We explore behavior-based risk scoring (0–10), why “nudges” can be more effective than instant blocking, and how AI tools can accidentally (or deliberately) become new data-exfiltration paths. Sander also shares a striking real-world style story: a lawyer printing PII late at night to a different printer than usual—individually allowed actions that, together, revealed a serious insider risk pattern.

🎧 Listen now, connect with Louis and Sander on LinkedIn, and subscribe for more NEVERHACK Estonia Cybercast episodes.

They discuss how AI red teaming works at scale (thousands of test prompts), how guardrails can inspect both prompts and responses, and why smart policies (like allowing prompts but blocking file uploads) can protect sensitive data without wrecking user experience. Plus: why coaching and employee education still beat buying “one more tool.”

🎧 Listen now, follow NEVERHACK Estonia Cybercast, and subscribe for more real-world security conversations.

They explore a practical question with huge implications: if an AI logs in and acts on your behalf, is it using your identity—and are you responsible when it makes a mistake? From low-risk tasks like emails to high-value actions like purchases or registry updates, the conversation unpacks guardrails, time-limited permissions, “human in the loop” approvals, and why e-services may need more machine-to-machine APIs.

Listen now, follow NEVERHACK Estonia Cybercast, and connect with us on LinkedIn to continue the conversation.

You’ll hear why international cooperation is the biggest bottleneck, why deterrence depends more on the likelihood of being caught than harsher punishment, and how Estonia thinks about defending a highly digital e-state without compromising citizens’ rights. Plus: the human side—what it’s like to prosecute crimes at massive scale, and why public officials must live with extra caution online.

🎧 Listen now, follow NEVERHACK Estonia CyberCast, and visit our website for more episodes and insights.

🎧 Listen now and share this with your CEO/board team. For more episodes, visit our website and subscribe.

You’ll learn the difference between E-ITS (Estonia’s detailed, prescriptive standard) and ISO 27001 (international, risk-based), what audits and evidence look like, and what “management responsibility” means in practice. Andres also shares practical first-step examples—policies, risk management, incident handling, asset/vulnerability management, and staff awareness—so you can start building compliance without panic.

🎧 Listen now, subscribe for more, and contact NEVERHACK if you need guidance on where to begin.

They also cover hiring-process malware traps, supply-chain invoice scams, and how QR code phishing moves victims from protected laptops to less protected phones. Most importantly: what actually works in the real world—continuous simulations, behavior-driven metrics, and building awareness without blame.

🎧 Listen now, follow/subscribe for more CyberCast episodes, and share this with someone who still thinks “I’d never fall for phishing.”

Through real-world examples and testing experiences, the discussion explains the difference between jamming and spoofing, how navigation systems behave under interference, and why trust in positioning data has become a security concern. Rather than focusing on a single solution, the episode looks at broader principles such as independent verification, resilience, and operational awareness.

🎧 Listen now and subscribe for more practical discussions on real-world security challenges from NEVERHACK Estonia.

Discover why microsegmentation and Zero Trust matter, how to secure legacy machinery, and why monitoring network traffic is the fastest path to stronger industrial cybersecurity. Packed with practical insights and future-focused thinking, this episode is a must-listen for anyone navigating Industry 4.0.

From storytelling to closed-loop communication, Andero shares practical, real-world strategies that CISOs and teams can start using today.

Tune in to discover how to build stronger defenses by understanding the human mind.

They reveal what it takes to roll out EDR at national scale — from automation and tuning to trust, collaboration, and long-term learning. Discover how “last-mile security” became Estonia’s strongest defense layer and what other organizations can learn from it.

Listen now and explore the full playbook behind one of the most ambitious public-sector cybersecurity rollouts in Europe.

In this episode, recorded live at the Nordic-Baltic Security Summit, Margus Anvelt, Head of Security and Compliance at Pactum AI, joins Ronnie Jaanhold from NEVERHACK to discuss how autonomous negotiation platforms are transforming enterprise procurement and what new cyber risks they introduce.

Discover how Pactum empowers procurement teams with AI-driven agents that negotiate with suppliers, the security challenges of rule-based vs. generative AI, and why continuous penetration testing is essential in the age of AI autonomy.

In this episode, Ronnie Jaanhold sits down with Padraigh Conway from Keeper Security to discuss the evolution of password security, best practices for businesses, and the latest trends in authentication.

In this episode of Cybercast, Marvin Ngoma from Elastic joins host Ronnie Jaanhold to cut through the noise and uncover what AI actually does in cybersecurity.

Topics covered:

* AI vs. machine learning—what’s the difference?

* How security teams can leverage AI for real impact

* Common AI myths—will AI replace cybersecurity jobs?

* Elastic’s latest AI innovations and real-world use cases

AI isn’t magic—but when used correctly, it reduces alert fatigue, speeds up investigations, and helps analysts focus on real threats. Learn how AI-powered threat detection is evolving and what your security team should do next.

In this episode of CyberCast, Trellix’s Peter Helms pulls back the curtain on the modern threat landscape, from ransomware-as-a-service to stealthy living-off-the-land attacks. Learn how APTs are evolving, why phishing remains a top entry point, and what it takes to defend against adversaries using your own tools against you.

Peter shares jaw-dropping examples from his ethical hacking days, explains how Trellix helped disrupt major threat actor groups, and outlines why alert fatigue can be your biggest blind spot.

Plus, discover how AI is reshaping threat detection and why adaptive, risk-based defenses are the key to staying ahead.

In this episode of CyberCast, CyberArk’s Bartosz Krynski joins Ronny Jaanhold to explore:

* What machine identities really are

* Why traditional passwords are failing us

* How attackers exploit identity as their top entry point

* The rise of MFA, certificates, and zero trust architecture

* Real-world stories from ransomware to reputation loss

Tune in for practical tips, surprising insights, and why identity is the new battleground.

Cybercriminals are evolving faster than ever—ransomware gangs are more resilient, cyber extortion is thriving, and AI-driven disinformation is reshaping digital security. In this episode, cybersecurity expert Maciej Martinek from Recorded Future joins Ronnie Jaanhold to break down:

* The rise of new ransomware gangs after LockBit’s takedown

* AI’s role in phishing and disinformation campaigns

* Why threat intelligence is critical for cybersecurity strategy

* The biggest cyber risks businesses must prepare for in 2025

Stay ahead of emerging threats and discover expert strategies to fortify your cybersecurity defenses.

Mida saates käsitleme?

– Mis on NCSC-EE ja milline on selle roll Eesti küberkaitses? – RIA 2025. aasta küberturvalisuse aastaraamat – olulised teemad ja trendid – Kuidas igaüks meist saab aidata tugevdada riigi ja ettevõtete küberturvet?

Recorded live at the Nordic-Baltic Security Summit 2024, we sit down with Elastic's Security Architect Marvin Ngoma to discuss Elastic Security. Elastic empowers organizations with advanced SIEM, endpoint, and cloud security capabilities built on a powerful data and search foundation.

Key takeaways:

– The evolution of Elastic Security from a data platform to a security powerhouse.

– How AI and GenAI streamline security workflows.

– The flexibility of Elastic’s free and paid models for organizations of all sizes.

In this special episode, Louis reveals his behind-the-scenes secrets to engaging a technical audience, the power of humor, and how AI shapes the conversation in 2025. From his unexpected career path to lessons learned moderating for over five years, you’ll get both laughs and leadership insights.

We also explore the practical side of NBSS — from hands-on workshops to Capture the Flag challenges — and why it’s a must-attend for business leaders and tech pros alike.

🎧 Listen now and discover how to make security content human, engaging, and impossible to ignore.

🛑 Key topics include:

• Real-life ransomware cases and their impact
• The psychological chaos of unprepared responses
• Top mistakes organizations make during cyber incidents
• The difference a prepared incident response team makes
• Indicators of effective recovery

Don’t miss Henri’s expert advice on using AI responsibly while staying compliant!

From phishing scams to cryptocurrency heists, Ago discusses the most common cyber threats affecting individuals and organizations in Estonia and beyond. He explains how the criminal landscape has transformed into a "crime-as-a-service" model, making cyberattacks more accessible and harder to defend against.

From supply chain intricacies to preventing cyber threats, this episode offers valuable lessons for anyone navigating the intersection of retail and cybersecurity.

Learn how these communication principles extend beyond the tech world and into the vital "people factor" in cybersecurity and AI-driven environments.

Kuula, et saada teada, mida sellelt aasta tippsündmuselt oodata ja miks sa sellest ilma jääda ei taha!

Saatest kuuled praktilisi soovitusi küberhügieeni parandamiseks ja kriisijuhtimisplaanide koostamiseks.

Head kuulamist!

Saates arutatakse küberturvalisuse rolli olulisust jätkusuutliku tootmise säilitamiseks ja uurivad strateegiaid küberohtude eest kaitsmiseks.

This episode is a must-listen for anyone interested in the evolving dynamics of cybersecurity.

Andmeleke on alati tõsine sündmus, kuid sellest saadud õppetunnid võivad olla hindamatud nii tarbijatele kui ettevõtetele, kes soovivad oma tegevuses rakendada parimaid andmekaitse praktikaid.

A must-listen for professionals keen on understanding the future of digital security and innovation!

Seda teemat lahkame täna CYBERS’i ründava meeskonna tiimijuhi Kaspar Jüristoga.

Kas suured keelemudelid on alati usaldusväärsed? Millised on nende piirangud ja millised probleemid võivad tekkida? Kuidas me saame aru, kui AI "hallutsineerib", ja mis seda põhjustab? Uurime ka, kuidas AI-d ohutult kasutada, arvestades privaatsust, turvalisust ja eetikat. Kuula saadet, et saada nendele küsimustele vastused ning mõtle koos meiega, kuidas tööriistad, inimfaktor ja uus turbedomeen meie digitaalset tulevikku kujundavad.

Päevakajaliste uudiste rubriigis räägib Siim krüpteeritud e-mailide lahendusest, mida Google pakkuma hakkab. Siinjuures on oluline teha meeldetuletus, et kui tarkvara pakub mingit seadistust, siis tuleb veenduda, et see oleks ka sisselülitatud.

Britta’s definition is simple, and that simplicity is the point: CTI is about making information useful. Not just collecting data, not just “watching the dark web,” and not just generating reports. CTI is the process of taking scattered signals—news, indicators, chatter, leaks, vulnerabilities—and adding enough context that a security team can act.