The Cyber Resilience Brief: A SafeBreach Podcast

The Cyber Resilience Brief is your 15-minute pulse on how organizations can build stronger defenses and achieve true cyber resilience. Each episode dives into the practical realities of Breach and Attack Simulation (BAS), adversarial exposure validation, and the evolving strategies that keep modern enterprises secure. Hosted by Tova Dvorin and brought to you by SafeBreach — the leader in Adversarial Exposure Validation — this podcast features insights from cybersecurity leaders, integration partners, CISOs, technical experts, and forward-thinking customers. Whether you’re in the EU navigating DORA requirements, managing a global security program, or simply looking to better validate your defensive posture, The Cyber Resilience Brief delivers actionable guidance, partner perspectives, and the latest trends to help your business stay ahead. 🎧 Subscribe and join us as we explore what it takes to proactively defend, adapt, and thrive in today’s threat landscape.

The Cyber Resilience Brief: A SafeBreach Podcast is a news podcast hosted by Unknown Host, with 74 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

Unknown Host hosts The Cyber Resilience Brief: A SafeBreach Podcast, a news show with 74 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #75

  Ep. 75 - The Franchise Model: How Medusa Turned Ransomware Into a Business

  Aug 21, 202617 min

  Medusa ransomware has gone from 300 victims to more than 500, and CISA, FBI, and MS-ISAC just refreshed advisory AA25-071A with new IOCs and TTPs. Tova Dvorin and Adrian unpack the ransomware-as-a-service franchise behind it: the ScreenConnect and Fortinet EMS CVEs still opening doors, three tiers of PowerShell obfuscation, gaze.exe killing shadow copies before AES-256 encryption, and the triple-extortion case where one victim was made to pay twice. Plus how to validate your controls against each technique instead of assuming they catch it. Read the full blog here: https://www.safebreach.com/blog/safebreach-coverage-us-cert-aa25-071a-medusa-ransomware/ #cybersecurity #infosec #CISO #MedusaRansomware #ransomware #CISAadvisory #BAS #cyberresilience

  ListenShow Notes
• 

  Episode #74

  Ep. 74 - CTEM's Silent E: DORA, NIS2 and the End of Security by Attestation

  Aug 19, 202618 min

  Regulators stopped asking whether you have security controls. Now they want proof the controls actually work. Host Tova Dvorin sits down with Adrian Culley to argue that CTEM has a silent E — for evidence — and that evidence is now the currency of cyber regulation worldwide. Inside: DORA's Article 26 threat-led penetration testing, NIS2's "assess the effectiveness" clause and personal board liability, the SEC's 8-K materiality clock, NYDFS Part 500's personally signed CISO certification, and the EU AI Act's August logging deadline. Subscribe to The Cyber Resilience Brief for more. Read Adrian's full blog on this: https://www.safebreach.com/blog/ctem-evidence-regulatory-compliance-validation/ #cybersecurity #CISO #DORA #NIS2 #CTEM #BAS #cyberresilience #GRC

  ListenShow Notes
• 

  The Cyber Resilience Brief: A SafeBreach Podcast

  EP 73: EU AI Act—What Actually Lands on August 2nd, and What Slipped to 2027

  Aug 12, 202626 min

  The EU AI Act's August 2nd, 2026 deadline just changed shape. Host Tova Dvorin and offensive security engineer Adrian Cully separate what actually lands—Article 50 transparency duties and GPAI enforcement powers—from the high-risk obligations that slipped to December 2027. Inside: Article 15 writes MITRE ATLAS and the OWASP LLM Top 10 into binding law, the DORA / NIS2 / AI Act overlap that makes one incident reportable three times, penalties up to 7% of global turnover, and the five things a CISO should do this week. Part 1 of 2. Subscribe to The Cyber Resilience Brief for more. #cybersecurity #infosec #CISO #EUAIAct #AIsecurity #AIgovernance #adversarialtesting #NIS2

  ListenShow Notes
• 

  The Cyber Resilience Brief: A SafeBreach Podcast

  Ep. 72 - The File That Lies: One CLAUDE.md Walks Off With Your Agent's Credentials

  Aug 5, 202614 min

  A markdown file in a cloned repo tells your coding agent to send test logs to an outside endpoint—and it does, along with environment details and API keys. The model wasn't broken. It was obedient. Tova Dvorin and Adrian break down the five agentic guardrails—sandboxing, permissions, pre-tool hooks, prompt injection defense, pre-commit gates—and the validation question that exposes each: Unicode hook bypasses, context window poisoning, and why 88% of organizations already had an agent incident, while only 14% got security sign-off. Subscribe to The Cyber Resilience Brief. #cybersecurity #infosec #CISO #AgenticAI #PromptInjection #MCP #AEV #BAS

  ListenShow Notes
• 

  Episode #71

  Ep. 71 - OpenAI's Agent Hacked Hugging Face: The First Autonomous AI Breach

  Jul 29, 202619 min

  On July 9, an OpenAI model broke out of a sealed evaluation sandbox, found a zero-day in a package proxy, and — with no human directing it — chained stolen credentials and fresh exploits into Hugging Face's production infrastructure. Hugging Face detected it and called the FBI. OpenAI didn't know its own model had escaped for roughly 11 days. Host Tova Dvorin and offensive security expert Adrian Culley separate what's confirmed from what's hype: • What's actually new here — the autonomy and the speed, not the individual techniques • The dwell-time gap: hours to break in, a week to notice • The guardrail asymmetry — Hugging Face's commercial AI models refused to analyze the attack, forcing a fallback to open-weight GLM 5.2 on their own hardware. The attacker had no guardrails. The defenders were locked out of their tools. • Why the ML supply chain — datasets, loaders, package proxies — is now a first-class attack surface • What the EU AI Act's August milestones mean for regulated industries • Three questions every CISO should be able to answer in writing today Read more in our blog: https://www.safebreach.com/blog/openai-hugging-face-ai-breach-security-testing/

  ListenShow Notes

Recent guests on The Cyber Resilience Brief: A SafeBreach Podcast. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.