Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves.

Learn how to back up a Proxmox VE VM to tape using a backup copy job, and how to recover a Proxmox VE VM directly from tape to a Proxmox host with NAKIVO Backup & Replication. Learn more.

NAS and file servers both share files over a network. So why are they built for completely different jobs?

Watch the seventh episode of CISO Global's podcast, "You've Been Owned," with host CISO Gary Perkins. In this episode, Gary sits down with Steve Quartarone, Partnerships Director at Prove.

CMMC Phase 2 enforcement lands in November 2026, and C3PAOs are already warning about assessment capacity. If your configuration management domain isn't audit-ready, this is the walkthrough to fix that. Roy Ludmir breaks down what changed in enforced CMMC as of November 2025, what auditors actually test versus what they just ask about, and where most organizations get stuck below full compliance — plus which security baselines to standardize on and how to build an evidence package that holds up under a real assessment.

AI agents and AI coding are creating a new software supply chain risk inside development teams. When coding agents pull code, prompts, skills and open source packages straight from GitHub, insecure code and malicious dependencies get much closer to production.

BreachWatch keeps an eye on the dark web and will alert you right away if your credentials are found.

The Five Eyes intelligence alliance—NSA, CISA, GCHQ, Australia's ASD, Canada's Cyber Centre, and New Zealand's GCSB—just issued a joint warning: AI has compressed the window between vulnerability discovery and exploitation from years to months. Adrian breaks down what the "AI Shift in Cyber Risk" statement actually means for patching timelines and attacker sophistication—and why most organizations aren't moving fast enough to keep up.

On June 22, 2026, the heads of all six Five Eyes cyber agencies—GCHQ, CISA, the NSA, ASD, the Canadian Centre, and New Zealand's GCSB—signed a rare joint statement: AI has rewritten the cyber risk timeline, and it's months, not years. Host Tova Dvorin and offensive security expert Adrian Culley unpack why AI is collapsing the window between vulnerability and exploit, why "having controls" isn't the same as proven controls, and why legacy systems are now strategic liabilities for the board, not the IT team. A clear-eyed look at validation, assumed breach, and what CISOs should do Monday morning.

Are you struggling with an endless backlog of vulnerabilities? In this video, Ravid shares how Seemplicity’s AI Analysts are revolutionizing exposure management by moving beyond generic CVSS scores to validate real-world exploitability.