ConversingLabs Podcast brings you conversations with the best and brightest minds in malware analysis, threat hunting, and software supply chain security. Hosted by Paul Roberts, director of editorial and content at ReversingLabs, ConversingLabs digs into cutting edge topics that are most pressing in the world of cybersecurity.
Host Paul Roberts interviews Tim Brown about the cybersecurity landscape, SolarWinds attack lessons, and AI's impact on defense strategies.
4 Jun 2026
Building Secure AI - A Conversation With Steve Wilson of Exabeam
Host Paul Roberts welcomes Conversing Labs guest Steve Wilson, Chief AI and Product Officer at Exabeam and co-chair of the OWASP GenAI Security Project. Steve discusses his path from early programming to AppSec at Contrast Security and leading the OWASP Top 10 for LLMs, which grew into a large community and later an Agentic Top 10.
Wilson explains AI’s recent leap via transformer architecture, cloud scale, and GPUs, and describes Exabeam’s evolution from SIEM and behavior analytics to generative and agentic AI with multiple security agents. He summarizes his 2024 O’Reilly book expanding OWASP risks into case studies and secure development practices, emphasizing that AppSec alone is insufficient for autonomous agents, requiring monitoring and “agent behavior analytics.” The conversation highlights AI supply chain risks (models, plugins/MCP, OpenClaw skills, fake Chrome extensions), scoping/least privilege, and the practical impact of tools like Claude Code on AppSec and security operations.
00:00 Welcome and Guest Intro
02:35 Steve’s Cyber Journey
04:13 OWASP LLM Top 10 Origins
06:21 From LLMs to Agents
06:59 Tron and AI History
09:32 Why Transformers Changed Everything
11:35 What Exabeam Actually Does
16:08 Writing the LLM Security Book
20:27 Agent Risks Beyond AppSec
22:05 What Changed Since 2024
23:30 Reasoning Models and Strawberry
26:18 Agentic Top 10 and Supply Chain
27:11 Hallucinated Dependencies
27:47 Model Supply Chain Trust
28:57 Plugins And Agent Exploits
29:58 MCP And Skills Risks
31:01 Chrome Plugin Trap
33:47 RAISE Framework Overview
35:12 Monitoring Digital Workers
38:40 Scoping And RAG
41:44 Excessive Agency Controls
43:02 Sandboxed Assistant Build
45:16 AI Impact On Infosec
49:15 Closing And Contact
12 Feb 2026
Predictions For Software Supply Chain Security In 2026
In this episode of ConversingLabs Podcast, host Paul Roberts interviews ReversingLabs Chief Trust Officer Saša Zdjelar about the recent Notebook++ hack and what he thinks software supply chain security will look like in 2026. The two will also discuss the findings of RL’s fourth annual report on the subject, which offers six predictions for how threats will evolve, as well as how security teams will respond. Also, Saša will share his take that the technology industry needs to move away from a “move fast and break things” mindset in order to best secure software supply chains.
Read Saša's commentary for Cyber Scoop here: https://cyberscoop.com/move-fast-break-things-cybersecurity-supply-chain-security-op-ed/ (https://cyberscoop.com/move-fast-break-things-cybersecurity-supply-chain-security-op-ed/)
Read the 2026 Software Supply Chain Security Report here: https://www.reversinglabs.com/sscs-report (https://www.reversinglabs.com/sscs-report)
Inside a recent episode
Rethinking Security After SolarWinds
Published 19 Oct 2026 · Transcript excerpt
[…] That's critical, right? is what how much of it's true right so we start an investigation determine how real it is uh as you know uh vulnerabilities come in many different shapes and sizes and threats come in many different shapes and sizes and it's really important to understand how much risk your customers are at and Although you may find a number of things, are they truly exploitable? Are they truly creating risk for your customer? So that's kind of step one is understanding what risk our customers are facing. then absolutely prioritize those ones that are creating the most risk. […]
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
