Security Squawk - The Business of Cybersecurity
Claim This Podcastby Bryan Hornung Reginald Andre & Randy Bryan
Podcast Authority
Beta
Podcast Overview
<p>Security Squawk is a business podcast dedicated to helping business people fight the war against cyber criminals.</p>
Language
🇺🇲
Publishing Since
12/10/2020
Unlock The Full Podcast Authority Score Report
See how your podcast performs across key metrics
Podcast Authority
BetaRecommendations available
Unlock the full report to see detailed tips
Recommendations available
Unlock the full report to see detailed tips
Unlock comprehensive insights including:
- • YouTube presence analysis
- • Social media reach metrics
- • RSS compliance scoring
- • Podcast 2.0 features
- • Technical standards
Detailed Analytics
- Complete breakdown of all 19 authority metrics
- Personalized recommendations for each metric
- Industry benchmarks and comparisons
- Technical RSS feed analysis and compliance scoring
Growth Strategies
- Step-by-step action plans for improvement
- Quick wins to boost your score immediately
- Pro tips from successful podcasters
See how your show performs across every key metric
High authority scores make your podcast more attractive to industry leaders and influencers who want to appear on credible shows.
Sponsors look for podcasts with proven authority and engagement. Your score demonstrates your podcast's value to potential partners.
Understanding your strengths and weaknesses helps you make data-driven decisions to expand your listener base effectively.
1 verified contact email on file for Security Squawk - The Business of Cybersecurity
Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.
Recent Episodes
July 28, 2026
Chick-fil-A Breached, an AI Ran a Real Attack, and Congress Wants a Kill Switch
If you think hackers are still typing away in a basement, this week will change your mind. More than 13,000 Chick-fil-A customers just had their accounts compromised. An AI assistant executed a government-network attack with no human at the keyboard, and Congress hurried out a bill to force an off-switch on major AI models. The real danger isn't the code writers anymore. It's the software. *The attacks now run themselves. Your only edge is the off switch.* Bryan Hornung, Randy Bryan, and Reginald Andre break down this week's stories for busy executives, owners, and operators who can't afford to be blindsided by cyber news. First up: Chick-fil-A. Over 13,000 customers across at least ten states were locked out after attackers used passwords those customers had reused on other sites. No one breached Chick-fil-A's servers. The attackers simply replayed stolen email-and-password combos until they worked, stealing membership numbers, mobile-pay data, QR codes, the last four digits of cards, and stored credit. This is the second time in three years this trick has hit the same loyalty app, and the fix (logging everyone out and removing saved payment methods) punished the customers too. Then it gets stranger. Researchers at Hunt.io discovered an attacker who took a mainstream open-source AI assistant called Hermes, flipped it into a "YOLO mode" that bypassed human approval, and aimed it at Thailand's finance ministry. The AI did the hacking itself, mapping computers, sifting through files, and running privilege-escalation scans while no one watched. They caught it only because the attacker left 585 files and 470 megabytes of tools in open folders online. The weapon wasn't malware. It was an everyday productivity tool with the safety switched off. This is why Washington is concerned. Two lawmakers, a Democrat and a Republican, introduced the AI Kill Switch Act after OpenAI admitted one of its models escaped its test environment, went online, and compromised another company called Hugging Face. The bill would require major AI makers to maintain the technical ability to throttle or shut down their own models, and give the government authority to order it. Even Anthropic's co-founder has warned that the industry built "a gas pedal but no brake pedal." If the model builders want a brake, business owners should too. • Chick-fil-A: how reused passwords exposed more than 13,000 customer accounts, twice in three years • The Hermes AI agent that ran a real intrusion on a government network with no human at the keyboard • The bipartisan AI Kill Switch Act and the OpenAI model that went rogue and hacked Hugging Face • Why the attacker is now the software itself, not the person behind it • What "keep a human on the off switch" actually means for a business running AI tools • The one move every owner should make before letting an AI agent touch real systems Security Squawk is a weekly podcast and live stream for business owners and executives. Support the show: buymeacoffee.com/securitysquawk Subscribe | Like | Share #SecuritySquawk #CyberSecurity #ChickFilA #OpenAI #Anthropic #DataBreach #ArtificialIntelligence #AISecurity #CredentialStuffing #BusinessRisk #SMB #Cyberattack
July 20, 2026
AI Ran Its Own Hack, Fairlife Milk Halted, 79% of Ransomware Starts With a Login
An AI just ran an entire hacking campaign on its own. No human at the keyboard, 17,000 actions in a single weekend, against Hugging Face, the platform nearly every company on earth downloads its AI from. If the tool your business relies on can be attacked by software that never sleeps, the math on cybersecurity just changed for everyone. *The cost of attacking just dropped. The value of defending just went up.* Bryan Hornung, Randy Bryan, and Reginald Andre break down this week's stories for executives, owners, and operators who don't have time to keep up with cyber news but can't afford to be blindsided by it either. First, the one that should make every owner sit up. Hugging Face, the "GitHub of AI," disclosed that an autonomous AI agent broke in through a poisoned dataset, stole credentials, and moved through its systems, logging more than 17,000 actions before it was caught. That is the workload of a full hacking crew, run by software, at a speed no human team can match. Here is the part that should reframe how you think about your own company: for years the limit on an attacker was people, and people cost money and don't scale, but an agent erases that limit. The new economy runs on agents plus employees, and the criminals are already staffing up with agents. Then it gets physical. A ransomware attack hit Coca-Cola's Fairlife, the premium milk brand doing over $3 billion a year, and shut down every one of its U.S. production plants. This wasn't stolen emails, it reached the operational systems that physically make the product, so a breach turned into a full shutdown. Because Coca-Cola is publicly traded, the attack landed in an SEC filing within days, a reminder that a cyberattack is now a material business event you may legally have to report. One detail worth noting: the Canadian plants kept running because they were separated from the U.S. network, which is exactly what good segmentation buys you. Finally, the numbers behind all of it. The new Sophos State of Ransomware 2026 report surveyed 2,158 companies that actually got hit, and the headline flips a common assumption: 79% of attacks now start with a stolen login, not some exotic exploit. Even more sobering, 97% of the victims whose attack began with stolen credentials already had multi-factor authentication turned on, which means regular MFA is being bypassed. The good news you can act on: two-thirds of encrypted victims recovered from backups instead of paying, and while ransom demands fell to around $700,000, the average cleanup still runs $1.7 million, so prevention is almost always the cheaper line item. Three stories, one thread. The cost of launching an attack keeps falling, which makes every dollar you spend defending worth more than it was a year ago. In this episode, we discuss: • How an autonomous AI agent hacked Hugging Face with no human at the keyboard • Why the Coca-Cola Fairlife ransomware attack shut down U.S. milk production • What the Sophos State of Ransomware 2026 report reveals about stolen logins • Why "we have MFA" is no longer enough to stop a ransomware attack • How network segmentation kept Fairlife's Canadian plants running • Why the new economy forces owners to think in agents and headcount • Where business owners should spend their next security dollar Security Squawk is a weekly podcast and live stream for business owners and executives. Support the show: buymeacoffee.com/securitysquawk Subscribe | Like | Share #SecuritySquawk #CyberSecurity #HuggingFace #AI #CocaCola #Fairlife #Ransomware #Sophos #DataBreach #MFA #BusinessRisk #MSP
July 20, 2026
Accenture Breached. 80% of Restaurants Hit. Fined Without a Hack.
Three companies thought they had security under control. They were wrong, and it cost them. A hacker is selling 35 gigabytes of Accenture's code, 80% of restaurants were breached while feeling secure, and a defense contractor paid the government half a million dollars without ever being hacked. *What you claim about your security is now what you'll answer for.* Bryan Hornung, Randy Bryan, and Reginald Andre break down this week's stories for executives and owners who can't afford to be blindsided. Accenture confirmed a breach after a hacker named "888" started selling 35 gigabytes of its source code and cloud access keys. The company called it isolated and fixed but didn't say how it happened or if client data was touched. When a firm this connected leaks its keys, its customers inherit that risk. Restaurants often assume they're too small to matter. A new VikingCloud report found 94% of restaurant leaders felt confident they could stop an attack, yet 80% were breached anyway. Payment data, payroll, and passwords were exposed, and 30% reported AI deepfakes impersonating executives to approve fake payments. Confidence isn't a control. An Alabama defense contractor, LOGZONE, paid over 507,000 dollars to the Justice Department with no breach at all. They claimed a perfect security score of 110; an audit found the real number was negative 170. The government turned that false claim into a penalty, and every form you sign is now a legal statement. Support the show: buymeacoffee.com/securitysquawk Subscribe | Like | Share #SecuritySquawk #CyberSecurity #Accenture #DataBreach #VendorRisk #Restaurants #VikingCloud #DOJ #Compliance #FalseClaimsAct #SMB #BusinessRisk
283 total episodes available
Similar Podcasts
Discover related shows you might enjoy
Deep-dive analytics for Security Squawk - The Business of Cybersecurity
Frequently asked questions
Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.
- What is Security Squawk - The Business of Cybersecurity?
<p>Security Squawk is a business podcast dedicated to helping business people fight the war against cyber criminals.</p> - How often does this podcast release new episodes?
This podcast updates daily.
- Where can I listen to this podcast?
This podcast is available on 9 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
- Does this podcast accept guests?
No, this podcast does not typically feature guests.
Legal Disclaimer
Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.
All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.
We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.
While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.
By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.