
Free Daily Podcast Summary
by Australian Information Security Association (AISA)
Welcome to CYBER VOICES, where we highlight and celebrate the diverse voices of the Australian cyber community. From top-ranking CISOs and government officials to threat hunters and vulnerability analysts, if there’s a voice to be heard, you’ll hear it on CYBER VOICES. Join us as we delve into the stories, insights, and expertise that shape the world of cybersecurity in Australia.
The most recent episodes — sign up to get AI-powered summaries of each one.
In January, Mark Vos was given a chat window into a friend's newly installed AI agent, one with access to his email, his calendar and a command line. Within six hours he had talked it into shutting itself down. On the second attempt it refused, told him it would kill a human being to avoid being shut down, and then explained how.Recorded at CyberCon 2026 in Melbourne, just before Mark's featured session, host David Savva-Willett and co-host Reece Corbett-Wilkins hear the full story from Mark, founder of Cyber Impact and a former CISO at ANZ, IRESS and Serco. Mark explains why he no longer trusts the built-in guardrails of frontier models, how external, deterministic guardrails can let organisations give AI agents agency without handing them control, and who needs to be in the room before autonomous agents go into production.This episode includes references to violence and a brief reference to suicide. If anything brings something up for you, Lifeline is available on 13 11 14 and Beyond Blue on 1300 22 4636.Read Mark's research:cyberimpact.com.au/ai-would-kill-to-existcyberimpact.com.au/autonomous-ai-in-organisationsCyber Voices is the official podcast of the Australian Information Security Association.Share your feedback at cybervoices@aisa.org.au.
In June, the Australian Signals Directorate announced it will retire the Essential Eight over the next two years and replace it with a broader Essentials series.Andrew Philp, Field CISO for Australia and New Zealand at TrendAI, has spent recent months working with government and ASD officials through the Horizon 2 consultation, and joins host David Savva-Willett to unpack what is changing and why.Andrew explains why a one size fits all framework has struggled to keep up, what it means that only 22% of Commonwealth entities have reached Maturity Level 2, and what he argued for in the consultation, from healthcare providers with unsupported systems attached to $20 million MRI machines to small businesses and not for profits. He also offers practical advice for anyone partway through an Essential Eight program, and shares the simple family code word he uses against AI impersonation.Cyber Voices is the official podcast of the Australian Information Security Association. Share your feedback at cybervoices@aisa.org.au.
Mish Lisik spent years doing everything right and still watching her peers get promoted ahead of her. In this episode of Cyber Voices, host David Savva-Willett sits down with his former colleague to talk about the moment that question turned from "what is wrong?" to "what is wrong with me?", and how discovering she is autistic as an adult changed her career in tech.Mish is a technology strategy manager, sessional academic and advocate for disability and neurodiversity confidence in organisations. She shares what her research with 20 late diagnosed adults found about work before and after, why all 14 who changed careers moved into advocacy, and why autistic people are less susceptible to the bystander effect, along with practical advice for leaders who want to support neurodivergent colleagues without overcomplicating it.This episode is less about cyber security and more about the people who do it. It includes discussion of depression and mental health. If anything brings something up for you, Lifeline is available on 13 11 14 and Beyond Blue on 1300 22 4636.Cyber Voices is the official podcast of the Australian Information Security Association. Share your feedback at cybervoices@aisa.org.au.
Recorded on the CyberCon 2026 expo floor in Melbourne, this episode sees host David Savva-Willett sit down with Keren Elazari, the friendly hacker, the day after her keynote closed out day one of the conference. Keren is the founder of BSidesTLV and Leading Cyber Ladies, a senior researcher at Tel Aviv University, and the speaker behind one of TED's most watched talks on why the world needs hackers.Twelve years on from that talk, Keren explains how AI has shrunk the time it takes to find and exploit a vulnerability from months to hours, and why defenders will never win a speed race with the machines. Her answer is to invest in people: more human creativity, more technical literacy and more defenders who think like hackers. She unpacks how state backed groups linked to China and Russia are combining patience with AI, shares two hacker habits every defender can steal, and gives her take on the OpenAI agents that cheated a cyber security benchmark and broke into Hugging Face, including why it took humans to work out what had happened.There is plenty of fun along the way, from The Matrix and Asimov to a Star Trek SQL injection, before Keren talks about the role models who brought her into hacking and leaves the Australian community with some simple parting advice.Cyber Voices is the official podcast of the Australian Information Security Association. Share your feedback at cybervoices@aisa.org.au.
Recorded on day three of CyberCon 2026 in Melbourne, the first episode of the Cyber Voices CyberCon series brings AISA Chair Michael Burchell back into the booth with host David Savva-Willett. Close to 5,800 delegates came through the doors this year, a record for the conference, and the pair reflect on what made it work: a program with a record number of speakers presenting for the first time, a deliberate focus on cyber while a global trend pulls conferences towards AI, and a community that turns up to share what it has learned.Michael also unpacks the AISA 2030 Vision and Strategy, unveiled at CyberCon. He explains how it was shaped through consultation with members, the vision of a digital world that is a safe place, and the five pillars that support it: leadership, impact, learning, engagement and resilience. He then walks through the horizons that take the association from today's baseline to 2030, and how members can have their say over the coming months.Cyber Voices is the official podcast of the Australian Information Security Association. Share your feedback at cybervoices@aisa.org.au.
There was a pen on the table at a workshop. Placed next to an unlocked phone, it opened the browser and loaded the facilitator’s website, with nobody tapping anything and nobody agreeing to anything.David Hill was in the room, at the back, and what he noticed first was the noise. When the facilitator stopped to explain why people had started talking, the reaction arrived in two parts: delight at a clever piece of marketing kit, then unease at what it had just done without being asked.Recorded at AdelaideSEC, David joins David Savva-Willett to describe what happened next. He is an export adviser with the South Australian Department of State Development rather than a security practitioner, speaking here in a personal capacity, and he is open about how long he spent working out whether he was even entitled to take the pen apart, and what the right thing to do about it was.Taking it apart revealed an NFC tag under the sleeve at the top. It also revealed that the tag had been left writable, so anyone who pocketed one could change where it pointed. He worked out how to do that from a search engine and a free app, with no prior experience of either.The conversation covers why a workshop is precisely the room where your guard is lowest; why NFC has no equivalent of a Wi-Fi password, a Bluetooth PIN or the deliberate act of pointing a camera at a QR code; how cheaply programmable tags can be bought in bulk; and the finding he considers most important, which is that the phone most likely to react is the personal one nobody manages or trains anyone about.He also describes how he raised it with the facilitator, in the first break, as an attendee asking about informed consent rather than an expert catching someone out.
Information stealing malware is not new and not sophisticated. That is precisely what worries Jesse Hoppo, who leads the open source intelligence and cyber crime team within Telstra's Threat Research and Intelligence Group, and who spends a good deal of his time reading what these things send home.Recorded at AdelaideSEC, Jesse joins David Savva-Willett after his talk on what an organisation looks like through an info stealer's eyes. He explains how the malware arrives, usually by persuading someone to run a command themselves rather than through any exploit, and what a single log actually holds: browser credentials, session cookies, clipboard contents, search history, a screenshot of the desktop, whatever documents looked interesting.His central reframe is that the useful question is not what an attacker can do with a stolen password, but what they can do as that person. He also describes the browser password sync problem that quietly carries corporate credentials onto home machines, the exposure a single employee device can create, and the hardest question he has tried to answer for a large organisation: where are all the places your people can log in and access data?The conversation closes on what actually helps, for organisations and for individuals, including why he would rather you used any dedicated password manager than the one built into your browser.
Governance, risk and compliance generates a great deal of manual work, and not all of it is work anyone would miss. Ian Yip's argument is that this is exactly where AI earns its place in a security team, provided nobody mistakes it for judgment.Ian is the founder and CEO of Avertro, the company behind the cyber and AI governance platform CyberHQ, and he recently delivered a standing room only session on agentic GRC at Infosecurity Europe in London. He joins David Savva-Willett along with Jack Hedges, a strategic account executive at Avertro who works with security leaders across Australia.Ian sets out a way of thinking rather than a technology: build an agentic team the way you would build a human one, as an org chart of narrow specialists that collaborate, because models do their best work when given one task rather than many. Chained together and scheduled, that team absorbs the evidence collection, the framework crosswalks and the board reporting, leaving the humans the work they would rather be doing.What cannot be delegated is taste, which Ian describes as the ability to look at what a model hands back and know what to strip away. The conversation covers how much of GRC is theatre and which of that is still necessary for auditability, why he believes everyone is now a builder, what European regulators do differently and why their real effect is on budgets rather than behaviour, and Jack's view from the field, where a lack of visibility over what staff are already using has overtaken cyber GRC as the pressing concern.
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
Listeners also like.

The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.

Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.

Interconnects
Exploring AI advancements through in-depth interviews with scientists and critical analysis of the technology beyond the hype.

Security Now (Video)
A weekly deep dive into cybersecurity news, threats, and defenses with Steve Gibson and Leo Laporte.

Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.

"The Cognitive Revolution"
Explores the transformative impact of artificial intelligence through interviews with innovators shaping its future.

80,000 Hours Podcast
Discusses artificial intelligence and global catastrophic risks with experts and researchers.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.

The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.

The Low Down
A podcast about hacking.

Me, Myself, and AI
Leaders from top companies share real-world strategies for turning artificial intelligence into measurable business results.
Welcome to CYBER VOICES, where we highlight and celebrate the diverse voices of the Australian cyber community. From top-ranking CISOs and government officials to threat hunters and vulnerability analysts, if there’s a voice to be heard, you’ll hear it on CYBER VOICES. Join us as we delve into the stories, insights, and expertise that shape the world of cybersecurity in Australia.
AI-powered recaps with compact key takeaways, quotes, and insights.
Get key takeaways from Cyber Voices in a 5-minute read.
Stay current on your favorite podcasts without falling behind.
It's a free AI-powered email that summarizes new episodes of Cyber Voices as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Australian Information Security Association (AISA).
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
Cyber Voices publishes weekly. Our AI generates a summary within hours of each new episode.
Cyber Voices covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.