Crucial Tech

150 episodes listed below

Listen to the show on

Security jargon, AI hype and privacy law, spelled out.

The gist

Crucial Tech explains the acronyms and hype of the security business, from cloud application protection platforms to a new California mechanism for deleting personal records. Host Lou Covey mixes conference reporting, interviews with guests and blunt questions about whether the AI boom can last.

PRESS PLAY

Find your next episode

All episodes

About Crucial Tech

Crucial Tech is a technology and cybersecurity show that treats the industry's vocabulary as something to decode rather than assume. Its host, Lou Covey, introduces himself with a standing boast: he probably knows more about the topic than the listener, and when he doesn't, he knows someone who does. That line describes the format well. Some episodes are Covey on his own, reporting and giving his opinions. Others hand the floor to a guest. One guest, who has built security programs at places that had none, reduces the job to two questions: what do you own, and who has access to it? Only then, the guest argues, does a risk program stand a chance. The same questions carry over to AI: which tools are in use, for what, and touching which data. Privacy law gets the same practical treatment. In 'Episode 11.23 - DROP and give me privacy! New California mechanism for deleting your records', a guest counts roughly 19 or 20 states with comprehensive privacy laws, each slightly different, and compares them with the EU's GDPR. Covey's own read is that as the federal government steps back and the states step in, the GRC industry stands to benefit. The show also goes to the trade floor. In a reporter's notebook from the RSAC conference in San Francisco, his fifth time there, Covey spells out CNAPP, Cloud Native Application Protection Platforms, and explains why it matters: everything done on computers and the internet runs through applications. AI comes up again and again in the episode titles, and the show does not settle on one verdict. 'Episode 11.24 - Is the AI industry collapse beginning?' ties the sector's fortunes to shipping through the Strait of Hormuz, with knock-on effects for fertilizer, helium for MRI machines and the acid baths used to process rare earths. Another conversation notes investors staying out of the market because they expect a collapse and want to pick up the pieces. Yet the security-program episode closes with Covey predicting that AI's effect on cybersecurity will probably be better than people imagine. There is also an episode called 'Episode 11.22 - A conversation with Claude: AI industry on a knife edge', and a vibe coding episode where the talk turns to lawyers as a kind of hacker, hunting for loopholes in laws, and to what AI might do about those gaps. The sponsor, Cyber Protection Magazine, gets an argument of its own in the ad reads: legacy media, which Covey counts himself part of, is more trusted than social media, and Pew Research is cited in support. The tone is plainspoken and a little gruff, closer to a reporter's notebook than a product briefing. For a first listen, the RSAC notebook on CNAPP shows the explanatory approach at its clearest. The Strait of Hormuz episode shows how far the show will range to put a tech story in context.

Made for: Suits a listener who keeps running into terms like CNAPP, GRC or vibe coding and wants them explained in plain language. It also suits someone who doesn't mind a host with firm opinions about AI hype and social media.

What sets it apart: Instead of assuming the listener already speaks security shorthand, Crucial Tech spells out the acronyms. It also connects the technology to things outside the server room, such as oil shipping lanes, state legislatures and nervous investors.

In their own words

Unraveling the technology that affects us all but that few of us understand, in a format to give you a basic understanding in the time it takes to drive to and from the grocery store.

Why you'd press play

A ticket scam detours through an Army beer survey; your own click reflex is suddenly under review.

Press play if you want

  • an AI security reality check that starts with who can access your data
  • privacy law explained through the question of who actually has to delete your records
Read the full recommendation in PlayNext →
AI and cybersecurityAI industry economics and investor skepticismcloud application security (CNAPP)privacy regulation and data deletionbuilding security programs from scratchvibe codingRSAC conference briefingstrust in legacy media versus social media

Talks about

Best episodes of Crucial Tech

Short reviews from the PlayNext desk, based on the episodes we processed.

Episode 12.2 - Putting AI and security into perspectiveApr 16, 2026

A practical reminder that securing AI starts with knowing what is in use, what it touches, and who can access it.

AI is framed here less as a magic security layer than as another asset that needs inventory, ownership, and controls. Doug Kirshen, CISO for AppFire, argues that a security program begins with knowing what the organization owns and who can access it, then extends that discipline…

Episode 11.23 - DROP and give me privacy! New California mechanism for deleting your recordsFeb 26, 2026

California's deletion right becomes a state-by-state compliance challenge.

Crucial Tech looks at California's DROP platform as the practical machinery behind the DELETE Act, giving Californians a way to ask that data held by data brokers and others be erased.

Episode 11.21 - Vibe coding losing it's shine, but we're trying it anywayFeb 11, 2026

A candid post-hype conversation about vibe coding, where AI optimism meets human loophole-hunting.

Crucial Tech returns to vibe coding after the initial buzz has faded, but not after the practice has stopped mattering inside Cyber Protection Magazine.

Episode 11.19 -- Are you naive enough to fall for a ticket scamJan 23, 2026

A beer survey becomes a clear reminder of how urgency and trust can weaken judgment around digital fraud.

Fraud lands best when Crucial Tech keeps close to one small, believable lapse: a speaker remembering an internal survey about beer for the Army birthday. The promise is modest, which makes it sharper.

Podcasts like Crucial Tech

  • Security Now (Audio)TWiT

    Security news worked through one mechanism at a time.

  • Malicious LifeMalicious Life

    Hacks, trials and frauds, told as cybersecurity history.

  • Click Here

    Technology's mechanisms, power's consequences.

  • Hacking HumansN2K Networks

    Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.

  • The Privacy AdvisorJedidiah Bracy, IAPP Editorial Director

    Privacy law meets the systems it governs.

  • The CyberWireAlan Geason

    Cybersecurity headlines, technical detail and the decisions behind defense.

Episodes

  1. 1

    Episode 10:20: Zero Trust is simple, but complex: A conversatiion with RegScale CISO

    ·30m
  2. 2

    Season 12.1 - Reporter's notebook: Orca Security, intro to CNAPP

    ·9m
  3. 3

    Episode 11.24 - Is the AI industry collapse beginning?

    ·10m
  4. 4

    Episode 11.23 - DROP and give me privacy! New California mechanism for deleting your records

    ·20m
  5. 5

    Episode 11.22 - A conversation with Claude: AI industry on a knife edge

    ·16m
  6. 6

    Episode 11.21 - Vibe coding losing it's shine, but we're trying it anyway

    ·22m
  7. 7

    Episode 11.20 - Will you miss CISA 2015 now that it's gone?

    ·11m
  8. 8

    Episode 11.19 -- Are you naive enough to fall for a ticket scam

    ·21m
  9. 9

    Episode 11.18 - Decentralization for many, not all

    ·24m
  10. 10

    Episode 10.4 - How moderation works (It ain't what you think)

    ·12m
  11. 11

    Episode 10.3 - James Bore on our fascination with shiny objects

    ·27m
  12. 12

    Episode 10.2 - Bye bye, Zuck

    ·25m
  13. 13

    Episode 11.17 - Decentralization and Sovereign Cloud Predictions

    ·22m
  14. 14

    Episode 11.16 - California Press Foundation: Saving journalism with tech

    ·14m
  15. 15

    Episode 11.15 - How to make proper predictions

    ·46m
  16. 16

    Episode 11.14 - Cheap marketing gets poor results

    ·28m
  17. 17

    Episode 11.13: Prediction failures, dysinformation, and affordable marketing

    ·24m
  18. 18

    Episode 11.11 - The problem with proxies

    ·21m
  19. 19

    Episode 11.10 : Bolaji Ojo explains why companies should support journalism

    ·27m
  20. 20

    Episode 11.9 - Can AI survive? (Part Two)

    ·51m
  21. 21

    Episode 11.8 - Can AI survive? (part one)

    ·21m
  22. 22

    Episode 11.7 - Book Review: AI Made Easy for Parents

    ·16m
  23. 23

    Episode 11.6 - Making the case for winning the cyberwar

    ·13m
  24. 24

    Episode 11.5 - Giving up and accepting mediocrity for AI

    ·35m
  25. 25

    Episode 11.4: Coming attractions and how to bury the lede

    ·15m
  26. 26

    Episode 11.3 - Fixing the hole in Agentic AI

    ·25m
  27. 27

    Episode 11.2 - Separating fact from fiction in Deepfakes

    ·27m
  28. 28

    Episode 11.1 - Controlling access could help close Agentic AI security holes, but it's not security

    ·40m
  29. 29

    Episode 10.27 - Why some companies don't carry cyberinsurance

    ·16m
  30. 30

    Episode 10.26 - The rise of NHI and the impact of Predatory Sparrow

    ·23m
  31. 31

    Episode 10.25 - The degradation of tech PR

    ·39m
  32. 32

    Episode 10.24 - Q-Day? Meh. And a view on how M&A affects security

    ·35m
  33. 33

    Episode 10.23 - When reporters get fired... and hope from the insurance industry

    ·11m
  34. 34

    Episode 10:22 Ping and Identity Access Management in the AI age

    ·30m
  35. 35

    Episode 10:20b - Dale Hoak on understanding Zero Trust, redux

    ·23m
  36. 36

    Episode 10.21 - Netacea and stopping malicious bots

    ·22m
  37. 37

    A reminder of where we come from

    ·19m
  38. 38

    Episode 10.5 - Lawyers and insurance companies stand firm on security

    ·28m
  39. 39

    Special episode -Threat reports for October 21

    ·8m
  40. 40

    Episode 9.5 - Pig butchering: It's not just for breakfast

    ·23m
  41. 41

    Episode 9.11 - Who do you Trust?

    ·16m
  42. 42

    Threat report for Thanksgiving week

    ·5m
  43. 43

    Episode 9.9 - The mental toll cause by AI

    ·25m
  44. 44

    Episode 9.8 - Top threat reports and a preview of what's coming

    ·14m
  45. 45

    Episode 9.7 - How to boost customer confidence in security

    ·26m
  46. 46

    Special episode: Threat reports for Nov 5

    ·7m
  47. 47

    Special episode: Top three threat reports for the week

    ·5m
  48. 48

    Episode 9.6 - FHE starts getting serious

    ·32m
  49. 49

    Episode 9.10 - Are consumers getting fed up with security?

    This episode discusses attitudes toward AI and security, featuring interviews with industry leaders and sponsored by a cyber insurance company.

    ·29m
  50. 50

    Episode 9.4 - Digital tech is hitting the physical wall

    ·33m
  51. 51

    Episode 9.3 - AI and telemarkeing: Marriage from Hell?

    ·17m
  52. 52

    Episode 9.2 - Innocence is not a defense against online fraud

    ·25m
  53. 53

    Episode 9.1 - Getting serious about PQC

    ·39m
  54. 54

    Episode 8.23 - Fixing marketing in Tech

    ·18m
  55. 55

    Episode 8.22 - Social engineering affects nations

    ·33m
  56. 56

    Episode 8.21 - Have we reached peak ransomware? One lawyer's view

    ·21m
  57. 57

    Episode 8.20 - Crowdstrike: who's at fault?

    ·22m
  58. 58

    Episode 8.19 -- Are we losing the data war, Part 2

    ·34m
  59. 59

    Episode 8.18 -- Are we losing the data war? Part 1

    ·18m
  60. 60

    Journalism needs a kick in the a**

    ·19m
  61. 61

    Episode 8.17 - Elder fraud: bigger than you think and not how you think.

    ·26m
  62. 62

    Episode 8.16 - Avoiding election scams

    ·17m
  63. 63

    Episode 8.15 -- Old man yells at clouds during grad week

    ·22m
  64. 64

    Episode 8.14 -- Generative AI is accelerating phishing attacks

    ·20m
  65. 65

    Episode 8.13 - Finding gold in Metomic survey

    ·21m
  66. 66

    Episode 8.12 - Madison Horn wants to increase Congress' tech IQ

    ·29m
  67. 67

    Episode 8.11 - An interview with Rohit Ghai of RSA.

    ·28m
  68. 68

    PR, the Press, and Technology: A rant

    ·21m
  69. 69

    Episode 8.10 -- Google needs news. News doesn't need Google

    ·24m
  70. 70

    Episode 8.9 - Crystal Morin, tea ladies and personal responsibility

    ·24m
  71. 71

    Episode 8.8 - Red teaming AI

    ·21m
  72. 72

    TikTok: Hoist on its own petard

    ·9m
  73. 73

    Episode 8.7: Arming insurance companies for cyberbattle

    ·25m
  74. 74

    Episode 8.6 -- Bad month for cyber criminals.

    ·27m
  75. 75

    Episode 8.5 -- FIDO, PCI fighting the good fight for security with payment cards

    ·27m
  76. 76

    Episode 8.4 - Making your personal medical data safe

    ·25m
  77. 77

    Episode 8.3 - Centific is fixing AI before it becomes Skynet

    ·18m
  78. 78

    Episode 8.2 --The most dangerous people on the Internet: Our take

    ·23m
  79. 79

    Episode 8.1 -- Harri Hursti makes me feel stupid about elections

    ·48m
  80. 80

    Episode 7.29 - Would you bet your job on that post?

    ·22m
  81. 81

    Episode 7.28 -- Privacy Not Included, in pretty much anything

    ·31m
  82. 82

    Episode 7.27 - Deep fake acceptance increasing but at what cost?

    ·31m
  83. 83

    Episode 7.26 -- Update your software, but pay no attention to the statistics

    ·25m
  84. 84

    Episode 7.25: Linkedin account hijacked? It's not hopeless

    ·33m
  85. 85

    Episode 11.12 - The will to market is weak in cyber training niche

    ·22m
  86. 86

    Episode 10.1 - China, oligarchs and tradewars with Lou and Ian

    Host Lou Covey introduces the podcast, thanks sponsor Safety National, and previews an interview with Ian Thornton Trump about China's cyber activities.

    ·36m
  87. 87

    Episode 10.19 - The "key" to security could be in your hands

    ·21m
  88. 88

    Episode 10.18 - Battle of the bots: stealing student aid

    ·14m
  89. 89

    Episode 10.17 - Bruce Schneier gives a stunning prediction on AI at RSAC Conference, and how deep risk goes

    ·24m
  90. 90

    Episode 10.16 - RSAC preview, Government doing good and bad PR

    ·12m
  91. 91

    Episode 10.15 - Divorce the orange git!

    ·19m
  92. 92

    Episode 10.14 - Encryption, Insurance and why you should care

    ·28m
  93. 93

    Episode 10.13 - The AI bubble and how it affects cybersecurity

    ·27m
  94. 94

    Episode 10.12 - Encryption is all around us, until it isn't

    ·18m
  95. 95

    Episode 10.11 - The problem with surveys

    ·29m
  96. 96

    Episode 10.10 - The X DDoS attack was avoidable, and it's not over

    ·22m
  97. 97

    Episode 10.9 - How bad marketing obscures the problems of deepfakes and identity theft

    ·24m
  98. 98

    Episode 10.7 - Bob Ackerman, Generative AI, and Universal Basic Income

    ·28m
  99. 99

    Episode 10.6 - DORA, Insurance and the state of international regulations

    ·23m
  100. 100

    Episode 10.8 - Phishing on the rise, but there is hope

    ·21m
  101. 101

    Episode 12.2 - Putting AI and security into perspective

    Hidden gem

    Doug Kirson, AppFire's CISO, tells Luke Covey that the Anthropic Mythos-model panic matters less than the security basics most companies already ignore.

    Apr 16, 2026·26m·1 clip
  102. 102

    Season 12.1 - Reporter's notebook: Orca Security, intro to CNAPP

    Host Lou Kevy introduces season 12 and discusses Cloud Native Application Protection Platforms (CNAPP) from the RSAC conference.

    Apr 7, 2026·9m
  103. 103

    Episode 11.24 - Is the AI industry collapse beginning?

    The host discusses an experiment where AI chatbots predicted four causes that could trigger the collapse of the AI industry.

    Mar 6, 2026·10m
  104. 104

    Episode 11.23 - DROP and give me privacy! New California mechanism for deleting your records

    Crucial Tech examines California’s Delete Request and Opt Out Platform, or DROP, which lets residents submit one request for registered data brokers to delete or opt out of processing their information.

    Feb 26, 2026·20m·1 clip
  105. 105

    Episode 11.22 - A conversation with Claude: AI industry on a knife edge

    The host introduces the podcast's mission, discusses trust in media, and sets up an episode about the future of artificial intelligence.

    Feb 20, 2026·16m
  106. 106

    Episode 11.21 - Vibe coding losing it's shine, but we're trying it anyway

    Crucial Tech Episode 11.21 examines why vibe coding lost momentum while Lou Covey and Patrick Balk continue using AI-generated code for projects.

    Feb 11, 2026·22m·1 clip
  107. 107

    Episode 11.20 - Will you miss CISA 2015 now that it's gone?

    Feb 4, 2026·11m
  108. 108

    Episode 11.19 -- Are you naive enough to fall for a ticket scam

    Hidden gem

    Crucial Tech host Luke Covey and Fernando Mamie, CISO at Anomaly, examine ticket fraud around events including the Super Bowl, Olympics, World Cup, and World Series.

    Jan 23, 2026·21m·1 clip
  109. 109

    Episode 11.18 - Decentralization for many, not all

    AI can turn two business days of board-minute editing into a task completed in minutes.

    Jan 16, 2026·24m·1 clip
  110. 110

    Episode 11.17 - Decentralization and Sovereign Cloud Predictions

    Hidden gem

    Lou Kevy and Patrick Boch predict decentralization and sovereign clouds will shape technology and security in 2026.

    Jan 7, 2026·22m·1 clip
  111. 111

    Episode 11.16 - California Press Foundation: Saving journalism with tech

    Dec 10, 2025·14m
  112. 112

    Episode 11.15 - How to make proper predictions

    Lou Covey and Ian Thornton-Trump open Crucial Tech's 2026 predictions by rejecting "more attacks" as a prediction, since attacks always grow.

    Dec 2, 2025·46m·2 clips
  113. 113

    Episode 11.14 - Cheap marketing gets poor results

    Lukey cites a median $15,000 monthly marketing spend among cybersecurity companies, with about a third going to LinkedIn ads and the rest to SEO, and a contact reporting a 70% web-traffic drop since Google added AI results in April.

    Nov 25, 2025·28m·2 clips
  114. 114

    Episode 11.13: Prediction failures, dysinformation, and affordable marketing

    Nov 20, 2025·24m
  115. 115

    Episode 11.12 - The will to market is weak in cyber training niche

    Nov 12, 2025·22m
  116. 116

    Episode 11.11 - The problem with proxies

    The host introduces the podcast, reads a sponsor ad for cyber insurance, and announces a new segment awarding a 'Beanhead of the Week' to someone who sent an AI-generated pitch.

    Oct 30, 2025·21m
  117. 117

    Episode 11.10 : Bolaji Ojo explains why companies should support journalism

    Oct 22, 2025·27m
  118. 118

    Episode 11.9 - Can AI survive? (Part Two)

    Oct 7, 2025·51m
  119. 119

    Episode 11.8 - Can AI survive? (part one)

    Oct 2, 2025·21m
  120. 120

    Episode 11.7 - Book Review: AI Made Easy for Parents

    Sep 28, 2025·16m
  121. 121

    Episode 11.6 - Making the case for winning the cyberwar

    Sep 19, 2025·13m
  122. 122

    Episode 11.5 - Giving up and accepting mediocrity for AI

    Sep 12, 2025·35m
  123. 123

    Episode 11.4: Coming attractions and how to bury the lede

    Sep 5, 2025·15m
  124. 124

    Episode 11.3 - Fixing the hole in Agentic AI

    Aug 29, 2025·25m
  125. 125

    Episode 11.2 - Separating fact from fiction in Deepfakes

    Aug 22, 2025·27m
  126. 126

    Episode 11.1 - Controlling access could help close Agentic AI security holes, but it's not security

    Aug 12, 2025·40m
  127. 127

    Episode 10.27 - Why some companies don't carry cyberinsurance

    Jul 18, 2025·16m
  128. 128

    Episode 10.26 - The rise of NHI and the impact of Predatory Sparrow

    Jul 9, 2025·23m
  129. 129

    Episode 10.25 - The degradation of tech PR

    Jul 2, 2025·39m
  130. 130

    Episode 10.24 - Q-Day? Meh. And a view on how M&A affects security

    Jun 27, 2025·35m
  131. 131

    Episode 10.23 - When reporters get fired... and hope from the insurance industry

    Jun 13, 2025·11m
  132. 132

    Episode 10:22 Ping and Identity Access Management in the AI age

    Jun 4, 2025·30m
  133. 133

    Episode 10:20b - Dale Hoak on understanding Zero Trust, redux

    Jun 3, 2025·23m
  134. 134

    Episode 10.21 - Netacea and stopping malicious bots

    May 29, 2025·22m
  135. 135

    Episode 10:20: Zero Trust is simple, but complex: A conversatiion with RegScale CISO

    This episode discusses how AI-powered bots are being used by malicious actors for credential attacks and identity access management threats.

    May 21, 2025·30m
  136. 136

    Episode 10.19 - The "key" to security could be in your hands

    May 15, 2025·21m
  137. 137

    Episode 10.18 - Battle of the bots: stealing student aid

    May 9, 2025·14m
  138. 138

    Episode 10.17 - Bruce Schneier gives a stunning prediction on AI at RSAC Conference, and how deep risk goes

    May 3, 2025·24m
  139. 139

    Episode 10.16 - RSAC preview, Government doing good and bad PR

    Apr 25, 2025·12m
  140. 140

    Episode 10.15 - Divorce the orange git!

    Apr 16, 2025·19m
  141. 141

    Episode 10.14 - Encryption, Insurance and why you should care

    Apr 10, 2025·28m
  142. 142

    Episode 10.13 - The AI bubble and how it affects cybersecurity

    Apr 5, 2025·27m
  143. 143

    Episode 10.12 - Encryption is all around us, until it isn't

    Mar 28, 2025·18m
  144. 144

    Episode 10.11 - The problem with surveys

    Host Lou Covey introduces the podcast and interviews Patrick Boch about a biased customer survey report from a tech company.

    Mar 24, 2025·29m
  145. 145

    Episode 10.10 - The X DDoS attack was avoidable, and it's not over

    Mar 14, 2025·22m
  146. 146

    Episode 10.9 - How bad marketing obscures the problems of deepfakes and identity theft

    Mar 7, 2025·24m
  147. 147

    Episode 10.7 - Bob Ackerman, Generative AI, and Universal Basic Income

    Feb 21, 2025·28m
  148. 148

    Episode 10.6 - DORA, Insurance and the state of international regulations

    Feb 13, 2025·23m
  149. 149

    Episode 10.8 - Phishing on the rise, but there is hope

    Feb 7, 2025·21m
  150. 150

    A reminder of where we come from

    Feb 4, 2025·19m