Practical cybersecurity talk for modern defenders.
401 Access Denied is an interview show about the working realities of cybersecurity, from zero trust and identity threats to boardroom risk. Joe Carson keeps the conversations practical, asking guests to connect big security ideas to daily decisions inside organizations.
PRESS PLAY
401 Access Denied is a cybersecurity interview show centered on practical conversations with people working across InfoSec, identity security, offensive security, governance, and executive risk. Joe Carson leads the format with a warm, professional style. The episodes tend to begin with guest background and then move into a focused industry theme, such as balancing security with availability, communicating value in a crowded security market, planning for AI risk, or bringing cybersecurity into the boardroom. The show favors education over alarm. It talks about threats directly, but the real emphasis is on controls, decision-making, and how security teams can make better choices under pressure. Recent episodes return often to identity, privileged access, zero trust, ransomware, extortion, AI governance, and the changing role of security leadership. There is a clear interest in how attackers behave. There is also a clear interest in how defenders communicate. One strong thread is the gap between technical language and organizational understanding: guests challenge jargon, explain why buyers remember solved problems more than booth slogans, and argue for security programs that speak in the language of the people using them. Another recurring thread is resilience. The show treats prevention as important, but also assumes compromise can happen and asks how teams build layers that keep failures contained. AI appears as both an opportunity and a risk, especially around training data, autonomous agents, customer data, and governance. Boardroom episodes widen the lens from tools to accountability. Conversations about democratizing cybersecurity keep the show from speaking only to large, well-funded teams. The pacing is deliberate, and the register is businesslike without becoming cold. Delinia sponsorship and privileged access management messaging are present, so listeners should expect a branded setting. Even so, the guest discussions range beyond a single product area. 401 Access Denied works best for people who want cybersecurity explained through operational judgment: what to prioritize, how to talk about it, where controls can fail, and how modern security leaders think through change.
Made for: The show is for cybersecurity practitioners, IT leaders, security marketers, and business stakeholders who need practical context around current InfoSec risks. It also suits listeners building a security career who want plain-spoken exposure to expert conversations.
What sets it apart: 401 Access Denied blends technical security topics with communication, leadership, and board-level concerns. Its strongest distinction is the way conversations connect identity, AI, ransomware, zero trust, and privileged access to how organizations actually explain and apply security decisions.
Welcome to the award-winning 401 Access Denied podcast, voted Best Cybersecurity Podcast for North America by the 2021, 2022, and 2023 Cybersecurity Excellence Awards and named 2023's Best Tech Podcast by TMCnet. Want authorized access to top security tips from experts in InfoSec? Bi-weekly, join the 401 Access Denied Podcast with Delinea's ethical hacker Joseph Carson as he shares life lessons and insights into the world of InfoSec – the good, the bad, and the ugly. Joe will be speaking with current leaders and experts in the IT and Cybersecurity fields discussing topics ranging from DevSecOps and Ransomware attacks to diversity and the retention of talent. Whether you want to learn more ab…
Based on 6 episodes we listened to · September 2026
Joe Carson connects cybersecurity threats with the governance, communication, and operational choices that determine whether defenses work.
401 Access Denied gives Joe Carson room to test cybersecurity ideas against the people expected to apply them. His guest conversations repeatedly move from emerging threats to operational questions: who controls AI training data, how autonomous systems should be governed, where…
At the security expo, "next gen AI" meets your question: what problem does it solve?
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at how cybersecurity brands get remembered when the jargon gets loud.
The episode centers on brand and communications in cybersecurity, with Joe Carson and George Kamide returning to a practical question: how vendors get remembered for solving a real problem instead of leaning on jargon.
A clear, practical look at zero trust as a shift from network boundaries to layered defense.
Security and control sit at the center of this review, framed through the question of what an organization can safely trust across networks, devices, and the information moving between them.
A practical security discussion about agent control, data origins, and the risks of autonomous systems.
401 Access Denied stays focused on the security questions around autonomous agents, with Dan Lohrmann and Joe Carson returning to access, control, and the origins of training data.
Cybersecurity lands best here when it starts with the person using it.
Wendy Nather and Joseph Carson keep the focus on practical security: what people need to see, how fast they need to act, and why the right answer shifts with the person in front of it.
A grounded look at how AI is reshaping cybersecurity through governance, evidence, and faster threat automation.
401 Access Denied looks at how AI is being folded into security work, governance, and attack automation. Joe Carson and Frank Fuchovitz make the strongest case for careful adoption by returning to data boundaries, clear oversight, and the need to prove that security tools are…
A practical look at attacker economics, extortion, and the tradeoffs defenders face.
Joe Carson and Gal Diskin keep the focus on attacker economics, extortion, and the tradeoffs defenders face when resistance raises the cost of attack.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
Joe Carson talks with George Kamide, head of community at the CISO Society and host of Bare Knuckles and Brass Tacks, about branding, communications, and community building in cybersecurity.
401 Access Denied host Joe Carson interviews Wenzel Huettner, CEO and co-founder of New Zealand cybersecurity firm Defend, about balancing security, availability, and usability.
401 Access Denied features Joe Carson and Dan Lohrmann, with Lohrmann speaking as Presidio field CISO and author of "Cyber Mayday and the Day After." Lohrmann says 2025 will be shaped by "agent-based" GenAI, "pig butchering," and attacks that combine deepfakes, text, email, and voice phishing.
Joseph Carson interviews Wendy Nather, a former CISO, industry analyst, and retail ISAC research director, about usability, democratizing security, and the pressures of defending real organizations.
AI deepfakes are being used in hiring, from interviews to laptop provisioning.
Host Joe Carson, Chief Security Scientist at Delinia, talks with Gal Diskin, founder of Linear Labs (acquired by Delinia) and former Palo Alto Networks endpoint lead, about how identity threats are evolving.
Craig Jones says Interpol’s cybercrime work must connect countries whose law enforcement capabilities differ sharply across 196 member states.
Chris Katz says ERP roles should be designed around documented segregation-of-duties risks, not copied wholesale from SAP or Dynamics defaults.
An interview with a cybersecurity expert discussing his career in InfoSec and offensive security.
Joe Carson interviews Delinea CEO Art Gillian about the growing importance of cybersecurity in the boardroom.
Host Joe Carson and guest Dustin 'Evil Mog' Haywood debate whether passwords are dead and discuss the future of authentication.
Host Joe Carson interviews a former army intelligence officer turned pen tester about his background and cybersecurity insights.