About Secured by Design - IAM & Cybersecurity Podcast
Great security solution are designed from the ground up..
Secured by Design is a podcast where Santosh shares practical insights, frameworks, and perspectives on identity security and other aspects of cybersecurity.
Each episode breaks down complex concepts into actionable ideas for professionals protecting digital identities, designing secure systems, and leading security initiatives.
Because true security is built and not bolted on...
Mastering AI Security: Top 10 Risks and Mitigations for LLMs
Summary This episode explores the top 10 security risks associated with deploying large language models (LLMs) and AI systems. It provides practical insights and mitigation strategies to help organizations secure their AI implementations effectively. Keywords AI security, LLM risks, prompt injection, data leakage, supply chain security, poisoning, output handling, system prompt leakage, misinformation, resource exhaustion Key topics Prompt injection vulnerabilities Sensitive data leak...
4 May 2026
Securing Autonomous AI: The OWASP Top 10 Risks Explored
Summary This episode explores the security risks associated with AI agents, focusing on the OWASP top 10 vulnerabilities and practical mitigation strategies. Learn how autonomous systems can be secured to prevent catastrophic failures and protect organizational assets. Key topics AI agent security risks OWASP top 10 for agent applications Mitigation strategies for autonomous systems Chapters 00:00 The Nine-Second Database Incident 01:42 The Growing Threat of Autonomous System Incid...
22 Apr 2026
How Vercel's Supply Chain Attack Unfolded
Summary This episode dissects the recent Vercel breach, a supply chain attack involving third-party AI tools, OAuth vulnerabilities, and insider risks. It highlights practical steps organizations can take to enhance cybersecurity and prevent similar incidents. Key topics Supply chain attack involving third-party AI tools OAuth vulnerabilities and permissions management Best practices for environment variable security Incident response and credential rotation strategies Chapters 0...
19 Apr 2026
The Mythos Inflection: AI and the Future of Cyber Defense
Summary This episode explores the groundbreaking capabilities of Anthropic's Mythos AI model, its implications for cybersecurity, and how defenders can adapt to this new threat landscape. We discuss the model's ability to autonomously identify and exploit vulnerabilities, the strategic responses from industry leaders, and the importance of critical evaluation amidst hype. Key Topics Mythos AI capabilities and evaluationsIndustry responses and strategic implicationsVulnerability discovery and ...
10 Apr 2026
Why Identity Is The Hidden Keystone in Effective GRC Programs
Summary This episode explores the critical relationship between identity and access management (IDAM) and holistic Governance, Risk, and Compliance (GRC) programs. Hosted by Santosh, it delves into how integrated identity management enhances security, compliance, and organizational resilience in the digital age. Key Topics The connection between identity and GRC The evolution of IDAM and its role in security Regulatory frameworks and compliance mapping Risk management lifecycle and identit...
3 Apr 2026
How SCA, SAST, and DAST Protect Modern Apps (Application Security)
Summary This episode explores the core tools in application security - SCA, SAST, and DAST and how they form a comprehensive, shift-left security strategy to protect modern applications from vulnerabilities throughout the development lifecycle. Key Topics Shift-left security strategy SCA (Software Composition Analysis) SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) Chapters 00:00 Introduction to Application Security 05:08 Understanding SCA: Softwa...
29 Mar 2026
How LiteLLM Became a Weapon in a Supply Chain Attack
Summary This episode explores the recent security breach involving Lite LLM, a popular open-source Python library, and discusses the implications for cybersecurity in AI development. Learn how a trusted tool was exploited, the attack's mechanics, and essential security lessons for organizations. Key Topics Supply chain attack on Lite LLM Multi-stage compromise via CI/CD pipeline Malicious package injection and persistence Lessons on dependency pinning and credential rotation The AI tool ch...
24 Mar 2026
How ITDR Can Prevent the Next Major Data Breach
Summary This episode explores the critical importance of Identity Threat Detection and Response (ITDR) in modern cybersecurity. Hosted by Santosh, it covers how identity infrastructure is the most targeted layer in enterprises, the rise of identity-based attacks, and practical strategies to enhance security posture. Key Topics The rise of identity-based attacks and their impact The three pillars of ITDR: visibility, detection, response Real-world examples: SolarWinds, MGM, Striker attack H...
19 Mar 2026
How Nation-States Target Critical Infrastructure: The Stryker Case Study
Summary This episode explores the March 2026 cyber attack on Stryker Corporation, a leading medical technology company, highlighting the attack's mechanics, motives, and lessons for organizations worldwide. Learn how nation-state actors target critical infrastructure and how to defend against such destructive threats. Key Topics The timeline and impact of the Stryker cyber attackThe role of nation-state actors and geopolitical motivesTechnical mechanics of the Wiper malware attackLessons le...
10 Dec 2025
The Day the Internet Broke: Cloudflare's Outage Explained
Summary In this episode of 'Secured by Design', we discuss the root cause for significant Cloudflare outage that occurred on November 18, 2025, which disrupted major internet services and highlighted the fragility of digital infrastructure. The conversation delves into the causes of the outage, its financial impact on businesses, and the lessons learned regarding cybersecurity and infrastructure reliance. Chapters 00:00 The Financial Impact of the Cloudflare Outage 03:40 The Role of Cloudfl...
3 Dec 2025
Unlocking the Future of Customer Identity Management
Summary In this episode of 'Secured by Design', we delve into Customer Identity and Access Management (CIAM), exploring its significance in enhancing customer experiences while ensuring security and privacy. The discussion highlights the digital experience gap, the differences between CIAM and traditional IAM, and the core concepts that underpin effective CIAM systems. We emphasizes the importance of a seamless customer journey and the future growth potential of CIAM in the digital landscape...
26 Nov 2025
The Invisible Workforce: Understanding Non-Human Identities
Summary In this episode of Secured by Design, we discuss the growing prevalence of non-human identities (NHIs) in organisations, which outnumber human identities significantly. We highlight the security risks associated with NHIs, including their lack of oversight and the potential for exploitation by attackers. The conversation emphasises the need for organisations to adopt a modern playbook for managing NHIs, especially in light of the increasing integration of AI technologies. We also out...
19 Nov 2025
From Passwords to Passkeys: The Future of Authentication
Summary In this episode of 'Secured by Design', we discusses the critical shift from traditional passwords to passkeys in the realm of cybersecurity. We also highlight the alarming statistics surrounding password breaches and the vulnerabilities they present. The conversation delves into the mechanics of passkeys, their advantages over passwords, and the growing adoption of this technology across various industries. The episode emphasize the importance of transitioning to a passwordless futur...
12 Nov 2025
Modern Identity Governance and Administration
Summary In this episode of Secured by Design, we delve into the complexities of modern identity governance and administration (IGA). We discuss the challenges organizations face in managing access for a multitude of identities and applications, and how IGA solutions can streamline this process. To explain how a modern IGA solution does this, we follow the journey of an employee, James, from onboarding to offboarding, highlighting the importance of automated workflows, access certi...
7 Nov 2025
What Does "Secured by Design" Really Mean?
Summary In this (First) episode of Secured by Design, we explore the critical role of identity in cybersecurity. We emphasise that identity should be the foundation of security, rather than an afterthought. Through real-world examples, we illustrate the risks associated with poor identity management and the benefits of adopting an identity-first approach. The conversation also highlights the cultural shift needed within organisations to prioritise identity governance and security as a means ...
Contact Secured by Design - IAM & Cybersecurity Podcast
Guest appearances
Does not typically book guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Secured by Design - IAM & Cybersecurity Podcast?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
