Episode 2 of Unsafe: A Cybersecurity Podcast, Greg and Caz unpack a real 2026 identity-theft case that crossed financial institutions, state lines, corporate records, and law-enforcement jurisdictions. They examine the personal toll, the blind spots between banks and monitoring services, and the unsettling ease with which low-tech social engineering can defeat supposedly sophisticated safeguards. Your information may already be out there. The real question is: who is ready to use it? Subscribe to Unsafe for more candid conversations about cybersecurity risks hiding in plain sight.

  4. Aug 5 ·  Video

    Third-Party Risk: Your Vendor’s Breach Is Still Your Problem

    You can outsource the technology. You can outsource the help desk. You can even outsource the security controls. What you cannot outsource are the consequences when someone else loses your data. In this episode of Unsafe: A Cybersecurity Podcast, co-hosts Greg and Caz examine the uncomfortable reality of third-party risk. Beginning with the 2026 Canvas cybersecurity incident, they explore the hidden dependencies behind SaaS platforms, cloud services, integrations, outsourced support teams, and the vendors behind your vendors. How many organizations actually know everyone who can access their critical information—and how many are simply trusting the black box? Subscribe to Unsafe for candid conversations about cybersecurity risks businesses cannot afford to ignore.

  • 4 Episodes

About

A Cybersecurity Podcast

Information