The Convergence: Decoding the OWASP 2025 Security Shift for Web, Mobile, and AI

The Stack: Where Security Leadership Meets the Felt - CISO.POKER

Step away from the traditional conference floor and discover CISO.POKER, an exclusive Texas Hold'em tournament built specifically for top-tier cybersecurity executives. This episode explores how replacing vendor pitches and badge scanners with high-stakes gameplay and real-time, anonymous FeltIQ polling generates the most candid conversations in the industry. Join us to learn how players compete for privacy-first hardware prizes while simultaneously funding critical cybersecurity nonprofits through a built-in charitable coalition. August 5th - The Wynn Las Vegas - 4:30 PM - RSVP [https://ciso.poker/apply] https://www.instagram.com/cisopoker [https://www.instagram.com/cisopoker]   Sponsors: https://ciso.poker/sponsors/nitrokey [https://ciso.poker/sponsors/nitrokey] https://ciso.poker/sponsors/portswigger [https://ciso.poker/sponsors/portswigger] https://ciso.poker/sponsors/novacustom [https://ciso.poker/sponsors/novacustom]   Purchase through CISO Marketplace USA:  https://securitygadgets.shop/nitrokey [https://securitygadgets.shop/nitrokey] https://securitygadgets.shop/novacustom [https://securitygadgets.shop/novacustom]   Buy Direct Global: NitroKey [https://shop.nitrokey.com/shop?aff_ref=43] NovaCustom [https://novacustom.com/?aff=20]

Beyond the Prompt: Navigating (MCP) Model Context Protocol Security

As AI agents evolve into autonomous orchestrators, the Model Context Protocol (MCP) has rapidly become the standard for connecting them to sensitive enterprise data and external tools. However, this architectural shift introduces novel attack vectors—such as tool description poisoning, shadow MCP servers, and the confused deputy problem—that bypass traditional perimeter defenses. In this episode, we explore the latest threat modeling frameworks, zero-trust delegation strategies, and hardware-based confidential computing solutions required to safely operationalize your agentic infrastructure.   Sponsors: www.vibehack.dev [http://www.vibehack.dev] www.airiskassess.com [http://www.airiskassess.com]

The Convergence: Decoding the OWASP 2025 Security Shift for Web, Mobile, and AI

In this episode, we explore the massive architectural shift reshaping application security between 2025 and 2026, driven by the updated OWASP Top 10 frameworks for Web, Mobile, and Large Language Models. We discuss how the rise of autonomous AI agents, complex Retrieval-Augmented Generation (RAG) pipelines, and hyper-distributed ecosystems have rendered traditional, perimeter-based defenses obsolete. Finally, we examine how organizations must adapt by implementing unified infrastructure-level controls—such as AI Gateways and zero-trust architectures—to defend against new semantic threats and overlapping vulnerabilities.   Sponsors: www.vibehack.dev [http://www.vibehack.dev] www.airiskassess.com [http://www.airiskassess.com]

Strategiczny CISO: Nawigowanie wśród wymogów SEC i ryzyka cybernetycznego

Nowe przepisy SEC dotyczące ujawniania informacji o cyberbezpieczeństwie fundamentalnie przekształciły rolę dyrektora ds. bezpieczeństwa informacji (CISO) z technicznego menedżera w kluczowego dyrektora biznesowego. W tym podcaście sprawdzamy, jak nowocześni CISO muszą współpracować z zespołami międzyfunkcyjnymi, aby budować ogólnofirmowe ramy istotności i w sposób uzasadniony prognozować długoterminowe skutki finansowe naruszeń cybernetycznych. Posłuchaj, aby dowiedzieć się, jak zniwelować przepaść między operacjami bezpieczeństwa a oczekiwaniami zarządu, jednocześnie chroniąc siebie i swoją organizację przed rosnącą odpowiedzialnością prawną i regulacyjną.   English Version: https://podcast.cisomarketplace.com/e/the-strategic-ciso-navigating-sec-mandates-and-cyber-risk/ [https://podcast.cisomarketplace.com/e/the-strategic-ciso-navigating-sec-mandates-and-cyber-risk/]   Sponsor: www.cisomarketplace.com [http://www.cisomarketplace.com] www.cisomarketplace.services [http://www.cisomarketplace.services]

O CISO Estratégico: Navegando pelos Mandatos da SEC e o Risco Cibernético

As novas regras de divulgação de cibersegurança da SEC transformaram fundamentalmente o papel do Chief Information Security Officer (CISO), que deixou de ser um gerente técnico focado apenas em sistemas para se tornar um executivo de negócios de alto escalão. Neste podcast, exploramos como os CISOs modernos devem colaborar com equipes multifuncionais para construir estruturas de materialidade corporativa e projetar de forma defensável os impactos financeiros a longo prazo das violações cibernéticas. Sintonize para aprender como alinhar as operações de segurança às expectativas da diretoria e do conselho, enquanto protege a si mesmo e à sua organização contra as crescentes responsabilidades legais e multas regulatórias.   English Version: https://podcast.cisomarketplace.com/e/the-strategic-ciso-navigating-sec-mandates-and-cyber-risk/ [https://podcast.cisomarketplace.com/e/the-strategic-ciso-navigating-sec-mandates-and-cyber-risk/]   Sponsor: www.cisomarketplace.com [http://www.cisomarketplace.com] www.cisomarketplace.services [http://www.cisomarketplace.services]