The Secure Disclosure

Phishing remains cybercrime's primary entry point, but outdated templates and punitive culture fail to stop AI-driven social engineering. In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Simon Bauwens, co-founder and CEO of Outkept. Simon explains why spotting phishing is a perishable reflex rather than a learned skill, how MFA fatigue leaves organizations vulnerable, and why Outkeep pays a crowdsourc...

We are handing non-deterministic AI agents static API keys, then acting surprised when production databases get wiped.

In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with Eyal Ben Ezra, CEO of Willow, to explore how modern enterprises can safely control autonomous AI agents. They discuss moving beyond traditional permission scopes toward capability-based dynamic guardrails, securing tool calls via MCP gat...

As autonomous AI agents execute database queries and trigger APIs at machine speed, static permission models are collapsing. In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with David Mytton, CEO of Arcjet, to explore the shift from traditional network firewalls to application-native runtime security.David shares insights on managing non-deterministic non-human identities, mitigating prompt injection risk...

Join us on the Secure Disclosure Podcast as we sit down with Ashish Rajan, former CISO and author of AI Security Engineering. We dive deep into the chaotic new world of AI security, exploring the unique vulnerabilities of enterprise AI applications. Discover why prompt injection remains a fundamentally unsolved challenge, the hidden dangers of "vibe coding," and how to manage shadow AI across hundreds of corporate applications. Ash...

Software supply chain attacks have gone parabolic over the past year, turning open-source packages, CI/CD pipelines, and developer laptops into prime targets for state-sponsored threat actors and AI-augmented attacks.In this special roundtable panel, security leaders from Aikido Security, Socket, OX Security, Step Security, and open source malware.com come together for an unfiltered conversation on the supply chain security crisis....

n the era of rapid AI adoption, is it time for security teams to rethink their entire AppSec stack and throw away traditional SAST and SCA scanners?In this episode of The Secure Disclosure, host Mackenzie Jackson sits down with James Berthoty, cloud security engineer and founder of Latio, a practitioner-first analyst firm. Together, they cut through vendor marketing fluff to discuss what actually stops modern breaches. James explai...

What happens when two 25-year-old French engineers accidentally discover NASA's Slack admin API key on a public GitHub repository? That exact moment in 2017 launched GitGuardian. In this episode of The Secure Disclosure, GitGuardian CEO and co-founder Eric Fourrier sits down to share the wild origin story behind the company and how the battle against exposed secrets has shifted over the past decade. Eric breaks down how the threat ...

In this episode of The Secure Disclosure Podcast, host Mackenzie sits down with Arun Singh, CISO of Tyro Payments. Drawing from his journey from an entry-level service desk role to a fintech security executive, Arun breaks down the counterintuitive realities of modern supply chain attacks, winning developer trust through technical authenticity, and how security leaders must evolve to manage the rapid productivity and threats introd...

In this episode of the Secure Disclosure Podcast , host McKenzie sits down with John Amaral, Co-founder and CTO of Root.io. They dive deep into the increasingly complex landscape of open-source supply chain attacks , examining how threat actors like Team PCP leverage AI to weaponize entire package ecosystems. John explains how Root's agentic software factory solves cascading CVE backlogs through precision pinning and automated patc...

In this episode of The Secure Disclosure, Mackenzie sits down with Abdel Sghiouar, Senior Cloud Developer Advocate at Google and co-host of the Kubernetes Podcast. Together, they unpack the messy, high-stakes intersection of AI agents and Kubernetes cluster operations. Abdel breaks down the "Autonomy Catch-22", the technical paradox where an agent's capability to act independently is precisely what makes it a massive security liabi...

In this episode of The Secure Disclosure, we sit down in Copenhagen with David vonThenen, a keynote speaker and machine learning expert conducting groundbreaking—and terrifying—research. David breaks down his latest work on acoustic keystroke logging: training machine learning models from scratch using PyTorch to identify exactly what you are typing purely by the acoustic signature of your keyboard clicks. From hitting ...

Supply chain security is evolving at a terrifying pace. In this episode of The Security Disclosure, Roeland Delrue (COO and co-founder of Aikido Security) breaks down why attackers have shifted their crosshairs from cloud infrastructure directly onto the individual developer's machine.We dive deep into how malicious JavaScript packages, VS Code extensions, and Chrome extensions manage to slip past traditional endpoint software like...

In this episode of Secure Disclosure, host Matt sits down with Paul Van, CEO and founder of Validia, to explore the frontier of AI security. Instead of focusing on how bad actors use AI tools, they dive deep into how to protect the AI models themselves from the inside out. From the unsolvable nature of prompt injections and the rise of distillation attacks to the reality of a "machine vs. machine" security landscape, Paul breaks do...