All episodes
Is Our Dated Hiring Process Creating Vulnerabilities?
How the SDLC Evolves Once You Deploy LLM-Based Code Scanners
How Do You Demonstrate Resilience?
How Should Security Be Architected for Human Error?
Can SMBs Get the Same Security as Everyone Else?
Why Do We Keep Complaining About the Same Issues in Cybersecurity?
Securing AI-Generated Open Source Code
BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection
How AppSec Needs to Change For the Speed of AI
Building Resilience for Microsoft 365
Recommendations to Reboot the Security Vendor Pitch
Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity
Will AI Replace Detection Roles in Cybersecurity?
What Makes a Good AI Security Deployment?
The Office Politics of Remediation
Why is Preventative Security So Difficult?
Identity and Access Management (IAM) in an Agentic AI World
Protecting AI Agents in O365 and Google Workspace
Humans Are Bottleneck in a Machine-Speed World
Even With All These Security Vendors We Still Have Glaring Gaps
Is the "Attackers Only Need to Be Right Once" a Misnomer?
What It Takes To Be Successful in Cyber Media
CISOs Buy For Selfish and Politically Risk-Averse Reasons (Not Because Your Product is the Best)
Has Cybersecurity Become a Cult?
What Does the Next Generation of Cloud Security Look Like?
The Dangers of Picking the Wrong Vendor
Why Cyber Startups Need CISO Advisors
Breaking the Reactive Cycle of Cybersecurity
How Do You Know If Your Backups Will Survive a Ransomware Attack?
What Makes a Successful Security Vendor Demo?
Should You Use Native or 3rd Party Cloud Management Tools?
How Should We Measure the Performance of a CISO?
How to Be Less Busy and More Effective in Cyber
How to Engage With a CISO When They Express Interest
Who is Responsible for the Conflict Between Security and Developers?
Are Your Security Tools Creating More Work for Your Team?
Why Overpromising is a Dangerous Sales Tactic
Should You Phish Your Employees or Not?
How Much Autonomy Should You Give AI Agents in Your SOC?
Cybersecurity's Broken Hiring Process
Simple Security Solutions That Deliver a Big Impact
When Cybersecurity Marketing Fails to Reach the Buyer
How Best to Prepare Your Data for Your Tools
Don't Try to Win with Technical Expertise. Win by Partnering.
What Makes a Successful CISO?
How Should CISOs Talk to the Business
How Much Cyber Risk Should a CISO Own?
How To Tell When a Vendor is Selling AI Snake Oil
In the Age of Identity, is Network Security Dead?
How to Manage Configuration Drift
Is Least Privilege Dead?
How Do We Measure Our Defenses Against Social Engineering Attacks?
Sales Follow Up Sequences: What Works Best in Cyber?
What Soft Skills Do You Need in Cyber?
What is the Visibility That Security Teams Need?
Data Governance in the Age of AI
How Can Security Vendors Better Stand Out?
What New Risks Does AI Introduce?
The Pattern of Early Adoption of Security Tools
How Are You Managing the Flow of AI Data
How to Deal with Last Minute Compliance Requirements
Do You Have a Functional Policy or Did You Just Write One?
Where are We Struggling with Zero Trust
Cybersecurity Has a Prioritization Problem
How Can AI Provide Useful Guidance from Fragmented Security Data?
Why Salespeople's Knowledge of Cybersecurity Is Critical for the Ecosystem
What Are the Cybersecurity Trends We Need To Follow?
Is It Even Possible to Fast-Track Your Way Into Cybersecurity?
What's the Most Efficient Way to Rate Third Party Vendors?
Don't Ask "Can" We Secure It, But "How" Can We Secure It
Has the Shared Security Model for SaaS Shifted?
Improving the Efficiency of Your Threat Intelligence
Why Cybersecurity Professionals Lie on Their Resumes
What Should Be in a CISO Job Description?
The CISO's Job Is Impossible
Can You Have a Secure Software Environment Without Traditional Vulnerability Management?
How Much Should Salespeople Know About Their Product?
Why Are We Still Struggling to Fix Application Security?
What Can Someone with No Experience Do in Cybersecurity?
Are New Gartner-Created Categories/Acronyms Helping or Hurting the Cybersecurity Industry?
Can AI improve Third-Party Risk Management (TPRM)
Cybersecurity Is NOT an Entry-Level Position
Hey Vendors, What Problem Is Your Product Solving?
We've Been Fooled. There Is No Talent Shortage.
Is There an Increasing Consolidation of Vendors in the SOC?
Are CISOs Struggling to Get Respect?
Is Platformization Vs Best-of-Breed a False Dichotomy?
Protecting Your Backups from Ransomware
Can a Security Program Ever Reach Maintenance Mode?
The Hardest Problems in Security Aren't "Security Problems"
If and When Should a CISO Have a Long Term Security Plan?
Do We Want CISOs Dictating How Salespeople Should Engage?
Is AI Benefiting Attackers or Defenders?
CISOs DO Own the Risk
How Can We Fix Alert Fatigue?
Vulnerability Management ≠ Vulnerability Discovery
Are Security Awareness Training Platforms Effective?
The Argument For More Cybersecurity Startups
How Are New SEC Rules Impacting CISOs?
Managing the Risk of GenAI Tools