Random but Memorable

Your inbox could be a goldmine for hackers, and AI is making it easier than ever to strike gold. In this episode of Random but Memorable, we explore why your email account is such a valuable target for cybercriminals. 📩🪎 Our Watchtower Weekly segment focuses on EvilTokens, a phishing operation linked to more than 12,000 compromised inboxes. From tricking victims into approving malicious sign-ins on legitimate Microsoft pages to using AI to speed up fraud, these attacks are getting smarter. Learn how they work and what you can do to protect your inbox. 📧🔐Plus, we're introducing a brand-new segment: This Month at 1Password! 🎉 First up, universal sign-in: a prompt that makes it easier than ever to sign in to your favourite websites, whether you're using passwords, passkeys, or social logins. And in #Ask1Password, we reveal our favourite security tools and apps beyond 1Password. 👉 Try 1Password for Claude🏰  Watchtower WeeklyHackers now use AI to supercharge inbox takeoversDisrupting EvilTokens: The AI Chatbot Built for Cybercrime🗓️ This Month at 1PasswordUniversal sign-inIntroducing universal sign-in: a seamless solution for every way you loginAlso mentioned: Try 1Password for Claude🗣 #Ask1Password – Ask Us Anything! Please send us an email at: [email protected] us a question in the 1Password Community forum📲  Follow Us…Watch on YouTubeFind us on Apple PodcastsFind us on SpotifyVisit 1Password.comCheck out our blogFind us on X @1PasswordFind us on Facebook or InstagramSend us an email: [email protected]❤️  Review Us...If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts.

Is your business truly audit-ready, or are you just hoping for the best? 📋🔐In this episode of Random but Memorable, we’re joined by Brad Thies, Founder and CEO of BARR Advisory, to unpack why compliance shouldn’t be something your team dreads once per year.Brad explains how the conversation has shifted from “do you have a policy?” to “can you prove your controls are actually working?” We also dig into how AI is changing the compliance landscape. If your organization is adopting AI, this conversation will help you understand what evidence, controls, and access management you may need to prove you’re doing it safely.Whether you’re working toward SOC 2, ISO, HIPAA, HITRUST, or just trying to build a stronger security program, this episode is packed with practical advice to help you move from checkbox compliance to controls that actually work.🎙  Guest Interview – Brad ThiesWe’re joined by Brad Thies, Founder and CEO of BARR Advisory, to unpack why compliance shouldn’t be something your team dreads once per year.👉 Visit: barradvisory.com📲 Follow Brad Thies on LinkedIn📄 1Password: Cybersecurity Compliance🗣 #Ask1Password – Ask Us Anything! Please send us an email at: [email protected] us a question in the 1Password Community forum📲  Follow Us…Watch on YouTubeFind us on Apple PodcastsFind us on SpotifyVisit 1Password.comCheck out our blogFind us on X @1PasswordFind us on Facebook or InstagramSend us an email: [email protected]❤️  Review Us...If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts.Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

Is shadow AI quietly creating risk inside your business? 🤖🔐 In this episode of Random but Memorable, you’ll learn what happens when employees adopt AI tools faster than teams can track them.Amy Gebhardt, Senior Engineering Manager at 1Password, joins the show to unpack the security and visibility challenges behind shadow AI. The pair also discuss tokenmaxxing: a carefree approach to prompts, model calls, and AI agents that can lead to eyewatering bills. Learn why AI spend is so difficult to manage and how your team can spot waste without killing useful experimentation.In Watchtower Weekly, we look at how AI agents are changing the speed of cyberattacks, and why visibility, access controls, and credential management matter more than ever. Finally, in #Ask1Password, we share our favorite underrated 1Password tips and features.🏰  Watchtower WeeklyAI is changing the speed of cyberattacksAn AI-Assisted Cyber Attack: Inside a Unit 42 InvestigationAI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit🎙  Guest Interview – Amy GebhardtAmy Gebhardt, Senior Engineering Manager at 1Password, unpacks tokenmaxxing and the visibility challenges behind shadow AI.👉 AI spend management with 1Password SaaS Manager📄 1Password blog: The tokenmaxxing bill is due: Take control of AI spend📲 Follow Amy Gebhardt on LinkedIn🗣 #Ask1Password – Ask Us Anything! Please send us an email at: [email protected] us a question in the 1Password Community forum📲  Follow Us…Watch on YouTubeFind us on Apple PodcastsFind us on SpotifyVisit 1Password.comCheck out our blogFind us on X @1PasswordFind us on Facebook or InstagramSend us an email: [email protected]❤️  Review Us...If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts.Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

We all know AI models are getting better at finding software vulnerabilities. But can they fix them without creating new problems? In this episode, Wade sits down with Keith Hoodlet, 1Password’s Director of Security Research, to discuss new findings from Off-by-1 Labs. Plus, how quickly does good cybersecurity start saving you money? 💸🔐 In Watchtower Weekly, we look at the rising cost of data breaches, and why investing in security might be far cheaper than dealing with the fallout. Using the latest numbers from IBM’s 2026 Cost of a Data Breach report, we explore how AI-enabled attacks are changing the economics of cybercrime. 📈 In #Ask1Password, we share our best tips for convincing your family to start using 1Password, especially if you’re already using it at work. 🧑‍🧑‍🧒‍🧒 🏰  Watchtower Weekly Data breach costs climb as AI-powered attacks surge IBM's Cost of a Data Breach Report The Average Cost of a Data Breach Rises to $5 Million Data breach costs climb as AI-powered attacks surge One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average Organizations turn to AI as data breach costs jump 12% 🎙  Guest Interview – Keith Hoodlet 👉 Off-by-1 Labs at 1Password 📄 1Password blog: Why AI-generated vulnerability patches still require expert human review 📲 Follow Keith Hoodlet on LinkedIn 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum This week: 👉 Get a free 1Password Families membership when you use 1Password Business 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

We’re back for a brand-new season! 🎉 And we're kicking things off with an evolving security risk in the AI space: prompt injection attacks..🤖⚠️ In Watchtower Weekly, we discuss how prompt injection has evolved from chatbot jailbreaks into a serious business risk. As AI tools start reading emails, documents, code, and other sensitive data, we go beyond the headlines to unpack the real-world impact of this attack vector.  To dig deeper, Wade sits down with Johann Rehberger, independent AI security researcher and author of Embrace The Red. Johann explains how malicious instructions can hide inside the content AI tools process, and what organizations can do to reduce the blast radius. Plus, in #Ask1Password, we explain the purpose of the Developer option in the 1Password desktop app, and how it helps protect SSH keys, environment secrets, and AI-powered development. 👉 Get started with 1Password developer tools 🏰  Watchtower Weekly Prompt injection attacks pose growing risk to generative AI AI threats in the wild – The current state of prompt injections on the web New CIS Report Warns Prompt Injection Attacks Pose Growing Risk OWASP 2026 – “The model will be fooled” 🎙  Guest Interview – Johann Rehberger 👉 Johann's blog: embracethered.com 📄 AI Hacking Course: Hacking AI Apps & Agents 🎥 Watch Johann Rehberger on YouTube 📲 Follow Johann Rehberger on X 📲 Follow Johann Rehberger on LinkedIn 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum This week: 👉 Get started with 1Password developer tools 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

Always-on access might sound convenient, but it can quietly become a serious security risk. 🔐⚠️ In this bonus episode of Random but Memorable, we’re joined by Rom Carmel, VP of Product Management at 1Password, to introduce 1Password Privileged Access.  Rom breaks down what privileged access management actually means, and why permanent permissions can leave companies exposed. He also explains how “just-in-time” and “just enough” access can protect teams and their most critical systems, without slowing everyone down.  We also explore what happens when AI agents start needing access too, and why securing humans, machines, and agents is quickly becoming one of the biggest challenges for modern organizations. 👩‍💻 Learn more: Introducing 1Password Privileged Access ☑️ Listener Survey – Giveaway!  WE NEED YOU! Our 2026 listener survey is now live, and we’d love to hear from you. 👉 TAKE THE SURVEY HERE Have a favourite guest? Secretly skip a segment? Now’s your chance to let us know — honestly, we want to hear it all. As a thank you, we’re giving three lucky listeners a free year of 1Password just for taking part. The survey takes less than five minutes and you can stay anonymous if you want to (but you’ll need to pop in your email address to enter the giveaway).   📅 Giveaway ends: August 31, 2026 📜 Full Ts & Cs below. 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Giveaway Terms and conditions NO PURCHASE NECESSARY. Open only to participants who are the age of majority where they reside. To enter, complete our 2026 listener survey and enter a valid email address. 3 winners will be selected at random to receive 1 free year of 1Password Families, valued at approximately $71.88 USD. The winners will be notified via direct message or email within 14 days after the giveaway ends and must respond within 30 days to claim the prize. 1Password reserves the right to modify or terminate the giveaway at any time. Personal information collected will only be used for giveaway administration. The giveaway runs from July 7, 2026 (09:00AM ET) - August 31, 2026. (12:00AM ET)

Fact or fiction? 🕵️‍♀️ In this bonus episode, Wade puts Sara and Jayden to the test with a series of cybersecurity myths, urban legends, and viral social media claims. Can criminals steal your fingerprints from a selfie? Does Incognito Mode really hide everything you do? Is your phone secretly listening to serve you ads? And should you actually worry about public USB chargers or smart TVs? 🫆📲 Follow along and see if you can separate the facts from the fear mongering! By the end, you’ll know what’s worth worrying about and what’s not. 😅 ☑️ Listener Survey – Giveaway!  WE NEED YOU! Our 2026 listener survey is now live, and we’d love to hear from you. 👉 TAKE THE SURVEY HERE Have a favourite guest? Secretly skip a segment? Now’s your chance to let us know — honestly, we want to hear it all. As a thank you, we’re giving three lucky listeners a free year of 1Password just for taking part. The survey takes less than five minutes and you can stay anonymous if you want to (but you’ll need to pop in your email address to enter the giveaway).   📅 Giveaway ends: August 31, 2026 📜 Full Ts & Cs below. 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Giveaway Terms and conditions NO PURCHASE NECESSARY. Open only to participants who are the age of majority where they reside. To enter, complete our 2026 listener survey and enter a valid email address. 3 winners will be selected at random to receive 1 free year of 1Password Families, valued at approximately $71.88 USD. The winners will be notified via direct message or email within 14 days after the giveaway ends and must respond within 30 days to claim the prize. 1Password reserves the right to modify or terminate the giveaway at any time. Personal information collected will only be used for giveaway administration. The giveaway runs from July 7, 2026 (09:00AM ET) - August 31, 2026. (12:00AM ET)

You asked, we answered! 🎙️🔐 In this bonus episode of Random but Memorable, we’re tackling listener questions from Reddit and the 1Password Community. We cover everything from why some people are still skeptical of passkeys, to the role 1Password will play in a future where AI agents sign in and complete tasks on our behalf. Plus, we dig into 1Password Environments and how it helps developers securely manage secrets. Allie, Matt, and Wade also reveal the cybersecurity misconceptions they’d love to retire for good. Short, practical, and packed with listener questions — keep them coming at [email protected] 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts.

Anyone can build software with AI now, and millions of people are giving it a try. But when AI can spin up an app in minutes, are security risks slipping through the cracks? 👀💻 In our season finale of Random but Memorable, we dive into the promise and pitfalls of building software with AI. First, in Crash Course, Roo breaks down what vibe coding actually means, why it’s suddenly taken off, and how people are using AI tools to build apps, websites, games, and workflows. Then, in Watchtower Weekly, we look at the security risks, including exposed data and leaked API keys, and why AI-built apps still need real software guardrails.📲 Later, Wade sits down with Jeff Malnick, 1Password’s VP of Engineering for Developer & AI, to discuss how to start vibe coding without creating a cybersecurity risk. From code review and developer best practices to the future of AI-assisted software development, this conversation is packed with practical advice for anyone experimenting with AI and code.🤖👨‍💻 🏰  Watchtower Weekly Thousands of Vibe-Coded Apps Expose Corporate and Personal Data WIRED: Thousands of Vibe-Coded Apps Expose Corporate and Personal Data Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities How we discovered over 2k high-impact vulnerabilities in apps built with vibe coding platforms Vibe Coding for Non-Developers: 63% of Users Now Have No Coding Background, Breaches Follow 👨‍🏫  Crash Course Vibe coding 👨‍💻 AI builders can now easily access 1Password secrets management and developer tools 🎙  Guest Interview – Jeff Malnick 👉 Visit: 1password.dev 📄 1Password blog: Introducing 1Password® Unified Access: Identity Security for Humans and Their AI Agents 📄 1Password blog: How 1Password secures agent architectures 📲 Follow Jeff Malnick on LinkedIn 📲 Follow Jeff Malnick on GitHub 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password.

Traveling soon? ✈️🔐 This week’s episode is your cybersecurity guide for life on the move. Learn how to keep your personal and professional data secure while navigating  airports,  public Wi-Fi, and local pickpockets.  In Crash Course, we break down 1Password Travel Mode: what it is, how it works, and how it can help protect your most sensitive information when traveling. Wade then sits down with Gerald Auger from Simply Cyber for a practical conversation about travel security. The pair cover vacation risks, business trips, free Wi-Fi, lost devices, and the simple habits that make traveling a whole lot safer. 🛜🏨 Plus, we reveal the winners of our 1Password giveaway! 🏰  Watchtower Weekly Why Hackers Are Targeting the Education Sector International cyber attack disrupts swathe of universities and schools Education Ransomware Roundup – 2025 stats on attacks, ransoms, and data breaches ‘PAY OR LEAK’: Hackers Target Big Higher Ed Vendor 👨‍🏫  Crash Course 1Password's Travel Mode ✈️ How to use 1Password's Travel Mode on your phone, tablet, and laptop 📄 1Password blog: How to stay secure while traveling this summer 🎙  Guest Interview – Gerald Auger 🎥 Watch Simple Cyber on YouTube 👉 Visit: simplycyber.io 📲 Follow Gerald Auger on LinkedIn 📲 Follow @Gerald_Auger on X 📄 1Password blog: How to stay secure while traveling this summer 🗣 #Ask1Password – Ask Us Anything!  Please send us an email at: [email protected] Ask us a question in the 1Password Community forum 📲  Follow Us… Watch on YouTube Find us on Apple Podcasts Find us on Spotify Visit 1Password.com Check out our blog Find us on X @1Password Find us on Facebook or Instagram Send us an email: [email protected] ❤️  Review Us... If you're loving the show, please leave us a review on Apple Podcasts or wherever you listen to podcasts. Editor's note: The views and opinions expressed by the interviewee don't represent the opinions of 1Password. Giveaway Terms and conditions NO PURCHASE NECESSARY. Open only to participants who are the age of majority where they reside. To enter, subscribe to the Random but Memorable YouTube channel and comment on our World Password Day Special with your favorite Random but Memorable tip or trick. 3 winners will be selected to receive 1 free year of 1Password Families, valued at approximately $71.88 USD. The winners will be notified via direct message or email within 14 days after the giveaway ends and must respond within 30 days to claim the prize. 1Password reserves the right to modify or terminate the giveaway at any time. By accepting the prize, the winner agrees to allow 1Password to use their name and comment for promotional purposes. Personal information collected will only be used for giveaway administration. The giveaway runs from May 12th, 2026 (09:00AM ET) - May 20th, 2025. (12:00AM ET)