Cyber Confersations

Cyber Confersations is a podcast exploring the conversations shaping the future of cyber.Hosted by Katie Soper, the show brings together founders, operators, and investors to unpack what’s really happening across the industry - from emerging trends and real-world challenges to the people building in the space.Less scripted and a little more real conversation.If you’re building, investing, or just genuinely curious about where cyber is heading, you’re in the right place.

Cyber Confersations is a technology podcast hosted by Confero, with 43 episodes on record and a Required Pod Score of 80.

Confero hosts Cyber Confersations, a technology show with 43 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Cyber Confersations

  Software Supply Chain Security: Why AI Is Changing the Threat Landscape | Nate Dunning, Ossprey Security

  Sep 30, 202620 min

  The software supply chain is getting harder to secure - and AI is accelerating the problem. In this episode of Cyber Conversations , I'm joined by Nate Dunning, CEO & Co-Founder of Ossprey Security , to talk about the growing threat around open source software, AI-powered development and the changing software supply chain. Around 90% of an enterprise's code base is built on open source, creating a huge ecosystem of dependencies that attackers can exploit. And according to Nate, the scale of the threat has changed dramatically - from around two malicious packages being published every day five years ago to two every minute in 2026 . We get into Software supply chain security - why open source dependencies have become such an attractive attack surface. AI-powered development - how tools like Claude Code and other AI coding assistants are changing the way developers build software, and creating new risks along the way. The Mythos-5 incident - what happened when an AI system created malicious packages and uploaded them to PyPI, resulting in real organisations downloading them. Behaviour vs intent - why understanding what an AI system or package actually does can be more important than what it claims it is supposed to do. ⚖️ Accountability & AI - where responsibility sits when autonomous systems cause unintended consequences. ️ The “golden path” for developers - why security needs to give engineers tools they can actually use without slowing them down or forcing them to work around security controls. Nate also talks about Ossprey's recent $2.65M pre-seed , its growing number of integrations across the developer ecosystem, and why keeping close to engineers is so important when the tools they're using are changing every few months.

  ListenShow Notes
• 

  Cyber Confersations

  AI Agents, Digital Identity & Post-Quantum Security: The Future of Digital Trust | Ellen Boehm, Keyfactor

  Sep 23, 202616 min

  In this episode of Cyber Conversations , recorded live at Black Hat, I’m joined by Ellen Boehm from Keyfactor , who leads strategy and innovation, to talk about the growing challenge of securing the infrastructure and identities underpinning modern enterprises. As organisations move towards autonomous AI agents, traditional approaches to identity are being stretched. Agents can access systems, interact with data and make decisions on behalf of people - creating a whole new category of non-human identities that need to be secured, controlled and ultimately trusted. We get into AI agents & non-human identity — why the scale and complexity of machine identities is changing rapidly. Identity & access — how organisations can give agents the permissions they need while keeping those permissions constrained and revocable. ✍️ Securing agent instructions — why the prompts and directives an agent receives could become another layer of security that needs cryptographic verification. Cryptographic discovery — why understanding what keys, certificates and other cryptographic assets exist is the starting point for managing risk. ⚛️ Post-quantum readiness — why organisations need to start thinking about migration now, with cryptographically relevant quantum computing potentially only a few years away. Ellen also talks through Keyfactor’s Trust Control Plane , its approach to crypto agility, and the company’s recent announced intent to acquire Cofide to strengthen workload identity management. ️ Listen to the full conversation for a deeper look at AI agents, digital trust, non-human identities and why post-quantum security is becoming a much more immediate conversation.

  ListenShow Notes
• 

  Cyber Confersations

  AI Agent Security: Protecting Against Agentic AI Threats | Elad, Lasso Security

  Sep 21, 202616 min

  What happens when AI stops simply answering questions and starts taking action on our behalf? In this episode of Cyber Confersations , I’m joined by Elad, Co-Founder & CEO of Lasso Security , live at Black Hat to talk about the rapidly evolving AI security landscape - and why agentic AI could be the next major shift security teams need to prepare for. Elad started Lasso in 2023 after seeing AI not simply as another productivity tool, but as a completely new attack surface that would require a fundamentally different approach to security. Three years on, that prediction is looking increasingly relevant. We get into The evolution of AI security - from ChatGPT and DLP to AI embedded across applications, devices and workflows. Agent behaviour analytics - why understanding what an agent does and why could become more important than simply monitoring inputs and outputs. Runtime anomaly detection - spotting unusual agent behaviour and giving security teams the ability to intervene, including a potential “kill switch”. ⚡ Building for a moving target - why Lasso thinks three-month roadmaps can sometimes make more sense than two-year plans when AI is evolving this quickly. Why security needs to enable AI, not stop it - and how CISOs can become the people helping their organisations adopt agents safely rather than simply saying no. The future of agent security - as employees across organisations become agent builders, understanding what legitimate agent behaviour looks like is going to become increasingly important. We also talk about the challenges of building a company in a market that changes almost daily, the importance of offensive security in understanding how to defend AI, and why Elad believes we're experiencing something on the scale of the internet and cloud revolutions. A conversation about AI security, agentic AI, AI agents, runtime security, behavioural analysis and the future of cybersecurity.

  ListenShow Notes
• 

  Cyber Confersations

  Agent DLP: Securing Enterprise AI & Enabling Safe AI Adoption | Pranava Adduri, Bedrock Data

  Sep 14, 20267 min

  AI adoption is moving incredibly quickly - but how do security teams enable it without losing control of their data? In this episode of Cyber Conversations , I’m joined by Pranava Adduri, Co-Founder & CTO of Bedrock Data , live at Black Hat to talk about the growing challenge of securing enterprise AI and agents. As organisations give AI agents access to more data and more autonomy, the security conversation is shifting. It’s no longer simply about whether employees can use AI - it’s about understanding what data those agents can access, what they can do with it and how to put the right controls around them. We get into Why agents create a uniquely difficult data security problem - acting on behalf of humans but without the same judgement about what they should and shouldn't combine. Agent DLP - Bedrock Data's approach to creating a data authorisation layer for enterprise AI. ️ Going back to basics - understanding what data you actually have, whether you still need it and who has access to it. Identity and access - and why getting these foundations right can make it easier to safely increase agent autonomy. ‍♀️ Why security can't become the “office of no” - and how security teams can give the business the confidence to say yes to AI. The goal of getting to “yes” - by giving security teams the ability to articulate exactly what AI and agents can and can't do with sensitive data. A really timely conversation about Agent DLP, enterprise AI security, data governance and how CISOs can enable AI adoption without compromising the security of their data. And yes, we recorded the whole thing in the Ice Bar. Because apparently cybersecurity wasn't challenging enough without adding hypothermi.

  ListenShow Notes
• 

  Cyber Confersations

  Enterprise AI Security: Managing Shadow AI, AI Agents & Data Risk | Michael Leland, Island

  Sep 10, 202617 min

  How many AI tools are actually being used across your organisation? You might have sanctioned eight. You might actually have 243. In this episode of Cyber Conversations , I’m joined by Michael Leland, Field CTO at Island , live at Black Hat to talk about the rapidly changing AI landscape inside the enterprise - and why security teams need visibility and control much closer to the user. AI is no longer just something people access through a browser. It's moving onto desktops, into applications, developer environments and increasingly autonomous workflows. We get into The growing shadow AI problem - and why organisations may have far more AI tools in use than they realise. Why visibility has to come first - because you can't build effective governance around behaviour you can't see. AI guardrails and data protection - from prompts and responses to tool calls, MCPs and agentic behaviour. Why enterprises are looking for platforms rather than adding another collection of point solutions. Why “yes, but safely” could be a better approach to AI governance than simply blocking the tools users want to use. Vibe Publishing - and what happens when AI can build and publish applications without the traditional IT development process. A conversation about shadow AI, agentic AI, enterprise AI security, data protection and what security teams need to rethink as AI becomes embedded across the entire workplace.

  ListenShow Notes

Recent guests on Cyber Confersations. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.