Vibe Coding: Risks and Security Best Practices #101

A primer on Identity Security for Agentic AI

Send a text [https://www.buzzsprout.com/twilio/text_messages/1954606/open_sms] Today's explores the impact of agentic AI on security landscapes, particularly concerning identity management. It begins by defining AI agents as digital workers that independently pursue goals, outlining their components like perception, reasoning, and learning, and their multi-layered infrastructure. The discussion then transitions to the new attack surfaces introduced by AI agents, such as identity spoofing, privilege creep, and prompt injection, highlighting how agents’ dynamic and ephemeral nature poses unique security challenges. I have critically examined the limitations of current human-centric identity solutions like OAuth and SAML in accommodating machine identities, advocating for a machine-first approach in identity security. Finally, the episode details how the industry is evolving to address these shortfalls through zero trust for agents, policy as code, and enhanced auditability, citing examples from major cloud providers and dedicated identity management companies. LinkedIn Profile: https://www.linkedin.com/in/thecyberman/ Substack: https://thecyberman.substack.com/ Support the show [https://www.buzzsprout.com/1954606/support] Google Drive link for Podcast content: https://drive.google.com/drive/folders/10vmcQ-oqqFDPojywrfYousPcqhvisnko My Profile on LinkedIn: https://www.linkedin.com/in/prashantmishra11/ Youtube Channnel : https://www.youtube.com/@TheCybermanShow Twitter handle https://twitter.com/prashant_cyber PS: The views are my own and dont reflect any views from my employer.

Vibe Coding: Risks and Security Best Practices #101

Send a text [https://www.buzzsprout.com/twilio/text_messages/1954606/open_sms] This episode offers an extensive exploration of AI-driven code generation, known as vibe coding. This episode details how AI tools like Lovable simplify app development for both technical and non-technical users by generating code from natural language prompts. It contrasts this emerging practice with traditional software engineering and the future of AI-native development. The podcast also highlights significant cybersecurity risks associated with AI-generated code, citing reports from Veracode and Backbench that reveal a high percentage of insecure code. Finally, it provides recommendations for secure vibe coding, emphasizing human review and secure prompting techniques, and identifies new skill sets essential for the evolving landscape of AI-powered software creation. Support the show [https://www.buzzsprout.com/1954606/support] Google Drive link for Podcast content: https://drive.google.com/drive/folders/10vmcQ-oqqFDPojywrfYousPcqhvisnko My Profile on LinkedIn: https://www.linkedin.com/in/prashantmishra11/ Youtube Channnel : https://www.youtube.com/@TheCybermanShow Twitter handle https://twitter.com/prashant_cyber PS: The views are my own and dont reflect any views from my employer.

MCP Servers and Their Increasing Usage in Cybersecurity #100

Send a text [https://www.buzzsprout.com/twilio/text_messages/1954606/open_sms] Today's episiode introduces Model Context Protocol (MCP), an open standard designed to enable Artificial Intelligence (AI) applications, particularly Large Language Models (LLMs), to seamlessly interact with third-party tools and data sources. It explains MCP's architecture, including hosts, clients, servers, and external tools, and highlights its benefits such as eliminating knowledge cut-offs, reducing hallucinations, and enhancing AI's capability to perform real-world actions. The discussion also touches upon the growing adoption of MCP servers by cybersecurity vendors to facilitate natural language interaction with security platforms, while acknowledging the potential security implications of this new architectural layer. Support the show [https://www.buzzsprout.com/1954606/support] Google Drive link for Podcast content: https://drive.google.com/drive/folders/10vmcQ-oqqFDPojywrfYousPcqhvisnko My Profile on LinkedIn: https://www.linkedin.com/in/prashantmishra11/ Youtube Channnel : https://www.youtube.com/@TheCybermanShow Twitter handle https://twitter.com/prashant_cyber PS: The views are my own and dont reflect any views from my employer.

Forrester Wave Security Analytics Report: Leaders, Trends & What It Means For YOU! #99

Send a text [https://www.buzzsprout.com/twilio/text_messages/1954606/open_sms] Today's episode provides a comprehensive overview of a Forest Wave security analytics platform report, acting as a guide for understanding the evolving landscape of security solutions. The discussion centers on evaluating various platforms, including Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) products, based on product features and strategic approaches. It highlights key evaluation parameters like analytics, user behavior analysis, incident management, data handling, and the growing integration of AI. Furthermore, the episode tracks vendor changes and market consolidation, emphasizing the importance of innovation and aligning with leading technologies for security professionals. Support the show [https://www.buzzsprout.com/1954606/support] Google Drive link for Podcast content: https://drive.google.com/drive/folders/10vmcQ-oqqFDPojywrfYousPcqhvisnko My Profile on LinkedIn: https://www.linkedin.com/in/prashantmishra11/ Youtube Channnel : https://www.youtube.com/@TheCybermanShow Twitter handle https://twitter.com/prashant_cyber PS: The views are my own and dont reflect any views from my employer.

Network Detection and Response: Basics, Usecases and Gartner 2025 MQ : EP 98

Send a text [https://www.buzzsprout.com/twilio/text_messages/1954606/open_sms] Todays episode vocers a comprehensive overview of Network Detection and Response (NDR) technology, explaining its core function in detecting abnormal and malicious system behaviors by analyzing network traffic data. It outlines key features such as data ingestion, detection, and response, and discusses common use cases including lateral movement and insider threat detection, even extending to Operational Technology (OT) environments. The text also reviews the current market vendors based on a Gartner Magic Quadrant analysis, differentiates NDR from other security technologies like EDR, SIM, and XDR, and explores the integration of AI in enhancing NDR capabilities. Support the show [https://www.buzzsprout.com/1954606/support] Google Drive link for Podcast content: https://drive.google.com/drive/folders/10vmcQ-oqqFDPojywrfYousPcqhvisnko My Profile on LinkedIn: https://www.linkedin.com/in/prashantmishra11/ Youtube Channnel : https://www.youtube.com/@TheCybermanShow Twitter handle https://twitter.com/prashant_cyber PS: The views are my own and dont reflect any views from my employer.