Advertise on podcast: Thales Security Sessions

Today’s data breaches don’t start with hackers breaking down the door. It is much more dangerous than that. They start with organizations believing they’re already secure. But with generative AI accelerating attacks, unstructured data exploding across clouds, and collaboration tools, AI systems, and post-quantum threats moving quickly from theory to reality, many security leaders are finding themselves flying blind. In this episode of the Thales Security Sessions podcast, we are joined by Jay Thurston, Field CISO at Thales, for a candid conversation about why cybersecurity isn’t about fear, so much as clarity, and what organizations must do now to protect their data, their reputation, and their future.

As we start a new year, the cybersecurity threat landscape is evolving faster than most organizations can track, let alone defend. AI-powered predator bots that never sleep, an explosion of API traffic, and autonomous agents operating at machine speed are quietly reshaping the rules of engagement. In this, our annual predictions episode of the Thales Security Sessions podcast, Tim Chang, Global VP & GM of Application Security at Thales, delivers a clear warning: yesterday’s perimeter-based thinking is no longer enough. To survive what’s coming next, organizations must embrace a “security anywhere” mindset: one that delivers visibility, control, and protection wherever applications, data, and AI actually live.

There are some people in the cybersecurity industry who blaze a trail so bright, it’s impossible and frankly unwise to miss them. Our guest on this episode is one of those people. We’re delighted to welcome back FC, aka Freaky Clown. He’s an ethical hacker with an impressive background, for example being paid to break into hospitals and rob banks, all in the interest of helping his clients improve security. He shares his wisdom on LEGO for hackers, the dangers of putting AI into everything, and his favorite advice for CISOs and the companies that employ them.

When cybercriminals lock up a children’s hospital, denying treatment to kids with cancer, you realize just how dark the world of ransomware has become. Healthcare isn’t just another target, it’s the lifeline of our society, and it’s under siege. In this episode of the Thales Security Sessions, Dr. Adrian Mayers, CISO of Premera Blue Cross, joins me to expose the reality of this growing “feeding frenzy” of cyberattacks on healthcare, the rise of AI-driven threats, and what it truly takes to defend the systems, and the people, who keep us alive. It is a lesson on the human element of defense that can be applied to any industry.

Deepfakes are no longer just entertainment gimmicks, they’re powerful tools that can fool the eye, the ear, and even entire organizations. In this episode, host Steve Prentice speaks with Jason Keenaghan, Director of Product Management at Thales, about the rise of deepfake-enabled fraud, the ongoing cat-and-mouse game between attackers and defenders, and what businesses can do to protect themselves. From multimillion-dollar heists to the surprising opportunities for legitimate use, we explore how deepfakes are reshaping trust, culture, and cybersecurity.

Every cyber breach has one thing in common: a human being. Whether it’s clicking on a phishing email, rushing past a warning message, or simply being overwhelmed by the pressures of work, people are often labeled as “the weakest link” in cybersecurity. But is that really fair? Should the responsibility for safer behavior fall solely on individual employees—or on the organizations and cultures that shape how they work? In this episode, we speak with Bruce Hallas, founder of Re-thinking the Human Factor, to uncover why the real solution isn’t more training or blame, but smarter processes and cultural change that support humans in doing the right thing.

Imagine waking up each day knowing that somewhere in the world, an unseen enemy is already at work—writing code, exploiting vulnerabilities, and using AI to launch attacks that could cripple businesses or compromise millions of people. For Nadav, Senior Director of Threat Research at Thales, this isn’t science fiction. It’s his daily reality. In this episode, we step inside his world—a world where every decision can mean the difference between safety and disaster, and where staying one step ahead of attackers is not just a job, it’s a mission.

The next wave of cyberattacks won’t be launched by humans alone, and neither will the defense. As Distributed Denial-of-Service (DDoS) attacks grow in scale and frequency, machine learning and large language models (LLMs) are stepping into the front lines. But how effective are they? What trade-offs exist between accuracy, speed, and risk? And how close are we to autonomous defense systems? In this episode, Steve Prentice speaks with Johnathan Azaria, machine learning platform lead at Thales, who offers a rare behind-the-scenes look at how AI is being used today, and what’s coming next.

Data is the lifeblood of every business, and it is flowing faster and more freely than ever. But with great data comes great risk. Organizations of all types are drowning. They have sensitive information scattered across cloud platforms, SaaS apps, and data lakes—often with no clear idea of where it all is, who can access it, or how well it's protected. If that isn’t bad enough, when trouble strikes, a breach, for example, are you able to tell your customers that the breached data is useless to the threat actors because it was carefully encrypted? Are you able to prove to the regulators that you had the right controls in place, and that you have been proactively monitoring your data? This is no longer just your data that is at stake. Your reputation and your future are on the line as well.

What does it take to build the world’s most influential cybersecurity event? In this episode of the Thales Security Sessions podcast, Linda Gray Martin, Senior Vice President of the RSA Conference, takes us behind the scenes of RSAC, revealing how a small core team and a mission-driven culture orchestrate a 15-month planning cycle involving industry experts, world-class keynote speakers, and 43,000+ attendees. From the evolution of the conference to celebrity appearances and lessons learned from the pandemic, this conversation offers a rare and inspiring glimpse into the heart of cybersecurity’s biggest stage.

In this episode of the Thales Security Sessions podcast, host Steve Prentice speaks with Grainne McKeever of Thales about the growing threat of bad bots in the travel industry. Drawing on insights from the 2025 Imperva Bad Bot Report, Grainne reveals that travel has now overtaken retail as the most targeted sector, and explains more about how these bots perform malicious activities like scraping pricing data, spinning airline seats, and committing loyalty fraud through credential stuffing. The conversation explores how AI has made bot attacks cheaper and more accessible, threatening both large platforms and smaller travel agencies. Grainne outlines key defensive strategies and emphasizes the importance of being proactive, as AI also empowers defenders—but only if they're prepared. The episode is a wake-up call for the travel sector to take bot threats seriously.

AI is revolutionizing cybersecurity, but with rapid advancements come unprecedented risks. In The Hidden Battle for AI Security, three leading data security experts from Thales pull back the curtain on the evolving threat landscape—where attackers weaponize AI for breaches, defenders scramble to stay ahead, and businesses risk losing control of their most valuable assets. From AI-driven cyberattacks to the urgent need for model protection and adaptive security strategies, this episode breaks down the hidden vulnerabilities that could impact every organization relying on AI. If you think you're prepared, think again—because the battle for AI security is unfolding now, and the stakes have never been higher.

A cyberattack is a period of enormous stress for an organization. Most companies lack the experience and the expertise to handle such an event effectively, which can lead to further damage to assets, brand, and reputation. This is why it is so important to have a breach coach at the top of your list of emergency contacts, should the worst happen. In this episode, hear from an actual breach coach, who will tell us why this person is so important to a company’s future.

Software monetization isn’t just about selling more subscriptions—it’s about survival. In today’s fast-moving digital economy, companies that fail to capture, protect, and maximize the value of their software risk falling behind, losing revenue, and even compromising security. From industrial automation to cutting-edge AI in healthcare, software isn’t just a product—it’s the backbone of modern business strategy. In this episode, we’re joined by Dale Hopkinson, an expert in software monetization, to uncover why this strategy is essential for growth, resilience, and competitive advantage. If you think monetization is just about pricing models, think again—because without the right strategy, you might be leaving your company's future on the table.