WIS is a cloud security platform that helps organizations identify and remediate risks across their

cloud environments. The company's platform scans layers of the cloud stack, including virtual machines,

containers, and serverless configurations to detect vulnerabilities and misconfigurations in context.

The Model Context Protocol, or MCP, is emerging as a potential

standard for connecting LLM applications to external data sources and tools. It has rapidly gained

traction across the industry, with broad backing from companies such as OpenAI, Microsoft, and Google.

While the protocol offers great opportunities, it also introduces certain security risks.

Rami McCarthy is a principal security researcher at WIS.

He joins the podcast with Gregor Van to talk about security research, AI and Secrets Leakage,

MCP Security, Supply Chain Attacks, Career Advice, and more. Gregor Vand is a CTO and founder, currently working at the intersection

of communication, security, and AI, and is based in Singapore. His latest venture, Wintick.AI, reimagines what email can be in the AI era.

For more on Gregor, find him at van.hk or on LinkedIn. Hello, welcome to Software Engineering Daily. My guest today is Rami McCarthy from WIS. So hi, Rami,

thanks for coming on. Thanks for having me. Excite to be here. Yeah, very excited to have you here.

And as I sort of just

mentioned, you're here on effectively behalf of WIS. You joined fairly recently, but you definitely

have quite a illustrious past in the security world, a lot of research that I'm sure a lot of

our audience will be familiar with, whether sort of directly or indirectly.

So I think it would be kind of just fun, if you could just pretty much take us through kind of your kind of journey from whether it's, you know, high school or college through to through to where you are at the moment.

Awesome. Yeah. You mentioned I joined Wiz recently, and I really feel like that

is a logical culmination of a lot of what I've done in my career. I studied security in

university academically. I feel like I came up at a really good time where those programs were

starting to pop up in the U.S. specifically the NSA was funding a lot of universities to have

...