Zero Signal

Conor Sherman

Zero Signal is a podcast for CISOs and senior security leaders who are expected to have answers about AI risk before the industry has standards. We go after the strategic questions that don't yet have clean answers — the ones your board is asking and the industry is still debating. Each episode is an honest conversation with someone navigating that pressure — not with perfect answers but with principles, frameworks, and lived experience. We host guests who've had to make real calls under uncertainty and are willing to talk about what worked, what didn't, and what they're still figuring out

  1. 3d ago

    Richard Bird: Why Cybersecurity Keeps Failing (And How to Fix It)

    Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell welcome back two-time guest and security leader Richard Bird to discuss his groundbreaking new book, Built Wrong: Why Cybersecurity Keeps Failing, and How We Can Rebuild It. Together, they dive into a systemic diagnosis of the cybersecurity ecosystem, dismantling the dangerous industry habit of measuring activity over actual performance and risk reduction. The conversation explores the broken economic incentives that plague modern security programs—from how corporate reward structures pitted business units against CISOs, to why attackers have perfected a volume-based business model. Richard unpacks the hidden financial reality of cyber losses, the flaws of compliance-driven metrics, and how unit costing and risk pricing can finally transform security from a "cost of doing business" into an accountable, value-driving business function. Check out Richard's new book Built Wrong on Amazon: https://www.amazon.com/dp/B0HKT58MTH?lv=shuf&bestFormat=true&social_share=cm_sw_r_ffobk_cso_cp_apin_dp_Z0THWHJG4B412FA5NRC0&channelId=704&ref_=cm_sw_r_ffobk_cso_cp_apin_dp_Z0THWHJG4B412FA5NRC0&plpRedirect=mhFallback Richard Bird is an acclaimed cybersecurity executive, author, and speaker. Having previously served as Executive Director for Identity at JPMorgan Chase and across various C-level roles in the industry, Richard brings decades of hands-on experience in enterprise security, identity architecture, and corporate risk management. Measuring Activity vs. Performance: Why Green Dashboards Still Lead to Breaches Asymmetric Cyber Economics: How Attackers Perfected Performance-Based Incentives The Equifax & SolarWinds Parallel: Unpacking Corporate Groupthink and Political Obstacles Unit Costing & Risk Premiums: How to Price Cybersecurity and Stop Giving It Away for Free Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/ About the GuestKey MomentsMeet our Sponsors

  2. Oct 9

    Nico Waisman: Are You Ready for Open-Weight AI Hacks?

    Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with Nico Waisman, CISO for XBOW, former CISO for Lyft, and a 17-year veteran at Immunity. As the autonomous pen testing platform that became the first AI to top HackerOne's U.S. leaderboard, XBOW is pushing the boundaries of offensive AI testing. Nico grounds the conversation in the current state of AI-driven exploitation, explaining how open-weight models and custom harnesses are rapidly closing the gap with major foundation models. The discussion dives deep into the realities of vulnerability remediation, unpacking the critical distinction between sheer CVE volume and true exploitability. Nico explores the dangers of unverified AI auto-patching, highlighting research that shows why closed-loop testing and verification are essential before trusting LLM-generated fixes in production. The panel also covers the emergence of agentic threat actors, the strategic resurgence of deception technology and canaries, and how senior security practitioners can leverage memory vaults to scale their offensive testing methodologies. Nico Waisman is the CISO at XBOW, the autonomous pen testing firm behind the first AI system to top HackerOne's U.S. leaderboard. He is the former CISO at Lyft and spent 17 years as an offensive security leader and exploit researcher at Immunity. Key Moments The Evolution of Autonomous Offense: From Early CTF Solvers to Top HackerOne Rankings Open-Weight Models in the Wild: Why Adversaries Are Running Local AI Hacking Exploitability as the Ground Truth: Cutting Through CVE Noise with Real Risk Closed-Loop Security & AI Patching: Why Automated Fixes Require Strict Verification Loops Our Sponsors: Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

  3. Oct 2

    Black Hat 2026: Essential Takeaways & Outtakes

    Welcome back to Zero Signal! In this special highlight reel episode, hosts Conor Sherman and Stuart Mitchell assemble the most insightful, candid, and hilarious moments from recent conversations across the C-suite and cybersecurity industry. This episode brings together key perspectives from executive leaders including Jacob DePriest (1Password), Phil Venables (Ballistic Ventures / Google), Myke Lyons (Cribl), Chaim Mazal (GitLab), and Go-To-Market leaders Amelia Forrest Kaye and Diana Jovin. Together, the panels and guests unpack the realities of modern cybersecurity leadership. From the limits of AI-driven vulnerability patching and the shift toward human-delegated agentic identities, to moving security operations from artisanal setups to industrial scale, this compilation covers the operational front lines. The episode also delivers essential career advice for the next generation of security leaders, explores the culinary concept of mise en place in security preparedness, and dives into lighthearted studio banter, outtakes, and unscripted stories. About the Guests This compilation features an elite panel of industry leaders: Jacob DePriest: CISO and CIO at 1Password. Phil Venables: Venture Partner at Ballistic Ventures and former CISO at Google and Goldman Sachs. Myke Lyons: CISO at Cribl and former culinary chef. Chaim Mazal: CISO at GitLab and former Chief AI & Security Officer at Gigamon. Amelia Forrest Kaye & Diana Jovin: Executive Go-To-Market, customer experience, and marketing leaders. Key Moments Debunking GTM Myths: Why Buying at the Golf Course Leads to Churn AI Patching Realities: 1Password's Off By One Research on Model Limitations Moving Security Operations from Artisanal Craftsmen to Industrial Scale Kitchen Lessons for CISOs: Applying Mise en Place to Security Readiness & Studio Outtakes Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

  4. Sep 25

    Diana Jovin & Amelia Forrest Kaye: Foundations of Cyber Go-To-Market

    Welcome back to Zero Signal! In this panel-style episode, hosts Conor Sherman and Stuart Mitchell are joined by guests Diana Jovin and Amelia Forrest Kaye for a strategic look into the cybersecurity market landscape. Moving beyond general practitioner grievances and fluffy marketing, this discussion offers high-level executive and C-suite analysis, bridging the gap between buyers, sellers, customers, and product leaders. The panel explores the "Zero Signal" concept—delivering timely, reactive insights on shifting market trends before industry consensus takes hold. Together, they unpack complex organizational design challenges, board-level requirements, and the necessity of replacing broken marketing attribution models. By integrating both "outside-in and inside-out" perspectives, this episode offers executives, CEOs, and product leaders a pragmatic blueprint for navigating cross-functional alignment and modern go-to-market strategies. About the GuestsDiana Jovin and Amelia Forrest Kaye are executive tech and cybersecurity leaders. Bringing deep expertise across product leadership, organizational design, and market strategy, both regularly advise C-suite executives and product teams on navigating shifting industry dynamics. Key MomentsAnalyzing the Executive Podcast Gap: Moving Beyond Practitioner Grievances "Zero Signal" Strategy: Offering Counsel Before Market Consensus Organizational Design & Bridging the Gap Between Buyers, Sellers, and Boardrooms Replacing Broken Attribution Models in Modern Go-To-Market Execution Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

  5. Sep 18

    Iman Ghanizada: The Geopolitical AI Race

    Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with repeat guest Iman Ghanizada, founder and CEO of Eqlipse, a frontier AI research lab, and pioneer of Autonomic Security Operations at Google Cloud. Shifting away from everyday tactical cybersecurity discussions, this conversation steps back to examine the macro geopolitical landscape, the global race for artificial intelligence, and the shifting dynamics between Western frontier models and open-weight architectures.Iman breaks down how the commoditization of intelligence impacts the American service-based economy, comparing state-backed nationalized infrastructure investments in energy, semiconductors, and sovereign clouds with Western capital formation and political friction. The episode explores the strategic implications of intelligence sovereignty, why AI safety guardrails can inadvertently create economic or competitive disadvantages, and how distributing artificial intelligence globally can unlock sector-wide ROI, elevate human potential, and serve as a catalyst for global stability.About the GuestIman Ghanizada is the founder and CEO of Eqlipse, previously pioneered Autonomic Security Operations at Google Cloud and has spent his career at the intersection of cloud, security, and artificial intelligence. Key Moments The Geopolitical AI Landscape: Frontier Models vs. Global Open-Weight Intelligence Infrastructure & Energy Bottlenecks: Dissecting the Sovereign Cloud & Semiconductor Race AI Safety vs. Speed: When Regulatory Guardrails Impact Global Competitiveness The Future of American Advantage: Distributing Intelligence and Unlocking Sector-Wide ROI Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

  6. Sep 11

    Gary Hayslip: The Evolution of the Modern Field CISO

    Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with industry veteran Gary Hayslip. Currently serving as the Field CISO at Zenity and author of the CISO Desk Reference Guide, Gary brings decades of leadership experience spanning the U.S. Navy, municipal government, global tech firms like Webroot, and managing cyber risk across 500+ portfolio companies as the former Global CISO for SoftBank Investment Advisors. Gary breaks down how the CISO role is rapidly evolving into a business executive function that requires deep cross-departmental partnership, flexibility, and curiosity over rigid "no's." The discussion dives into the realities of the agentic transformation—exploring how AI is driving security into every business unit, why non-human identities and agents are becoming prime targets for social engineering, and why traditional SIEMs and SOCs must adapt to real-time automated decision-making. Gary also reflects on his journey from Navy Chief Petty Officer to boardroom leader, sharing his core philosophy on mentorship, writing for the community, and leaving the industry better than he found it. Gary Hayslip is the Field CISO at Zenity, co-author of the CISO Desk Reference Guide series, and a retired U.S. Navy Chief Petty Officer. He has previously served as Global CISO for SoftBank Investment Advisors, CISO & CIO for Webroot, and CISO for the City of San Diego. The Evolution of the Modern CISO: From Security Operator to Business Executive Managing Cyber Risk Across 500+ SoftBank Portfolio Companies The Field CISO Role: Strategy, Customer Advocacy, and Go-To-Market Alignment AI Governance & Non-Human Identity: Securing Agents and Enforcing Guardrails Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/ About the GuestKey MomentsMeet our Sponsors

  7. Sep 4

    Chaim Mazal: The Corporate Security Renaissance (And Its Weakest Link)

    Welcome back to Zero Signal! In this episode, recorded live at Black Hat, hosts Conor Sherman and Stuart Mitchell sit down with Chaim Mazal, Chief Information Security Officer at GitLab and former Chief AI and Security Officer at Gigamon. Chaim shares his unique journey transitioning from an active customer and advisory board member to leading the security organization at scale. He breaks down how product security and engineering alignment serve as key business drivers, transforming internal DevSecOps initiatives into high-value customer SKUs. The discussion explores the realities of securing agentic software development, introducing GitLab's approach to composite identity—a model that couples AI agent activity directly with human attribution and governance guardrails. Chaim, Conor, and Stu examine the balance between building proprietary security capabilities versus leveraging vendor partnerships, the resurgence of corporate security and identity management, and why a solid engineering foundation remains non-negotiable for autonomous AI workflows. About the Guest Chaim Mazal is the Chief Information Security Officer at GitLab. He previously served as the Chief AI and Security Officer at Gigamon and has held executive engineering, product, and security roles across high-growth technology organizations. Key Moments Transitioning from Customer and Advisor to CISO at Scale Composite Identity: Attributing AI Agent Actions to Human Starters Productizing Internal Security Workflows into Customer-Facing SKUs The CorpSec Renaissance: Identity, Tokens, and Agentic Governance Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

  8. Aug 28

    Matt Hillary: The CISO's Evolution to Chief Trust Officer

    Welcome back to Zero Signal! In this episode, hosts Conor Sherman and Stuart Mitchell sit down with Matt Hillary, CISO for Drata. Drawing from his experience building security programs at organizations like AWS, Adobe, and Lumio, Matt explores how the CISO role is morphing into a field-facing Chief Trust Officer. He breaks down why establishing internal and external trust requires far more than chasing audit framework badges or vanity scores—it demands radical transparency, operational consistency, and alignment across engineering, legal, and executive teams. The conversation covers the shift toward continuous assurance and GRC engineering, examining how automated monitoring and AI capabilities can eliminate sampling-based audits while helping teams navigate new AI governance complexities. Matt candidly shares the realities of serving as CISO at a high-visibility security company, addressing the intense field demands, product feedback loops, and mental health challenges. From setting personal boundaries to navigating anxiety and avoiding burnout, this episode delivers practical leadership insights for modern security executives. About the Guest Matt Hillary is the Chief Information Security Officer at Drata. Over his career, he has held senior security leadership positions at organizations including AWS, Adobe, Instructure, Weave, Workfront, and Lumio. Key Moments The Evolution of the CISO into Chief Trust Officer Building Continuous Assurance & The Rise of GRC Engineering AI Governance & Managing Non-Deterministic Workflows CISO Leadership: Navigating High-Stakes Roles, Anxiety, and Burnout Meet our Sponsors Hampton North is the premier US-based cybersecurity search firm: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal RISCPoint Security & compliance consulting tailored to your business: https://www.riscpoint.com/

See All (57)

5
out of 5
4 Ratings

About

Zero Signal is a podcast for CISOs and senior security leaders who are expected to have answers about AI risk before the industry has standards. We go after the strategic questions that don't yet have clean answers — the ones your board is asking and the industry is still debating. Each episode is an honest conversation with someone navigating that pressure — not with perfect answers but with principles, frameworks, and lived experience. We host guests who've had to make real calls under uncertainty and are willing to talk about what worked, what didn't, and what they're still figuring out

Information

  • Creator
    Conor Sherman
  • Years Active
    2025 - 2026
  • Episodes
    57
  • Rating
    Explicit
  • Copyright
    © Conor Sherman
  • Show Website
    Zero Signal

You Might Also Like