Podcasts about security leaders

Our featured guest this month is Tanya Janca, CEO of SheHacksPurple Consulting, board member for the Forte Group, and former keynote speaker at the Snow Frog conference, interviewed by Frank Victory. We break down the stark differences between privacy and cybersecurity policy globally, the uncomfortable gap between compliance frameworks and real-world risk, and her personal crusade to institute the world's first secure coding law. Plus, we dive into the major Colorado OIT restructuring, local development updates at DIA, and the latest threat intel and AI insights from Zvelo, Red Canary, Optiv, FusionAuth, and Lares! Our featured guest this month is Tanya Janca, widely known across the industry as SheHacksPurple. Tanya is the CEO of SheHacksPurple Consulting, a board member for the Forte Group, a former keynote speaker at the SnowFroc conference, and the best-selling author of Alice and Bob Learn Application Security. With over 25 years of IT and software development experience, Tanya joins Frank Victory for a candid, deep-dive exploration into the intersection of global security policy, developer workflows, and the massive disconnect between checked compliance boxes and truly defensive software engineering. Check out the full episode where we discuss: The Policy vs. Security Gap: Why international frameworks and high-visibility initiatives like the US SBOM Executive Order often favor visibility and tooling purchases over actual vulnerability remediation and code-level security. Shifting Left and Secure Guidelines: Why the industry routinely relies on catching vulnerabilities late via adversary simulation and penetration testing rather than establishing secure requirements, guardrails, and clear guidelines at the design phase. The Secure Coding Law Crusade: Tanya details her current petition in the Canadian House of Commons to establish a strict, accountability-driven secure coding law that could set a global baseline for how governments and private enterprises hold software to a true safety standard. Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com. This Month's News & Resources Colorado overhauls state IT office, lays off 173 employees after negative feedback (Colorado Sun) Colorado's fierce two-year fight over AI regulation ends with watered-down law, little fanfare (Colorado Sun) Denver ranks among ‘most exciting U.S. cities to drink in right now' (Westword) Denver airport plans pedestrian walkways between concourses (Ground News / DIA) Denver-area inflation increases to 5%. Blame energy costs. (Colorado Sun) How Lares Thinks About Mythos-Class AI in Offensive Security (Lares) The Security Risks of Agent-to-Agent (A2A) Communication (zvelo) Red Canary May Threat Intel Highlights (Red Canary) Advanced AI Protections for CISOs: A Practical Punch List (Optiv) We Surveyed More Than 300 Security Leaders on AI Identity. The Findings Are Counterintuitive (FusionAuth) Tanya Janca on LinkedIn https://cppcon.org/ https://www.devsecstation.com/ https://shehackspurple.ca/ Secure Coding Guidelines — Tanya's free, boiled-down 84-item guide referenced in the episode. Upcoming Events Rocky Mountain Information Security Conference (RMISC) - 6/23-25. ISC2 Pikes Peak - 6/24. ISSACOS Biergarten - 6/25 Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here. Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

RSA Conference (RSAC) 2026, the 35th annual flagship event for cybersecurity, drew over 43,500 attendees, featuring more than 600 exhibitors, 570+ sessions, and 700+ speakers from 104 countries. It generated 370 million social media impressions. With this size and reach, what should security leaders expect when they attend? Joseph Blankenship, Vice President, Research Director at Forrester Research, and Adrian Sanabria, host of Enterprise Security Weekly, join Business Security Weekly for a special recording from RSAC 2026. This pre-recorded session was filmed live from the conference on March 24, 2026. We discuss what security leaders will see, what they should expect from attending, and a few predictions for the future. If you didn't attend the conference, don't worry, this is a great way to get an inside view. And maybe it helps you decide to attend next year. Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-449

RSA Conference (RSAC) 2026, the 35th annual flagship event for cybersecurity, drew over 43,500 attendees, featuring more than 600 exhibitors, 570+ sessions, and 700+ speakers from 104 countries. It generated 370 million social media impressions. With this size and reach, what should security leaders expect when they attend? Joseph Blankenship, Vice President, Research Director at Forrester Research, and Adrian Sanabria, host of Enterprise Security Weekly, join Business Security Weekly for a special recording from RSAC 2026. This pre-recorded session was filmed live from the conference on March 24, 2026. We discuss what security leaders will see, what they should expect from attending, and a few predictions for the future. If you didn't attend the conference, don't worry, this is a great way to get an inside view. And maybe it helps you decide to attend next year. Show Notes: https://securityweekly.com/bsw-449

RSA Conference (RSAC) 2026, the 35th annual flagship event for cybersecurity, drew over 43,500 attendees, featuring more than 600 exhibitors, 570+ sessions, and 700+ speakers from 104 countries. It generated 370 million social media impressions. With this size and reach, what should security leaders expect when they attend? Joseph Blankenship, Vice President, Research Director at Forrester Research, and Adrian Sanabria, host of Enterprise Security Weekly, join Business Security Weekly for a special recording from RSAC 2026. This pre-recorded session was filmed live from the conference on March 24, 2026. We discuss what security leaders will see, what they should expect from attending, and a few predictions for the future. If you didn't attend the conference, don't worry, this is a great way to get an inside view. And maybe it helps you decide to attend next year. Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-449

RSA Conference (RSAC) 2026, the 35th annual flagship event for cybersecurity, drew over 43,500 attendees, featuring more than 600 exhibitors, 570+ sessions, and 700+ speakers from 104 countries. It generated 370 million social media impressions. With this size and reach, what should security leaders expect when they attend? Joseph Blankenship, Vice President, Research Director at Forrester Research, and Adrian Sanabria, host of Enterprise Security Weekly, join Business Security Weekly for a special recording from RSAC 2026. This pre-recorded session was filmed live from the conference on March 24, 2026. We discuss what security leaders will see, what they should expect from attending, and a few predictions for the future. If you didn't attend the conference, don't worry, this is a great way to get an inside view. And maybe it helps you decide to attend next year. Show Notes: https://securityweekly.com/bsw-449

AI is reshaping the security operations center (SOC), shifting it from a manual, reactive function into a faster, intelligence-driven environment. For organizations dealing with alert fatigue and limited analyst capacity, AI is becoming a practical tool for improving how threats are identified and managed.In this UC Today discussion, Kristian McCann speaks with Morgan Adamsky, Principal at PwC, to explore how enterprises are operationalizing AI in the SOC. Adamsky brings a pragmatic perspective, focusing on how AI can be deployed responsibly. Her insights center on aligning technology with people and process, ensuring AI enhances rather than complicates decision-making in high-pressure environments.From Hype to Operational RealityTraditionally, analysts have had to manually review large volumes of data, often taking significant time to identify real threats. AI is changing that by rapidly surfacing anomalies and prioritizing potential risks, helping teams respond faster.Adoption, however, varies widely. Many organizations are still taking a “bolt-on” approach, adding AI into existing workflows. More advanced organizations are rethinking the SOC entirely, treating AI as a “force multiplier” and designing operations around it from the outset.This gap highlights different levels of maturity. While some are experimenting, others are investing in deeper transformation, a move Adamsky suggests will deliver greater long-term value, particularly as attackers also leverage AI to accelerate their efforts.Challenges remain. Organizations must integrate AI across the full security lifecycle, ensure outputs can be trusted, and train teams to use it effectively. As Adamsky notes, the human factor is still a key hurdle in scaling adoption.Building a Smarter, Safer SOCTo manage these challenges, organizations are introducing clearer boundaries between AI and human decision-making. AI can handle tasks like initial triage, but critical actions such as containment or shutting down systems typically require human validation.This human-in-the-loop approach helps maintain trust while still benefiting from automation. It ensures that AI supports, rather than replaces, human judgment in high-stakes scenarios.Adamsky also outlines what effective implementation looks like. This includes combining threat intelligence, vulnerability data, and network activity into a unified view. AI then helps identify patterns and surface meaningful insights, enabling more informed decisions.She also points to three priorities: faster vulnerability management, stronger third-party risk oversight, and preparing for breaches. The latter reflects a growing recognition that incidents are increasingly likely, making readiness essential.From Experimentation to TransformationThe discussion makes clear that incremental adoption is not enough. While bolt-on AI can deliver short-term gains, long-term success requires rethinking the SOC as a whole, with AI embedded across workflows.At the same time, core cybersecurity fundamentals still matter. Practices like patching, testing, and incident planning remain critical, but must now operate at greater speed to keep up with AI-driven threats.For security leaders, the focus should be on both technology and people. That means investing in tools while also upskilling teams and adapting processes to fully leverage AI.Ultimately, organizations that treat AI as foundational rather than optional will be better positioned to keep pace in an increasingly automated threat landscape.

Security incidents don't end when the threat is contained. They end when you can confirm no sensitive data left the building and most teams can't confirm that. Pranava Adduri and George Gerchow of Bedrock Data joined the show to talk through what data visibility actually looks like at enterprise scale, why the office of no is dead, and what a DBOM has to do with AI compliance. Together they make the case that data-first security isn't just a better posture, it's the only posture that survives an AI-driven enterprise.   Pranava Adduri: www.linkedin.com/in/padduri George Gerchow: www.linkedin.com/in/georgegerchow Bedrock Data: www.bedrockdata.ai Jon: www.linkedin.com/in/jon-mclachlan Sasha: www.linkedin.com/in/aliaksandr-sinkevich YSecurity: www.ysecurity.io  

The US–Iran conflict is a sharp reminder that supply-chain security is no longer just a logistics or procurement issue. For Australian organisations, geopolitical instability can quickly become a business continuity, security, insurance, transport and critical infrastructure problem.In this episode of Security Insider, we speak with Andrew Harris from Ironbark Strategic and Bilal Ali Khan from Spinnaker Infrastructure about what senior security managers in Australia should be doing now to understand and reduce their exposure to supply-chain disruption.The discussion explores the impact of conflict on maritime routes, energy costs, freight movement, insurance, critical suppliers, ports, warehousing, contractor risk and organisational resilience. We also examine the secondary risks that often emerge during disruption, including cargo theft, fraud, counterfeit goods, grey-market sourcing, insider threat and organised-crime activity.Most importantly, this episode focuses on practical action: how security leaders can map supply-chain dependencies, identify single points of failure, monitor escalation indicators, brief executives, strengthen crisis plans and build a more resilient supply-chain security capability for future geopolitical shocks.For senior security, risk, resilience, procurement and infrastructure leaders, this is a timely conversation about how to move from reactive crisis management to deliberate supply-chain preparedness.For more episodes, visit www.asial.com.au/news

Transitioning from the CIA to leading global security at Microsoft is no small leap. Mike Howard shares how he navigated that shift, rebuilt a security program at scale, and learned to influence without authority in the private sector. He reflects on the importance of aligning security with business strategy, building diverse teams to tackle emerging threats, and continuously evolving as a leader. The conversation also explores how security leaders can think more broadly about risk in an increasingly interconnected world. You'll learn: Why influence, not authority, is the most critical skill in corporate security How aligning with business strategy unlocks buy-in and resources The importance of diverse talent in addressing emerging and complex threats Sign up for our monthly newsletter here.

In this episode of Security Insider, host John Bigelow speaks with Tony Jaques, Director of Issue Outcomes, about crisis communications for security leaders. With cyber incidents, misinformation, deepfakes, regulatory pressure, and geopolitical instability all reshaping the risk landscape, this conversation explores how leaders should communicate during high-pressure events, what mistakes to avoid, and how to build trust when facts are still emerging. A practical episode for CISOs, CSOs, resilience leaders, and executives responsible for security and reputation.  For more information, visit www.asial.com.au

In Episode 102 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Chris Cochran—Field CISO and VP of AI Security at the SANS Institute, and a veteran of the U.S. Marine Corps, NSA, and U.S. Cyber Command—to examine how artificial intelligence is fundamentally rewriting the cybersecurity threat model, and whether security leaders are evolving fast enough to keep pace.From the rapid and largely ungoverned adoption of AI across enterprises, to the collapse of traditional threat modeling assumptions, to the rise of autonomous agentic systems operating without human intervention, the episode surfaces a stark reality: AI is no longer a future risk—it is an active, present-tense governance challenge that most organizations are still approaching reactively.Framed through Dr. Chatterjee's Commitment–Preparedness–Discipline (CPD) lens, the conversation delivers a clear and urgent message: security leaders must establish AI asset visibility, embed security into AI deployment from the start, and build disciplined governance structures before the next wave of AI-enabled attacks makes the cost of inaction catastrophic.To access and download the entire podcast summary with discussion highlights - https://www.dchatte.com/episode-102-ai-is-rewriting-the-threat-model-are-security-leaders-keeping-up/Connect with Host Dr. Dave ChatterjeeLinkedIn: https://www.linkedin.com/in/dchatte/ Website: https://dchatte.com/Books PublishedThe DeepFake ConspiracyCybersecurity Readiness: A Holistic and High-Performance ApproachArticles & Cases PublishedChatterjee, D. (2026). Root: Automating the Remediation Gap, Ivey Publishing, Jan 7, 2026.Ramasastry, C. and Chatterjee, D. (2025). Trusona: Recruiting For The Hacker Mindset, Ivey Publishing, Oct 3, 2025.Chatterjee, D. and Leslie, A. (2024). “Ignorance is not bliss: A human-centered whole-of-enterprise approach to cybersecurity preparedness,” Business Horizons, Accepted on Oct 29, 2024.Isik, O., Chatterjee, D., and Lourenco, D.A. (2024). “Getting Cybersecurity Right,” California Management Review — Insights, Accepted for Publication, July 8, 2024. Chatterjee, D. (2023). “Mission critical – How American Cancer Society successfully and securely migrated to the cloud amid the pandemic,” I by IMD, March 13, 2023.Chatterjee, D. (2022). “Preventing security breaches must start at the top,” I by IMD, September 28, 2022, Institute for Management Development, Lausanne, SwitzerlandChatterjee, D. (2022). “Making Cybersecurity Readiness Mainstream,” Executive Blog Post, NETSPI, March 1, 2022Benz, M. and Chatterjee, D. (2020). “Calculated Risk? A Cybersecurity Evaluation Tool for SMEs,” Business Horizons, available online from May 4, 2020Chatterjee, D. (2019). “Should Executives Go To Jail Over Cyber Attacks,” Journal of Organizational Computing and Electronic Commerce, Vol 29, Issue 1, pp. 1-3.Abraham, C., Chatterjee, D., and Sims, R. (2019). “Muddling through cybersecurity: Insights from the U.S. healthcare industry,” Business Horizons, July 2019.

What does the conflict between the US and Iran mean for Australia's security environment, and what should Australian organisations be doing now to prepare?In this episode of the Security Insider podcast, we discuss the real-world implications of escalating conflict in the Middle East for Australian businesses, critical infrastructure, and security leaders. We examine how this crisis could affect fuel and freight, cyber risk, supply chains, domestic threat conditions, and the broader security posture of Australian organisations.This conversation is especially relevant for security managers in large organisations, security company owners, and systems integrators who need to understand not just the geopolitics, but the practical consequences for people, assets, continuity, and risk planning.Our guest for this episode is is Major General Mick Ryan AM, one of Australia's most respected military thinkers and commentators on strategy, war, and national security. Mick served for 35 years in the Australian Army and is now a Senior Fellow for Military Studies in the Lowy Institute's International Security Program. He is widely known for his analysis of modern warfare, military adaptation, and the strategic implications of global conflict for Australia and its allies.For more episodes, visit www.asial.com.au

Enjoying the content? Let us know your feedback!In this week's episode, I am joined by my good old friend Shakel Ahmed, a cybersecurity practitioner with over 20 years of experience across some of the most demanding environments in the industry. We are covering the importance of skills and cyber resilience — and this is particularly important for those of you who are responsible for building and maintaining security teams, managing risk at a strategic level, or simply trying to figure out where to focus your energy in an industry that never sits still. Whether you are an analyst wondering which skills will keep you relevant in the age of AI, or a CISO trying to ensure your organisation can absorb a hit and keep operating, this conversation is for you. Shakel brings a practitioner's perspective — not theory, not vendor talk — just hard-won insight on what it actually takes to build resilient people, resilient processes, and resilient organisations. So grab a coffee, settle in, and let's get into it.Be sure to subscribe!  You can also stream from https://yusufonsecurity.comIn there, you will find a list of all previous episodes in there too.

Guests: Alexander  Pabst, Global Deputy CISO, Allianz SE Michael Sinno, Director of D&R, Google Topics: We've spent decades obsessed with MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond). As AI agents begin to handle the bulk of triage at machine speed, do these metrics become "vanity metrics"? If an AI resolves an alert in seconds, does measuring the "mean" still tell us anything about the health of our security program, or should we be looking at "Time to Context" instead? You mentioned the Maturity Triangle. Can you walk us through that framework? Specifically, how does AI change the balance between the three points of that triangle—is it shifting us from a "People-heavy" model to something more "Engineering-led," and where does the "Measurement" piece sit? Google is famous for its "Engineering-led" approach to D&R. How is Google currently measuring the success of its own internal D&R program? Specifically, how are you quantifying "Toil Reduction"? Are we measuring how many hours we saved, or are we measuring the complexity of the threats our humans are now free to hunt? Toil reduction is a laudable goal for the team members, what are the metrics we track and report up to document the overall improvement in D&R for Google's board? When you talk to your board about the success of AI in your security program, what are the 2 or 3 "Golden Metrics" that actually move the needle for them? How do you prove that an AI-driven SOC is actually better, not just faster? We often talk about AI as an "assistant," but we're moving toward Agentic SOCs. How should organizations measure the "unit economics" of their SOC? Should we be tracking the ratio of AI-handled vs. Human-handled incidents, and at what point does a high AI-handle rate become a risk rather than a success? Resources: Video version EP252 The Agentic SOC Reality: Governing AI Agents, Data Fidelity, and Measuring Success EP238 Google Lessons for Using AI Agents for Securing Our Enterprise EP91 "Hacking Google", Op Aurora and Insider Threat at Google EP236 Accelerated SIEM Journey: A SOC Leader's Playbook for Modernization and AI EP189 How Google Does Security Programs at Scale: CISO Insights EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil The SOC Metrics that Matter…or Do They? blog An Actual Complete List Of SOC Metrics (And Your Path To DIY) blog Achieving Autonomic Security Operations: Why metrics matter (but not how you think) blog

In this episode of Lock It Down with Security Magazine, Chief Security & Trust Officer Kory Daniels shares how security leaders struggling with skill shortages can make strategic tradeoffs to lessen their team's burden.

As digital ecosystems expand, third-party relationships have become both business enablers and critical sources of cyber risk. In this episode, T.J. Patterson, VP and Information Security Officer at STAR Financial Bank, joins Dr. Hugh Thompson to explore how CISOs can navigate the growing complexity of third-party risk management. They discuss practical methods for identifying and prioritizing high-risk vendors, maintaining visibility beyond initial assessments, and driving accountability across the supply chain. From regulatory shifts to the limits of automation, this conversation offers actionable strategies for managing risk at scale.

You'd think the folks steering the cybersecurity ship would be the last ones to punch holes in the hull—but nope, even the pros trip over their own policies. In this episode, we dive headfirst into a cautionary tale where a CISO (yes, the security guy) admits to becoming the insider threat he warns others about. From skipping his own software vetting procedures to triggering network alarms like it's the 4th of July, this story is equal parts cringe and crucial. Strap in as we explore how even the most iron-clad experts are still deliciously human. More info at HelpMeWithHIPAA.com/544

Send us a textCheck us out at:  https://www.cisspcybertraining.com/Get access to 360 FREE CISSP Questions:  https://www.cisspcybertraining.com/offers/dzHKVcDB/checkoutGet access to my FREE CISSP Self-Study Essentials Videos:  https://www.cisspcybertraining.com/offers/KzBKKouvYour TV, camera, or even a smart bird feeder can be a beachhead for attackers. We dive into the Kimwolf botnet and expose how low-cost IoT turns into residential proxies that scan, DDoS, and quietly pivot across your home or enterprise network. From weak defaults and exposed ADB to shady apps, we call out the telltale signs and the simple architecture changes that shut the door: dedicated IoT VLANs, strict egress controls, and logging that actually sees what leaves your network.Then we switch gears into CISSP Domain 7.1 and break down what a defensible investigation looks like when the alarms go off. Evidence collection starts with a mindset: don't touch originals, document everything, and assume you'll need to defend the process in court. We cover IOCE-aligned practices, creating bit-for-bit copies with hashes, and when to engage a forensic retainer so you are not building a plan mid-incident. Memory captures, media recovery, network telemetry, and software analysis all play a role in reconstructing the timeline and proving what happened.Legal readiness sits at the core. We talk about involving counsel early, understanding insurer-approved panels, and mapping out rules of engagement for interviews and device access in your IR policy and onboarding. We clarify evidence authorities—voluntary surrender, subpoenas, and search warrants—plus the three evidence types and how chain of custody preserves admissibility. By the end, you'll have a clear blueprint: segment IoT, monitor outbound traffic, and run investigations that survive scrutiny.If this helped sharpen your security playbook, subscribe, share with your team, and leave a quick review to help others find the show.Gain exclusive access to 360 FREE CISSP Practice Questions at FreeCISSPQuestions.com and have them delivered directly to your inbox! Don't miss this valuable opportunity to strengthen your CISSP exam preparation and boost your chances of certification success. Join now and start your journey toward CISSP mastery today!

In this New Year's episode of Life of a CISO, Dr. Eric Cole reflects on the challenges of 2025 and delivers a powerful reset framework for CISOs entering 2026. Drawing from real-world coaching, executive leadership principles, and personal experience, Dr. Cole challenges security leaders to stop thinking like technologists and start acting like true chief officers. This episode breaks down three essential pillars every world-class CISO must define: who you need to become, your single top priority, and your North Star. Dr. Cole explains why consistency, discipline, and executive alignment matter more than tools, why most CISOs struggle with focus, and how habits, planning, and accountability can rapidly transform your impact and credibility. From redefining the CISO role as a future CEO pipeline, to practical strategies like executive one-on-ones, time blocking, and choosing a guiding North Star such as Zero Trust or data protection, this episode provides a clear roadmap to leadership growth. If you want to reset your mindset, elevate your influence, and lead cybersecurity as a business function in 2026, this episode is a must-listen.  

From Spartan races to culinary arts, discover the hobbies and passions that keep CISOs balanced and inspired in this behind-the-scenes edition of Agent of Influence. Welcome to a special edition of the Agent of Influence podcast! In this episode, we step away from the usual cybersecurity deep dives to explore the personal side of security leaders, such as the hobbies, passions, and activities that keep them grounded and inspired outside the office. From adrenaline-fueled adventures to creative pursuits, you'll discover what drives these leaders beyond their professional roles. Find more episodes on YouTube or wherever you listen to podcasts, as well as at netspi.com/agentofinfluence. If you want to be a guest or want to recommend someone, please fill out this short form to submit your interest. 

A new semester-long program is giving 75 students hands-on experience with advanced AI tools used in defense and cybersecurity. The AWS Generative Artificial Intelligence Training aims to prepare cadets and civilian trainees for careers in national security. Jamie Cogbill, Deputy Director, Defense Civilian Training Corps at Virginia Tech's National Security Institute, is here to fill us in on the details.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Black Hat 2025 was a showcase of cybersecurity innovation — or at least, that's how it appeared on the surface. With more than 60 vendor announcements over the course of the week, the event floor was full of “AI-powered” solutions promising to integrate seamlessly, reduce analyst fatigue, and transform SOC operations. But after walking the floor, talking with CISOs, and reviewing the press releases, a pattern emerged: much of the messaging sounded the same, making it hard to distinguish the truly game-changing from the merely loud.In this episode of The Future of Cybersecurity Newsletter, I take you behind the scenes to unpack the themes driving this year's announcements. Yes, AI dominated the conversation, but the real story is in how vendors are (or aren't) connecting their technology to the operational realities CISOs face every day. I share insights gathered from private conversations with security leaders — the unfiltered version of how these announcements are received when the marketing gloss is stripped away.We dig into why operational relevance, clarity, and proof points matter more than ever. If you can't explain what your AI does, what data it uses, and how it's secured, you're already losing the trust battle. For CISOs, I outline practical steps to evaluate vendor claims quickly and identify solutions that align with program goals, compliance needs, and available resources.And for vendors, this episode serves as a call to action: cut the fluff, be transparent, and frame your capabilities in terms of measurable program outcomes. I share a framework for how to break through the noise — not just by shouting louder, but by being more real, more specific, and more relevant to the people making the buying decisions.Whether you're building a security stack or selling into one, this conversation will help you see past the echo chamber and focus on what actually moves the needle.________This story represents the results of an interactive collaboration between Human Cognition and Artificial Intelligence.Enjoy, think, share with others, and subscribe to "The Future of Cybersecurity" newsletter on LinkedIn.Sincerely, Sean Martin and TAPE3________✦ ResourcesBlack Hat 2025 On Location Closing Recap Video with Sean Martin, CISSP and Marco Ciappelli: https://youtu.be/13xP-LEwtEAITSPmagazine Studio — A Brand & Marketing Advisory for Cybersecurity and Tech Companies: https://www.itspmagazine.studio/ITSPmagazine Webinar: What's Heating Up Before Black Hat 2025: Place Your Bet on the Top Trends Set to Shake Up this Year's Hacker Conference — An ITSPmagazine Thought Leadership Webinar | https://www.crowdcast.io/c/whats-heating-up-before-black-hat-2025-place-your-bet-on-the-top-trends-set-to-shake-up-this-years-hacker-conferenceLearn more and catch more stories from our Black Hat USA 2025 coverage: https://www.itspmagazine.com/bhusa25Catch all of our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverageCitations: Available in the full article________Sean Martin is a life-long musician and the host of the Music Evolves Podcast; a career technologist, cybersecurity professional, and host of the Redefining CyberSecurity Podcast; and is also the co-host of both the Random and Unscripted Podcast and On Location Event Coverage Podcast. These shows are all part of ITSPmagazine—which he co-founded with his good friend Marco Ciappelli, to explore and discuss topics at The Intersection of Technology, Cybersecurity, and Society.™️Want to connect with Sean and Marco On Location at an event or conference near you? See where they will be next: https://www.itspmagazine.com/on-locationTo learn more about Sean, visit his personal website.

Black Hat 2025 was a showcase of cybersecurity innovation — or at least, that's how it appeared on the surface. With more than 60 vendor announcements over the course of the week, the event floor was full of “AI-powered” solutions promising to integrate seamlessly, reduce analyst fatigue, and transform SOC operations. But after walking the floor, talking with CISOs, and reviewing the press releases, a pattern emerged: much of the messaging sounded the same, making it hard to distinguish the truly game-changing from the merely loud.In this episode of The Future of Cybersecurity Newsletter, I take you behind the scenes to unpack the themes driving this year's announcements. Yes, AI dominated the conversation, but the real story is in how vendors are (or aren't) connecting their technology to the operational realities CISOs face every day. I share insights gathered from private conversations with security leaders — the unfiltered version of how these announcements are received when the marketing gloss is stripped away.We dig into why operational relevance, clarity, and proof points matter more than ever. If you can't explain what your AI does, what data it uses, and how it's secured, you're already losing the trust battle. For CISOs, I outline practical steps to evaluate vendor claims quickly and identify solutions that align with program goals, compliance needs, and available resources.And for vendors, this episode serves as a call to action: cut the fluff, be transparent, and frame your capabilities in terms of measurable program outcomes. I share a framework for how to break through the noise — not just by shouting louder, but by being more real, more specific, and more relevant to the people making the buying decisions.Whether you're building a security stack or selling into one, this conversation will help you see past the echo chamber and focus on what actually moves the needle.________This story represents the results of an interactive collaboration between Human Cognition and Artificial Intelligence.Enjoy, think, share with others, and subscribe to "The Future of Cybersecurity" newsletter on LinkedIn.Sincerely, Sean Martin and TAPE3________✦ ResourcesBlack Hat 2025 On Location Closing Recap Video with Sean Martin, CISSP and Marco Ciappelli: https://youtu.be/13xP-LEwtEAITSPmagazine Studio — A Brand & Marketing Advisory for Cybersecurity and Tech Companies: https://www.itspmagazine.studio/ITSPmagazine Webinar: What's Heating Up Before Black Hat 2025: Place Your Bet on the Top Trends Set to Shake Up this Year's Hacker Conference — An ITSPmagazine Thought Leadership Webinar | https://www.crowdcast.io/c/whats-heating-up-before-black-hat-2025-place-your-bet-on-the-top-trends-set-to-shake-up-this-years-hacker-conferenceLearn more and catch more stories from our Black Hat USA 2025 coverage: https://www.itspmagazine.com/bhusa25Catch all of our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverageCitations: Available in the full article________Sean Martin is a life-long musician and the host of the Music Evolves Podcast; a career technologist, cybersecurity professional, and host of the Redefining CyberSecurity Podcast; and is also the co-host of both the Random and Unscripted Podcast and On Location Event Coverage Podcast. These shows are all part of ITSPmagazine—which he co-founded with his good friend Marco Ciappelli, to explore and discuss topics at The Intersection of Technology, Cybersecurity, and Society.™️Want to connect with Sean and Marco On Location at an event or conference near you? See where they will be next: https://www.itspmagazine.com/on-locationTo learn more about Sean, visit his personal website.

In this episode, Mark Ledlow is joined by Benjamin Whitfield, a seasoned security professional with a military and agency background and a former CIA. They discuss Ben's transition from being an executive in Silicon Valley to an independent consultant, and delve into the complexities of the security industry. Key topics include the role of Chief Security Officers, the importance of sales in security, and the need for risk-based assessment. They also explore emerging trends in security, the impact of the new administration, and the importance of continuing education for security professionals.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSBuilding relationships is crucial for ensuring security programs are funded and supported. The role of a Chief Security Officer (CSO) involves significant political and sales skills. Proper risk assessments tailored to the company culture are essential for effective security programs. The executive protection industry's future might see growth due to increasing threats and new economic sectors like cryptocurrency. Ongoing education and adaptation to emerging trends and technologies are vital for security professionals.QUOTES"It's all sales... Your job really is to advocate for how do you protect people, facilities, operations as much as possible given what the political climate is in your company." "If you build a program that meets the absolute corporate need, your job isn't going away." "In Silicon Valley, I'll stereotype. I'm just the kid wearing the hoodie. You're the kid wearing the hoodie who's now worth, you know, a billion dollars." "There are multiple ways where a company can provide, can have security for its senior most executives." "The CSO chair is, you're playing politics, you're fighting for budget with everybody else."Get to know more about Benjamin Whitfield through the links below.https://www.linkedin.com/in/benjaminwhitfield/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow is joined by Michael LaVista, Founder and CEO of Caxy Interactive, a software company based in the Midwest. They delve into the evolving landscape of business, technology, and human interaction. The discussion highlights the importance of digital transformation for companies, the balance between face-to-face interactions and digital communication, and the rising significance of platforms like LinkedIn for business networking. The conversation also explores the potential of AI, the growth of private jet usage, and takes a deep dive into sales strategies and market insights. Key anecdotes include the value of in-person meetings versus digital meetings and the innovative approaches used by prominent companies.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSAdaptation to Digital: Companies have significant opportunities to become digital and scale operations efficiently without heavy reliance on human resources. Importance of In-Person Interaction: Face-to-face meetings and conferences are regaining importance post-COVID for building trust and effective communication. Human-Centered Approach: Understanding and addressing innate human emotions can improve customer experiences. Innovative Sales Strategies: Focusing on client engagement and real conversations can enhance sales outcomes. Effective Use of Technology: Services like JSX with Starlink show the value of reliable in-flight connectivity for maintaining business operations. Economic Resilience: Despite challenges, the American economy is expected to adapt and continue thriving with smart trade and business practices. AI Integration: Embrace AI cautiously but proactively, experimenting with its applications to stay ahead.QUOTES“The opportunity for a lot of companies is to sort of finally become digital. “People are so much more effective in person.”“Face-to-face time, shaking the hand, having a dinner, creates business intimacy.” “The idea that you can distribute content for basically free on platforms like YouTube is a game changer.” “Don't either be too hyped up or down on AI. It's going to make a difference and you might as well just jump in and start trying stuff.”Get to know more about Michael LaVista through the links below. https://www.linkedin.com/in/michaellavista/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow is joined by Michael LaVista, Founder and CEO of Caxy Interactive, a software company based in the Midwest. They discuss various topics including handling adversity, the rise of AI, and its implications for businesses. Mike shares insights on the software industry's evolution, the significance of automation, and the challenges posed by AI security. He also provides his perspective on the future of the tech industry, the impact of quantum computing, and the volatile nature of cryptocurrencies. The conversation gives listeners a comprehensive view of the current and future trends in technology and business.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSAdapting to AI: The discussion emphasizes the rapid integration of AI in businesses, moving from experimental phases to becoming part of operational systems. Efficiency and Automation: Mike discusses his passion for automation, stressing the importance of optimizing processes to eliminate manual, time-consuming tasks. AI and Security: There's an outlined concern about AI's role in cybersecurity, particularly the risks of AI being exploited for malicious purposes. Economic Volatility: Tariffs and geopolitical changes are influencing operational costs and strategies for businesses, especially those involved in manufacturing and trading. Technological Talent: There's a notable shortage of skilled developers, emphasizing the necessity for continuous learning and adapting hiring practices to include self-taught individuals. Future Trends: Quantum computing poses significant future risks to current encryption methods, indicating a paradigm shift in cybersecurity.QUOTES"I hate the idea of people doing manual slow, stupid things that drives me crazy." "The idea of like kind of protecting yourself and, you know, putting it in a walled garden where it's protected against hacking." "We're really looking for all of our growth around Chicago to develop like a good, you know, culture, corporate family there." "For me, cryptocurrency is really just gambling and that's okay. I'm not putting a judgment on it." "You have to be able to compete. And I feel like when you have all that waste lying around, that's where your margin dollars just slip away." "Developers aren't going away completely. It's just like a different, your job will be different."Get to know more about Michael LaVista through the links below.https://www.linkedin.com/in/michaellavista/To hear more episodes of The Fearless Mindset podcast, you can go to  https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow, as the guest, sits down with Ben Hosking from Panoptic Solutions at the IPSB Close Protection Conference in Nashville. They share their backgrounds, explore career transitions, and discuss the value of industry events in the executive protection field. The conversation touches on the challenges of maintaining a fearless mindset, the critical role of trust in client relationships, and the evolving demands of the security industry. Personal anecdotes bring to life their journeys from military and firefighting roles to leadership positions in corporate and high-profile security sectors.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSHandling Adversity: The podcast emphasizes adapting and persevering through challenges, pointing out that career paths often evolve through unexpected events. Networking and Building Trust: Success in executive protection often hinges on trust and established relationships. Attending conferences and creating long-term partnerships are vital. Executive Protection Landscape: The industry has shifted significantly over the years due to technology and geopolitical changes, increasing the importance of protective intelligence and comprehensive security solutions. Service and Purpose: Many professionals in the industry are driven by a sense of purpose and service, often stemming from military or law enforcement backgrounds. Overcoming Fear: Emphasizes the importance of a fearless mindset, both personally and professionally, to achieve significant growth and success.QUOTES"We're selling trust, not executive protection." "Every overnight success takes about 10 years." "Fear is the mind killer and it stops more dreams than it does physical objections." "Service is absolutely everything; purpose comes through service." "You don't know what your calling is until your thirties or forties."Get to know more about Ben Hosking through the link below.https://www.linkedin.com/in/ben-hosking/To hear more episodes of The Fearless Mindset podcast, you can go to  https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow dives into a refreshing discussion with security experts Bruno Dias and Matt Talbot. They share their extensive backgrounds in law enforcement and recount a harrowing incident involving a school shooting. Bruno discusses the complexities and challenges of managing the aftermath, focusing on the importance of prevention and creating collaborative safety environments. The conversation expands to broader societal issues, including the impact of technology and social media on security and well-being. Both guests emphasize the need for a preventative stance and a compassionate, community-focused approach to addressing and mitigating threats.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSSchool Shooting Experience: Bruno shares his firsthand experience with a school shooting and the importance of preparation and response. Prevention Over Reaction: Emphasized the need for proactive threat assessment and the importance of early reporting to prevent violence. Impact of Technology: The conversation highlighted how technology, especially social media, can be both a tool and a threat in behavioral threat assessment. Community and Compassion: Stressed the significance of community support and compassion during times of economic and social hardship. Future Predictions: Discussion on the potential increase in workplace violence and emotional wellness challenges due to economic and political changes.QUOTES"You have to do the work with fidelity...threat assessment is not about risk elimination, it's about risk reduction.""Technology can be an accelerant...it can help validate feelings, stimulate ideas, and make ideas operational.""In desperate moments, people sometimes will resort to trying to control what they can't...often in destructive ways.""We need to use technology as a force for good...it's becoming increasingly difficult for parents and schools to monitor kids' use of technology.""By simply letting people know that you have a violence prevention model, you immediately improve their sense of wellness and security."Get to know more about Dr. Bruno Dias through the link below.https://www.linkedin.com/in/brunodiaspci/Get to know more about Dr. Matt Talbot through the link below.https://www.linkedin.com/in/matt-talbot-phd-lcsw-ccfc-cfmhe-ctm%C2%AE-5a655044/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

Reducing personal risk with your organisation's liability insurance Understanding the evolving risk landscape through recent case studies Creating a workplace ethos of shared accountability This episode is hosted by Thom Langfordhttps://www.linkedin.com/in/thomlangford/Michela Resta, Solicitor, CYXCELhttps://www.linkedin.com/in/michelarestacyxcel/Kelly Hagedorn, Partner, ALSTON & BIRDhttps://www.linkedin.com/in/kellyhagedorn/

 In this inspiring episode of The Women in the Arena Podcast, we sit down with Janet B. Nalls, Director and Chief of Staff at NetCentrics Corporation. A U.S. Air Force veteran and national security expert with over 25 years of experience, Janet shares her remarkable journey from serving as an intelligence analyst to advising top intelligence and DoD organizations.Janet opens up about her passion for mentorship, leadership, and empowering the next generation of national security professionals. She offers valuable insights into the critical areas of insider threat, counterintelligence, and strategic operations, all while reflecting on the importance of integrity, collaboration, and resilience in a demanding field.Beyond her professional achievements, Janet talks about balancing her role as a devoted mom and lifelong learner. Tune in for an authentic and motivating conversation that highlights what it truly means to lead with vision, heart, and strength.

In this episode, Mark Ledlow and Chuck Andrews discuss various topics including the economic growth in Texas, cultural differences across states, and the significance of diversifying business portfolios. The conversation touches on Chuck's experiences in law enforcement and the security industry, the evolving work ethic in younger generations, and the importance of mental toughness. They also discuss the challenges of organizing large events like Texas Night during hurricane season, the increase in school shootings versus domestic terrorism, and strategies for staying informed and proactive in an ever-changing business landscape. Tune in to gain insights from industry leaders and to understand what it takes to remain fearless amid adversity.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSEconomic Growth in Texas: Discussion on the migration of financial and tech companies to Texas, contributing to its growing economy.Cultural Differences: Exploration of cultural contrasts between Texas and other states like California and New York.Relocating and Adapting: Emphasis on the importance of embracing new cultures and adapting to different environmentsWork Ethic: Reflection on the changing work ethic among younger generations compared to older ones.Diverse Experiences: Value of having diverse experiences, from law enforcement to business, in shaping a well-rounded career.School Safety and Behavior: Importance of focusing on the behavioral aspects of students to prevent school shootings, rather than just increasing security hardware.AI and Information Verification: Necessity of verifying sources in the age of AI to avoid being misled.QUOTES"Texas does remain the friendliest state in the United States.""Business is simple. Humans are simple. You just gotta take your time getting to know people.""Focus on the kids in terms of that. Invest in counseling and literally having the kids involve themselves.""With AI, you're gonna be fooled in a very big way. Big decisions are gonna be made and you'll have no idea what's going on.""Treat life in a more meaningful way; build trust and all that good stuff comes. Just gotta be patient. Play the long game."Get to know more about Charles "CHUCK" Andrews through the link below. https://www.linkedin.com/in/charlesandrewscpp/To hear more episodes of The Fearless Mindset podcast, you can go to  https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow and Chuck Andrews, a renowned figure in the security industry known for his extensive global network and profound insights. Chuck shares his journey of building qualitative relationships, his strategies for managing a substantial LinkedIn following, and his future endeavors including a book tour across Europe. The discussion also delves into the challenges and opportunities in the security business, emphasizing the importance of trust and consistent relationship maintenance. Moreover, Chuck touches on issues like the impact of AI on business, geopolitical concerns, and the future of private equity in the industry. The episode is a rich blend of professional advice, personal anecdotes, and strategic insights pivotal for anyone looking to thrive in the security and business landscape.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSAdversity Management: Insights into how business leaders handle challenges and adversity.Business Optimism: There's a noticeable sense of optimism in the business community, particularly in Texas.Quality vs. Quantity in Networking: The importance of building quality relationships rather than focusing on the number of connections.Trust and Relationships: Trust is the cornerstone of effective business relationships and must be maintained through consistency and integrity.Importance of Adaptability: The need to adapt business strategies in response to changing environments and tech advancements.Upcoming Events: Details on Chuck's book tour and the impactful events he is organizing, including a cruise focused on networking.QUOTES"You ain't seen nothing yet. The next four years is gonna be a Yee-haw version to the 10th power, you watch!""Maintenance of relationships...that's where the work begins.""It's better not to own boats, planes, and trains, but it's better to have friends who have boats, planes, and trains.""Get shit done. Everybody likes to get shit done.""Trust is earned in this business. People are watching you, they're vetting you, even when they're not talking to you.""AI is going to be the biggest investment space.""You will not be able to discern the difference between fact and fiction, right and wrong...that's how dangerous artificial intelligence can be."Get to know more about Charles "CHUCK" Andrews through the link below.https://www.linkedin.com/in/charlesandrewscpp/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

Episode Topic In this episode of PayPd, host Kevin Rosenquist explores the urgent and growing issue of online impersonation and digital fraud with Kate Cox, Business Development Lead at Memcyco. As cyber threats become more sophisticated, Memcyco is pioneering real-time detection technology to uncover spoofed websites and protect both businesses and their customers from fraud. Lessons You'll Learn This episode dives deep into how fake websites are created, the mechanics of phishing and spoofing attacks, and the real-time tools being used to stop fraud before it starts. You'll gain insight into the role AI plays on both sides of the cybersecurity battle—enabling cybercriminals and empowering defenders. Kate also shares how businesses can protect their users and build long-term digital trust in an increasingly risky online world. About Our Guest Kate Cox is the Business Development Lead at Memcyco, a company at the forefront of digital fraud prevention. With a strong background in cybersecurity and business strategy, Kate works closely with organizations to implement proactive fraud protection solutions. Her mission is to make the internet safer by helping companies detect and block spoof sites in real time—before the damage is done. Topics Covered The rise and risk of spoofed websites The difference between phishing and spoofing attacks How Memcyco's real-time detection technology works The role of AI in modern cybercrime Building digital trust through proactive protection Emerging threats like session hijacking and man-in-the-browser attacks

Imagine receiving an urgent email from your bank that looks perfectly legitimate. It warns you of a suspicious transaction and prompts you to verify your identity. You hesitate but click, and suddenly, your credentials are compromised. This scenario, crafted by AI-powered fraud-as-a-service, is happening now.In this episode of the Security Matters podcast, host David Puner is joined by Blair Cohen, Founder and President of AuthenticID, to discuss the evolving identity threat landscape. They explore the rise of synthetic fraud, the role of biometric authentication and how AI-driven security is reshaping the fight against cybercrime. Blair shares insights on the challenges of detecting deepfakes, the advancements in biometric authentication and the impact of generative AI on security measures.Tune in to learn how security leaders can stay ahead in this rapidly changing environment and what organizations can do to prepare for the next generation of cyberthreats.

March 26, 2025 ~ The editor in chief of The Atlantic, Jeffrey Goldberg, had been inadvertently added to a group chat on the messaging app Signal, featuring some of the most senior members of the United States government, to discuss a then-imminent U.S. attack on Houthi targets in Yemen earlier this month. Former Congressman Dave Trott joins Guy, Lloyd, and Jamie to discuss the raised questions about the administration's handling of national security.

In this episode, Mark Ledlow and Fred Burton, Executive Director of Protection and Intelligence at Ontic and a best-selling author, discuss the surrounding potential threats posed by an open border policy and the presence of terrorist cells. The discussion delves into the analytical evidence of terrorism threats linked to transnational entries, highlighting that no domestic terror acts have been documented as originating from the southern border. The conversation touches on broader security issues, including high-profile plots thwarted in the past, school shootings, and the impact of geopolitical events on domestic safety. They emphasize the importance of analytical rigor and logical decision-making in the security and protective services industry, comparing different attitudes toward personal protection across regions and discussing the implications of various security measures for high-profile individuals.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSThe importance of proactive surveillance and intelligence gathering in security.Lessons learned from historical security breaches and attack plots.The significance of cultural fit and adaptability in security teams.Challenges faced by security personnel in adjusting to different operational environments.The necessity to constantly update and share intelligence within the security community.The evolving methods of threat actors and their preparedness.Fred Burton's involvement in upcoming TV and film projects based on his books.QUOTES"The scope of detail that some of these threat actors are engaged with is just frightening.""Intelligence is powerful when done correctly.""You can't run a program without intelligence today.""If you've got a good security team, trained in observation skills, you should be able to spot threat actors ahead of time.""Getting people in and out without being hassled is the kind of value add that we routinely do in this business.""It's amazing what you can do if you just try to blend in and ask questions.""Some degree of protection at public venues is essential, especially for controversial issues.""Surveillance is critical before you get the bodies out there. Get that team out there moving around snooping."Get to know more about Fred Burton through the link below.https://www.linkedin.com/in/thefredburton/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode of The New CISO, host Steve Moore sits down with Michael Mendelsohn, CISO at Majesco, to discuss his journey in cybersecurity—from his early days as a software developer to leading security for a major insurance software company.Michael shares insights into the evolving role of a CISO, the intersection of security and technology, and how curiosity and problem-solving have shaped his career. He dives into his experience building Arcus, an early security tool designed for software inventory and patch management, and how grassroots security engineering played a pivotal role in his professional growth.Other key topics include:✅ The changing landscape of cybersecurity leadership✅ The balance between open-source tools and enterprise security solutions✅ AI's impact on security automation and risk management✅ How security leaders can work effectively with legal teams✅ The importance of curiosity, adaptability, and mentorship in a security careerWhether you're a seasoned security professional or an aspiring CISO, this episode offers valuable insights into the challenges and opportunities of leading security in today's rapidly evolving digital landscape.

Steve Satterwhite On Cyber is a Cybercrime Magazine Podcast series brought to you by Entelligence. In this episode, Steve Satterwhite, founder and CEO at Entelligence, joins host Paul John Spaulding and Tim Brown, CISO at Solarwinds, to discuss cybersecurity talent, diving into the skills gap faced by security leaders today and what can be done about it. An industry leader in delivering affordable, high value professional services to security-conscious enterprise and government organizations worldwide, Entelligence addresses the cyber skills gap by working as a seamless extension of each customer's organization, providing a set of customized services that include security readiness assessments, quick-start solution deployments, and longer-term resident expert engagements. Learn more about our sponsor at https://entelligence.com

In this episode, Mark Ledlow and Fred Burton, Executive Director of Protection and Intelligence at Ontic and a best-selling author, discuss the surrounding potential threats posed by an open border policy and the presence of terrorist cells. The discussion delves into the analytical evidence of terrorism threats linked to transnational entries, highlighting that no domestic terror acts have been documented as originating from the southern border. The conversation touches on broader security issues, including high-profile plots thwarted in the past, school shootings, and the impact of geopolitical events on domestic safety. They emphasize the importance of analytical rigor and logical decision-making in the security and protective services industry, comparing different attitudes toward personal protection across regions and discussing the implications of various security measures for high-profile individuals.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSSecurity Concerns on Open Borders: Despite the high number of migrants, there has not been a domestic act of terror directly linked to transnational terrorists from the southern border.Domestic vs. Geopolitical Threats: Domestic threats such as school shootings are more frequent and concerning compared to geopolitical and international threats.Historical Predictive Failures: The U.S. has historically struggled to predict major geopolitical events, regardless of advancements in intelligence.Adaptation and Responsiveness: The executive protection industry often operates reactively, highlighting the need for better proactive measures and adequate resourcing.Regional Differences in Security Perception: Security needs and perceptions differ greatly across the U.S., with coastal regions being more open to private security compared to more self-reliant attitudes in middle America.QUOTES"To the best of my knowledge, there never has been a domestic act of terror directly linked to a transnational terrorist coming from the southern border.""Trust me, you'll be the first one to know if I uncover something that you really need to be concerned about for you or your family.""Our nation seems to always be surprised... I want to believe that we're better today at anticipating surprise, but history has shown we're not.""Most CEOs today are almost more receptive to that kind of low-key protection."Get to know more about Fred Burton through the link below.https://www.linkedin.com/in/thefredburton/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, Mark Ledlow is joined by Fred Burton, Executive Director of Protection and Intelligence at Ontic and a best-selling author. They discuss the evolving threat landscape under the new U.S. administration, the impact of social media on security, and the importance of protective intelligence. Learn about the dynamic changes in the security industry and discover how businesses can prepare for the next four years. Don't miss this fascinating conversation with one of the industry's leading experts.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSGuest Introduction: Fred Burton, Executive Director of Protection of Intelligence at Ontic, a bestselling author with extensive experience in the intelligence space.Fred's Admiration for Mark: High respect for Fred Burton who introduces key figures such as Jack.Importance of Adaptability in Security: Security programs need to be tailored to the clients' needs and cultures; no one-size-fits-all approach.Evolving Threat Landscape: Historical context of the threat landscape and its evolution, noting present challenges like social media and insider threats.Focus on Protective Intelligence: Emphasis on the importance of protective intelligence in assessing and mitigating threats; the balance of general awareness and specific threat signals.Community Building: The importance of a supportive community and the role Ontic plays in fostering thought leadership in the security industry.QUOTES"There's never really one model that fits all when it comes to security programs.""The threat landscape today is so dynamic and so fluid.""The 24/7 social media platforms provide an endless and constant stream of adverse intelligence signals.""It's our job in this space to put together a security package to allow you to do whatever it is that you would like to do within reason.""The challenge is there's so much noise that protective intelligence analysts almost get paralyzed because they don't know what signals to capture.""You need to have general awareness collection but then also have to capture those adverse intelligence signals that directly impact your unique protective mission."Get to know more about Fred Burton through the link below.https://www.linkedin.com/in/thefredburton/2To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

In this episode, we sit down with Sounil Yu, Co-Founder and CTO at Knostic, a security company focusing on need-to-know-based access controls for LLM-based Enterprise AI.Sounil is a recognized industry security leader and the author of the widely popular Cyber Defense Matrix.Sounil and I dug into a lot of interesting topics, such as:The latest news with DeepSeek and some of its implications regarding broader AI, cybersecurity, and the AI arms race, most notably between China and the U.S.The different approaches to AI security and safety we're seeing unfold between the U.S. and EU, with the former being more best-practice and guidance-driven and the latter being more rigorous and including hard requirements.The age-old concept of need-to-know access control, the role it plays, and potentially new challenges implementing it when it comes to LLM'sOrganizations rolling out and adopting LLMs and how they can go about implementing least-permissive access control and need-to-knowSome of the different security considerations betweenSome of the work Knostic is doing around LLM enterprise readiness assessments, focusing on visibility, policy enforcement, and remediation of data exposure risks----------------Interested in sponsoring an issue of Resilient Cyber?This includes reaching over 16,000 subscribers, ranging from Developers, Engineers, Architects, CISO's/Security Leaders and Business ExecutivesReach out below!-> Contact Us! ----------------

Tyler Sweatt , CEO of Second Front Systems, joins host Aileen Blackon Leaders and Legends to discuss leadership, innovation, and the challengesfaced by national security leaders in today's rapidly changing environment.As the chief executive officer of Second Front Systems, Sweatt works to bridgethe gap between innovative technologies and national security organizations. In addition, he serves as a technical advisor at Pallas Advisors and a partner atthe non-profit Silicon Valley Defense Group. Learn more about your ad choices. Visit podcastchoices.com/adchoicesSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Tyler Sweatt , CEO of Second Front Systems, joins host Aileen Black on Leaders and Legends to discuss leadership, innovation, and the challenges faced by national security leaders in today's rapidly changing environment. As the chief executive officer of Second Front Systems, Sweatt works to bridge the gap between innovative technologies and national security organizations. In addition, he serves as a technical advisor at Pallas Advisors and a partner at the non-profit Silicon Valley Defense Group. Learn more about your ad choices. Visit podcastchoices.com/adchoices

Η κλιματική αλλαγή, και όχι η στρατιωτική απειλή της Κίνας, είναι το μεγαλύτερο ζήτημα ασφάλειας που αντιμετωπίζει η Αυστραλία, προειδοποιούν εμπειρογνώμονες.

9.27.2024 #RolandMartinUnfiltered: Trump 2.0's DOJ & Policing, National Security Leaders Endorse VP Harris, Project 2025   We saw what the Justice Department looked like under Trump. Tonight, a special panel will examine what a Trump 2.0 DOJ would look like.  The list of those supporting Vice President Kamala Harris is growing. Over 700 National Security Leaders have Endorsed a Harris presidency.  We'll talk to one of the National Security Leaders for America members.   The CEO  Black Economic Alliance will break down the Vice President's economic plan.  New York Mayor Eric Adams makes his first court appearance on federal charges.   A Michigan judge gets demoted after handcuffing a teenage girl for falling asleep in his courtroom during a field trip.  We'll talk to a Law School graduate who breaks Down Project 2025 on social media.  Download the #BlackStarNetwork app on iOS, AppleTV, Android, Android TV, Roku, FireTV, SamsungTV and XBox  http://www.blackstarnetwork.com The #BlackStarNetwork is a news reporting platforms covered under Copyright Disclaimer Under Section 107 of the Copyright Act 1976, allowance is made for "fair use" for purposes such as criticism, comment, news reporting, teaching, scholarship, and research.See omnystudio.com/listener for privacy information.

Alexandra Rose is the Director, Government Partnerships & Counter Threat Unit at Secureworks. In this episode, she joins host Heather Engel to discuss the value of threat intelligence for security leaders, including how it can reduce organizational risk, inform strategic decision-making, and more. Secureworks is a leader in cybersecurity, empowering security and IT teams worldwide to accelerate effective security operations. Learn more about our sponsor at https://secureworks.com.

Retired Army Major General Randy Manner of National Security Leaders for America joins Joan Esposito at the DNC to talk about his group's endorsement of Kamala Harris for president. Catch "Joan Esposito: Live, Local and Progressive" weekdays from 2:00 to 5:00 p.m. on WCPT.

Mark Ledlow features an in-depth discussion with a security expert, Adam Korn. They dive into the complexities of national security, focusing on nuclear threats, the protection of radiological materials, and the essential practices for securing them against potential terrorists. Discussions extend to the training of SWAT teams and responders to handle radiological threats, emphasizing the critical nature of best practices in security measures. Adam, with a background in criminal justice and international affairs, shares insights from his extensive experience at the National Nuclear administration and his current role as a security consultant. The conversation covers the convergence of physical and cybersecurity, the importance of emotional intelligence in the security industry, and the challenges and opportunities for training in the digital age. The episode also touches on the necessity for impactful onboarding and development programs that go beyond mere compliance, aiming to genuinely empower and prepare employees for safety and security challenges. Furthermore, they discuss upcoming regulations, like California's Senate Bill 553, and the pivotal role of detailed and effective training to meet and exceed such requirements.Learn about all this and more in this episode of The Fearless Mindset Podcast.KEY TAKEAWAYSThe convergence of physical security and cybersecurity is essential in modern security strategies.Emotional intelligence (EQ) is crucial in security roles, aiding in de-escalation and effective communication.Effective training goes beyond check-the-box modules, requiring engaging, story-driven approaches to ensure retention and application.The importance of preparing for emerging threats like AI, which can enhance security measures when embraced effectively.Workplace violence prevention and compliance, as mandated by Senate Bill 553 in California, necessitate proactive training and policy development.QUOTES"The ideal training is in live interaction...My second most favorite is when you're having a live video session, but then again, people start to disengage because they're attached to a computer.""Effective training goes beyond check-the-box modules, requiring engaging, story-driven approaches to ensure retention and application."Get to know more about Adam Corn:LinkedIn: https://www.linkedin.com/in/adamcorn1/To hear more episodes of The Fearless Mindset podcast, you can go to https://the-fearless-mindset.simplecast.com/ or listen to major podcasting platforms such as Apple, Google Podcasts, Spotify, etc. You can also subscribe to the Fearless Mindset YouTube Channel to watch episodes on video.

The State Department investigates an alleged breach. The FCC looks at regulating connected vehicles. A big-tech consortium hopes to mitigate AI-related job losses. Google aims to thwart cookie-thieves. SurveyLama exposes sensitive info of over four millions users. Omni Hotels & Resorts is recovering from a cyberattack. A national cancer treatment center suffers a breach. How cyber is approached on both sides of the pond. In our Industry Voices segment , George Jones, CISO at Critical Start, discusses strategies for maximizing cybersecurity investments to achieve optimal risk reduction. Playing the identity theft long-game.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On Industry Voices, guest George Jones, CISO at Critical Start, joins us to share thoughts on the topic "Spend Smarter, Risk Less: Cybersecurity ROI Strategies for Security Leaders." George discusses strategies for maximizing cybersecurity investments to achieve optimal risk reduction.  Selected Reading Threat Actor Claims Classified Five Eyes Data Theft (Infosecurity Magazine) Automakers and FCC square off over potential regulations for connected cars (The Record) Big tech companies form new consortium to allay fears of AI job takeovers (TechCrunch) Amazon is cutting hundreds of jobs in its cloud computing unit AWS (NPR) Google Proposes Method for Stopping Multifactor Runaround (GovInfo Security) Google fixes two Pixel zero-day flaws exploited by forensics firms (Bleeping Computer) SurveyLama data breach exposes info of 4.4 million users (Bleeping Computer) Omni Hotels confirms cyberattack behind ongoing IT outage (Bleeping Computer) The US or the UK: Where Should You Get a Cybersecurity Job? (GovInfo Security) US Cancer Center Data Breach Impacting 800,000 (SecurityWeek) Iowa sysadmin pleads guilty to 33-year identity theft of former coworker (The Register)  Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © 2023 N2K Networks, Inc.

Shiva Nathan, Founder and CEO of Onymos, provides insight to recent government requirements for PII protection and how security leaders can implement them.