- 41 minutes 13 secondsEncore: 39 Seconds to Breach
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
Can your organization survive a breach in 39 seconds? That's how fast attackers are moving now, and if your defenses are still running at human speed, you're already behind.
Wendi Whitmore, Chief Security Intelligence Officer at Palo Alto Networks, returns to Threat Vector for a candid conversation with David Moulton about what it actually takes to build resilience in an era where AI is accelerating both the threat and the defense. Wendi brings more than two decades of experience leading incident response and threat intelligence at organizations including Mandiant, CrowdStrike, IBM X-Force, and Unit 42. She's an inaugural member of the DHS Cyber Safety Review Board and serves on cybersecurity advisory boards at Duke University and the University of San Diego.
You'll learn:
Why fighting AI with AI is the only viable response to today's attack speeds, including exfiltration happening in under a minute
How Volt Typhoon and Salt Typhoon represent two fundamentally different threat objectives, and what that means for your defense posture
What "cybersecurity for AI" means versus "AI for cybersecurity," and why organizations need both
How the best incident response leaders translate between deep technical analysis and boardroom communication under pressure
Why curiosity, not certifications, is the trait that separates great security practitioners from the rest
Wendi is one of the most respected voices in national cybersecurity strategy, with a track record that spans major breaches, critical infrastructure defense, and the Paris Olympics. Her perspective on building teams, aligning talent to mission, and defending against nation-state actors at scale is grounded in real-world investigation, not theory.
This episode is essential listening if you're: a security leader trying to align your AI strategy with your risk posture, a practitioner wondering how to make the case for faster detection and response investment, or someone building or managing a threat intelligence or incident response team.
Related Episodes:
Confronting China's Expanding Cyber Threats with Wendi Whitmore — Wendi's first appearance on Threat Vector, focused on Chinese nation-state activity and critical infrastructure targeting.
Transform Your SOC and Get Ahead of the Threats — A deep dive on SOC transformation, AI-driven detection, and what it means to modernize your security operations center.
The Art of Threat Hunting — How human analysts and AI work together to find what attackers are trying to hide.
#CyberResilience #AIinCybersecurity
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com.
30 July 2026, 6:00 am - 37 minutes 49 secondsEncore: Don't Leave Them to Their Own Devices
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
In this episode of Threat Vector, host David Moulton speaks with Asher Davila, Principal Security Researcher at Palo Alto Networks, about the newly released 2025 Device Security Enterprise Threat Report. This data-rich report reveals that over 21% of connected enterprise devices have known vulnerabilities, and nearly 40% of devices registered in Active Directory lack proper EDR/XDR coverage. Even more concerning, 32.5% of all network-connected assets are unmanaged, creating a massive blind spot for defenders. Asher breaks down why understanding both managed and unmanaged device exposure is essential to securing modern environments. From weak segmentation to credential-based threats and lifecycle risks, this conversation delivers critical insights for security leaders seeking to gain control of their expanding device landscape.
Read the 2025 Device Security Threat Report.
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com.
23 July 2026, 6:00 am - 35 minutes 6 secondsEncore: Securing the AI Supply Chain
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
AI security is no longer optional, it’s urgent. In this episode of Threat Vector, David Moulton sits down with Ian Swanson, former CEO of Protect AI and now the AI Security Leader at Palo Alto Networks. Ian shares how securing the AI supply chain has become the next frontier in cybersecurity and why every enterprise building or integrating AI needs to treat it like any other software pipeline—rife with dependencies, blind spots, and adversaries ready to exploit them. They also explore "vibe coding" the practice of developers relying on instinct and intuition rather than rigorous review when coding with or around LLMs. It's a fun name for a very real risk. Whether you're a CISO, a developer, or anyone helping shape AI in your organization, this conversation is your guide to locking down AI before it locks you out.
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com.
16 July 2026, 6:00 am - 38 minutes 27 secondsEncore: The Billion Dollar Hiring Scam Funding North Korea
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
North Korea has turned your hiring pipeline into a revenue machine. And most organizations have no idea.
Evan Gordenker, Director of AI Security and DPRK Operations at Unit 42, has led more than 160 investigations into sophisticated threat actors, including the North Korean IT worker networks quietly embedded inside global companies. He joins David Moulton to unpack how this operation actually works, why common assumptions about remote work leave organizations exposed, and what security and HR teams can do to detect and disrupt it.
You'll learn:
- How DPRK operatives use deepfakes, fabricated identities, and real accomplice networks to pass interviews and land jobs at global companies
- Why "we don't hire remote" is a dangerous assumption that no longer holds
- What signals HR and SOC teams should look for, before and after someone is hired
- How the threat has evolved from quiet wage theft to active extortion of former employers
- What government collaboration and cross-border intelligence sharing can realistically accomplish
Evan contributed to the UN Sanctions Monitoring Team report on North Korean operations and brings a rare combination of technical depth and geopolitical fluency to this problem. Having lived and worked across the US, EU, and Japan, he brings cultural context that matters when investigating a threat with global reach. His investigations have produced some of the most detailed profiles of DPRK operators in the security community.
This episode is essential listening if you're: a security leader building out your insider threat program, an HR or talent acquisition leader who hasn't yet connected with your security team, or a threat intelligence analyst tracking how nation-state programs fund themselves.
Related Episodes:
- From Code to Compromise — Covers North Korean threat actors using fake job interviews to target developers via malicious IDE extensions. A strong companion to this episode's look at the broader IT worker scheme.
-Inside the Mind of State-Sponsored Cyberattackers — A deeper look at how nation-state operations are structured and why they're so hard to disrupt.
#NationStateThreat #InsiderRisk
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com.
9 July 2026, 6:00 am - 25 minutes 5 secondsEncore: Hunting Threats in Developer Environments
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
Cyber attackers are increasingly targeting the very tools developers trust—integrated development environments (IDEs), low-code platforms, and public code repositories. In this episode of Threat Vector, host David Moulton speaks with Daniel Frank and Tom Fakterman from Palo Alto Networks' threat research team. They uncover how nation-state actors and cybercriminals are using trusted development tools like Visual Studio Code to run malware, exfiltrate data, and stay undetected. Listeners will learn about real-world APT campaigns, why dev tools are high-value targets, and how organizations can secure their software supply chain without slowing down developers.
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
2 July 2026, 6:00 am - 38 minutes 2 secondsEncore: What Happened to Hacker Culture?
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
Join David Moulton, Senior Director of Thought Leadership for Unit 42, as he sits down with Kyle Wilhoit,Technical Director of Threat Research at Unit 42, for an intimate conversation about the evolution of hacker culture and cybersecurity. From picking up 2600: The Hacker Quarterly magazines at Barnes & Noble and building beige boxes to leading threat research at Palo Alto Networks, Kyle shares his personal journey into the security community. This conversation explores how AI and automation are lowering barriers for attackers, the professionalization of cybersecurity, and what's been lost and gained in the industry's maturation. Kyle offers practical advice for newcomers who don't fit the traditional mold, emphasizing the importance of curiosity, soft skills, and intellectual humility.
Kyle Wilhoit is a seasoned cybersecurity researcher, with more than 15 years of experience studying cybercrime and nation-state threats. He's a frequent speaker at global conferences like Black Hat, FIRST, and SecTor, and has authored two industry-respected books: Hacking Exposed Industrial Control Systems and Operationalizing Threat Intelligence.
As a long-standing member of the Black Hat US Review Board and an adjunct instructor, Kyle is deeply involved in shaping both cutting-edge research and the next generation of cybersecurity professionals.
Previous appearances on Threat Vector:
- Inside DeepSeek’s Security Flaws (Mar 31, 2025) https://www.paloaltonetworks.com/resources/podcasts/threat-vector-inside-deepseeks-security-flaws
- War Room Best Practices (Nov 07, 2024) https://www.paloaltonetworks.com/resources/podcasts/threat-vector-war-room-best-practices
- Cybersecurity in the AI Era: Insights from Unit 42's Kyle Wilhoit, Director of Threat Research (Jan 11, 2024) https://www.paloaltonetworks.com/resources/podcasts/threat-vector-cybersecurity-in-the-ai-era-insights-from-unit-42s-kyle-wilhoit-director-of-threat-research
Learn more about Unit 42's threat research at https://unit42.paloaltonetworks.com/.
Related episodes: For more conversations about AI's impact on cybersecurity, career development in security, and insights from Unit 42 researchers, explore past episodes at: https://www.paloaltonetworks.com/podcasts/threat-vector.
Join the conversation on our social media channels:
- Website: http://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/palo-alto-networks/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector, Palo Alto Networks podcast, is your premier destination for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
25 June 2026, 6:00 am - 33 minutes 52 secondsEncore: Reach for What You Preach: Bridging UX and Cybersecurity
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
In this episode of Threat Vector, David Moulton talks with Dimitry Shvartsman, Co-Founder and Chief Product Officer of Prime Security, about transforming security into a proactive business enabler. Drawing on decades of experience, Dimitry explains why integrating security at the design stage—not after deployment—is key to reducing risk and improving outcomes. The conversation highlights the challenges of scaling secure development and the role of automation in modern application security. If you're interested in aligning product, design, and security teams to build more resilient software, this episode delivers clear insight and practical advice.
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
18 June 2026, 6:00 am - 38 minutes 57 secondsEncore: Frenemies With Benefits
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
Join Michael Sikorski and Michael Daniel on Threat Vector for a deep dive into cybersecurity collaboration. They discuss how competing companies and governments can work together. Learn about the Cyber Threat Alliance (CTA) and its role in sharing threat intelligence. The episode explores the challenges of trust and incentives. It covers topics from WannaCry to the impact of AI on defenses. Gain insights into responsible vulnerability disclosure. Understand public-private partnerships. Discover why collaboration is vital for global cybersecurity. This discussion offers key takeaways for security leaders.
Links:
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
11 June 2026, 6:00 am - 32 minutes 7 secondsEncore: Securing Modern Workforce
Enjoy this encore episode of Threat Vector by Palo Alto Networks.
Hybrid work has changed the game, but has your security kept up? In this episode of Threat Vector, David Moulton sits down with Harish Singh, Vice President and Global Head of Infrastructure and Application Management at Wipro, to unpack the evolving cybersecurity landscape at the intersection of digital transformation, SaaS expansion, and AI-powered operations.
With decades of experience driving infrastructure modernization and risk mitigation across global enterprises, Harish brings a pragmatic lens to today’s most urgent challenges. They explore how context-aware SASE, secure enterprise browsers, and automation can reduce security complexity while enhancing user experience.
If you're a security leader navigating app sprawl, unmanaged endpoints, or GenAI blind spots—this is your blueprint for staying ahead.
Join the conversation on our social media channels:
-
Threat Research: https://unit42.paloaltonetworks.com/
-
Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
-
LinkedIn: https://www.linkedin.com/company/unit42/
-
YouTube: @paloaltonetworks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
4 June 2026, 6:00 am - 44 minutes 41 secondsEncore: Is the Quantum Threat Closer Than You Think?
In honor of AAPI Heritage Month, and as attackers increasingly stockpile encrypted data today to decrypt once quantum computing makes it possible, we're revisiting this episode.
Quantum computing is advancing fast, and with it comes a major cybersecurity risk—the potential to break today’s encryption standards. In this episode of Threat Vector, host David Moulton speaks with Richu Channakeshava, Senior Product Manager at Palo Alto Networks, about the urgent need for organizations to prepare for a post-quantum world. They discuss the risks of "harvest now, decrypt later" attacks, the painfully slow process of cryptographic migration, and the steps security leaders must take today to protect sensitive data. If your organization relies on encryption for long-term data security, this episode is a must-listen. Learn why waiting could be a critical mistake and how to start your transition to quantum-resistant cryptography now.
Join the conversation on our social media channels:
- Website: https://www.paloaltonetworks.com/
- Threat Research: https://unit42.paloaltonetworks.com/
- Facebook: https://www.facebook.com/LifeatPaloAltoNetworks/
- LinkedIn: https://www.linkedin.com/company/unit42/
- YouTube: @paloaltonetworks
- Twitter: https://twitter.com/PaloAltoNtwks
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com
29 May 2026, 6:00 am - 35 minutes 55 secondsFollow the Crypto
Every threat actor leaves a financial signature. Ransomware operators, state-sponsored hackers, fraud networks — they all need to move money, and when they do, the blockchain records it permanently.
Jackie Burns Koven leads cyber threat intelligence at Chainalysis, where she tracks how criminal and nation-state actors use cryptocurrency to fund attacks, launder proceeds, and pay for the tools and infrastructure that power the underground economy. Before Chainalysis, she worked in the U.S. Intelligence Community on nuclear proliferation. She also serves on the Ransomware Task Force, the cross-sector coalition working to disrupt the financial ecosystem that makes ransomware profitable.
In this conversation recorded live at the Links conference in New York, guest host Michael Sikorski, CTO of Unit 42, talks with Jackie about how blockchain intelligence works as a threat intelligence discipline, why open-source cryptocurrency is more exposed than most defenders realize, and what the financial signatures of threat actors can reveal that traditional IOCs cannot.
You’ll learn:
-
How blockchain intelligence connects wallets to threat actors, criminal networks, and nation-state operations
-
Why cryptocurrency is relevant to every organization, even those that don’t pay ransoms or custody crypto
-
What North Korea’s $2 billion in stolen cryptocurrency tells us about the scale of state-sponsored crypto crime
-
How financial signatures can track a threat actor across rebrands, gang changes, and evolving crime types
-
What most CTI analysts are missing by not having a blockchain tracing capability in their toolkit
This episode is essential listening if you’re a threat intelligence analyst, incident responder, or security leader trying to understand the financial infrastructure that funds the attacks hitting your industry.
Related Episodes:
#ThreatIntelligence #Ransomware
About Threat Vector
Threat Vector by Palo Alto Networks is your premier podcast for security thought leadership. Join us as we explore pressing cybersecurity threats, robust protection strategies, and the latest industry trends.
The podcast features in-depth discussions with industry leaders, Palo Alto Networks experts, and customers, providing crucial insights for security decision-makers.
Whether you're looking to stay ahead of the curve with innovative solutions or understand the evolving cybersecurity landscape, Threat Vector equips you with the knowledge needed to safeguard your organization.
Palo Alto Networks
Palo Alto Networks enables your team to prevent successful cyberattacks with an automated approach that delivers consistent security across the cloud, network, and mobile. http://paloaltonetworks.com.
21 May 2026, 6:00 am -
- More Episodes? Get the App