Security Unfiltered

Joe and Danielle discuss how AI has accelerated an already messy SaaS security problem, especially as employees connect more tools, more agents, and more data without centralized oversight. The conversation focuses on why traditional block or allow controls are breaking down, and how security teams can use agentic automation to reduce risk without slowing the business 00:00 - Why AI adoption is moving faster than cloud and SaaS ever did 01:20 - The professional pressure to skill up on AI now 03:19 - How cloud security and SaaS security lagged behind adoption 06:13 - Why organizations can’t simply say no to AI tools 08:30 - The difference between cloud-era experimentation and today’s browser-based AI 10:37 - Why AI security and SaaS security are becoming the same problem 12:31 - Why traditional onboarding and vendor review processes don’t scale 14:43 - The Salesforce example that exposed hidden risk in a large enterprise 17:00 - Why most third-party risk programs only cover part of the estate 19:07 - How decentralized tech adoption bypasses security workflows 20:31 - Why OAuth grants and third-party integrations are a major attack path 22:25 - Why attackers usually go after credentials and tokens, not zero days 23:19 - How AI lowers the barrier to entry for attackers 26:55 - Why defenders need agentic capabilities too 28:16 - The scale of unmanaged OAuth grants inside enterprises 30:26 - Why no one can hire enough people to review every grant manually 31:53 - How agents can analyze risk and recommend revocation at scale 33:33 - The reality check from customer conversations about AI visibility 35:24 - How security people think when told they can’t do something 38:16 - Reactance theory and why employees work around controls 40:25 - Incentives matter more than policy slogans 41:48 - Why binary block or allow controls create shadow IT 43:30 - How Nudge Security approaches SaaS and AI as one workforce problem 46:14 - Why a workforce edge model matters more than network or identity alone 48:26 - What just-in-time policy decisions could look like in the browser 50:10 - Why policy experience is as important as policy enforcement 52:08 - Danielle on Nudge Security’s free trial and LinkedIn presence Affiliates ➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh ➡️ OffGrid Coupon Code: JOE ➡️ Unplugged Phone: https://unplugged.com/ Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout *See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions. Tesla Referral Code: https://ts.la/joseph675128 Follow the Podcast on Social Media! Instagram: https://www.instagram.com/secunfpodcast/ Twitter: https://twitter.com/SecUnfPodcast

Joe talks with Dominik Richter, co-founder of Mondu, about how AI is changing security work, vulnerability management, and the expectations placed on technical teams. The conversation digs into why so many security workflows still produce noise instead of action, and why speed without quality creates more problems than it solves. They also explore what this means for hiring, junior talent, and the skills that will matter most as AI becomes embedded in day-to-day work. 00:00 The Evolution of AI and Its Impact 06:16 Challenges in Vulnerability Management 13:00 The Role of AI in Security 20:19 The Future of Work in an AI-Driven World 21:09 Enhancing Productivity with AI 29:41 The Evolving Role of Security Professionals 40:16 Navigating the AI Landscape in Security 48:52 Adapting to a Rapidly Changing Tech Environment Affiliates ➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh ➡️ OffGrid Coupon Code: JOE ➡️ Unplugged Phone: https://unplugged.com/ Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout *See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions. Tesla Referral Code: https://ts.la/joseph675128 Follow the Podcast on Social Media! Instagram: https://www.instagram.com/secunfpodcast/ Twitter: https://twitter.com/SecUnfPodcast

Joe talks with Andrew Bud, founder of iProov, about how an engineer’s career across mobile communications, payments, and identity led to one of the early liveness technologies for secure remote authentication. The conversation ranges from entrepreneurship and resilience to deepfakes, digital identity wallets, and why proving a real human is present is becoming central to cybersecurity. 00:00 The Importance of Family and Presence 03:44 Andrew Bud's Journey in Technology 09:40 The Entrepreneurial Mindset and Necessity 15:28 Conviction vs. Delusion in Entrepreneurship 23:11 Innovating Trust: The Birth of iProve 27:55 Discovering the Core Problem 29:17 The Rise of Authentication Technology 30:26 Deepfakes and the Evolution of Threats 35:19 The Challenge of Deepfake Detection 38:56 Attribution and Accountability in the Digital Age 44:51 Identity as a Defense Mechanism 49:22 Cybersecurity and National Defense Affiliates ➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh ➡️ OffGrid Coupon Code: JOE ➡️ Unplugged Phone: https://unplugged.com/ Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout *See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions. Tesla Referral Code: https://ts.la/joseph675128 Follow the Podcast on Social Media! Instagram: https://www.instagram.com/secunfpodcast/ Twitter: https://twitter.com/SecUnfPodcast

The conversation covers Mark's journey to the CIA, his language training, overseas assignments, and the challenges and unpredictability of his career. Mark shares insights into the preparation, language proficiency, and stress associated with overseas assignments, as well as the different roles and responsibilities within the CIA. The conversation delves into the impact of language training on CIA officers, the challenges of post-9/11 operations, the Iraq war and WMDs, and the historical context of Iran's relations with global powers. The discussion provides insights into the complexities of intelligence operations and geopolitical dynamics. The conversation delves into the history of Iran, focusing on the rise and fall of the Shahs and the country's pursuit of nuclear weapons. It explores the Shah's attempts to modernize Iran, the overthrow of Mossadegh, and the impact of the Iran-Iraq war. Additionally, it discusses the development of Iran's nuclear program and the decision-making process behind Iran's nuclear ambitions. Takeaways Language training is a crucial part of CIA preparation Overseas assignments require extensive preparation and adaptation to real-time language use Language training is crucial for CIA officers Post-9/11 operations reshaped CIA priorities and focus The Iraq war and WMDs had significant intelligence implications Iran's historical context shapes its relations with global powers The complex history of Iran's political landscape and the role of the Shahs in modernizing the country. The motivations and implications of Iran's pursuit of nuclear weapons and the challenges it presents to global security. Chapters 00:00 Introduction and Background 01:00 Journey to the Agency 03:10 Applying to the Agency 04:04 Joining the Agency 05:16 Challenges and Qualifications 06:09 Language Training and Assignments 07:26 Specializing in Farsi 08:36 Roles in the CIA 09:23 Senior Roles and Responsibilities 10:20 Career Impact and Unpredictability 11:08 Preparation for Overseas Assignments 12:05 Language Training and Deployment 13:45 Preparation for Denied Areas 14:14 Cover and Role Preparation 16:00 Language Learning and Proficiency 17:17 Adapting to Real-Time Language Use 18:14 Language Training and Stress 19:30 Preparation for Overseas Assignments 21:16 Language Training and Deployment 22:50 Language Requirements for Different Countries 24:26 Preparation for Overseas Assignments 25:43 Language Training for Denied Areas 26:58 Preparation for Overseas Assignments 28:17 Language Proficiency and Role 29:07 Adapting to Real-Time Language Use 30:39 Language Learning and Proficiency 31:57 Language Training and Adaptation 36:00 Post 9/11 Operations and Iraq 40:21 Impact of 9/11 on Operations 47:36 Iraq and WMDs 01:03:59 Iran's Historical Context 01:08:13 The History of Iran 01:18:28 Iran's Pursuit of Nuclear Weapons

Nudge Security: https://www.nudgesecurity.com/ LinkedIn: https://www.linkedin.com/in/russell-spitler/ In this episode, Joe chats with Russell Spitler from Nudge Security about the evolving landscape of AI, SaaS, and cybersecurity. They explore how rapid technological advancements are reshaping security challenges and solutions, especially with AI's increasing capabilities and integrations. 00:00 - Russell’s cybersecurity origin story and early influences 04:24 - The industry’s rapid expansion and current security workforce trends 08:05 - How organizations struggle to manage SaaS security and AI integrations 12:49 - The shared responsibility model in SaaS and AI platforms 19:13 - How Nudge secures AI and SaaS ecosystems through API and browser insights 22:39 - Challenges with agentic AI: delegation, access, and risk mitigation 24:34 - The rise of agentic AI capabilities and security implications 27:23 - The potential for AI to democratize security and development 32:08 - Future of security automation and behavioral engagement strategies 36:58 - Building secure, scalable AI security solutions compared to container security 41:17 - The next phase: automation, policy enforcement, and behavioral redirects