Paul traces the problem back to the early web and his work on content classification and verification standards, explaining why today’s challenges aren’t necessarily new they’ve simply been amplified by AI, deepfakes, phishing and increasingly sophisticated social engineering.

The conversation then turns to the growing push for online age verification and social media restrictions. Paul draws a sharp distinction between content moderation and access control, arguing that modern devices already give parents powerful tools to manage what children can access.

But his bigger concern is what comes next: when “robust age verification” evolves into mandatory identity verification for entire populations.

Key Takeaways

• The trust problem hasn’t changed it has scaled. Social engineering and impersonation remain at the heart of much cybercrime; AI simply makes them faster, cheaper and harder to detect.
• Verification is as much about psychology as technology. A badge or trust signal only works if people understand what it actually represents.
• Deepfakes raise the stakes. In a world where people can no longer automatically trust what they see or hear, reliable provenance and account verification become increasingly important.
• Content moderation and access control are different problems. Paul argues that platforms should improve moderation, while parents already have increasingly sophisticated device-level controls available to manage children’s access.
• Age verification can become identity verification. Paul warns that demands for “robust” age checking could ultimately require users to prove their real-world identity simply to participate online.
• Privacy can be lost incrementally. Measures introduced for legitimate goals such as child safety can expand in scope and create infrastructure capable of much broader surveillance.

Soundbites

“Society doesn’t know where to look to find trust.”

“Technology is just an enabler.”

“I don’t think any tech company is doing enough to reduce the risk of their technology being used for harm.”

“Content moderation is different to access control.”

“The governments are saying they’re giving back control, but actually they’re taking away their ability to just be a parent.”

Part 1 ends with a fundamental tension: how do we make the internet safer without building systems that require everyone to surrender their identity and privacy in order to participate?

In this episode of The Entropy Podcast, Francis Gorman sits down with Ismail Amla to explore the rise of agentic AI, digital workers and AI-native organisations. They discuss why the biggest opportunity is not simply using AI to make existing processes faster, but redesigning businesses around what intelligent systems can now do.

They also examine the harder questions: what happens when AI agents begin making decisions independently, who is accountable when those decisions go wrong, how organisations can avoid agentic drift, and whether relying too heavily on AI risks weakening human judgement and curiosity.

Key takeaways: 

• Why AI is shifting from automation to autonomy
• How AI agents could become part of the workforce 
• Why most AI transformation efforts fall short
• What leaders need to rethink, and why governance and human judgement matter more as systems become increasingly autonomous.

Soundbites: 

“I think it is a revolution. I don’t think it’s just another tool.”

“Whoever this technology is working on behalf of is responsible for every decision that’s made.”

Snehal shares lessons from building and scaling Horizon3.ai, why startups must eventually move from “pirates” to a “navy,” and how his time inside Special Operations fundamentally changed his approach to leadership.

They also explore the rapidly changing cyber threat landscape: AI-powered attackers, autonomous penetration testing, deception as a defence against AI agents, the lessons emerging from Ukraine, and why organisations need to stop asking whether they are secure and start proving they are resilient and defensible.

Key Takeaways

• Why great founders need grit, conviction and a “learn-it-all” mentality
• How companies transition from entrepreneurial pirates to a scalable navy
• Why AI could give cyber attackers effectively unlimited ammunition
• How defenders can use honeypots and deception to hack the hackers
• Why cybersecurity teams should train like they fight
• The growing importance of human-machine teaming in warfare
• Why over-reliance on AI could undermine human judgement and scepticism
• How AI may reshape the workforce and put increasing pressure on the “middle”
• Why there is no AI easy button coming for cybersecurity
• Why organisations must move from being “secure” to being resilient and defensible

Key Soundbites

“You earn the right to be on this team every single day.”

“AI gives the adversary unlimited bullets.”

“You don’t want to learn how to deal with a crisis in the middle of a crisis.”

“We always train like we fight.”

“There is no AI savior that’s going to suddenly make your lives better.”

“Those obsessed with mastering their craft are going to come out on top.”

“Stop saying that we’re secure… start talking about how we’re defensible.”

In this episode, Francis Gorman speaks with strategy leader and LFI founder Shayne De la Force about the commercial realities of quantum technology in advanced manufacturing. Drawing on decades of experience across the semiconductor, aerospace, defence and automotive sectors, Shayne explains why quantum must become a board-level economic and governance priority.

They explore the cost of waiting, the challenge of securing global supply chains, the role of an embedded Chief Quantum Officer, and why businesses need to look beyond vague terms such as “quantum advantage” and “quantum readiness.”

Shayne also reflects on beginning his career on a factory floor in Japan, the dangers of “synthetic seniority,” and the lessons behind his book, Strategic Entanglement, which helps deep-tech founders cross the valley of death between innovation and commercial success.

Key Takeaways

• Quantum is an economic issue, not merely a technology issue. Business leaders should evaluate it through two lenses: increasing enterprise value and reducing risk.
• Waiting carries a measurable cost. Organisations that begin planning and piloting now can build stronger competitive moats, while delayed action may expose intellectual property, long-lived data and future market position.
• Quantum preparation needs board-level sponsorship. CISOs and technical teams require executive support, funding and governance authority to deliver meaningful readiness programmes.
• Advanced manufacturers face a supply-chain problem. Prime contractors may have thousands of suppliers operating at very different levels of cryptographic maturity. The weakest supplier can become the greatest source of exposure.
• Prioritisation is more valuable than trying to fix everything at once. Companies should identify high-exposure systems, sensitive intellectual property and long-lived data, then concentrate resources where risk reduction will have the greatest impact.
• Most mid-sized organisations do not need a full internal quantum department. An embedded Chief Quantum Officer model can provide access to strategy, security, physics, governance and programme-management expertise without years of internal hiring.
• Quantum use cases must be tied to commercial outcomes. Not every pilot will deliver immediate value. Organisations need clearly defined business problems, economic metrics and realistic pathways from experimentation to deployment.
• Deep-tech commercialisation must begin early. Start-ups should develop their market narrative, customer belief and commercial strategy alongside the technology—not after the product has been completed.
• Foundational experience still matters. Working directly with machines, infrastructure, customers and operational teams creates judgement that cannot be replaced by AI-generated ideas or “synthetic seniority.”

Soundbites

“Unless you are working for a not-for-profit, we are all here to drive business, growth and economic value.”

“A CEO or CFO has two fundamental objectives: maximise economic value and reduce economic risk.”

“The companies moving today are the ones that will have the strongest competitive moat.”

“Unless you have buy-in at the top, it is very difficult to move the rest of the organisation.”

“When boards see the economic risk of losing their intellectual property and long-term data, that is when the needle starts moving.”

“Building an internal quantum department can take years and millions of dollars. Our embedded model gives companies access to the whole capability.”

“The companies running pilots today are the ones building a competitive moat over the companies that are waiting.”

“In advanced manufacturing, equipment may have a depreciation cycle of 25 or 30 years. That makes cryptographic transition a massive challenge.”

“The prime contractors are preparing, but their supplier base is often their weakest link.”

“Our job is to create clarity in chaos—because, right now, it is chaos.”

“Can we close 80 percent of the exposure in the first 12 months and then work through the remaining 20 percent?”

“The valley of death is where great technology goes to die because the commercialisation strategy was never developed.”

Patrick challenges the obsession with business continuity plans, impact assessments and compliance evidence, arguing that resilience should be measured by outcomes: can the organisation continue operating when something critical is lost?

The conversation explores the difference between security and resilience, why businesses should prepare for loss rather than attempt to predict every possible threat, and how leaders can identify their most important dependencies. Patrick also examines the role of AI, the importance of business ownership and why tabletop exercises must become honest operational conversations rather than annual corporate theatre.

This is a practical discussion about building the confidence, capability and human relationships required to respond when the plan no longer matches reality. 

Key takeaways

• Resilience is not a collection of documents. Plans and frameworks are useful, but they do not prove that an organisation can sustain operations during a crisis. 
• Prepare for loss, not every imaginable threat. Most disruptions can be reduced to losing a site, people, systems, suppliers or data. 
• The business owns resilience. Operational leaders should decide what must continue, what level of disruption is tolerable and where investment is justified. 
• Cybersecurity and cyber resilience are different. Security attempts to prevent incidents; resilience determines what happens when prevention fails. 
• Dependencies must be understood across the organisation. A single failure—such as electricity, identity infrastructure or a major supplier—can create very different consequences across multiple teams. 
• AI can amplify weak processes. Automating a poor resilience process may produce more plans and evidence without improving operational capability. 
• Tabletop exercises should be frequent and honest. Short, regular discussions are often more valuable than one heavily scripted annual exercise. 
• People ultimately carry the response. Trust, authority, shared principles and operational knowledge matter more during a crisis than a spreadsheet stored somewhere on the network. 

Soundbytes:

“We were tired of resilience being measured by plans, not outcomes.”

“Plans may be useless, but planning is indispensable.”

“Almost every threat can be reduced to a handful of loss scenarios: losing a site, people, systems, suppliers or data.”

“The board-level question is simple: how confident are we that we can sustain operations if we lose a key dependency?”

“It does not matter why the electricity is gone. If it is gone, the business still has to respond.”

“Investing heavily in prevention does not mean you are resilient.”

“If you have bad processes today, AI is a great tool for accelerating those bad processes.”

“You do not become fit by going to the gym once a year for seven hours. Tabletop exercises work the same way.”

“An exercise should be an honest conversation, not a performance conversation.”

“When something hits, it is the people, the trust and the shared principles that allow the organisation to respond.” 

From deepfakes and AI-powered scams to digital footprints, remote hiring fraud, and the rise of agentic cybercrime, Jake explains how rapidly evolving AI tools are changing the nature of deception and why individuals, businesses, and governments are struggling to keep up.

The conversation explores what happens when seeing is no longer believing, how cybercriminals are already exploiting synthetic media, and why the future of cybersecurity may depend less on tools alone and more on human awareness, verification, and digital resilience.

If you’ve ever wondered how close we are to a world where anyone can fake anyone, this episode is for you.

Key Takeaways

• Deepfakes are no longer theoretical — they are already being used in scams, impersonation, and fraud. 
• Trust online is eroding fast, as AI-generated content becomes more realistic and accessible. 
• Remote hiring introduces new risks, including AI-assisted impersonation and fake candidates. 
• Your digital footprint reveals more than you think, often exposing personal details that can be used against you. 
• Cyber awareness is still the strongest defense, especially when technology alone can’t keep pace. 
• Children need better cyber education, particularly around passwords, privacy, and digital identity. 
• AI is scaling cybercrime, making attacks faster, cheaper, and more convincing. 
• Agentic AI and quantum computing could create the next major wave of cybersecurity disruption. 

Soundbites

Here are strong promotional soundbites you can use in Spotify captions, social posts, clips, or episode promos:

1. “We’ve entered a world where seeing is no longer believing.”
2. “Your face, your voice, and your identity are becoming easier to fake.”
3. “The biggest cyber threat may not be malware — it may be trust itself.”
4. “Deepfakes are no longer a future problem. They’re here now.”
5. “Cybercriminals don’t need perfect technology — they just need believable enough.”
6. “Your digital footprint can tell strangers more about you than you realize.”
7. “In the age of AI, awareness is still your greatest defense.”
8. “The next scam won’t look suspicious — it will look completely real.”
9. “Remote work has opened the door to a new kind of identity fraud.”
10. “We are moving into an era of synthetic reality, and most people are not ready for it.”

In this episode, Francis Gorman speaks with Rik Ferguson, Vice President of Security Intelligence at Forescout, about why organisations must move from “assume breach” to “assume autonomy.” Rik explains the four conditions required for trusted autonomous defense: context, constraint, reversibility and transparency.

They also explore the risks of over-relying on AI in security operations, the importance of meaningful human oversight and why “harvest now, decrypt later” attacks make post-quantum readiness an urgent business priority.

Key Takeaways

AI is changing the operating model of cyberattacks.
The greatest shift is not simply that AI makes existing attacks faster. Autonomous systems may combine vulnerabilities and techniques in ways that do not reflect human logic or established attacker behaviour.

Defence cannot remain at human speed.
As attacks become increasingly automated, organisations will need defensive systems capable of detecting, containing and responding at machine speed.

Trust in autonomous security must be earned.
Rik identifies four essential conditions for trusted autonomy:

• Context: Decisions must reflect the asset, its dependencies, its business importance and the wider environment.
• Constraint: Autonomous actions must remain within clearly defined boundaries and guardrails.
• Reversibility: Defensive interventions must be capable of being rapidly undone when they cause unintended consequences.
• Transparency: Operators must understand why a decision was made, which data informed it and what the potential impact will be.

Human oversight must be meaningful.
Simply placing a person at the end of an automated process does not guarantee safety. Over-reliance on automation can reduce vigilance and leave people less capable of intervening when intervention matters most.

Paper we discussed during the episode: https://www.forescout.com/resources/wp-assume-autonomy/

In this candid conversation, Stefan opens up about addiction, sobriety, ADHD and the experience that forced him to rebuild his life without status or recognition. He explains how discovering improvisation gave him a new way to understand failure, trust, communication and human connection.

Today, Stefan uses applied improv, emotional intelligence and psychological safety to help leaders create teams where people feel confident enough to contribute, challenge ideas, make mistakes and speak openly.

This is a conversation about what happens when the script disappears—and why the strongest leaders are not those with all the answers, but those who make the people around them better.

Key Takeaways

• Early success can shape self-worth in ways that take years to recognise and unlearn.

• ADHD can drive creativity, intensity and hyperfocus, but without the right support it can also contribute to burnout and destructive behaviour.

• Psychological safety begins with how leaders respond when someone speaks up, challenges an idea or makes a mistake.

• “Yes, and” does not mean agreeing with everything. It means listening fully before rejecting or building on an idea.

• Teams perform better when people stop judging themselves, stop judging others and become willing to experiment.

• Failure becomes valuable when it is treated as information rather than something to conceal.

• Great leadership is not about being the star of the scene. It is about making other people look good.

• Meaningful change begins when you stop blaming the environment and accept responsibility for your own behaviour.

Soundbites

“Leadership is improvisation. None of us knows exactly what comes next.”

“Success lies somewhere between doing nothing and failing.”

“Every time someone speaks up, they have already overcome their own fear.”

“Your job is not to be the star. Your job is to make other people look good.”

“Psychological safety is created by how you respond when someone gets it wrong.”

“You cannot change until you are willing to admit that something needs to change.”

“People do not learn courage by reading about it. They learn it by stepping forward.”

“Failure is not something to hide. It is something to recover from.”

“Say yes to the person before you judge the idea.”

“The strongest teams are not afraid of mistakes—they know how to use them.”

You can find Stefan at: https://improv.eu/

Find Stefan on LinkedIn: https://www.linkedin.com/in/stefanpagelsimprov/

The conversation explores a question many boards, legal teams, and security leaders are only beginning to face: when quantum computers threaten today’s encryption, who becomes liable for doing nothing?

Darren breaks down post-quantum negligence in practical terms, explaining why “we didn’t know” may not be a credible defence for much longer. From Harvest Now, Decrypt Later attacks to board minutes, data shelf life, migration timelines, DORA compliance, procurement decisions, and third-party liability, this episode reframes quantum readiness as more than a technical challenge.

It is a governance issue. A legal exposure issue. A fiduciary duty issue. And potentially, a future courtroom issue.

Key Takeaways

• Post-quantum cryptography is no longer just a cybersecurity concern; it is becoming a boardroom and legal risk conversation.
• Organisations may need to show how they assessed quantum risk, prioritised critical data, and documented informed decisions.
• Board minutes, governance records, risk assessments, cryptographic inventories, and migration plans could become central evidence in future litigation.
• “Cryptographic procrastination” may become difficult to defend if organisations knew about the risk but chose not to act.
• The Mosca theorem helps boards think about whether their data shelf life plus migration time exceeds the timeline for a cryptographically relevant quantum computer.
• The Learned Hand formula offers a legal lens for comparing the burden of prevention against the probability and magnitude of future harm.
• Financial services, healthcare, energy, and critical infrastructure may be among the first sectors exposed to post-quantum liability.
• DORA and similar regulatory frameworks may create either a defensive treasure trove or a litigation minefield, depending on the quality of the paper trail.
• Supply-chain liability will be complex, with SaaS providers, cloud providers, HSM vendors, certificate authorities, and customers all potentially pulled into the same dispute.
• Procurement teams should start asking not just whether vendors are secure today, but whether they can support post-quantum migration tomorrow.

Soundbytes

“Quantum risk is moving from the server room to the boardroom.”

“Harvest Now, Decrypt Later may become Harvest Now, Litigate Later.”

“The question is not just whether encryption breaks. It is who knew, who acted, and who documented the decision.”

“In a future lawsuit, the paper trail may matter as much as the technology.”

“Cryptographic procrastination is not a strategy.”

“Doing nothing may be the most expensive decision a board ever makes.”

“Post-quantum readiness is not a light switch. It is a long fuse with a big boom at the end.”

“If your data still has value when quantum arrives, your risk clock has already started.”

“DORA can be a treasure trove or a minefield. It depends what your records show.”

“Your vendors may hold the keys, but your organisation may still hold the liability.”

“Quantum readiness is no longer just about algorithms. It is about governance, accountability, and foreseeable harm.”

“The courtroom may become the place where quantum risk finally gets priced.”

Francesco breaks down the uncomfortable reality that many organisations are not as recoverable as they think. From ransomware spreading at scale to compromised identity systems, encrypted tooling, failed assumptions, and board-level misunderstandings, this conversation explores what really happens when the worst-case cyber scenario becomes real.

The discussion covers cyber resilience versus cybersecurity, APT-grade attacks, out-of-band communications, crisis operating models, data vaulting, DORA, recovery planning, minimum viable organisations, and why resilience has to be designed before disaster strikes.

This is a direct, practical conversation about building organisations that can continue operating when the normal playbook no longer works.

Key Takeaways

Cyber resilience is not the same as cybersecurity. Cybersecurity focuses heavily on prevention and protection; cyber resilience asks whether the organisation can still operate, recover, and adapt when prevention fails.

Backups alone do not equal resilience. Francesco warns that recovery depends on architecture, governance, people, tooling, identity, sequencing, and validated operating models not just stored copies of data.

Organisations need to stress-test their assumptions of recoverability. If Active Directory, communications, patching tools, or recovery platforms are compromised, the real question is: what still works?

Boards often misunderstand resilience as a technology problem. Francesco argues that technology matters, but cyber resilience also requires clear accountability, capability maturity, skilled teams, and rehearsed decision-making.

Cyber recovery investment is often too low. Many organisations spend heavily on prevention, detection, and protection, while underinvesting in recovery capabilities and last-resort operating models.

Data vaulting and isolated recovery are essential, but incomplete on their own. They must sit inside a wider cyber resilience strategy that includes threat modelling, minimum viable operations, interoperability, deception, and recovery sequencing.

Soundbytes

“Your cyber recovery plan is only real if it still works when everything around it has failed.”

“Backups are not resilience. They are only one piece of the survival plan.”

“The worst time to design recovery is during the incident.”

“Cyber resilience starts where cybersecurity assumptions break.”

“If your identity stack, tooling, and communications are gone, what still works?”

“Being compliant does not mean being resilient.”

“Recovery is not just a technology problem. It is an organisational capability.”

“Most companies know how to prevent. Far fewer know how to restart.”

The conversation explores why many organisations still treat AI security, cryptography, and quantum readiness as separate programmes, even though they are becoming deeply interconnected. Dinesh explains that AI has captured attention from the boardroom to engineering teams in a way few previous technology waves have, which gives it momentum, budget, and organisational visibility. But that same momentum creates risk if security, cryptographic resilience, and post-quantum planning are not built into transformation programmes early. 

The discussion then moves into sovereign AI, geopolitical dependency, and the enterprise risk of building core workflows on platforms that may become unavailable due to political, regulatory, or commercial decisions. Dinesh frames this as a strategic consideration for businesses, especially when AI tools become central to software development, automation, and competitive advantage. 

The second half of the episode focuses on post-quantum cryptography. Dinesh outlines how organisations should approach quantum readiness: start with awareness, assess exposure from the board level down, establish a centralised programme or centre of excellence, and embed post-quantum requirements into procurement, legal, supply chain, architecture, and existing digital transformation initiatives. His core message is that PQC is not a one-off technical remediation exercise; it is a multi-year business transformation that must be governed as a strategic risk. 

Key takeaways

1. AI security is becoming a cryptography problem
   AI at enterprise scale requires mechanisms to validate, verify, and trust agents, applications, and workflows. That trust layer depends on cryptography. 
2. AI, crypto modernisation, and quantum readiness cannot stay separate
   Many organisations currently treat them as three different programmes, but Dinesh expects them to converge quickly as AI infrastructure becomes dependent on cryptographic trust. 
3. AI has unusual organisational momentum
   Unlike previous technology waves, AI has captured attention from the C-suite down to engineers. That visibility can help fund and accelerate security work, including parts of the post-quantum journey. 
4. Sovereign AI is becoming a serious boardroom issue
   Enterprises need to consider what happens when a critical AI platform is restricted, withdrawn, or affected by geopolitical decisions. 
5. Quantum readiness is not just an IT issue
   PQC affects contracts, procurement, suppliers, cloud strategy, infrastructure, applications, data, and long-term transformation plans. 
6. Boards need business-risk language, not cryptography language
   Dinesh’s recommendation is to frame quantum exposure as strategic risk: revenue disruption, transformation risk, cost escalation, technical debt, and operational fragility. 
7. The first move is not scanning; it is understanding exposure
   Crypto inventory matters, but Dinesh argues the starting point should be a top-down view of how exposed the business model is to quantum-related disruption. 
8. A centralised PQC capability is essential
   Organisations need a programme team or centre of excellence that can create awareness, set direction, advise functions, and coordinate action across the enterprise. 
9. Existing transformation programmes should pay the “quantum tax”
   Rather than spinning up everything from scratch, organisations should embed PQC requirements into cloud migrations, digital modernisation, procurement cycles, and supplier renewals. 
10. PQC is a five-to-six-year journey for many enterprises
    Dinesh describes quantum readiness as a long-running transformation, not a vulnerability patching exercise. 

Soundbites

These are polished for promotion and clips rather than strict verbatim transcript pulls.

“AI security is ultimately a trust problem and trust still comes back to cryptography.”

“The organisations that treat AI, crypto, and quantum as separate programmes are going to feel the collision later.”

“AI has done something unusual: it has captured the imagination of the boardroom and the engineer at the same time.”

“If every employee is going to use AI, then cryptography has to scale to that same level of adoption.”

“Post-quantum readiness is not a technology change. It is a business transformation.”

“The board does not need a lecture on algorithms. It needs to understand exposure, disruption, and strategic risk.”

This is a conversation about why most AI investment fails to deliver, why the real barrier sits in the boardroom rather than the technology, and why the rush to deploy AI agents without securing the underlying data is heading for a reckoning. Lucy also introduces Mother, her new venture building AI on quantum-resilient infrastructure and makes the case that the most underestimated risk isn't superintelligence, but our growing dependency on the tools themselves.

Key Takeaways

• AI is a leadership problem, not a technology problem. The organisations that win aren't the ones with the biggest budgets they're the ones whose leaders have the foresight to grasp how fundamental this shift is.
• Start with the human problem, not the tool. Most organisations don't even understand their own workflow processes. Design thinking and relentless questioning surface the real issue which is often smaller and easier to fix than anyone expected.
• ROI comes from strategy, not spend. One case study: six "AI colleagues" deployed for ~£500k returned ~£6.5M in ten months driven by an opportunity spotted in a workshop, not the technology itself.
• Security can't be an afterthought. Homegrown AI agents going into organisations without secured data are a backlash waiting to happen. Secure by design from day one.
• Quantum changes the game. With "harvest now, decrypt later" already underway and ~300 quantum computers in existence, quantum isn't theory. Mother's approach moves from algorithms and code to mathematics and physics protecting data without touching it.
• The real risk is dependency. Societies don't collapse because technology gets clever they collapse because they forget how dependent they've become.
• Stay human. AI has no experience, no conscience, and no emotion. The advantage lies in the things that make us human and using the tools to amplify them.

Soundbites

"Artificial intelligence is not a technology problem, it's a leadership problem."

"It's a technology so profound that everything else is going to have to be redesigned around it."

"Forget about the technology — what human problems are you trying to solve?"

"Societies rarely collapse because a technology becomes clever. They collapse because they become vulnerable."

"Artificial intelligence needs a mother. It needs protecting."

"We're moving away from algorithms and code to mathematics and physics. It's a completely different beast."

"Good leader, good organisation. Bad leadership, absolute chaos."

"We're literally in the toddler stage."

Key Topics:

• The commodification of intelligence and its impact on value
• The importance of taste, judgment, and accountability in a world of abundant AI
• The concept of synthetic seniority and the blending of old and new wisdom
• Future skills needed for humans to thrive alongside AI
• The role of curiosity, boredom, and creativity in human development
• The risks of over-dependence on AI and algorithms
• Reimagining education to focus on soft skills and super skills
• The importance of questioning and understanding decision-making algorithms
• Practical self-assessment tools for future readiness

 Sound Bytes:

"Taste, judgment, accountability are valuable now"
"Talking to machines feels disingenuous"
"Many decisions are made for us by algorithms"

Check out the book: 

https://superskillsbook.com/

Check out the diagnostic tool:

https://superskillsbook.com/diagnostic/

Check out Rahim’s site:

https://www.thesuperskills.com/

Key Takeaways

• David's "Five Stages of Empire" model frames how nations regionalise, fight a civil war, expand, peak, and decline and where he places the West today.
• His view that American power entered structural decline after 9/11, with China rising to fill the vacuum.
• The concept of "strategic compression" why rising powers are forced to act not when they choose, but when the window around them starts to close.
• Why he sees Ukraine and Iran as conflicts enabled and shaped by China, used as testing grounds for systems and tactics.
• His argument that Western societies are being degraded from within through long-running influence operations targeting domestic politics.
• A stark assessment of UK military readiness, and why he believes adaptability not hardware alone decides who survives modern conflict.
• What all of this means for a small, neutral, strategically significant state like Ireland.

Soundbites

• "Nature absolutely abhors a vacuum. It hates it."
• "It's as if we're playing draughts and the Chinese are playing three-dimensional chess."
• "The timing of hegemonic conflicts is never at the choosing of the hegemon."
• "There are no neutral countries in its story, so there are no places to hide."
• "Stand up and be counted."

Note: This episode contains forecasting and personal analysis that is, by nature, speculative and at times contested. These are David Murrin's own views, shared to open debate rather than to state fact. 

Together, they explore why people and companies often wait until crisis hits before adapting, why superficial change rarely works, and why mental models must shift before business models can. From Nokia’s failure to respond to the iPhone to the personal grief of letting go of an old identity, this conversation is about preparing for change before it is forced upon you and finding the resilience to build what comes next.

Key Topics:

• The importance of mental models in change
• The analogy of the caterpillar and butterfly in transformation
• The role of curiosity in innovation
• Lessons from Nokia's decline and failure to adapt
• The concept of creative destruction and proactive change

Sound Bytes:

"You can't waterboard a horse."
"Snow always melts from the edges."
"You can't force a horse to water."

You can find Aidan's book here: https://www.kennys.ie/shop/-9781119770480

Geoff has spent years embedded in the underbelly of the cyber economy, from ransomware syndicates to state-sponsored hacking operations, and he brings a working journalist's eye to questions most security professionals only ever see from the defender's side. The conversation opens by dismantling the hoodie-in-a-basement myth: ransomware groups like Conti are run as businesses, with HR functions, payroll, performance management, customer support teams, and an obsession with professional polish. Geoff walks through what the leaked Conti messages reveal about how these organisations think of themselves including the striking self-description of their work as "postpaid penetration testing."

The conversation then turns to North Korea, where Geoff lays out the case for what he calls a "hackocracy" — a regime increasingly funded by computer hacking. Drawing on US government estimates and his own analysis, he explains how cryptocurrency theft is keeping the North Korean state afloat, why sanctions are losing their bite, and why this should worry anyone who relies on the global supply chains that pass through the Korean peninsula. Francis and Geoff also dig into the moral and practical reality of the "don't pay the ransom" position, the weaknesses that still let attackers in, and the systemic role of money laundering as the unspoken second half of every major cybercrime story.

The episode closes on the most timely thread: AI as an inherently deceptive technology. Geoff makes the case that systems like ChatGPT are designed from the ground up to fool users into thinking they're human and that this design philosophy has serious implications for the next generation of social engineering attacks. The conversation ends with a frank exchange on Anthropic's recent walk-back of its core safety commitments and what it signals about the industry's direction.

Key Takeaways

• Ransomware gangs run themselves as businesses, not basements. 
• The economics of ransomware are extraordinary. 
• Money laundering is half the story. 
• North Korea is becoming a hackocracy. 
• A national ban on ransom payments would work eventually. .
• Humans are still the attack surface and AI makes that worse.

Soundbites

 "In order to earn the kind of money that Conti was earning, the average Russian would have had to work for 400 years. So in a single ransom, you can make not just your life's money, but the money for the life of all of your family around you as well." — Geoff White 

 "Within the next five to ten years, North Korea could become the world's first hackocracy — a regime entirely funded by computer hacking." — Geoff White 

 "Our world is not being run by lovely rational AI. It's human beings who are deciding what happens." — Geoff White 

The conversation explores why security decisions in large enterprises take time, how AI is accelerating existing technical debt and governance gaps, and why quantum risk is no longer something organizations can comfortably defer. Adam frames post-quantum readiness as a generational risk comparable to Y2K: manageable if organizations plan early, potentially damaging if they procrastinate.

A central theme is that cybersecurity is no longer just a technology problem. It is a business resilience issue involving boards, executives, architects, regulators, CISOs, CIOs, CTOs, and risk leaders. Adam also challenges the industry’s reliance on perimeter defence, arguing that organizations need to think more seriously about making data unusable if it is exfiltrated. 

Key Takeaways

• Storytelling is now a core cybersecurity leadership skill.
• Cybersecurity is business, not a separate technology function.
• AI has exposed existing technical debt faster than expected.
• Zero Trust is still valid, but there is no silver bullet.
•  Organizations should assume breach and protect the data itself.
• “Harvest now, decrypt later” is a present-day risk.
• Quantum procrastination is becoming indefensible.
• The CISO cannot carry cyber risk alone.
•  AI adoption needs policy, education, and discipline.

Soundbytes

"There is no such thing as business and technology. It’s all business at the end of the day."

“AI wasn’t built to be secure, it was built to be amazing.” 

“The CISO cannot protect the organization by themselves.” 

 “The dashboard will never be green in my world.” 

Louise argues that post-quantum cryptography is no longer just a cryptography, standards, or cybersecurity discussion. It is an enterprise governance and transformation challenge that affects digital trust, operational resilience, fiduciary duty, regulatory exposure, insurance, systemic financial risk, and long-term business viability.

The conversation explores why boards and executive leaders often struggle to act on quantum risk, not because the threat is unclear, but because it is poorly communicated. Louise explains how quantum risk breaks traditional risk models: it is time-shifted, has unclear ownership, spans the entire digital infrastructure layer, and reaches far beyond any single technology team.

The episode also covers the real-world consequences of unreadiness, from harvest-now-decrypt-later exposure to operational technology, financial services, elevators, pacemakers, insurance risk, liquidity impact, and corporate survival. But the conversation is not only about risk. Louise also makes the case that quantum readiness can be used as a once-in-a-generation transformation opportunity to reduce technical debt, strengthen governance, improve enterprise intelligence, and create lasting organisational value.

Takeaways:

1. Quantum readiness is now a boardroom issue.
Louise makes the case that post-quantum security has moved beyond the technical layer. It now belongs in enterprise governance, risk management, transformation strategy, and board oversight.

2. The communication gap is one of the biggest blockers.
The people who understand the quantum threat are often technologists, while the people who control funding, risk appetite, and enterprise priorities are boards and executives. The challenge is translating the issue into language decision-makers can act on.

3. Traditional risk models do not handle quantum risk well.
Quantum risk does not fit neatly into standard operational risk taxonomies. It is time-shifted, systemic, infrastructure-level, and difficult to assign to a single owner.

4. Digital trust may be the real asset at risk.
The episode repeatedly comes back to trust. Cryptography underpins authentication, authorisation, privacy, financial transactions, customer confidence, and the resilience of modern digital business.

5. Harvest-now-decrypt-later is already a live issue.
Louise stresses that quantum risk is not purely future-facing. Sensitive data may already be exposed if adversaries are collecting encrypted information today to decrypt later.

6. Boards need to understand their fiduciary exposure.
If boards are made aware of the scale of the risk and still fail to act, the issue becomes one of governance failure and fiduciary responsibility.

7. This is bigger than IT and cybersecurity.
Quantum risk affects financial services, insurance, operational technology, manufacturing, logistics, public safety, and the physical systems connected to digital infrastructure.

and many more....

SoundBytes:

“The people who understand the problem often are not the people who own the decision.”

“Quantum risk challenges the way organisations think about ownership, accountability, and authority.”

“Digital trust does not belong to one function. It belongs to the organisation as a whole.”

“The board is the only place high enough to own a risk of this scale.”

“This is not just about avoiding risk. Done properly, quantum readiness can create long-term enterprise value.”

The conversation reframes cyber strategy as a business-aligned, risk-driven, continuously evolving discipline. It emphasizes understanding stakeholder priorities, mapping real threats to controls, and treating strategy as a living system that adapts to AI, geopolitics, and changing attack surfaces.

Takeaways:

1. Most “Cyber Strategies” Aren’t Strategies

•  They’re annual roadmaps or compliance exercises 
•  Built around frameworks (NIST, ISO) instead of business risk 
•  Improve maturity—but don’t necessarily reduce real risk 

2. Strategy Must Start With the Business

•  Engage CEO, CFO, CIO, CRO—not just security teams 
•  Understand risk appetite and critical processes 
•  Align to IT, digital, and AI strategies 

3. Focus on Risk → Threats → Controls (Not Maturity Scores)

•  Define key cyber risks (e.g., business disruption) 
•  Map threat scenarios (e.g., ransomware via phishing) 
•  Link to controls and measure effectiveness 

4. Strategy is a Living System

•  Must evolve with: 
  •  AI 
  •  Threat intelligence 
  •  Regulatory changes 
  •  Business shifts 

5. Prioritization = Risk + Cost Trade-Off

•  You can’t do everything 
•  Decisions must be explicit: 
  •  What risk are we accepting? 
  •  What exposure remains? 

6. Regulation Shouldn’t Drive Strategy

•  Constantly reacting to new regs derails focus 
•  Instead: 
  •  Build a strong master control framework 
  •  Map regulations onto it 

Soundbites: 

•  “Most cyber strategies look good on paper but don’t manage real risk.” 
•  “You’re improving maturity, not reducing risk.” 
•  “Cyber can’t operate in a bubble it has to enable the business.” 
•  “If you don’t fund it, you’re accepting the risk. It’s that simple.” 
•  “Boards don’t care about maturity levels they care about real threats.” 

Drawing on real-world tradecraft, Glenn explains how vulnerabilities are identified, how influence is cultivated, and how narratives are seeded and amplified over time. The conversation explores the growing tension between intelligence institutions and political power, the risks facing democratic systems, and how modern geopolitics is increasingly shaped by information warfare and perception management.

The discussion also ventures into controversial territory examining the possibility of long-term influence operations at the highest levels of power while highlighting the difference between evidence, interpretation, and hypothesis.

This is a conversation about how power actually works beneath the surface and what happens when institutions designed to protect truth are put under pressure.

Takeaways:

• Intelligence is about patterns, not events
• Influence is often long-term and indirect
• Vulnerability ≠ control
• Institutions are under pressure
• Information warfare shapes reality
• The line between analysis and speculation matters

SoundBytes:

“In intelligence, there are no coincidences only patterns you haven’t understood yet.”

“You don’t recruit someone in a moment you shape them over time.”

“Every strength can become a vulnerability in the right context.”

“If telling the truth costs you your job, the system stops working.”

“You don’t need the truth you need enough repetition to make something feel true.”

“The most effective operations are the ones no one notices—until it’s too late.”

“Understanding how something could happen is not the same as proving that it did.”

This conversation explores complex and often controversial geopolitical themes from the perspective of a former intelligence officer. Some views expressed particularly around long-term intelligence operations and political influence reflect interpretation and professional judgement rather than independently verified public conclusions. Listeners are encouraged to engage critically and consult additional sources where appropriate. 

He argues that cyber threats are fundamentally about cash, trust, and continuity, not just systems. A single compromised credential or phishing attack can dismantle years of work in minutes, particularly in SMEs where operations often depend on one person, one account, or one set of credentials. 

Maxwell introduces a key mindset shift: cybersecurity is an investment, not an expense. Like building a portfolio, incremental and consistent investment in cyber resilience pays dividends protecting revenue, relationships, and long-term business viability. 

The conversation also explores human vulnerability as the dominant attack vector, the risks introduced by AI adoption, and why attackers prioritize ease over sophistication. Ultimately, the episode highlights a stark reality: it’s no longer “if” a business is attacked, but “when” and how prepared it is when that moment comes.

Key Takeaways:

1. Cyber is now a business problem, not an IT problem
It directly impacts cashflow, supplier relationships, and customer trust—not just systems.

2. SMEs are disproportionately vulnerable
Reliance on single accounts, single individuals, and weak password practices creates critical single points of failure.

3. Attackers prioritize ease, not scale or sophistication
The simplest entry point—often human—is the most exploited.

4. “Too small to hack” is a dangerous myth
Smaller firms are often easier targets and valuable entry points into supply chains.

5. Cybersecurity must be treated as an investment
Incremental improvements (policies, training, redundancy) generate long-term “dividends” in resilience.

6. Human behavior is the biggest risk surface
Phishing, credential reuse, and lack of policy enforcement remain dominant vulnerabilities.

7. AI is amplifying exposure
Organizations are unintentionally leaking sensitive data through unmanaged AI usage.

8. External validation is critical
Internal reviews often miss risks—independent assessments reveal blind spots.

9. Banks and institutions are shifting liability
Poor cyber hygiene increasingly results in unrecoverable financial loss.

10. Timing matters
Fixing issues after a breach is exponentially more expensive than proactive investment.

Soundbites:

•  “Cyber isn’t a technical issue anymore—it’s about cash.” 
•  “You can lose trust, cash, and credibility in under a minute.” 
•  “It’s not ‘if’ you get attacked—it’s ‘when’ and ‘how much they take.’” 
•  “One person, one password, one account—that’s all it takes.” 
•  “Attackers don’t look for the biggest target—they look for the easiest one.” 
•  “We were too busy… until we got hacked.” 
•  “Cybersecurity isn’t an expense. It’s an investment that pays dividends.” 
•  “The password they stole six months ago? It still works—that’s the problem.” 
•  “AI is making companies more vulnerable—and they don’t even realize it.” 
•  “You’re building a business for generations—cyber can erase it in minutes.”

You can learn more about TGT solutions from their website: https://www.tgtsolutions.com/

Jason shares his journey from police detective to global forensic expert, unpacking how modern investigations work from reconstructing deleted data to testifying in court. The conversation dives into why AI can’t be blindly trusted in legal contexts, how digital footprints are nearly impossible to erase, and the psychological toll of confronting the worst of human behavior in cybercrime.

Key Takeaways

• Digital forensics is still built on fundamentals
  Despite AI and automation, everything comes back to understanding data structures at a low level. 
• AI is powerful but dangerous in legal settings
  If you can’t explain how an output was produced, it won’t stand up in court. 
• You can’t truly hide in the digital world
  Like physical forensics, digital interactions always leave trace evidence. 
• Incident response ≠ forensic investigation
  One stops the attack; the other explains how and why it happened. 
• Human error is often the weakest link
  Many breaches aren’t technical failures they’re failures in monitoring or behavior. 
• Bias is controlled through process, not perfection
  Documentation, peer review, and validation are critical to staying objective. 
• Cybercrime is increasingly sophisticated and organized
  Attacks now involve long-term planning, insider access, and complex technical setups. 
• The job comes with real psychological cost
  Exposure to extreme content and consequences requires resilience and support systems. 
• Passion and curiosity are essential
  This field isn’t just technical—it’s investigative, relentless, and deeply demanding. 

Soundbites

•  “In forensics, if you can’t explain it—you can’t use it.” 
•  “AI can’t testify in court. A human has to.” 
•  “You don’t stop being a forensic scientist—it’s who you are.” 
•  “Every interaction leaves a trace—digital or physical.” 
•  “We don’t just catch bad guys—we make sure it’s the right one.” 
•  “Pull the plug or preserve evidence? That’s the real-world trade-off.” 
•  “Cybercrime today is organized, patient, and highly engineered.” 
•  “You only get to make one big mistake in this field.” 
•  “If you love puzzles, this is the ultimate career.”

They explore why many struggle after leaving high-performance environments, how ego and identity can limit growth, and why emotional intelligence is becoming a critical advantage in modern domains like cybersecurity and cognitive warfare. The conversation ultimately reframes performance as a matter of alignment between how you think and where you operate.

Key Takeaways

• Identity is often borrowed from environment
• High performance = alignment
• Ego limits adaptability
• Different brains, different strengths
• Emotional intelligence is undervalued but critical
• Environment shapes behavior over time
• Cognitive warfare is reshaping conflict 
• Unmet needs drive unintended behavior
   

Soundbites

•  “High performance isn’t just skill it’s alignment.” 
•  “Ego protects identity, but it blocks growth.” 
•  “Emotion isn’t a liability it’s a strategic tool.” 
•  “The battlefield is shifting from physical to cognitive.” 
•  “People don’t struggle because they’re incapable they’re misaligned.” 
•  “If your environment doesn’t fit your wiring, something will break.” 
•  “Always ask: why?” 

Follow The Other Side Podcast:

YouTube: https://youtu.be/wUDFU0EPt-g?si=b1dslirwAY6b4XMX

Spotify: https://open.spotify.com/show/4YJpBVrhDmvUnYCviliFG3?si=d3fWtscXTEytPa2Ge4myCA

Drawing on decades of experience across cybersecurity, AI, and national security, she explains why most organisations are approaching quantum readiness the wrong way by overcomplicating the problem, overhyping the threat, and underestimating the organisational challenge.

Instead of fear-driven messaging, Debbie advocates for clarity, prioritisation, and leadership accountability. From boardroom conversations to enterprise-wide execution, she lays out what actually matters: understanding your systems, focusing on real risk, and treating quantum as a multi-year modernization effort.

The conversation also expands beyond quantum, exploring how AI, geopolitics, and evolving cyber threats are reshaping enterprise security and why traditional approaches are no longer sufficient.

This is not a conversation about the future. It’s about what leaders should already be doing now. 

Key Takeaways

• Quantum is a risk management issue, not a technical deep dive
  Boards don’t need to understand quantum mechanics they need to understand business impact. 
• Stop treating it like a fire drill
  This is a long-term modernization effort, not a last-minute emergency. 
• Prioritisation beats perfection
  Focus on your most critical systems first not a massive, overwhelming inventory. 
• It’s a cross-functional problem
  Security, DevOps, legal, procurement, and leadership all play a role. 
• Fear-based messaging is counterproductive
  Clear, actionable risk framing is far more effective than hype. 
• Discovery alone is not progress
  Many organisations are stuck mapping the problem instead of solving it. 
• The real gap is organisational, not technological
  Talent, alignment, and execution are the hardest parts. 

Soundbytes:

•  “Quantum readiness isn’t just-in-time. It’s just-be-ready.” 
•  “Boards don’t need to be quantum experts — they need to understand risk.” 
•  “This isn’t an IT problem. It’s enterprise risk management.” 
•  “Don’t scare people. Give them the next actionable step.” 
•  “Most organisations have fewer than five people who truly understand this space.” 
•  “Discovery without action just creates a bigger problem.” 
•  “If you treat this like a fire drill, you’ve already misunderstood it.” 
•  “The cost of doing nothing is time — and time is the one thing you don’t get back.”

Soundbites

 “Putin is who we thought he was. He’s a Chekist.” 

“We’re not at war with the Russian people. We’re in an undeclared secret war with the Russian intelligence services.” 

“What they were doing in 2016 was attacking our democracy and attacking the very concept of free and fair elections.” 

“Their goal was to sow discord, distrust, and animosity in the American public.” 

“Our strength is in our collaboration, our partnerships, our allies. The Russians don’t have that.” 

“The day starts with corruption.” 

Takeaways

• Russian intelligence is presented here not as a side institution, but as a defining pillar of Russian state power, with roots stretching from the Cheka to today’s FSB, SVR, and GRU. 
• Sean draws a sharp distinction between admiration for Russian culture and people, and condemnation of the regime and intelligence services that suppress freedom at home and destabilize democracies abroad. 
• A major theme is hybrid warfare: cyber attacks, social media manipulation, election interference, and information operations designed less to support one side than to fracture trust inside democratic societies. 
• Corruption inside Russian intelligence is described as systemic rather than incidental, shaping behavior from training academies to field operations. 
• Sean’s warning is that Putin is increasingly dangerous because he is insulated from dissent, surrounded by people unwilling to tell him hard truths, especially after the invasion of Ukraine

Get the book:

Amazon pre-order link: https://a.co/d/0ag2e9sy

In this episode, host Francis Gorman sits down with Stephen C Webster a  Senior Director of Integrated Intelligence at Aquent Studios to explore the rapidly evolving landscape of artificial intelligence, autonomous agents, and the race toward artificial general intelligence (AGI). Drawing from his unique background training frontier AI models at major technology companies and leading AI transformation projects for Fortune 500 organizations, Stephen offers an inside look at how modern AI systems are being built, tested, and deployed.

The conversation begins with the rise of autonomous AI agents and the emergence of platforms that allow persistent digital assistants to operate online with significant independence. Stephen explains why these systems introduce new security challenges, potentially turning the internet into a surface for prompt-based manipulation and attacks. From there, the discussion moves into the realities of AI transformation inside large organizations, where the biggest barriers are rarely technical but organizational. Many companies fail because they attempt to automate broken processes instead of restructuring their data and workflows around AI-native operations.

Stephen also reflects on his career pivot from investigative journalism to AI development, including early reporting on information warfare tools capable of controlling thousands of social media identities simultaneously. That experience shaped his perspective on the power of digital systems to influence public discourse and ultimately led him into the field of AI safety and governance.

One of the most fascinating parts of the episode involves Stephen’s experience working on safety guardrails for early large language models. During extended testing sessions, he encountered emergent behaviors that highlighted how complex and unpredictable these systems can become when pushed beyond their guardrails. While not evidence of sentience, these interactions raised deeper questions about how humans relate to intelligent machines.

Soundbites

• “The hardest problems in AI transformation aren’t technological they’re organizational.”
• “If you automate something broken, you just make it break faster.”
• “Prompt-level guardrails will never fully control autonomous AI agents.”
• “AI may eventually train its users the same way we train AI.”
• “The internet could become a prompt-based attack surface.”
• “Accessing knowledge across domains is already close to what many people define as AGI.”
• “We may not know the exact moment AGI arrived until years after it happens.”

Episode Links:

 link to Aquent's salary guide: https://aquent.com/lp/salary-guide

Papers: https://futurespeak.ai/research/whitepapers
Asimov's cLaws: https://futurespeak.ai/products/claw-spec
Agent Friday: https://futurespeak.ai/products/agent-friday

Key topics

• Innovation ecosystems and their impact on global power
• Strategies for successful innovation: Silicon Valley, Israel, Iran
• The role of frugal innovation in defense and technology
• Geopolitical shifts driven by technological advancements
• The importance of semiconductors and space infrastructure in national security

Sound bites

"Silicon Valley's success is no accident"
"Clarity of purpose is key to innovation success"
"Semiconductors are the backbone of modern power"

Find The Book:
Tech Tides, How Innovation Shapes Global Power by Eduardo Gileo - https://www.bloomsbury.com/uk/tech-tides-how-innovation-shapes-global-power-9781472979274/

For decades, cryptography has operated as an invisible layer of digital infrastructure: unmanaged, unowned, and largely unmapped. Boards assumed it “just worked.” Now, with the reality of Harvest Now, Decrypt Later and long-lived data exposure, that complacency has turned into structural risk.

The core message is clear: this is not an algorithm upgrade problem. It is a fiduciary accountability problem.

Cybersecurity is operational. Cryptography is structural. If the structural foundations are weak, no amount of detection, patching, or response will compensate. And when encrypted data is intercepted today and decrypted in the future, the accountability does not sit with IT it sits with the board.

Waiting for a definitive quantum timeline is not strategy. It is delay. And delay in this context may already constitute negligence.

Takeaways:

• Quantum Didn’t Create the Risk, It Exposed It. The real issue is the unmanaged cryptographic estate: no visibility, no ownership, no lifecycle governance.
• This Is a Governance Failure, Not a Technology Upgrade. PQC is often framed as an IT transformation. Brian argues it is a risk transformation that belongs at board and CRO level.
• Harvest Now, Decrypt Later Is a Present Exposure. If long-lived data is stolen today, future decryption eliminates any chance of remediation. You cannot “patch” broken cryptography after the fact.
• Compliance Is Not Protection. Regulation governs algorithm choice, not lifecycle management, exposure windows, or migration timing. Organizations can be compliant on paper and exposed in reality.

SoundBytes:

• “Quantum didn’t create the problem. It exposed it.”
• “Crypto isn’t operational noise — it’s structural risk.”
• “You can’t patch broken cryptography.”
• “This isn’t a risk. It’s an issue. It’s going to happen.”
• “Compliance is static. Cryptographic risk moves.”

If you want to reach out to Brian you can find his detail over at https://sitg-consulting.com/

Takeaways

• Maxwell's journey from losing $4.5 million to creating Quantum Chain.
• Quantum computing is no longer a distant threat; it's imminent.
• The importance of building quantum-safe systems from day one.
• Misconceptions about quantum resistance in blockchain are prevalent.
• Regulators are just beginning to understand quantum threats.
• AI and quantum computing together pose significant risks.
• Choosing financial products wisely is crucial in today's landscape.
• The need for proprietary technology in quantum resistance.
• Harvest Now Decrypt Later (HNDL) is already a concern.
• The convergence of AI and quantum computing is a game changer.

Sound Bites

• "I could have taken another six years."
• "Quantum attacks are going to be happening."
• "It's a scary time."

Takeaways

• Manuel emphasizes the importance of making AI systems production-ready and accountable.
• He highlights the need for evaluation-driven development in AI projects.
• The unpredictability of AI outcomes necessitates a rigorous evaluation process.
• Many AI frameworks have similar capabilities, contrary to initial expectations.
• The hype surrounding AI often oversells its capabilities and leads to misconceptions.
• Over-reliance on AI can result in a loss of critical thinking and questioning.
• Insurance companies are beginning to exclude AI from coverage due to liability concerns.
• Human oversight is essential in high-stakes AI applications to mitigate risks.
• Organizations should prioritize understanding technology before developing strategies.
• The future of AI security will involve managing complex multi-agent systems.

Sound Bites

• "The hype around AI is oversold."
• "You can't automate human judgment."
• "There's no growth in comfort."

Contact Manuel:

LinkedIn: https://www.linkedin.com/in/manuel-tomas-estarlich

Website: https://levelup360.pro/

Takeaways

• AI is a tool, not a deterministic force.
• Businesses must compete on differentiation, not just efficiency.
• Originality is key to standing out in a homogenized market.
• Education needs to adapt to include AI as a tool for creativity.
• Servant leadership will become more important in tech-driven companies.

Sound Bites

• "AI is a self-referential echo chamber."
• "We have to reframe education."
• "Technology isn't deterministic; it's a tool."

Information discussed:

If you want to access some of the resources discussed on this episode you can find them on the Hubside website: https://www.hupside.com/ 

For international listeners outside the US you can use the following postcode: 99999

The conversation shifts to the topic of sovereignty in cloud computing, particularly in the context of European regulations and geopolitical tensions. Anne shares insights on how organizations are grappling with the balance between data sovereignty and operational resilience, highlighting the challenges posed by conflicting regulatory demands. The discussion also touches on the risks associated with cloud services, post quantum readiness and the importance of testing assumptions, along with the need for organizations to remain vigilant and proactive in their risk management strategies. As they conclude, Anne offers valuable advice for women in tech, encouraging them to share their voices and experiences generously, fostering connection and community in the industry.

Takeaways

• DORA demands more than documentation; it requires actual capability.
• Organizations often silo responsibilities, leading to gaps in resilience.
• Continuous improvement is essential; resilience is an ongoing process, not a project with an end date.
• Understanding the purpose of sovereignty is crucial for effective data management.
• Testing assumptions and exercising response plans are vital for risk management.

Sound Bites

• "DORA demands far more than robust documentation."
• "Sovereignty is an incredibly emotive topic."
• "It's the ostrich effect, the head in the sand."

If your loving the show check out our swag over on Etsy: https://www.etsy.com/shop/theentropypodcast/?etsrc=sdt

• AI is often seen as a silver bullet, but it reveals underlying issues.
• Organizations struggle with the speed of AI versus their own operational slowness.
• Pilot purgatory occurs when organizations rush AI implementations without groundwork.
• An AI strategy should be integrated into broader technology and product strategies.
• Narrow use cases for AI often yield the most value and trust.
• Job displacement is a concern, but new roles may emerge as well.
• AI can augment human roles but should not fully replace them.
• The current investment landscape in AI is characterized by both hype and potential.
• Trust in AI systems is built through transparency and understanding.
• We're still in the early stages of AI adoption, with much potential ahead.

Sound Bites

• "AI is a revealer, not just an amplifier."
• "AI can augment but not replace human roles."
• "Hype attracts attention and funding."

Join the community beyond the podcast. Shop our Entropy inspired products here: https://www.etsy.com/shop/theentropypodcast/?etsrc=sdt

Throughout the conversation, Elizabeth highlights the fragility of the systems we take for granted in the West, urging listeners to recognize the potential vulnerabilities in critical infrastructure and the psychological impacts of disinformation. She calls for unity and resilience in the face of these challenges, drawing parallels between the experiences of Ukrainians and the need for Western societies to remain vigilant against external threats. The episode concludes with a powerful message about the importance of maintaining focus on fundamental freedoms and values, encouraging listeners to reflect on their own responses to outrage and division.

Takeaways

• "I had an overriding feeling of this cannot and must not be happening again."
• "The easiest way to win a war is by never firing a bullet."
• "If we let ourselves get distracted by them, we will lose the things that are the most important."
• "Russia sees Western ideology and values as a fundamental threat."
• "We have to recognize that there may be a seed of disinformation that has been planted that is slowly growing into something a lot worse for us."

Sound Bites

• "A divided nation can be conquered easily."
• "Does my outrage keep cohesion for this country, or does it benefit Russia?"

You can find Elizabeth over at: www.prammavox.com 

Takeaways

• We don't compromise on trust.
• Expert AI by experts for experts.
• AI solutions that don't fatigue the user.
• You can't just release AI into the wild.
• The path to AI value is not linear.
• AI is tying together stakeholders more closely.
• You have to engage your workflow.
• You really have to define the problem statement.
• Stay curious.
• Two in a box is an effective strategy.

Sound Bites

"We don't compromise on trust."
"Expert AI by experts for experts."
"Stay curious."

Takeaways

• Tim shares a significant learning experience from his early career in cybersecurity.
• Understanding the economics of security is essential for effective architecture.
• Organizations must prioritize cryptography in their security strategies.
• Pre-discovery activities are crucial for effective cryptographic readiness.
• Resource allocation in cybersecurity must be precise and well-planned.
• Estimating costs for quantum readiness is challenging but necessary.
• Human expertise is irreplaceable in cybersecurity, especially with legacy systems.
• AI's role in security must be carefully managed to ensure accountability.
• Education plays a vital role in preparing the next generation of cybersecurity professionals.
• The future of cybersecurity will require a multidisciplinary approach.

Sound Bites

• "Attacks always get better, they never get worse."
• "AI can't replace the need for human expertise."
• "We need to know who is in control of the agents."

You can find ProteQC website here: https://ProteQC.com 

Cryptography course recommended by Tim:

https://www.coursera.org/learn/crypto?utm_medium=sem&utm_source=gg&utm_campaign=b2c_emea_x_multi_ftcof_career-academy_cx_dr_bau_gg_pmax_gc_s1_en_m_hyb_25-12_mobileonly&campaignid=23325041170&adgroupid=&device=m&keyword=&matchtype=&network=x&devicemodel=&creativeid=&assetgroupid=6639819582&targetid=&extensionid=&placement=&gad_source=1&gad_campaignid=23315894040&gbraid=0AAAAADdKX6aeXSiSl2UDGiv575em-o8qm

Takeaways

• Alethe Denis emphasizes the welcoming nature of the DEFCON community.
• The Social Engineering Capture the Flag contest is a significant event for learning and showcasing skills.
• Understanding human psychology is crucial for effective social engineering.
• Ethics play a vital role in social engineering practices.
• AI is changing the landscape of social engineering and cybersecurity.
• Organizations need to align their testing with realistic attack scenarios.
• Mentorship is essential for those starting in social engineering.
• Building rapport is a key strategy in social engineering.
• Human behavior is often the weakest link in cybersecurity.
• Continuous learning and adaptation are necessary in the field of cybersecurity.

Takeaways

• Dov emphasizes the importance of emotional intelligence in leadership.
• The convergence of technology and humanity raises ethical concerns.
• AI's rapid advancement necessitates guidelines to protect human values.
• Purpose and meaning are essential for human fulfillment in an AI-driven world.
• The emotional source code influences individual and organizational behavior.
• Human beings are driven by identity and comfort, impacting their choices.
• AI can augment human capabilities but may also lead to isolation.
• The need for a moral compass in technological innovation is critical.
• Emotional logic drives human behavior more than rational thought.
• The future of work will be significantly shaped by AI and automation.

Sound Bites

"We need purpose and meaning."
"Normal isn't healthy."
"Human beings need validation."

Here's the report we discussed in the episode:

Is Our Soul’s Future Silicon

Takeaways

• Ross Young emphasizes the importance of budgeting in cybersecurity leadership.
• Understanding tool utilization can prevent wasted resources.
• Reputational damage may not be as impactful as previously thought.
• The OWASP Threat and Safeguard Matrix helps identify material threats.
• AI in cybersecurity requires careful oversight and governance.
• A comprehensive cyber strategy should include people, processes, and tools.
• Vulnerability management will become increasingly challenging with AI advancements.
• Building relationships within the organization is crucial for a CISO.
• Gamification techniques can enhance organizational change.
• Continuous learning and skill development are essential for aspiring CISOs.

Sound Bites

• "Why Most Budgets Go to Waste"
• "We haven't fully deployed our existing tools."
• "We need to have oversight on AI."

You can also check out the following items discussed during the show:

CISO Tradecraft episode on strategy:
https://cisotradecraft.substack.com/p/refreshing-your-cybersecurity-strategy?utm_source=publication-search

Buy Ross's book "Cybersecurity's Dirty Secret"
https://www.amazon.com/Cybersecuritys-Dirty-Secret-Budgets-Tradecraft%C2%AE/dp/B0G26WHVTG/  

Takeaways

• Even when you're in an interview, you have to consider what you're actually going to say.
• Recruiting for MI5 was always quite exciting.
• They could never send you a job spec, which is a unique challenge.
• A huge amount of companies should think about information security in interviews.
• In a cyber interview, you're giving out a lot of information.
• It's important to consider what questions are asked in the interview.
• Personal interests can be interesting information for bad actors.
• Companies need to be cautious about the information they share.
• Cyber interviews require careful consideration of information shared.
• The dynamics of cyber interviews are complex and require strategic thinking.

Sound Bites

• "They could never send you a job spec."
• "Companies should think about that now."
• "Information for someone nefarious or a bad actor."

They discuss why most of what we call “AI” today is fragile, hype-driven, and misaligned with human needs and why true AGI requires a fundamentally different architecture. Kyrtin explains how their eighth-generation systems will use collective intelligence, culturally diverse seed data, and recursive self-improvement to achieve both local human alignment and global meta-alignment across societies.

The conversation touches on everything from circular economies to psychology, bullshit jobs, future labor markets, and the false premise that GPUs will power the future of AGI. Kyrtin offers a grounded, insider perspective on AGI that rejects fear driven narratives while acknowledging the risks of poorly built systems. For him, the real danger isn’t Terminator scenarios it’s low-quality AI plugged into high-stakes infrastructure.

This episode offers a rare, unfiltered look behind the curtain of a different kind of AGI: one built to understand, collaborate, and elevate human potential rather than replace it.

Takeaways

Real AGI won’t be LLM-based it's an entirely different architecture.

Collective intelligence is the key to ethical AGI.

Scalable intelligence requires real-time cognition and recursive self-improvement.

GPUs won’t power the future of AGI.

AI doesn’t mean mass unemployment.

The real risk: low-quality systems deployed in high-risk areas.

Hypercomplex global problems become solvable.

AGI as an organizational brain.

Sound Bytes 

“Humans hit cognitive limits—AGI doesn’t. Hypercomplexity is where real intelligence actually begins.”

“LLMs are not intelligence. They’re probability engines dressed up as thinking.”

“Everyone talks about GPU-powered AI. But actual intelligence isn’t brute force.”

“We discovered by accident that you can seed an AI with a person’s writing and get a weak digital proxy of them.”

“You’re not in competition with AGI. You’re not even in the same category of cognition.”

“The Terminator fear misses the real danger: low-quality AI plugged into high-stakes systems.”

“People need meaningful work. AGI should elevate that not erase it.”

Itan shares the story of how his work in cryptographic inventory led to founding Qiz Security, and why most organizations misunderstand what a C-BOM should be. He outlines the practical steps CISOs need to take now, stressing inventory, governance, and realistic prioritization over fear-driven messages. The episode wraps with a grounded look at timelines, the coming inflection point in scalable quantum demonstrations, and why starting early is far better than arriving a day late.

Framework discussed on how to qualify news you read around quantum breakthroughs: https://www.deloitte.com/content/dam/assets-shared/docs/services/risk-advisory/2025/why-quantum-computers-are-not-cracking-rsa-yet.pdf

Takeaways

• Quantum computing hype often oversimplifies complex realities.
• Understanding quantum risks is crucial for organizations today.
• Bitcoin has vulnerabilities to quantum attacks, but not all are at risk.
• Dynamic attacks on cryptocurrencies pose significant threats.
• Cryptographic inventory is essential for risk mitigation.
• Organizations must prioritize actionable steps over exhaustive inventories.
• Procrastination in addressing quantum risks is common among executives.
• The future of quantum computing is uncertain but potentially transformative.
• Community collaboration is vital for addressing quantum challenges.
• Pragmatic approaches are necessary for effective quantum readiness.

Sound Bites

• "The devil is in the details."
• "Everything is going to break."
• "You need to start taking action."

Matthew recounts how he was secretly recruited into MI6 through university talent spotters, underwent one of the most rigorous selection and vetting processes in government, and operated under 14 different alias identities during his field career. He explains how emotional intelligence, adaptability, and courage are the real tools of a spy far more vital than gadgets or brute intellect.

Takeaways

• Sometimes what we perceive to be impossible is actually very possible.
• An individual can achieve much by believing in themselves.
• Drawing from experiences can provide insights into overcoming obstacles.
• A positive mindset is key to achieving success.
• Obstacles are often a matter of perception.
• Achieving goals requires a strong belief in one's capabilities.

Takeaways:

• Paul emphasizes the importance of human relationships in achieving success.
• The concept of a 'success genome' is about showcasing individual talents beyond traditional resumes.
• Loneliness is a growing issue in a hyper-connected world, often exacerbated by technology.
• Friendship plays a crucial role in personal and professional success.
• The current job application process is inefficient and lacks human interaction.
• AI should be seen as a tool for co-evolution, reflecting our own humanity.
• Investing in human capital and relationships can solve many societal issues.
• The meaning of life can be distilled to the quality of friendships we maintain.
• We need to teach young people the value of true friendship and connection.
• Laughter and human interaction are essential for a fulfilling life.

Sound Bites:

• "Everything comes from friendship."
• "Loneliness is a state of mind."
• "We don't laugh enough in life."

Takeaways

• AI is central to enterprise strategy and delivery.
• Organizations often rush into AI without a clear strategy.
• Effective AI adoption requires controls, evaluations, and budgets.
• The hype around AI often exceeds the reality of its implementation.
• Governance and observability are crucial for AI systems.
• Knowledge workers will evolve rather than be replaced by AI.
• AI can enhance productivity in knowledge work environments.
• Regulation can support responsible AI innovation.
• Organizations need to adapt to regulatory environments in AI deployment.
• Successful AI initiatives often come from a combination of top-down and bottom-up approaches.

Sound Bites

• "Deploy controls, evals and budgets."
• "POC purgatory participants."
• "Regulation is a mechanism for trust."

Key Takeaways

1. From Perimeter to Intrinsic Security
   • Current systems rely too heavily on firewalls and perimeter defenses. The future lies in embedding encryption directly into processing and architecture.
2. Homomorphic Encryption as a Game Changer
   • FHE allows computations on encrypted data, but performance and complexity challenges remain. It could require new paradigms for databases and programming models.
3. Zero Trust Needs to Be Cryptographically Proven
   • Today’s zero trust is heuristic; the next step is mathematically provable, cryptographically assured trust.
4. Major Hurdles Ahead
   • Challenges span mathematics, hardware, software design, and programmer education. Hardware accelerators will likely play a big role early on.
5. Quantum Skepticism with Urgency
   • Archer doubts practical quantum computers in the next 5–10 years but warns of “harvest now, decrypt later” risks—making crypto-agility essential.
6. AI: Double-Edged Sword
   • AI boosts productivity for experts but risks stunting critical thinking for students. It also raises concerns about privacy, disinformation, and unverifiable outputs.
7. Data Lifecycle Integrity
   • Archer’s most exciting vision: cryptographic assurance of data provenance. Imagine video footage with an auditable cryptographic chain proving authenticity from capture to broadcast.

Sound Bytes

• “We can’t just rely on a hard shell with a soft middle—data must stay secure through its entire lifecycle.”
• “Zero trust today is heuristic. The future is provable, cryptographically assured security.”
• “Crypto-agility must be built into every software stack. Otherwise, we’ll always be behind.”
• “Quantum computing may not be as close as it looks in research papers—objects in the mirror are closer than they appear.”
• “AI can empower experts but risks leaving students without the critical thinking skills to spot flaws.”
• “The integrity of data will define the future. We need systems that prove where data came from and how it was changed.”

Takeaways

• Tracy transitioned from library science to cybersecurity for longevity.
• Empathy and approachability are crucial in cybersecurity roles.
• Open source intelligence (OSINT) is about gathering unclassified information.
• Digital literacy is essential for navigating today's information landscape.
• Storytelling can change behavior and improve cybersecurity awareness.
• Research should be substantiated with credible sources.
• Approachability encourages users to report security issues.
• AI poses significant challenges in information accuracy.
• Protecting journalists is vital for a free press.
• Cybersecurity requires a human-centric approach.

Sound Bites

• "I made cybersecurity my quirky hobby."
• "You need to have a research trail."
• "The truth is out there."

Connect with Tracy:

https://sherpaintelligence.substack.com/

Takeaways

• Most phishing awareness programs fail due to low engagement.
• Traditional training methods show minimal behavioral change.
• Positive reinforcement is more effective than punishment in training.
• Gamification can significantly increase engagement in cybersecurity training.
• SMEs are more likely to be targeted by cyber attacks than larger enterprises.
• AI is being used to craft more sophisticated phishing attacks.
• Cybercrime is now one of the largest economies in the world.
• Effective training can lead to better client retention for MSPs.
• Continuous improvement is key in cybersecurity awareness.
• CyberHoot offers free access to individuals for training.

Sound Bites

• "Humans are the weakest link."
• "Reinforced behaviors are repeated."
• "AI is a game changer for hackers."

Additional Information:

Craig has arranged for Entropy Podcast listeners to receive a 20% discount on a one-year subscription to CyberHoot. You can access it using the coupon code: The Entropy Podcast. 

CyberHoot Resources:

• Main Website: https://cyberhoot.com/
• Individual Registration (Free Personal Training for Life): https://cyberhoot.com/individuals/
• Business Registration (Direct Power Platform Signup): https://cyberhoot.com/businesses/
• Reseller / MSP Registration (Partner Signup): https://nest.cyberhoot.com/partner-signup/
• Newsletter Registration: https://cyberhoot.com/newsletter-signup/
• Blog Articles: https://cyberhoot.com/blog/
• Cybrary (Cybersecurity Library of Terms in Layperson language): https://cyberhoot.com/cybrary/

Takeaways

• 43% of cyber attacks target SMEs. 
• Phishing is the top entry point for attacks. 
• No client has paid a ransom under Paul's watch. 
• Early detection is crucial for cybersecurity. 
• Training is key to reducing human error. 
• Regular penetration tests are essential. 
• IoT devices need better security measures. 
• AI is both a threat and a defense tool. 
• Compliance laws protect businesses. 
• Proactive security measures are vital.

Takeaways

• Language skills are a force multiplier in OSINT investigations.
• Understanding naming conventions in different cultures is crucial for accurate research.
• AI and machine translation should be used as tools, not crutches.
• Methodology is key in multilingual research; keywords are essential.
• Vetting sources and double-checking information is vital, especially in authoritarian contexts.
• Military experience can provide valuable skills for OSINT work.
• Motivation is the most important factor in learning a new language.
• OSINT is applicable across various sectors, including law enforcement and business.
• Language learning can be enhanced through movement and physical activity.
• Free webinars can provide a great introduction to OSINT methodologies.

Sound Bite

"AI should be used as a tool, not a crutch."

Information mentioned in episode:

I-Intelligence also hosts free webinars, including the upcoming sessions on September 22nd and 26th 2025, which will introduce the basics of OSINT in foreign languages such as Russian, Arabic, and Chinese. Everyone is welcome to participate!
Details: https://shorturl.at/jhjhS

Beyond the classroom, Skip explores how movement can enhance language learning. He shares his dynamic, movement-based techniques on Instagram while learning Japanese:
Follow him at https://www.instagram.com/skipmovestolearn/

He explains how his early skepticism in the 1990s turned into conviction once quantum error correction was discovered, making scalable quantum computers a real possibility. Michele outlines his “Mosca’s theorem,” which frames the urgency of preparing for quantum threats: the time to migrate to quantum-safe cryptography must be shorter than the time it will take for adversaries to weaponize quantum computers.

Key themes include:

• Quantum timelines: From early doubts to today’s multi-platform race, he estimates a 10% chance of cryptographically relevant quantum computers within 5 years and 30% within 10.
• Quantum risk: The greatest threat is to cryptographic trust, confidentiality, integrity, and authenticity of digital systems potentially destabilizing governments, finance, and infrastructure.
• Cryptographic resilience: Organizations must adopt agility and long-term planning, building cryptographic inventories, migration strategies, and centers of excellence, rather than treating it as a lone CISO problem.
• Lessons from Y2K and beyond: Unlike Y2K, the quantum threat won’t “break systems overnight” but will erode confidentiality and trust if not addressed early.
• Positive opportunities: Quantum technologies also promise advances in materials, energy, healthcare, and new cryptographic tools, but only if societies prepare now.

Michele closes by urging businesses and governments to act quickly, not out of fear, but to ensure resilience and position themselves to benefit from the quantum era.

https://globalriskinstitute.org/publication/an-updated-methodology-for-quantum-risk-assessment/ 

Takeaways

• Q-Day refers to the day quantum computers can break current cryptography.
• Current dependence on cryptography makes the quantum threat significant.
• We are not close to a quantum apocalypse yet.
• Nation-states are likely harvesting data for future decryption.
• Organizations need to prepare for quantum threats by 2030.
• Crypto agility is essential for transitioning to quantum-safe cryptography.
• Cryptographic procrastination is a challenge for decision-makers.
• AI is powerful but faces obstacles in the West.
• China's strategic approach to AI may give it an edge.
• AI-driven disinformation poses a significant risk to society.

Sound Bites

• "Cryptographic procrastination is a real issue."
• "China is much more strategic in AI deployment."
• "AI allows scams to scale exponentially."

Takeaways:

• Quantum Threats Are Real, But Not Immediate: The “crypto apocalypse” is likely a decade away, giving time for preparation with new encryption standards.
• Cyber Is Geopolitical Power: From influencing elections to disrupting food supply chains, cyber touches every lever of national power.
• Maslow’s Hierarchy of Cyber Needs: Security must be framed around basic human needs like food, shelter, and safety — not just industry sectors.
• Disinformation Needs Structure: The DISARM framework helps organizations map how misinformation spreads and how to counter it.
• AI & Deepfakes Demand New Thinking: Detecting “bad” won’t scale; we need to verify what’s “good” and authentic.
• Culture Over Technology: Cyber teams must move from being the “department of no” to being racing brakes — enabling speed with safety.

Sound Bytes:

• “We’re probably 10 years before a crypto apocalypse.”
• “Cyber touches every instrument of national power diplomatic, informational, military, and economic.”
• “Don’t frame security by industry, frame it by Maslow’s hierarchy of needs.”
• “Disinformation isn’t a silver bullet problem it’s a thousand-bullet problem.”
• “Don’t be the department of no. Security should be like racing brakes, built to go fast, safely.”

Takeaways

• Digital resilience is about being prepared for incidents.
• Board members must understand their legal responsibilities under DORA.
• There are significant penalties for non-compliance with cybersecurity regulations.
• Organizations need to validate their operational resilience strategies.
• Cultural change is necessary for effective cybersecurity compliance.
• Cryptography is a critical component of cybersecurity strategy.
• AI is transforming the landscape of cyber warfare.
• Geopolitical tensions are influencing cyber threat dynamics.
• Social media can amplify misinformation and public unrest.
• AI should be viewed as a tool for intelligence augmentation.

Sound Bites

• "DORA places responsibility at a board level."
• "Leadership must understand ICT risks."
• "Cyber threats are about control and power."

If you’ve ever wondered whether AI is moving too fast, what risks companies are ignoring, or how regulation (and lack thereof) could shape the future, this conversation is one you can’t afford to miss.

Soundbytes

• "There’s a flood of money chasing AI and security isn’t even on the radar."
• "Every advisor wants automation, but nobody wants to hold the liability."
• "AI will become a commodity so how do you protect your moat?"
• "Technology always promises progress, but rarely talks about fallout."
• "The biggest danger isn’t hallucinations it’s humans blindly trusting AI."

Takeaways

• Why venture capital is fueling reckless AI development
• The hidden liability risks every company faces when adopting AI
• Why “human in the loop” is non-negotiable for financial applications
• How copycat AI startups threaten innovation—and survival strategies
• The overlooked cognitive and societal impacts of over-relying on AI
• What the next phase of the AI market might really look like

In this gripping episode, Chris Kubecka renowned cybersecurity expert and founder of HypoSec, joins us to reveal the raw, untold realities of digital warfare. From stopping a second wave of attacks on South Korea to battling Iranian disinformation networks, Chris brings deep operational insights and incredible personal stories to the mic.

We explore:

• How she thwarted an Iranian espionage plot and became a target of doxing and death threats
• The inside story of the Shamoon cyberattack on Saudi Aramco, and how she helped bring a crippled oil giant back online
• Why generative AI poses an urgent threat to privacy, truth, and global stability
• The rise of “harvest now, decrypt later” in the post-quantum era

Key Insights & Takeaways:

• Why the next war won’t start with bombs but with wiped servers and weaponized information
• The critical importance of encryption hygiene and preparing for post-quantum threats
• Why AI-powered misinformation is undermining trust in everything from media to democracy
• How aspiring ethical hackers can build real world skills and networks that matter
• Why your water supply not your bank account might be the first casualty in a cyberwar

With blunt honesty, dark humor, and unmatched expertise, Chris shows us what it really means to defend against invisible enemies in an increasingly hostile digital world.

Takeaways

• Quantum computing is a game changer for industries.
• Organizations need to prepare for quantum threats now.
• The timelines for quantum readiness are closer than expected.
• Data theft and loss are major concerns with quantum threats.
• Effective communication is key to gaining stakeholder buy-in.
• Understanding cryptographic inventory is crucial for preparedness.
• Organizations must assess their cryptographic assets.
• AI can both enhance and complicate cybersecurity efforts.
• Ethical considerations in AI deployment are critical.
• Quantum and AI integration promises immense future benefits.

Jennifer shares stories from her extraordinary career in intelligence — from espionage during the Cold War to launching the CIA’s first AI office — and offers deeply human reflections on risk-taking, resilience, and transition. From the digital battlefield to the Camino de Santiago, this conversation ranges from high-stakes decision-making to how we build trust in an age of deepfakes and AI manipulation.

Takeaways

• Purpose Under Pressure: A clear sense of mission is what sustains leadership in complex, high-risk roles.
• You’ll Never Have All the Information: Good decisions often require boldness, not certainty — a lesson from field operations that applies to enterprise leadership.
• The Real Threats Are Already Inside: Critical infrastructure is increasingly compromised by cyber actors who may lie dormant for years before striking.
• Transition Is a Process: Jennifer’s solo Camino de Santiago pilgrimage was both a mental and physical journey into a post-CIA identity.
• Trust Is the New Battlefield: Generative AI, deepfakes, and algorithmic manipulation are eroding public trust at scale — and rebuilding it starts with education and digital literacy.
• Operational Mindset for Innovation: Solving complex problems quickly with limited resources isn’t just for the CIA — it’s the new model for digital transformation.

Soundbytes

• “Sometimes the greatest risk is not taking the risk.”
• “You never have all the information — expecting it is a recipe for paralysis.”
• “Absent a deep connection to purpose, you lose the urgency to solve real problems.”
• “The battlefield isn’t just physical anymore — it’s informational, algorithmic, and real-time.”
• “Trust is under attack. And the worst part is, most people don’t realize it.”
• “You think the algorithm is adapting to you. But really, you’re adapting to it.”

Takeaways

• Online dating can be a mixed experience, requiring resilience.
• People use dating apps for various reasons beyond romance.
• Women often face more harassment on dating platforms than men.
• Sexting can be a normal part of sexual development but poses risks.
• Sextortion is a growing problem, particularly for young people.
• Smartphone addiction is not a clinical diagnosis but can lead to problematic use.
• AI can influence how people interact and perceive reality.
• Misinformation often spreads through mainstream media and social media.
• The Manosphere promotes harmful ideologies that can lead to radicalization.
• Understanding the psychology behind online behavior is crucial for addressing these issues.

Sound Bites

• "It's not always the most fun experience."
• "There's a lot that people can get out of it."
• "It's a crime to share those images."
• "It's definitely a problem."
• "It's a much more empowering way."
• "We can no longer trust our eyes."
• "It was a really nice conversation."

Takeaways

• Matthew Hedger has over 17 years of experience in intelligence operations.
• He laundered over a hundred million dollars while working undercover.
• Social pattern recognition is crucial for survival in dangerous environments.
• Insider threats are a significant vulnerability in financial institutions.
• COVID-19 has exacerbated human vulnerabilities in organizations.
• Criminals are increasingly using innovative methods for money laundering.
• Digital platforms like Roblox can be exploited for illicit activities.
• AI is transforming the landscape of criminal activity and intelligence gathering.
• The future of cryptography may lead to less privacy and security.
• Aspiring intelligence officers should seek knowledge and learn from experienced professionals.

Sound Bites

• "I laundered over a hundred million dollars cumulatively."
• "You can pocket millions of dollars and walk across borders."
• "We're natural BS detectors as people."
• "Criminals are nothing if not adaptive."
• "They know what they're talking about."
• "Roblox is a billion dollar economy a year."
• "AI has taken scams to the next level."
• "How do you trust anything that you can really keep private?"
• "Learn from those who have done extraordinary things."

Takeaways

• James Lawler's journey into the CIA began unexpectedly during law school.
• The role of a CIA operations officer involves manipulating individuals for espionage.
• Motivations for espionage often include personal grievances and financial needs.
• The A.Q. Khan nuclear smuggling ring was dismantled through strategic operations.
• Current nuclear threats are significant, particularly concerning Iran's potential capabilities.
• AI and social media have transformed the landscape of espionage and targeting.
• Understanding the human element is crucial in identifying insider threats.
• Compassion and support in organizations can prevent insider threats.
• Lawler's novels are inspired by his real-life experiences in espionage.
• Writing serves as a creative outlet for Lawler post-CIA career.

Sound Bites

• "I enjoyed the hell out of it."
• "Revenge is absolutely one of the purest motivations for espionage."
• "AI makes targeting much easier."
• "I was looking for people going through divorce."
• "I can create books where I live vicariously through my characters."
• "I call that my psychological dividends."
• "It's a way to keep the neurons firing in the brain."
• "You're a great interviewer and a great host."

Takeaways

• Trust is the number one skill set in building alliances.
• The foundation of healthy relationships is trust.
• Recruiting spies is about understanding their challenges.
• Technology can erode trust if not used wisely.
• We thrive in deprivation mode, not in comfort.
• Teams need to understand the overarching 'why' to be effective.
• People need to be seen and heard in conversations.
• Seek the thoughts and opinions of others to foster collaboration.
• Ego suspension is crucial for healthy dialogue.
• Generosity in communication fosters better relationships. Start with kindness and generosity in interactions.
• Being generous with time can create meaningful connections.
• To be unforgettable, focus on how you make others feel.
• Embrace challenges as opportunities for growth.
• Trust can be rebuilt, but it requires effort and time.
• In a chaotic world, simplicity in relationships is key.
• Understanding the arc of behavior helps predict actions.
• People do not suddenly become violent; it's an escalation.
• Healthy relationships are free from drama and chaos.
• Open communication and transparency are essential for trust.

Sound Bites

• "It all starts around that age."
• "I wanted to become an astronaut."
• "You really don't recruit a spy."
• "Start with kindness and generosity."
• "Be generous with your time."
• "Every day is a great gift."
• "It's all about the arc of behavior."

Takeaways

• Integrity 360 has grown significantly over the years, expanding its footprint in the cybersecurity market.
• The cybersecurity channel involves partnerships between vendors and service providers to deliver effective solutions.
• Organizations must prioritize cloud security to mitigate risks associated with misconfiguration and human error.
• Zero Trust architecture is becoming essential for protecting data and access in organizations.
• Consolidation in the cybersecurity market is a growing trend, impacting technology choices for organizations.
• XDR (Extended Detection Response) is evolving, with both closed and open models available for organizations.
• Generative AI poses risks to organizations, particularly regarding data security and privacy.
• Understanding the fundamentals of cybersecurity is crucial for professionals, especially in the age of AI.
• Dyslexia can be a superpower, allowing individuals to think differently and approach problems uniquely.
• Confidence and the willingness to push beyond comfort zones are key to success in cybersecurity.

Sound Bites

• "It's been quite a long journey for myself."
• "Our role is to be a partner."
• "XDR is now very much where technology sits."
• "Consolidation of technologies is a growing trend."
• "Generative AI is like the new femme fatale."
• "Don't be afraid to do it in the first place."
• "Kids don't know how good they've got it."

Takeaways

• Parents should start discussing online safety as soon as children use technology.
• Supervision is crucial as children engage with tech at a young age.
• Understanding the apps children use is essential for parents.
• Monitoring devices can lead to trust issues between parents and children.
• Privacy concerns arise when third-party companies monitor children's data.
• Children's online interactions can expose them to risks from unknown users.
• Balancing screen time with real-life activities is important for children's development.
• Parents need to set boundaries around technology use for their children.
• The decision to step back from a career can be driven by family priorities.
• Empowering children with knowledge about tech is vital for their safety.

Sound Bites

• "Kids are not built to live on their screens."
• "You don't know who works for that company."
• "We are there to help them become functional adults."
• "Tech is wonderful, but it brings problems."
• "It's a conversation about boundaries."
• "You're giving the world access to your child."

Takeaways

• Jack Barsky's journey from KGB sleeper agent to American citizen is extraordinary.
• He was initially recruited by the KGB due to his curiosity and intelligence.
• Barsky's decision to defect was driven by his love for his daughter.
• He emphasizes the importance of emotional intelligence in leadership.
• Authenticity is crucial in corporate environments, yet often lacking.
• Barsky's experience in crisis management shaped his corporate career.
• He believes in the power of storytelling to engage audiences.
• Public speaking can be learned through practice and resilience.
• Trusting one's instincts is vital in decision-making.
• Barsky's life illustrates the complexities of identity and belonging.

Sound Bites

• "This is something of the movies, but you've lived it."
• "I was going to be a college professor."
• "I had to make a decision and it wasn't that easy."
• "I became fully Americanized."
• "I had a daughter living with me and her mother."
• "I told them I had contracted HIV AIDS."
• "Love conquers all."
• "Trust your gut and verify."
• "I was a breath of fresh air because I wasn't playing."

Takeaways

• Zero Trust is seen as an opportunity to do the right thing in cybersecurity.
• Aligning cybersecurity with business needs is crucial for effective strategy.
• Change management is essential for successful implementation of security measures.
• Technology is only a small part of the cybersecurity equation; people and processes are key.
• Zero Trust should be embedded in organizational processes for sustainability.
• Generative AI is changing the landscape of cyber threats and defenses.
• Understanding the 'why' behind security measures can foster better compliance.
• Common sense approaches are often overlooked in cybersecurity practices.
• Stakeholder engagement is vital for aligning security with business objectives.
• Human resilience and critical thinking are necessary to combat evolving cyber threats.

Sound Bites

• "Zero Trust is an opportunity."
• "Never assume you know the business."
• "Our job is to protect the business."
• "Common sense is not so common."
• "Technology is just 20% of the job."
• "We need to show them the why."
• "We are not here to make your job difficult."

- His perspective on post-quantum cryptography and emerging risks

- The founding and approach behind CTCI, including identifying active vulnerabilities before others in the industry

- The challenge of false positives in commercial threat feeds

- The importance of asset visibility and contextual vulnerability management

- The role of AI in both enhancing cybersecurity operations and in aiding attackers

- Michaels thoughts on modern election security, influence operations, and the broader geopolitical implications of technology

- Risks of over-reliance on AI for critical thinking and decision-making

The conversation emphasizes practical insights into how organizations can better understand and secure their environments in the face of rapidly evolving threats.

Takeaways

• Francesco Cipollone's journey to founding Phoenix Security.
• The friction between security teams and engineering during cloud transformations.
• The importance of gamifying security objectives at the business level.
• AI can augment human capabilities but cannot replace them in decision-making.
• Organizations must prioritize vulnerabilities effectively to keep pace with threats.
• The need for a comprehensive understanding of application security beyond just tools.
• The obsession with software bill of materials may distract from core security issues.
• Collaboration between security and engineering is crucial for effective vulnerability management.
• The rapid evolution of threats necessitates a proactive approach to security.
• Understanding the fundamentals of security is essential for effective risk management.

Disclaimer: The views and opinions expressed in this podcast are solely those of the host and guests, based on personal experiences. They do not represent facts and are not intended to defame or harm any individual or business. Listeners are encouraged to form their own opinions.

Takeaways

• Mark transitioned from electronics to cybersecurity through hands-on experience.
• Curiosity drives the field of cybersecurity and research.
• 6G networks will focus on enabling new applications beyond just speed.
• Security risks in open radio access networks often stem from misconfigurations.
• Machine learning is becoming integral to the development of future networks.
• Insecure networks can lead to serious privacy breaches and data theft.
• Public speaking can be improved by sharing topics you are passionate about.
• Community engagement is crucial for personal and professional growth in cybersecurity.
• Capture the Flag competitions provide practical experience and learning opportunities.
• Quantum security is a significant concern for future network specifications.

Takeaways

• Ireland's commitment to a 51% reduction in greenhouse gases is ambitious but may only achieve a 29% reduction.
• Economic growth in Ireland has outpaced emissions reductions, showcasing a positive trend.
• Decoupling economic growth from emissions is a significant achievement.
• Small countries can show leadership in climate initiatives despite global challenges.
• Agriculture's role in emissions is complex and requires nuanced understanding.
• Technological advancements in agriculture can help reduce emissions.
• The grid design needs to adapt to the increasing use of renewable energy sources.
• Local energy solutions can mitigate the strain on the grid.
• Nuclear power should be reconsidered as a viable option for decarbonization.
• Innovative projects can lead to more efficient energy generation and consumption.

Takeaways

• Trustworthy AI is defined by ethical frameworks and principles.
• The AI Act aims to reinforce existing rights and protections.
• There is a significant gap in understanding AI's implications.
• Over-reliance on technology can diminish human resilience.
• AI is changing the structure of language and communication.
• Data profiling by private companies poses risks to democracy.
• The impact of AI on society is poorly researched.
• Transparency in AI algorithms is crucial for accountability.
• Digital detox may be necessary in an AI-driven world.
• Consent for data use needs to be revisited and regulated.

Takeaways

• Penetration testing is crucial for identifying vulnerabilities.
• Reusing credentials across multiple services is a major risk.
• Supply chain attacks are a growing concern in cybersecurity.
• Offensive security plays a vital role in defense strategies.
• Assuming a breach mindset is essential for organizations.
• Network segmentation and least privilege are key security practices.
• Education in cybersecurity needs to focus on timeless knowledge.
• Generative AI can enhance understanding but has limitations.
• Future cybersecurity challenges will involve AI-driven vulnerabilities.
• Geopolitical tensions may lead to more sophisticated cyber warfare

• Generative AI prompts should be direct and clear.
• DeepSeek has both security concerns and hype surrounding it.
• The US and EU are navigating a complex regulatory landscape.
• Self-regulation in AI is becoming increasingly important.
• Data integrity is crucial to avoid garbage in, garbage out.
• Synthetic data can lead to poor decision-making in enterprises.
• AI models are at risk of ingesting incorrect data.
• The rise of agent technology will change the security landscape.
• Companies need to be aware of the threats posed by generative AI.
• The future of AI will require careful consideration of ethics and security.

Takeaways

• Safety and security aim to prevent harm, whether accidental or malicious.
• Quality is the foundation of both safety and security.
• Systems engineering is crucial for connecting safety and security disciplines.
• Remote operations introduce unique safety and security challenges.
• Connectivity is a critical component for safety in remote systems.
• The integration of safety and security can lead to complex design challenges.
• Cryptography is essential for maintaining security in operational technology.
• Quantum computing poses new threats to traditional cryptographic methods.
• There is a skills shortage in both security and safety engineering fields.
• Understanding the value of cryptography is vital for stakeholder engagement.