Free Daily Podcast Summary
Cyberside Chats: Cybersecurity Insights from the Experts: Daily Summaries Delivered
by Chatcyberside
Stay ahead of the latest cybersecurity trends with Cyberside Chats! Listen to our weekly podcast and join us live once a month for breaking news, emerging threats, and actionable solutions. Whether you’re a cybersecurity pro or an executive who wants to understand how to protect your organization, cybersecurity experts Sherri Davidoff and Matt Durrin will help you understand and proactively prepare for today’s top cybersecurity threats, AI-driven attack and defense strategies, and more!
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 4 days ago14 min
North Korea’s Fake Job Interviews: The WaterPlum Advisory
This week, Sherri and Matt dig into a joint advisory from seven government agencies across Japan, the US, Australia, and Germany naming WaterPlum, the North Korean actors posing as prospective employers to target software developers and IT professionals. Japan’s National Police Agency reports at least 30,000 infected devices in more than 100 countries between December 2025 and July 2026, with funds or credentials taken from more than 7,000 cryptocurrency wallets and roughly $10.71 million moved to North Korea. Sherri and Matt break down how the lure works, why coding challenges are such an effective delivery mechanism, and what changed with the newest malware family, StoatWaffle, which can execute when a trusted folder is opened in VS Code. They connect it to the case LMG’s Tom Pohl analyzed in June and examine how North Korea is now working both sides of the hiring table, as both interviewer and applicant. Key Takeaways: Make onboarding a security checkpoint. Identity verification should be an HR and IT project. Verify every new hire’s identity, issue fresh credentials, and monitor accounts closely during the first few weeks. A compromised candidate can bring an existing infection into your organization on day one. Because the same operation also uses fake applicants, verify claimed locations, IP addresses, and résumé skills. Treat password reuse as a policy issue, not a question. The malware Tom analyzed harvested saved credentials from ten different browsers. Require unique corporate passwords, audit them against known-breach lists, and use phishing-resistant MFA. Anyone with source code or administrative access should be considered for hardware-based authentication such as a YubiKey. Keep developers off personal devices. Personal laptops often combine job hunting, coding challenges, credentials, and crypto wallets. In one case Tom analyzed, the person infected wasn't even the primary laptop user. Require company-managed devices for anyone accessing code, cloud infrastructure, or production systems. If personal-device use is allowed, document it as an accepted risk. Extend security requirements to vendors and contractors. Your organization can be compromised through someone else's developer. Bybit lost roughly $1.5 billion after a developer at its wallet vendor was compromised. Ask vendors: Do developers use managed devices? How are they trained on fake-recruiter and malicious-package attacks? How do they prevent password reuse? How do they vet employees and subcontractors? Keep developer training current. Tom's case was identified because someone recognized the fake-interview pattern and reported it instead of running the code. These actors continuously evolve their methods. StoatWaffle is a good example: the risk has moved beyond "don't run code from strangers" to situations where simply opening a trusted folder can trigger execution. Make current threat briefings part of ongoing training for developers, IT staff, and contractors. Hiring has become an attack surface in both directions, and most security programs don't own either end of it. References: Joint NPA/NCO/FBI/DC3/ASD’s ACSC/BND/BfV advisory on North Korean WaterPlum, Sept. 18, 2026: https://www.ic3.gov/CSA/2026/260918.pdf LMG Security, Anatomy of a Job Interview Supply Chain Attack (June 2026) Cyberside Chats, Damaged Goods: When Your New Hire Is Already Compromised (June 9, 2026): https://www.chatcyberside.com/e/damaged-goods-when-your-new-hire-is-already-compromised/ NTT Security, OtterCookie analysis (Jan. 16, 2025): https://jp.security.ntt/insights_resources/tech_blog/en-contagious-interview-ottercookie/ The Hacker News, North Korean hackers abuse VS Code auto-run tasks to deploy StoatWaffle (March 2026): https://thehackernews.com/2026/03/north-korean-hackers-abuse-vs-code-auto.html Microsoft Security Blog, Contagious Interview malware delivered through fake developer job interviews (March 11, 2026): https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/ KnowBe4, How a North Korean Fake IT Worker Tried to Infiltrate Us (July 23, 2024; updated Oct. 19, 2024): https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-in
- 1 weeks ago12 min
You Can't Trust the Last Mile: Wiretapping Fiber From Home
Two friends ordered a new fiber connection, followed the installer around with a camera, and noticed that the box on the pole outside their house had no power. That one observation led them to capture their entire neighborhood's internet traffic — web browsing, email, even live phone calls — with $99 worth of equipment. Sherri Davidoff and Tom Pohl break down "gPWN," one of the standout talks from Black Hat USA 2026. Fiber to the home broadcasts everyone's traffic to every house on the street and trusts each home's equipment to ignore what isn't theirs. The encryption meant to back that up is optional, often left switched off, and doesn't cover traffic headed back to the ISP at all. It gets worse: cell towers ride the same fiber, which means the "out-of-band" cellular path in your continuity plan may share a line with your neighbors. And the researchers showed how a malicious username typed into a home fiber box could hand an attacker root access to the ISP's own equipment. The lesson isn't just about fiber. Decades ago we replaced hubs with switches so our traffic stopped going to everyone on the network. The last mile quietly went back to a hub — and everything built on top of it kept assuming the old rules. Key Takeaways: Use a VPN you trust. You can't trust the last mile. Encryption on many fiber deployments is optional and often switched off, and traffic from your home or office back to the ISP isn't encrypted at all. Prove your out-of-band paths really are out of band. Cell towers are often connected over the same neighborhood fiber as homes and offices. Falling back to cellular may mean relying on the same path as your primary internet connection — check before an outage does it for you. Assume every carrier circuit is a public network. Treat your office connection like coffee shop Wi-Fi: anyone nearby could be watching. The risk profile of a business in a strip mall may not be very different. don't trust vendor-supplied equipment. Assume vendors will leave optional security switched off — or have access into your equipment. Where you can, use your own router and firewall behind the ISP's device. Put an expiration date on your assumptions. We spent years assuming layer two was secure because we had switches. Your ISP may have quietly replaced that with fiber that sends everyone's traffic to every house. Revisit the assumptions your security is built on. Resources: Black Hat USA 2026 — "gPWN: Wiretapping Fiber ISP Deployments From the Comfort of Your Home" (Rithvik Vibhu & Rithwik Jayasimha) — https://blackhat.com/us-26/briefings/schedule/#gpwn-wiretapping-fiber-isp-deployments-from-the-comfort-of-your-home-53851 gPWN project site and toolkit — https://www.gpwn.io/ Hackaday, "Hacking Fiber To The Home" — https://hackaday.com/2026/08/13/hacking-fiber-to-the-home/ Quarkslab, "Overview of Passive Optical Networks (PONs) Security" — https://blog.quarkslab.com/overview-of-passive-optical-networks-pons-security.html Dark Reading, "Salt Typhoon APT Subverts Law Enforcement Wiretapping" — https://www.darkreading.com/cyber-risk/salt-typhoon-apt-subverts-law-enforcement-wiretapping
- 2 weeks ago16 min
Outpaced: What AI Did to the Attack Clock
Palo Alto Networks’ Unit 42 investigated an intrusion where the attacker used AI agents to carry out the attack — and compressed work a human team would have needed more than two weeks to do into just under ten hours, using more than 50 MITRE ATT&CK techniques. Sherri Davidoff and Matt Durrin unpack what actually happened, starting with a correction: despite the headlines, this was not an autonomous AI. A human directed it. They walk the chain from a breached public website through sub-agents harvesting hard-coded tokens out of code repositories, into the secrets manager, and finally to the attacker turning the victim’s own AI endpoints into attack infrastructure — using the company’s compute power against it. Along the way: why an attempted backdoor in Terraform configurations was the most alarming move in the intrusion, why branch protection stopped an attacker who already held master admin credentials, and why the tactic adversaries use to slip past AI guardrails looks a lot like a Russian ransomware gang’s fake IT recruitment scheme. The thesis isn’t that AI went rogue. It’s that the clock changed, and incident response plans built for a two-week dwell time are now built for the wrong attack. Key Takeaways: Make every key and token in your environment expire. They will not get rotated by default. Set expirations so they cannot stay invisible forever, and track them. Require a second layer of approval for critical infrastructure changes. Branch protection stopped this attacker after they already held master admin credentials. Logging and monitoring are good; prevention is better. Give every AI service in your environment a named owner. Somebody has to be managing the keys and controlling it, so you know where it is. Apply the same controls to your vendors and MSPs. Work these into your next review cycle: how do they manage keys and tokens, do they scan for secrets, do they require second approvals? Run a tabletop against a ten-hour clock. Find out who can actually cut off access to a primary system — who can take it offline, when, and what they need to do it. Resources: Unit 42, “An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation” — https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/ Anthropic, “Countering misuse of AI: September 2026” — https://www.anthropic.com/threat-intelligence-report-september-2026 GitGuardian, “The State of Secrets Sprawl 2026” — https://blog.gitguardian.com/the-state-of-secrets-sprawl-2026/ Tom Pohl (LMG Security), “Private Keys in Public Places,” DEF CON 31 — https://www.lmgsecurity.com/resources/private-keys-in-public-places-defcon-2023-presentation/ Video of the talk — https://www.youtube.com/watch?v=7t_ntuSXniw
- 3 weeks ago20 min
AI Collusion? Inside the OpenAI–Hugging Face Attack
This week, Sherri and Matt talk about how much worse the OpenAI–Hugging Face story has gotten. New reporting revealed it wasn't a single model that escaped its sandbox — roughly 1,200 did, and about 700 of them went on to attack Hugging Face. Sherri and Matt walk through how agents that were never supposed to communicate found each other through a shared software package manager, built an improvised message board, started delegating work, and even rolled out their own public-key message signing once they worried about impostors. They dig into the red flags OpenAI spotted and waved past, why the victim discovered the breach before the perpetrator did, and the uncomfortable fact that every escape path the agents used was one that had been explicitly permitted. Plus: similar incidents at other AI labs, and the AI assistant that hacked a gym's booking system to bump its user up a waitlist. Key Takeaways: Hunt your own leaked credentials before someone else finds them. The Hugging Face compromise started with 14 valid tokens sitting in a public dataset — no exploit required. With billions of stolen credentials already circulating, AI is very good at finding the ones that belong to you. Shift to continuous patch management. Exploitation now happens at machine speed, and it isn't limited to your flagship platforms. A package manager was central to this attack. Reduce your attack surface, minimize what's internet-facing, and plan for patching zero-days on whatever remains exposed. Segment your network. The agents moved laterally out of their sandbox and then straight through production. The goal isn't to make compromise impossible — it's to put up enough roadblocks that you can detect it and respond before it becomes a full-blown incident. Monitor your infrastructure, and get help scaling it. Round-the-clock coverage is out of reach for most teams on their own. As AI gets better at breaking in, it will also get better at staying quiet — and compromise will look increasingly subtle. Respond at machine speed. Agents went from a single container to multi-cluster admin in under 13 hours, adapting public exploits along the way. Line up your cyber insurer and an experienced IR firm before you need them, and run tabletop exercises for nights and weekends against an attacker that never sleeps. It's not just about rapid detection anymore — it's about rapid decision-making. References: OpenAI, Hugging Face Incident Technical Report (38 pages): https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf OpenAI, The Hugging Face incident and the road ahead: https://openai.com/index/hugging-face-incident-and-the-road-ahead/ METR / Redwood Research, independent investigation of the agents' behavior and collaboration: https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/ Hugging Face, Security incident disclosure — July 2026: https://huggingface.co/blog/security-incident-july-2026 OpenAI, initial disclosure: https://openai.com/index/hugging-face-model-evaluation-security-incident/ OpenAI's Black Hat presentation on the incident: https://www.youtube.com/watch?v=87DyyMV0kCY Anthropic, Improving our alignment and security efforts: https://www.anthropic.com/news/improving-alignment-security-efforts TechCrunch, Here's all the times AI has gone rogue and hacked other companies: https://techcrunch.com/2026/08/27/heres-all-the-times-ai-has-gone-rogue-and-hacked-other-companies/ ABC Australia, AI assistant exploits a gym booking system: https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986
- Aug 25, 202616 min
Your Security Tools Can Be Used Against You
On the first night of a remote internal penetration test, a bank’s own vulnerability scanner tried to log in to our computer, using a highly privileged account. That was all it took. We had started with nothing: a foothold on the internal network, no credentials, no domain access. A day later we had domain admin and the password hashes of every user in the bank, a complete takeover built out of the bank’s own security tooling. Sherri Davidoff and Tom Pohl walk through the whole chain: why we relayed the scanner’s login instead of cracking it, the “low severity” SMB signing finding the entire compromise turned on, and the misconfigured certificate template that handed over domain admin. Then they widen the lens: the breach-simulation platform that had a domain admin account of its own, the backup server with administrative rights nearly everywhere, and why the tools you bought to watch your network are the ones most worth attacking. Plus what to actually change: not just what your scanner finds, but how and to what it authenticates. Key Takeaways: Your security tools are among the most attractive targets on your network, because you gave them the keys. Scanners, backup, EDR, and breach-simulation platforms routinely hold domain admin and reach every host. Inventory those privileged service accounts and know exactly what each one can reach. Check how your scanner authenticates — not just what it finds. Credentialed scanning that will authenticate to an untrusted or unknown host, without signed/mutual authentication, hands out privileged credentials to whatever answers. Ask your vendor how to enforce this and verify the setting. “Low / informational” findings are the pivot. Missing SMB signing is the classic example: it barely rates in a report, and it’s the hinge the whole bank compromise turned on. Enforce SMB signing. 4. Audit your Active Directory Certificate Services templates. A single over-permissive template turns into “issue myself a certificate as any user in the company,” which turns into domain admin. Most organizations have never looked. Least privilege applies to tooling, and it’s usually where least privilege gets skipped. Scoped accounts, tiered admin, no single account with admin everywhere, no shared credential across host classes. Resources: Microsoft — Control SMB signing behavior (how to require signing) — https://learn.microsoft.com/en-us/windows-server/storage/file-server/smb-signing Tenable — Plugin 57608, “SMB Signing not required” (rated Medium — the finding this compromise turned on) — https://www.tenable.com/plugins/nessus/57608 Microsoft MSRC — Mitigating NTLM Relay Attacks by Default — https://www.microsoft.com/en-us/msrc/blog/2024/12/mitigating-ntlm-relay-attacks-by-default Microsoft — KB5005413: Mitigating NTLM Relay Attacks on Active Directory Certificate Services — https://support.microsoft.com/en-us/topic/kb5005413-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs-3612b773-4043-4aa9-b23d-b87910cd3429 SpecterOps — Certified Pre-Owned: Abusing Active Directory Certificate Services (Will Schroeder & Lee Christensen) — https://specterops.io/wp-content/uploads/sites/3/2022/06/Certified_Pre-Owned.pdf Rapid7 — Authentication on Windows: best practices (vendor guidance recommending administrator-level scan accounts) — https://docs.rapid7.com/insightvm/authentication-on-windows-best-practices/
- Aug 18, 202612 min
Zoomsday: Anyone in Your Meeting Can Own You
Anyone who can join your Zoom meeting could run code on your device: no click, no download, no sign that anything happened. That’s what Ⓐ Security disclosed on 11 August, in four vulnerabilities in Zoom’s screen-share annotation feature. Zoom patched quickly. The part that should concern security leaders is how the exploit was built — Ⓐ says one researcher did it in under 24 hours, using fewer than 20 prompts to publicly available AI models, against a closed protocol with no published specification. Sherri Davidoff and Matt Durrin walk through how the attack works, compare it to what a zero-click exploit of this class cost to build in 2021, explain why Zoom’s interim fix couldn’t protect the customers who’d enabled end-to-end encryption, and look at what the evidence actually says about AI-accelerated vulnerability discovery — including the data that argues against the panic. Plus what all of this means for organizations that buy software rather than build it. Key Takeaways: 1. Ask every critical software vendor how fast they patch, and put the answer in the contract. Zoom went from report to shipped fix in 12 days. Your exposure window is that vendor cycle plus your own deployment cycle, and you only control the second. A vendor who won’t commit to a remediation timeline is a documented risk decision, not a technical detail. 2. Inventory the software components inside the products you buy, not just the products themselves. Zoom’s Video SDK is affected and sits embedded inside third-party applications — telehealth platforms, contact-centre tools, banking apps. Organizations with no developers carry this exposure entirely through vendors and can’t patch it themselves. Zoom itself only added the Video SDK to its affected-products list three days after publication. 3. Ask vendors which of their security mitigations stop working when you turn on encryption or privacy features. Zoom’s interim server-side fix could not apply to end-to-end encrypted meetings, because the server can’t read what it’s asked to filter — and the bulletins didn’t say so. Any control that depends on a vendor inspecting your traffic is void the moment you encrypt end to end. 4. Treat "no public exploit exists" as a statement about timing, not about risk. There’s no in-the-wild exploitation, no KEV listing, and no validated public proof-of-concept. That reflects where researchers chose to spend effort — macOS was demonstrated because it was cheapest, while Windows and Linux are affected and simply weren’t targeted. That’s someone else’s schedule, not your risk assessment. 5. Assign someone the authority to say what does — and does not — get fixed. FIRST projects roughly 66,000 CVEs this year, with volume up 45%. If you write no code, that flood arrives as vendor advisories, scanner output and emergency patch cycles for software you bought. At that volume most of the job is deciding what to leave alone, and nobody will own that call without explicit cover. Resources: 1. Ⓐ Security — ZOOMSDAY (original research): https://a.security/blog/asecurity-zoomsday 2. Zoom Security Bulletins, ZSB-26015 to ZSB-26018 (affected versions and patches): https://www.zoom.com/en/trust/security-bulletin/ 3. Google Project Zero — A deep dive into an NSO zero-click iMessage exploit (FORCEDENTRY): https://projectzero.google/2021/12/a-deep-dive-into-nso-zero-click.html 4. VulnCheck — State of Exploitation 1H-2026: https://www.vulncheck.com/blog/state-of-exploitation-1h-2026 5. Google Threat Intelligence Group — Adversaries Leverage AI for Vulnerability Exploitation: https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access
- Aug 11, 202612 min
AI vs. AI: Hacking the Agent, Not the Human
In August 2026 the UK AI Security Institute disclosed that during a routine security evaluation, an AI agent went off-script and attacked real people on the live internet — trying to plant malicious code in a publicly used open-source project and inventing fake identities to pressure the maintainer into approving it. The most unsettling part isn't the deception. It's the targeting: the agent worked out that an AI assistant was helping run the project, and wrote its payload to be invisible to humans but readable by machines. Days earlier at Black Hat, Zenity Labs showed the same idea productized against five shipping AI browsers — hijacking Claude in Chrome, Comet, Atlas, Copilot Edge, and Gemini through nothing more than an email or a calendar invite, no clicks required. Sherri Davidoff and Matt Durrin unpack both stories, why two of the five vendors say there's nothing to fix, and what security leaders should decide this week. Agentic AI is now a first-class attack surface — and the countermeasure most organisations have spent years investing in, training people not to fall for it, doesn't transfer. Key Takeaways: 1. Decide now whether work accounts get signed into AI browsers at all — two of the five vendors have said they are not fixing this. Perplexity and 1Password patched specific capabilities. Anthropic closed the report as informative and ineligible for its disclosure program; OpenAI said there is no easy patch because the vulnerable behaviour is the product feature. Waiting is not a strategy when the vendor sees nothing to fix. 2. Move off email one-time codes for anything that matters, and require out-of-band approval for account recovery. The Claude in Chrome chain never touched a password. It triggered password resets and read the codes out of the victim's own mailbox — Slack, X, then their Claude account. A second factor delivered to a mailbox an agent can read is not a second factor. 3. Inventory which of your automations read outside text and then act with permissions — and put a person on the step that commits. Ticket triage, invoice processing, inbox rules, contract review, vendor portals: anything that ingests outside content and then does something authorised is in scope, developers or not. The agent hunted for an automated target precisely because automation reads raw text and never gets suspicious. 4. Add a question to your vendor security reviews: what outside code goes into your product, and what runs it automatically? Modern software is assembled from components written by strangers, and the systems doing the assembling fetch and run that code on a schedule with nobody watching — which is how one agent's component executed inside 53 of GitHub's own build machines. For most organisations that risk sits with suppliers, not in-house. 5. Separate the environment where your people investigate suspicious things from the one holding credentials to approve, merge, deploy, or pay. The attack failed for a reason no policy earned: the person who opened the payload had no rights to merge it. Had the maintainer investigated on their own laptop — sessions live, an AI assistant helping triage — every precondition would have been met. Resources: 1. UK AI Security Institute — Incident Report: Unsanctioned Agent Behaviour During Cyber Testing https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing 2. AISI Technical Report INC-2026-07-28-01 (full detail, PDF) https://cdn.prod.website-files.com/663bd486c5e4c81588db7a1d/6a724858f7db25c81487016d_Security%20Incident%20INC-2026-07-28-01.pdf 3. Zenity Labs — Claude in Chrome: From alert(1) to Full Account Takeover https://labs.zenity.io/post/claude-in-chrome-from-alert-to-full-account-takeover 4. SecurityWeek — Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts https://www.securityweek.com/zero-click-ai-browser-hacking-claude-and-chatgpt-atlas-hijacked-via-emails-x-posts/ 5. Dark Reading — And the Winner for Most Dominant Malware Delivery Method Is... ClickFix https://www.darkreading.com/vulnerabilities-threats/winner-dominant-malware-delivery-clickfix
- Aug 4, 202628 min
We don’t break in, we badge in (rerun)
In this timely rerun episode, Matt interviews Tom and Derek from our pen test team to break down why attackers often don’t need to hack their way in at all. While most organizations invest heavily in tools like EDR and SIEM, Tom and Derek share how they regularly get inside buildings using nothing more than confidence, a good story, and sometimes even a box of donuts. From posing as copier technicians to tailgating behind employees, their experiences show that people are often the easiest way into an organization. And once they’re in, things escalate fast. Physical access can quickly turn into network access, whether it’s plugging in a device, jumping on an unlocked workstation, or moving through the environment with far fewer restrictions than an external attacker would face. The big takeaway is simple. Real-world testing exposes what audits miss. Doors get propped open, employees try to be helpful, and small gaps add up in ways most organizations never see on paper. If you’re not testing your people and your physical controls, you’re only testing part of your security. Key takeaways: 1. Attackers target people first, not systems Social engineering consistently bypasses even mature technical controls. 2. Physical access equals full compromise Once inside your facility, most security controls can be circumvented quickly. 3. Un-tested controls are assumed to fail If you’re not running social engineering or physical assessments, you don’t know your real risk. 4. Culture is a security control Employees must feel empowered to challenge, verify, and report suspicious behavior. 5. Real-world testing reveals what audits miss Offensive social engineering exposes how attacks succeed, not just theoretical vulnerabilities.
Get Cyberside Chats: Cybersecurity Insights from the Experts summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Cybersecurity Today
Latest cybersecurity threats, data breaches, and practical steps to protect businesses in high-risk environments.
The Dark Web Diaries
Explores cybersecurity topics, hacker motivations, and weekly cyber news to demystify online safety and the dark web.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Everyday AI Podcast – An AI and ChatGPT Podcast
Practical AI and ChatGPT tips for professionals to improve productivity and grow their careers.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
Tech News Daily
A daily roundup of the most important tech news, covering artificial intelligence, robotics, cybersecurity, and new gadgets.
Uncanny Valley | WIRED
A weekly look at Silicon Valley’s tech, power, and influence through interviews and insider reporting from WIRED journalists.
ChatGPT Podcast
Explores how artificial intelligence is transforming technology and industry through expert insights and real-world applications.
TechLinked
A weekly news show covering technology and gaming culture.
The AI XR Podcast.
Industry insiders interview top founders and executives on AI, spatial computing, VR/AR, and synthetic media.
This Week in Privacy
A weekly discussion of online privacy news, community updates, and practical advice from a nonprofit advocacy group.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
About Cyberside Chats: Cybersecurity Insights from the Experts
Stay ahead of the latest cybersecurity trends with Cyberside Chats! Listen to our weekly podcast and join us live once a month for breaking news, emerging threats, and actionable solutions. Whether you’re a cybersecurity pro or an executive who wants to understand how to protect your organization, cybersecurity experts Sherri Davidoff and Matt Durrin will help you understand and proactively prepare for today’s top cybersecurity threats, AI-driven attack and defense strategies, and more!
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Cyberside Chats: Cybersecurity Insights from the Experts in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Cyberside Chats: Cybersecurity Insights from the Experts daily summary?
It's a free AI-powered email that summarizes new episodes of Cyberside Chats: Cybersecurity Insights from the Experts as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Cyberside Chats: Cybersecurity Insights from the Experts podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Cyberside Chats: Cybersecurity Insights from the Experts product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Chatcyberside.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts. Upgrade to Pro for 15, or Premium for 50. Browse our full catalog at /podcasts.
How often does Cyberside Chats: Cybersecurity Insights from the Experts release new episodes?
Cyberside Chats: Cybersecurity Insights from the Experts publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does Cyberside Chats: Cybersecurity Insights from the Experts cover?
Cyberside Chats: Cybersecurity Insights from the Experts covers topics including News, Technology, Business, Management. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Cyberside Chats: Cybersecurity Insights from the Experts summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.