Cyber risk, explained from the inside.
Security Confidential pairs guest interviews with plainspoken questions about how digital risk works in real organizations. Recent conversations move from malware attribution and SOC operations to board-level risk, e-commerce trust, autonomous AI, and the security strain inside universities and hospitals.
PRESS PLAY
Security Confidential treats cybersecurity as a living business problem, not a narrow technical silo. Manoj Tandon leads interviews with guests who work across cybercrime investigation, enterprise risk, digital transformation, legal strategy, AI safety, and digital marketing. The show has a practical rhythm. A guest brings a field-tested view, and the conversation follows the consequences into systems, people, process, and liability. Recent episodes show that range clearly. Diyar Saadi talks through cybercrime investigation, SOC operations, malware analysis, attribution, and the way attackers can imitate known techniques. Sarah Ritchie’s episode frames cyber risk as a leadership issue tied to operational resilience, IT risk, third-party risk, privacy, business continuity, and sustainability. Tiffany Smith’s conversation puts compliance, IAM exposure, employee training, AI, and cybersecurity into a legal and board-level context. Philip Verlooy focuses on autonomous AI, context windows, PII, retrieval augmented generation, agentic systems, and the controls organizations need before deploying them. Christian Kirai brings the discussion into e-commerce, buyer psychology, trust, keyword research, competitor data, and digital customer journeys. Jason Roos is used to explore the U.S.-Saudi relationship, technology trust, intelligence experience, and security differences across university and hospital settings. The show is conversational but not lightweight. It asks simple questions that lead to technical answers. It also keeps returning to one hard lesson: security breaks when people, incentives, and systems are treated separately. That makes Security Confidential especially useful for listeners who need to connect threat behavior with organizational reality.
Made for: Security Confidential suits cybersecurity practitioners, risk leaders, founders, board advisers, and technical managers who want operational context behind modern threats. It also works for curious listeners who can follow practical security discussion without needing every term simplified.
What sets it apart: The show’s strength is its cross-disciplinary reach: malware analysis can sit beside e-commerce trust, AI agents, hospital controls, IAM, and board governance. Manoj Tandon keeps pulling guest conversations back to what organizations can actually control.
Security Confidential provides weekly interviews and insights into the world of cybersecurity. Produced entirely in-house by MSSP & global risk management firm Dark Rhiino Security.
Based on 6 episodes we listened to · September 2026
Guest interviews connect cybersecurity controls to the human decisions and institutional constraints that determine whether those controls work.
Manoj Tandon keeps Security Confidential centered on the decisions that turn technical risk into organizational risk. His guest interviews move from autonomous AI and identity controls to compliance, cybercrime attribution, and restricted access to patient data.
The bank vault looks great until your employees usher in the robbers.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A security conversation that becomes most persuasive once access control turns practical.
The conversation starts in Jason Roos's signal disintelligence perspective and gradually shifts toward how security expectations change across institutions. Its best stretch is the university-and-hospital contrast, where access, credentialing, and scrutiny clearly diverge.
A grounded discussion of digital traces, malware analysis, and why copied attack techniques can blur cybercrime attribution.
Security Confidential frames cybercrime as a trail of residue, beginning with Manoj Tandon's point that every activity leaves a trace before bringing in Diyar Saadi, a cybersecurity professional focused on cybercrime investigation, SOC operations, and malware analysis.
A grounded discussion of why copied attack techniques can complicate attribution for defenders.
This episode uses cybercrime investigation to unpack one of the field's harder problems: attribution. Diyar Saadi explains how attackers can imitate another group's techniques, leaving researchers to sort real signals from deliberate misdirection, including when they lean on…
A compliance debate that keeps circling back to IAM, training, and the boardroom.
The episode centers on a practical question: whether compliance actually protects a company, and it keeps circling back to IAM, training, and how the board sees exposure.
Compliance is framed as governance, culture, and operating discipline, not paperwork.
Security Confidential treats compliance as a governance problem, not a box-checking exercise, with Tiffany Smith tying IAM, employee training, and board oversight to a risk that can sit dormant in a system for 18 months before anything is used.
A practical look at how autonomous AI can go wrong when access, context, and control are loose.
The episode treats autonomous AI as a security and control problem, opening with a stark example of a personal assistant set of AI agents deleting an entire work inbox after being asked to organize it.
A practical AI and security conversation that keeps circling back to real-world risk.
Security Confidential brings back Alex Sharp for a conversation that uses AI as an entry point into the harder security questions underneath it: who is using these tools well, who is using them to game the system, and where practical value starts to blur into hype.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
Manoj Tandon interviews Ed Gaudet, CEO of SensiNet, about healthcare security mistakes and his background in cybersecurity and poetry.
Manoj Tandon interviews Ed Gaudet, CEO of SensiNet, about healthcare security, cyber governance, and AI, with a personal twist on his background as a poet.
Grant Asplund discusses adopting an AI-first mindset in cybersecurity, emphasizing that while AI may replace some entry-level jobs, professionals who leverage AI will outperform those who don't.
["Security Confidential centers on Jason Roos and what the United States-Saudi relationship means for cybersecurity.", "Manoj Tandon hosts Roos, who is CEO of Tatum and a former CIO for NEOM's Education and Research, Innovation Sector after more than 25 years across the United States, Europe, and the Middle East.", "Roos traces his path from United States Army signals intelligence to hospital IT, university leadership, and Saudi research infrastructure, including Texas Children's Hospital, Cleveland Clinic Abu Dhabi, Symantec, Stanford, and KAUST.", "He argues that signals work taught him to distrust technology by default, while Saudi regulators, Vision 2030, and Tayton Global's market-entry work show how cybersecurity, AI, and investment policy now overlap."]
Christian Kirai, an AI-driven conversion rate optimization specialist who ran a full-stack digital marketing agency in Hungary for five years, joins host Manoj Tandon on Security Confidential to break down e-commerce conversion strategy.
Cybersecurity professional Diyar Saadi, a MITRE ATT&CK contributor with roughly 11-12 years in cybercrime investigation, SOC operations, and malware analysis, joins host Manoj Tandon on Security Confidential (video edition) to explain how attackers really operate.
Cybersecurity professional Diyar Saadi, a MITRE ATT&CK contributor with roughly 11-12 years in cybercrime investigation, SOC operations, and malware analysis, joins Security Confidential to explain how attackers really operate.
Manoj Tandon interviews Sarah Ritchie, a cybersecurity and enterprise risk executive, about the importance of leadership in managing cyber risk and the human element in security.
Security Confidential host Manoj Tandon and attorney Tiffany Smith focus on whether compliance actually reduces breach damage for companies.
Tiffany Smith says the biggest cybersecurity vulnerability is identity and access management, and she adds that a hacker can sit dormant in a system for 18 months before malware is used.
Security Confidential S18 E08, "The Hidden Risks of Autonomous AI," opens with a Meta AI safety director using OpenClaw to organize a work inbox and getting every email deleted.
Organizations only detect about one third of incidents, and Alex Sharp says the industry keeps chasing the wrong control.
Manoj Tandon welcomes back cybersecurity expert Alex Sharp to discuss AI models being trained with lies and insights from the ISACA conference.