The cyber angle on tech and AI. Real conversations, no scripts, no sales pitch, no corporate answers.
The angle is cyber, but the guest list is the whole of tech: founders, CEOs and CTOs alongside CISOs, security architects and SOC analysts. What is actually happening with cyber and AI, where the industry gets it wrong, and what it means for anyone building or running technology in the UK or the United States. New episodes post weekly, and every one is published on this page.
Listen and subscribe
9 Nov 2026 · 45 min
Alexis Ternoy, Chief Information Officer at Endeavour Mining
A mining CIO explains why remote sites with failing satellite links, local suppliers with no digital culture, and PLCs that can't be patched make textbook cyber resilience models fall apart, and what actually works instead.
Conversations with security leaders in the UK and the United States.
6 Nov 2026 · 23 min
Aaron Davey, Cyber Security Analyst at Intersys
A frontline SOC analyst explains how triage, documentation and AI actually play out day to day, and why a Cyber Essentials pass does not always mean a genuinely safer business.
5 Nov 2026 · 42 min
Leonie Witte, Cyber Security Manager at CyPro
A cyber security manager explains why staff quietly misuse workplace AI tools, why an ISO certificate does not prove an organisation is actually secure, and why boards care less about a single risk score than about ranges of financial and operational impact.
30 Oct 2026 · 34 min
Peter Kovacs, Head of Information Security at nudge
A practical look at running security, privacy and AI governance as a single discipline inside a fast-growing SaaS handling sensitive financial data, including where internal AI use quietly leaks data and how to tell a control engineers actually follow from one that just looks good on paper.
29 Oct 2026 · 30 min
Sam Boswell, CTO at terralayr
A CTO working across energy storage and industrial IoT explains how OT and security engineers can find common ground, why machine identity at device scale demands automation, and what it really takes to keep an always-on energy platform resilient when cloud providers fail and AI reshapes how code gets written.
28 Oct 2026 · 36 min
Geet Pradhan, Security Lead at Noli
A founding security engineer explains why detection as code, outcome-based scoping for AI agents and using AI to review AI-generated code matter more than chasing theoretical perfection, and why human frustration with controls is still the risk nobody wants to name.
26 Oct 2026 · 35 min
Fabrizio Moscon, Distinguished Engineer at Ninety Percent of Everything (90POE)
A look inside the unusually relaxed security culture of maritime technology, from captains overriding IT policy to crew data crossing multiple stakeholders on patchy satellite links, plus a candid breakdown of how AI is changing code review without removing human safeguards.
23 Oct 2026 · 21 min
Adam McElroy, Chief Technology Officer at Eclypses
A CTO working on post-quantum encryption explains why harvest now decrypt later is already a live threat, how crypto agility can be achieved without rebuilding systems from scratch, and what years in identity and bank risk oversight taught him about boards, zero trust and AI-generated code.
21 Oct 2026 · 31 min
Clement P'ng, IT Manager at BW: Workplace Experts
An IT manager explains why in-house support teams get starved of budget and attention, the real difference between outsourced and in-house service desks, and what day-to-day identity management, vendor reviews and compliance certifications actually look like on the ground.
20 Oct 2026 · 25 min
Mark Logalbo, VP Information Security at Fanatics
A GRC leader at a fast-growing, multi-sector group explains how to set a baseline controls programme that subsidiaries can layer on top of, why cutting third-party review times means questioning what you actually ask vendors, and why he resists dressing up risk figures with more precision than they deserve.
19 Oct 2026 · 37 min
Lisa Ventura, Chief Executive & Founder at AI and Cyber Security Association
Lisa Ventura explains why fear based security awareness backfires, how psychological safety changes whether staff report mistakes, and why she now calls kindness a security control in an industry facing a retention and gender gap.
16 Oct 2026 · 46 min
George Anagnostopoulos, Co-founder & CISO at PlugSecure
A look at securing EV charging infrastructure where IT and OT collide, covering supplier trust, machine identity sprawl and where AI can and cannot be trusted near physical systems.
15 Oct 2026 · 42 min
Bill McAneny, Psychologist at MyTeamBuilder
An organisational psychologist explains why hiring decisions are made in the first 30 seconds and justified for hours afterwards, why annual awareness training rarely changes behaviour under pressure, and what actually keeps high alert security teams from burning out.
14 Oct 2026 · 36 min
Steve Wilkinson, CTO / Former Professor & Senior Lecturer at Avioxx
A chartered chemical engineer turned CTO explains how gasification plants turn waste into jet fuel, why OT risk in the chemical industry means explosions and toxic releases rather than data loss, and why cyber security still has no place in the chemical engineering curriculum.
13 Oct 2026 · 51 min
Bart Read, AI Lead at Equal Experts
A veteran software engineer turned fractional CTO explains why AI coding tools act as an accelerator pedal for both good and bad engineering habits, why shadow AI use creeps in when official tools are too restrictive, and why automating a process beats relying on written guidelines to fix recurring security issues.
7 Oct 2026 · 29 min
Jake Bernardes, CISO at Gambit Security
A CISO explains why point-in-time compliance gives a false sense of assurance, how to answer the board's exposure question without hiding behind a heat map, and where AI is genuinely helping security teams connect data that used to sit in silos.
5 Oct 2026 · 38 min
Dr Cephas Mpungu, Programme Leader & Lecturer in Cyber Security at University of Winchester
A university cyber security programme leader explains why graduates struggle to break into the industry, how AI is quietly removing the junior tasks that used to build analyst judgement, and what students can do instead to stand out.
2 Oct 2026 · 22 min
Bruno Bossola, Co-Founder & CTO at Meterian
Bruno Bossola explains why dependency and supply chain risk keeps slipping past security teams, and why the fix is rarely another scanner but a proper process across the whole development lifecycle. He also sets out why AI coding assistants are quietly reintroducing vulnerable libraries at scale.
30 Sept 2026 · 29 min
Joe Hubback, Partner & CISO at Elixirr
Joe Hubback explains why cyber risk quantification only really works when it's built around reasonable worst case scenarios, why third party and OT risk are often more about people than technology, and why he believes the industry's biggest blind spot is behaviour, not tooling.
28 Sept 2026 · 53 min
Thomas Owen, CISO at SoSafe
Thomas Owen explains why he sees almost all security failures as access control failures rooted in human identity, and how measurable, causal testing can actually shift intrinsic staff behaviour rather than just producing a click rate on a dashboard. He also sets out where AI has changed the economics of phishing and deepfakes, and where he draws the line between protecting staff and quietly surveilling them.
25 Sept 2026 · 30 min
Alan Simpson, Field CISO at Rapid7
A field CSO who built SOC teams from the ground up explains why board risk numbers are more storytelling than maths, why supplier questionnaires are mostly theatre, and why the weakest link line about users is wrong.
23 Sept 2026 · 45 min
Campbell Murray, Founder and Chief Security Technology Officer at Sodium Cyber Ltd
A veteran penetration tester explains why legacy technology, rigid procurement cycles and marketing-driven security purchases leave ships, planes and industrial control systems exposed, and gives a grounded assessment of how much AI is really changing offensive security today.
18 Sept 2026 · 29 min
Ben Oldham, Co Founder & CTO at AgencyTech
A practical look at how small agencies can protect themselves against phishing and social engineering, why identity and MFA now matter more than network boundaries, and how to bring AI into a business without losing control of governance and data.
16 Sept 2026 · 24 min
Chris Jefferson, Co-Founder & CTO at Advai
Chris Jefferson explains why AI systems fail by design rather than by accident, where language models and vision systems break under attack, and why some of these weaknesses have no real defence. He also covers the practical risks of data leakage, AI generated code, and handing tasks to autonomous agents.
14 Sept 2026 · 32 min
Nick Proud, Chief Technology Officer at Nexbotix
A practical look at treating unattended bots as machine identities with their own attack surface, why supply chain hits like JLR change how automation vendors get access to client infrastructure, and where AI-assisted coding and zero trust claims fall short in real deployments.
9 Sept 2026 · 30 min
Daniel Kay, Cyber Security Manager at The Health Informatics Service
A look at what it actually takes to secure NHS trusts, from managing risk on medical devices that can't simply be patched to translating cyber threats into patient safety and financial terms a hospital board will act on. Covers supplier assurance, staff retention against private sector pay, and why the NHS is far less standardised than most people assume.
7 Sept 2026 · 29 min
Dmitry Kurbatov, Co-Founder & CTO at SecurityGen
A look inside the signalling layer of mobile networks, the control plane attackers exploit while most cyber teams focus elsewhere, covering SS7 and Diameter weaknesses, why 5G security depends on the older generations it still connects to, and where accountability really sits for SIM swap fraud.
3 Sept 2026 · 35 min
Neil Catton, Fractional CTO - Criminals Move at the Speed of Code, We Move at the Speed of Policy at Global Consortium Group
A fractional CTO explains why most organisations adopt AI top-down for the wrong reasons, how ungoverned use of AI tools is creating a new class of data breach nobody has priced in, and why defenders operating at the speed of policy will always trail criminals operating at the speed of code.
26 Aug 2026 · 33 min
Jay George, CISO & Founder at Clear Loop Security
A long-time outsourced CISO explains why vulnerability backlogs pile up, why supplier questionnaires often achieve little, and why a single cyber risk number gives boards false comfort.
20 Aug 2026 · 23 min
Alex Munn, CTO at Propellant.Digital
A fractional CTO explains why AI's productivity gains are more modest than the hype suggests, why the same speed can quietly create serious security risks, and why cyber and operational risk need to be managed together.
13 Aug 2026 · 25 min
Andy Bates, CISO & Founder at StonesThro
Andy Bates unpacks what digital sovereignty actually means, why boards are fixating on AI while neglecting cyber basics.
6 Aug 2026 · 46 min
Richard Bennett, Field CTO at IBM & HashiCorp
Richard Bennett explains why he thinks true artificial intelligence does not yet exist, and what that means for how organisations should think about agentic AI risk. He sets out why observability, orchestration and governance matter more than chasing the latest AI tool.
Cyber Heard started as written interviews on LinkedIn before becoming a full podcast.
Featured · Long-form special
A former mechanic from Liverpool, 30 years in Cyber Security, keynote speaker and working stand-up. Twelve questions. No corporate answers.
Read the full interviewThe original written interviews are on LinkedIn: read them there
The questions listeners and would-be guests ask us most.
Cyber Heard is a good place to start if you want the UK perspective without the marketing. Each episode is a relaxed conversation with a security leader or frontline practitioner about what is actually happening in their world: the threats they are dealing with, where the industry gets it wrong, the impact of AI, and what they would tell someone starting out today. New episodes post weekly.
Both. The show started in the UK and we run a New York desk, so we welcome guests from either side of the Atlantic. The subject matter travels further than people expect: ransomware, board reporting, the shortage of good engineers and what AI is really doing to security work are the same conversations in London and New York. Where they genuinely differ, which is mostly regulation, hearing both is more useful than hearing one.
The work is close to identical; the rules around it are not. A New York security leader is dealing with NYDFS Part 500 certifications and SEC disclosure timelines, while a UK counterpart is dealing with the NIS regulations, the ICO and Cyber Essentials. Hiring differs too: notice periods here, at-will employment there. Guests from both markets tend to find the other side's constraints more interesting than their own.
Cyber Heard is the invitise podcast: the cyber angle on tech and AI. The lens is always cyber, but the show is made for anyone in tech with an opinion on where cyber and AI are taking us. No scripts, no sales pitch, no corporate answers. It began as written interviews on LinkedIn and grew into a full podcast, and every episode is published on this page.
On Spotify, Apple Podcasts and YouTube, or through the RSS feed if you use another podcast app. Every episode is also published on this page, so you can watch or listen without leaving the site.
People from across tech in the UK and the United States, not just the security corner of it: founders, CEOs, CTOs and development leaders alongside CISOs, security architects, SOC analysts and frontline practitioners. What they share is an opinion on cyber and AI and what it means for their world. Guests speak as themselves rather than reading corporate lines, which is what keeps the conversations honest.
Email cyberheard@invitise.com. If you work in tech and have something to say about cyber or AI, we would love to hear it, wherever you are based in the UK or the United States. You do not need to be a security specialist. Episodes are relaxed conversations, not interrogations, and there is no script to follow.
A 16-page invitise briefing for cyber, risk and people leaders. Why the hiring window has narrowed, what 24-hour mobilisation actually requires, and the four conditions that have to be true for next-morning on-site to mean something.
of senior cyber roles take 6 months or longer to fill in the UK.
longer than other IT roles, senior cyber vacancies stay open.
of large UK businesses now own cyber at board level.
Spotify
Apple Podcasts
YouTube
RSS
@cyberheard