Podcast · Tech & Science

Prabh Nair

by Prabh Nair · English · Tech & Science

New episodes: Several times a week
Typical length: 58 min
Latest: 5 Oct 2026
Language: English

Latest episode

5 Oct 2026 · 47 minNew

How to Prepare for OffSec AI-300 AI Red Teaming

Prepare for the Offsec OSAI+ certification with insights on interview strategies for 2026 cybersecurity roles.Ankit Bharathan joins Prabh Nair to discuss the path to mastering the Offsec OSAI+ (AI-300) certification. This conversation focuses on the practical skills required for professionals aiming to enter the specialized field of AI Security.Beyond the technical curriculum, we analyze effective interview strategies and the specific criteria used for candidate selection in 2026. Whether you are looking to pivot your career or sharpen your expertise, this session provides a roadmap to…

Play episode WhatsApp Download

Earlier episodes 29 most recent

1 Oct 2026 · 14 min

Breaking Down Ransomware: Insights and Analysis

Welcome to our deep dive into the world of ransomware. In this video, we'll unravel the intricacies of ransomware investigation , exploring their mechanisms, common vectors, and the tools used for analysis. From understanding the initial infection point to decrypting locked files, our comprehensive analysis will equip you with the knowledge to stay one step ahead of cyber threats.In this video, we'll be breaking down ransomware: what it is, how it works, and some tips on how to investigate ransomware . We'll also be discussing the different types of ransomware analysis, including static and…
28 Sep 2026 · 18 min

Real ITGC Interview Questions from Big 4 Firms : Must-Know Questions

Welcome to our channel! In this video, we dive deep into realistic ITGC interview questions frequently asked in Big 4 firms. If you're preparing for an ITGC (IT General Controls) interview with top consulting firms like Deloitte, PwC, EY, and KPMG, this video is a must-watch!What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Essential knowledge for ITGC consulting and audit roles.Why Watch This Video?Securing a job in ITGC…
24 Sep 2026 · 3 min

What is Asymmetric Encryption

Unlock the secrets of secure online communication with our easy-to-grasp explanation of asymmetric cryptography. Discover how it protects your digital conversations like an unbreakable lock and key system, ensuring that only you and the intended recipient can access the message's true meaning. Dive into the world of cybersecurity with us! #AsymmetricCryptography #CyberSecurityExplained #DigitalSafety #EncryptionBasics #SecureCommunication #TechExplained #CryptographyForBeginners #OnlinePrivacy #TechSavvy #StaySecure
21 Sep 2026 · 1 hr 13 min

How to Build a Cybersecurity Program from Scratch | CISO Transformation Playbook

Master Cybersecurity leadership with insights from Ilyas Kooliyankal, Cyber Security Leader of CyberShelter, on navigating modern industry challenges.Ilyas Kooliyankal joins Prabh Nair to discuss what it takes to succeed in the field today. With nearly three decades of experience across enterprise technology and financial services, Ilyas outlines the essential traits required for those looking to build a successful CISO career.We break down the core components of professional growth, emphasizing that knowledge, understanding, and common sense are just as critical as technical aptitude. The…
17 Sep 2026 · 40 min

How to Investigate Akira Ransomware : Practical Insight

Join cybersecurity experts Mr. Abhijeet and Mr. Chirayu in this enlightening podcast as they unravel the complexities of the Akira ransomware. Dive deep into their step-by-step investigation, uncovering the critical insights that led to the identification, mitigation, and protection strategies against this formidable cyber threat.https://www.linkedin.com/in/abhijit-tripathy-a84257a3/?originalSubdomain=inhttps://www.linkedin.com/in/chirayu-mahajan-bb1a974a/In this video, our speakers share exclusive documents and logs instrumental in dissecting the ransomware’s mechanisms. Gain practical…
14 Sep 2026 · 43 min

How to Prepare for CGRC Certification in 2026

Many professionals come from ISO 27001, audit, compliance, or traditional cybersecurity backgrounds. But CGRC is strongly aligned with NIST publications, system authorization, security and privacy control assessment, and the Risk Management Framework lifecycle.In this podcast episode, Prabh speaks with Aamir about his CGRC preparation journey, the difference between ISO-based GRC thinking and NIST-based GRC thinking, and why CGRC is useful for professionals working in governance, risk, compliance, security authorization, FedRAMP, control assessment, and AI governance. In this episode, we…
10 Sep 2026 · 41 min

Inside the Ransomware War Room | Human Side of Cybercrime with Jon DiMaggio

Ransomware is not only a technical problem.Behind every ransomware attack, there are people — operators, affiliates, initial access brokers, negotiators, developers, money launderers, and criminal leaders making decisions under pressure.In this podcast episode, Prabh speaks with Jon DiMaggio, cybercrime investigator, founder and principal researcher at Arkham Cyber, and author of The Art of Cyber Warfare, about the human side of ransomware operations.Jon explains why organizations make a major mistake when they treat ransomware only as malware, encryption, indicators of compromise, backups,…
7 Sep 2026 · 34 min

How to Crack JEE: AIR 59 Shares Study Routine, Mistakes and College Advice

JEE preparation is not only about studying for long hours. It is about discipline, consistency, the right strategy, emotional control, mock test analysis, and making smart decisions during the final phase of preparation. In this podcast, Prabh speaks with Ishaan Singh, who achieved All India Rank 59 in JEE, about his preparation journey, study routine, coaching experience, final-week strategy, college selection, and the skills students should build beyond academics. Ishaan shares practical advice for JEE aspirants and parents who are trying to understand what really matters during…
3 Sep 2026 · 51 min

Privacy Ops Masterclass | Building Trust Across Product, AI and Security

Privacy does not fail only because organizations do not have policies.Many times, privacy fails because it comes too late.After the product is designed.After the code is written.After the vendor is onboarded.After the data flow is already live.After the AI use case has already started using personal data.In this podcast/session, Prabh discusses the practical meaning of Operationalising Privacy across Product, AI and Security.This session focuses on how privacy can move from paperwork to real execution inside organizations.We discuss why privacy by design fails when privacy is reviewed only…
31 Aug 2026 · 53 min

Threat Modeling for Agentic AI: Stop Treating Agents Like APIs

Agentic AI is changing the way applications are designed, tested, deployed, and secured.Traditional application security focuses on APIs, authentication, authorization, databases, code, sessions, and technical attack surfaces.But Agentic AI introduces a different challenge.A user may not need technical knowledge to influence the system.A simple natural language prompt can make an AI agent classify intent, call a tool, retrieve data, generate a response, trigger a workflow, or influence a business decision.In this podcast episode, Prabh speaks with Akansha about Threat Modeling for Agentic AI…
27 Aug 2026 · 1 hr 2 min

The New Frontline: Why Hospitals Are The Biggest Cyber Targets

Healthcare cybersecurity is not only about protecting networks, servers, applications, or medical devices. Shantanu https://www.linkedin.com/in/shantanushastrish/In this podcast episode, Prabh speaks with Shantanu about healthcare cybersecurity, connected medical devices, hospital security, medical device threat modeling, security by design, cyber resilience, and AI in healthcare.Modern hospitals are now highly interconnected technology ecosystems. Patient monitors, scanners, ultrasound devices, laboratory systems, hospital applications, cloud platforms, networks, and AI-enabled tools…
24 Aug 2026 · 1 hr 3 min

AAISM Practice Questions Masterclass | Think Like an AI Security Manager

AAISM exam preparation is not only about memorizing AI terms.It is about learning how to think like an AI security manager.In this session, I explains AAISM-style practice questions using a practical, manager-focused approach. The focus is on understanding how to choose the best answer when multiple options look correct. The session starts with an AI loan approval case study and connects it with AI governance, AI risk management, AI technologies and controls, enterprise monitoring, and continuous improvement.The key message is simple:AAISM is about governance, risk, controls, evidence, and…
20 Aug 2026 · 53 min

Enterprise Risk Management Explained | Building a Risk Program from Scratch

In this podcast episode, Prabh speaks with David, a cybersecurity risk governance leader, about Enterprise Risk Management, GRC, risk appetite, risk tolerance, executive reporting, AI risk, and how to build a risk management program from scratch.David shares his first experience of building a risk management program in 2004 at a major Australian bank using ISO 17799, and explains why risk professionals must understand business objectives before applying any framework.Many organizations struggle with risk management because different teams use different definitions, different scoring methods,…
17 Aug 2026 · 1 hr 28 min

IT Application Controls Explained with Payroll Case Study | Practical IT Audit Masterclass

In this podcast, Prabh speaks with Chinmay, who has tested more than 100 automated controls, to explain IT Application Controls using a practical payroll process case study. https://www.linkedin.com/in/chinmaykulkarni22/https://chinmaykulkarni22.substack.com/Chinmay explains that application controls are automated actions within systems that help prevent or detect errors without manual intervention. Unlike IT General Controls, which are more standardized across applications, IT Application Controls are specific to a business process, system logic, workflow, configuration, and transaction…
13 Aug 2026 · 58 min

Auditing AI Systems in Critical Sectors

AI is moving from simple human-to-system interaction to agentic AI, where machines interact with other machines, take actions, exchange data, and influence business decisions.This creates a major challenge for cybersecurity, GRC, audit, compliance, and assurance professionals: Priyank Sonihttps://www.linkedin.com/in/priyank-soni-iima/How do you audit an AI system when you cannot fully see the model, logic, architecture, or internal decision-making process?In this podcast, Prabh speaks with Priyank Soni, a cybersecurity, AI/ML, digital trust, governance, and assurance leader, about auditing…
10 Aug 2026 · 1 hr 10 min

CISO Masterclass: Building Security Programs for the AI Era

AI adoption is accelerating across enterprises, but most security programs were not designed for the speed, scale, and complexity of AI-driven threats.In this CISO Masterclass episode, Prabh speaks with Agnidapta Sarkar, a seasoned cybersecurity evangelist and digital resilience strategist, about how CISOs must evolve their security programs for the AI era.Agni explains why organizations must first understand their digital assets, business impact, material risk, and enterprise architecture before rushing into AI adoption or AI security controls.The discussion goes deep into why traditional…
6 Aug 2026 · 56 min

Practical OT Risk Assessment Using

In many organizations, OT security is still discussed at a very high level. But when we go into the real world, the challenge is different:How do we actually assess cyber risk in an OT environment where safety, uptime, legacy systems, plant operations, and business impact all come together? In this session, Sajath walked through a very practical approach to OT cybersecurity risk assessment — not just theory, but how to think through:OT asset identificationBusiness and operational impactThreat scenariosVulnerability and exposureLikelihood and impact scoringRisk matrix creationSafety and…
3 Aug 2026 · 1 hr 3 min

Real-World Red Teaming: From Reconnaissance to System Access

In this special cybersecurity podcast episode, Prabh interviews Sarang, a seasoned cybersecurity expert popularly known as “Cyber Insane,” to discuss practical red teaming, enterprise attack simulations, web application security, and real-world attack kill chain thinking. https://www.linkedin.com/in/sarang-tumne-cyber-insane-a1681827/https://m.youtube.com/@redteamgarage-rtg?ra=m📚 RTG – Practical Red Teaming Book copies are now available!✅ Physical Book: ₹899 (Free delivery across India)✅ PDF Copy: ₹499 (Instant download)🎁 Special for Prabh’s community: Get 15% OFF using coupon code:…
30 Jul 2026 · 1 hr 14 min

Bug Bounty Hunting Roadmap: From Zero to First Bounty

Are you interested in bug bounty hunting but confused about where to start?In this podcast session, Prabh speaks with Monish about the real beginner roadmap for learning bug bounty, web security, XSS, SQL injection, Burp Suite, vulnerability reporting, and practical web application testing.This session is designed for beginners who want to learn bug bounty the right way. Instead of directly jumping into advanced tools and random payloads, Monish explains why every beginner must first understand how websites actually work.Before you start hunting bugs, you need to understand the basics of…
27 Jul 2026 · 1 hr 24 min

CISSP 2026 AI Topics Questions Master Class

Are you preparing for CISSP 2026 and wondering how AI security, AI governance, responsible AI, privacy, and model attacks can be tested in the exam?In this video, we break down important CISSP-style AI questions in a practical and exam-focused way. Instead of memorizing definitions, you will learn how to think like a CISSP candidate when facing scenario-based questions on AI systems, governance, risk management, security controls, privacy, and third-party AI platforms.AI is no longer just a technology topic. For CISSP candidates, AI connects directly with Security and Risk Management, Asset…
23 Jul 2026 · 50 min

Kudankulam Data Leak Explained | Critical Infrastructure, Vendor Risk & Dark Web Intelligence

Critical infrastructure may not always be directly attacked.Sometimes, the real risk comes from vendors, contractors, suppliers, hosting providers, exposed credentials, weak access controls, and data leaked through third-party ecosystems.In this podcast episode, Prabh speaks with Rakesh Krishnan, a threat intelligence researcher, about the Kudankulam Nuclear Power Plant-related data exposure discovered on a dark web data leak site operated by the ransomware group World Leaks.00:00 - 01:04 – Highlights01:04 - 02:54 - Introduction, Guest welcome, his credentials and Agenda02:54 – 04:29 -…
23 Jul 2026 · 1 hr 39 min

How to Implement ISO 27701 in the Real World

Want to understand how to implement ISO 27701 properly and turn privacy compliance into a working system? In this podcast, we break down the practical implementation of ISO 27701, explain how it relates to ISO 27001, and show how organizations can build a real Privacy Information Management System (PIMS) instead of treating privacy as a one-time compliance exercise.This session covers the structure of ISO 27701, the role of privacy principles, the difference between controllers and processors, and the real steps involved in operationalizing privacy controls across people, process, and…
20 Jul 2026 · 1 hr 43 min

How to Pentest LLMs Like a Security Researcher Cybersecurity

Are LLMs and AI apps really secure? In this podcast, we break down LLM security, prompt injection, LLM penetration testing, and the real vulnerabilities attackers look for when testing AI systems. From reconnaissance and enumeration to payload manipulation and lab-based exploitation, this session shows how traditional web application security testing differs from LLM security testing in real-world environments.Youtube : https://m.youtube.com/@darshanhackzInstagram : https://www.instagram.com/darshanhackzX : https://x.com/darshanhackzSecurity researcher Darshan Naik joins the discussion to…
16 Jul 2026 · 58 min

How to Build AI Governance in 5 Practical Steps Real Usecase

AI governance is no longer optional. In this podcast, we break down a practical 5-step AI governance framework for managing high-risk AI systems from intake and inventory to risk assessment, documentation, vendor review, and continuous monitoring.Using a fictional HR hiring model at a multinational financial institution, this session explains how organizations can build a real-world AI governance process that addresses bias, compliance, privacy, vendor risk, model drift, and regulatory expectations. We also explore how governance teams can align AI systems with business objectives, legal…
13 Jul 2026 · 1 hr 21 min

vCISO Master Class: Build a Security Program From Zero

Want to become an effective vCISO and learn how to build an information security program from scratch? This masterclass breaks down the real role of a virtual CISO, showing how to lead security through strategy, governance, risk management, compliance, stakeholder communication, and measurable execution.In this session, you’ll learn how a modern vCISO operates across the three core functions of security leadership: strategic direction, governance structure, and operational oversight. The masterclass covers how to assess low-maturity organizations, identify crown jewels, develop a security…
9 Jul 2026 · 1 hr 29 min

Practical Purple Teaming in Action 2026

What is Purple Teaming in Cybersecurity? In this podcast episode, Aditya Rai explains purple teaming in a practical, easy-to-understand way through real-world demonstrations using Splunk, Caldera, Atomic Red Team, Windows logging, and Sysmon.If you want to understand how red team and blue team collaboration improves threat detection, security monitoring, and detection engineering, this episode is for you. Aditya shares his journey into cybersecurity, explains why purple teaming matters, and shows how organizations can identify logging gaps, validate detections, and improve visibility across…
6 Jul 2026 · 2 hr 37 min

Practical Active Directory Pentesting Masterclass 2026

In this episode, Prabh hosts Siva for a deep, practical masterclass on Active Directory (AD) security — covering how AD works, why it becomes the single biggest “blast radius” in most enterprises, and how attackers exploit misconfigurations to compromise an entire organization.What You’ll Learn in This SessionActive Directory components explained (Domain Controllers, LDAP, NTDS.DIT, trusts, OUs)Why AD compromise usually equals full enterprise compromiseReal-world AD attack vectors and how attackers gain initial accessLLMNR poisoning and NTLM authentication abuseNTLM hash cracking with…
23 Mar 2026 · 1 min

Top 3 Skills to Master Before Entering Cybersecurity

Are you ready to enter the exciting world of cybersecurity? Before you do, make sure you're equipped with these three essential skills that every aspiring cybersecurity professional must know! In this short video, we'll discuss the critical abilities you need to master to set a solid foundation for your career.Why These Skills Matter:Networking Fundamentals: Knowing how data moves across networks is crucial for detecting and mitigating cyber threats.Operating Systems: Familiarity with different operating systems (Windows, Linux, etc.) helps in understanding system vulnerabilities and defense…
20 Mar 2026 · 55 min

AI Revolution: Navigating the Offensive and Defensive Digital Divide

In an era where artificial intelligence (AI) is revolutionizing the way we live and work, ensuring the security of generative AI technologies is paramount. Join Mr. Harshil in "Enable Secure Generative AI" as he dives deep into the world of AI, offering expert insights on leveraging AI for enhancing security measures and mitigating risks.Harshil Shahhttps://www.linkedin.com/in/harshil-shah-004/?originalSubdomain=ae🔍 What You'll Learn:The Fundamentals of Generative AI: Understand what generative AI is and how it's transforming industries.Offensive Uses of AI: Explore how AI can be used as a…

About Prabh Nair

Prabh Nair is a cybersecurity podcaster covering cyber risk, ransomware, incident response, SOC operations, GRC, AI security, threat intelligence, digital forensics, ISO 27001, CISSP, CISM, and security leadership. Built for SOC analysts, auditors, cybersecurity professionals, students, and business leaders, each episode delivers simple explanations, practical lessons, and real-world examples to help you stay ahead in the fast-changing cyber world. #CyberSecurity #InformationSecurity #CyberRisk #GRC #SOC #IncidentResponse #Ransomware #ThreatIntelligence #AISecurity #DigitalForensics

Prabh Nair is a English tech & science podcast from Prabh Nair. Melo plays each episode straight from the publisher's own feed — no ads added, no account needed — and remembers where you stopped, in this browser only.

Publisher: Prabh Nair
Language: English
Category: Tech & Science
New episodes: Several times a week
Typical length: 58 min
Latest episode: 5 Oct 2026
Feed: RSS — paste into any podcast app
Apple Podcasts: podcasts.apple.com/podcast/id1554859289
Website: prabhnair.in
Rights: Prabh Nair

RSS feed Apple Podcasts Website

More English tech & science 6

Take it with you

The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.