Security Matters (formerly Trust Issues)
CyberArk's identity security interview show, launched as Trust Issues and renamed Security Matters. Silent since March 2026, after Palo Alto Networks' acquisition.
- Host
- David Puner
- Publisher
- CyberArk (now Palo Alto Networks) · Vendor
- Pillar
- Privileged & Governance, Machine, Workload & Secrets
- Level
- Practitioner
- Format
- Interview
- Cadence
- Biweekly until March 2026, 35 to 50 min
- Status
- Dormant, last episode 2026-03-06
- Since
- 2022
- Episodes
- 98
What it is
CyberArk's podcast launched as Trust Issues in April 2022 and was renamed Security Matters in February 2025, hosted throughout by David Puner of CyberArk. Its 98 episodes cover identity security from an attacker's point of view: privileged access, machine identities, AI agents, and the threat landscape. Its February 2026 episode featured CyberArk founder Udi Mokady after Palo Alto Networks closed its acquisition on February 11, 2026.
Who it suits
Security and identity practitioners interested in privileged access and machine identity from the perspective of incident responders and researchers.
Editor note
A solid interview show with a strong guest list. Its future is unclear: the last episode was March 6, 2026, the RSS feed now returns an error, and CyberArk's podcast page redirects to Palo Alto Networks' Idira site. No end has been announced, so we list it as dormant and will update if an Idira-branded successor appears.
Where to start
- EP 39 - Analyzing the MGM and Okta Breaches: the Identity Connection2023-11-02 · 33 min · Practitioner · Identity threats and ITDR
Breaks down the 2023 MGM help desk social engineering attack and the Okta support system breach, and the identity weaknesses both exploited.
- EP 46 - Behind the Data Breach: Dissecting Cozy Bear's Microsoft Attack2024-02-15 · 32 min · Practitioner · Identity threats and ITDR
Dissects the Midnight Blizzard (APT29) breach of Microsoft, including password spraying a legacy test tenant and abusing OAuth applications for access.
- EP 49 - Inside the Attack Surface: Lessons from the Red Team on Browser Threats2024-04-03 · 30 min · Practitioner · Identity threats and ITDR
Explains why attackers moved from stealing passwords to hijacking session tokens and cookies, and why the browser is now a main identity attack surface.
Last verified 2026-09-30 against the show's feed, recent episode notes, and the publisher's own pages. Status and last-episode date update weekly from the feed.
Security Matters (formerly Trust Issues) is produced by CyberArk (now Palo Alto Networks). Listed on the same terms as independent shows.
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.
Related on Start with Identity
- Blog1Password buys Apono, moving from credential vault to access control plane
Reported at 250 to 300 million dollars, the deal gives 1Password just-in-time privileged access across AWS, Azure, GCP, Kubernetes, Snowflake, and Databricks, a
- CVEBeyondTrust PRA and Remote Support unauthenticated command injection
Privileged Remote Access and Remote Support accepted a malicious client request and ran OS commands as the site user. Unauthenticated. CVSS 9.8. CISA KEV. A PAM
- CVEBeyondTrust Remote Support pre-auth command injection, a variant of CVE-2024-12356
An unauthenticated request could run operating system commands on self-hosted BeyondTrust Remote Support and older Privileged Remote Access appliances. Scanning
- BlogBeyondTrust Remote Support zero-day let ARMORY CASTLE dump the credential vault
CVE-2026-102764, a CVSS 9.3 flaw in self-hosted BeyondTrust Remote Support through 26.2.3, was exploited as a zero-day by the China-nexus group ARMORY CASTLE. M
- CVEBeyondTrust Remote Support zero-day, from file upload to the whole credential vault
An origin-validation flaw in self-hosted BeyondTrust Remote Support through 26.2.3 let ARMORY CASTLE plant a web shell, export every vaulted admin credential, a
- GlossaryBreak-Glass Account
A tightly controlled emergency account used only when normal access fails, with strong vaulting, monitoring, and alerting. Tested regularly so it works in a rea