Kane Narraway, Head of Enterprise Security at Canva, shares how he went from digital forensics in UK law enforcement to protecting millions of users' creative workflows today. He breaks down why marketing and sales teams are more vulnerable than engineers to attacks, his framework for balancing security with velocity and culture, and why security awareness training should “only do the required amount, and then tailor that to the individuals”. 

0:00 Every country’s cybersecurity quirks are different
9:59 Canva's unique security challenge: data protection in physical printing
14:21 Stealer malware and mitigation with device-bound session credentials
24:05 Why most acquisitions fail from a security view
35:08 Finding balance between security, culture and velocity
44:57 Security awareness: the importance of targeted training

🔔 Follow Kane and Aleksandra on:
https://www.linkedin.com/in/kane-n/
https://www.linkedin.com/in/aleksandra-melnikova-1012/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Join us as Dr. Nathan Fisk, Associate Professor of Cybersecurity Education of USF and Cyber Florida Academic Director, discusses the importance of community in cybersecurity education. In this episode, Nathan explains how formal education has drifted away from the hacker culture that actually builds effective security professionals. He shares insights on why passion beats certifications, how community connections trump degrees, and what parents need to know about their kids' shrinking attention spans in the age of AI.

0:00 How a computer infection got Nathan into his career
5:32 Generational differences in approaching cybersecurity
11:38 The decline of the "hacker mindset" in cybersecurity
28:55 How community makes better security professionals
36:01 Nate's inspiration to start the 502 Project
49:50 Most cybersecurity degrees fail industry needs
57:18 What must we get right in cybersecurity education

🔔 Follow Nate and John on:
https://www.linkedin.com/in/nwfisk/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Cezary Piekarski, Group CISO at Standard Chartered, joins us to share hard-earned wisdom from 25+ years securing financial institutions globally. In this episode of the Be Fearless podcast, Cezary shares how Standard Chartered scales security without becoming a bottleneck, draws fascinating parallels between today's AI security challenges and buffer overflow attacks and why curiosity is the hallmark of all great CISOs.

0:00 Scaling security without bottlenecks
7:19 How the browser (and browser security) has evolved
14:13 AI security parallels to buffer overflow attacks of the past
16:16 Outsourcing accountability to users doesn’t work
20:56 Why crisis communication must take outside events into account
28:49 Closing and how “security is a study of failure”

🔔 Follow Cezary and Audrey on:
https://www.linkedin.com/in/cpiekarski/
https://www.linkedin.com/in/audrey-adeline/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Eric Mizell, Field CTO and VP Field Engineering at Keyfactor, breaks down why digital certificates are the security blind spot most companies don't know they have. From his early days fixing Novell networks to helping enterprises manage millions of IoT identities, Eric shares war stories about expired certificates that couldn't send breach alerts, private keys stored in network folders with the same password, and how AI is intelligently helping threat actors make decisions on how to attack. 

0:00 PKI hierarchies matter for enterprise security
14:09 Expired code signing certificates are still risky
17:53 Should you run your own CA or outsource it?
25:08 The importance of knowing your "cryptographic posture"
36:49 Death of passwords and the trust crisis in browsers
45:05 AI-driven attacks in the cybersecurity arms race

🔔 Follow Eric and John on:
https://www.linkedin.com/in/eric-mizell-8864977/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Ben Waugh, BISO at Datavant, drops some hard truths about healthcare security - like how the most damaging breaches aren't from sophisticated nation-state actors, but from attackers exploiting basic gaps while security teams obsess over complex threats. With nearly two decades securing critical infrastructure at companies like Redox and Twilio, Ben shares war stories from the trenches, explains why browser-managed medical devices are becoming a new entry point for attackers, and reveals how AI can both 10x both productivity and shadow IT chaos. 

0:00 Why hospitals keep getting hacked by “basic” attacks
14:21 Phishing 2.0 and how AI is turning Shadow IT into a security nightmare
25:52 Building security programs where patient safety comes first
36:22 What most professionals get wrong about the CISO role

🔔 Follow Ben and Aleksandra on:
https://www.linkedin.com/in/ben-waugh-2a51436b/
https://www.linkedin.com/in/aleksandra-melnikova-1012/ 

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Sandip Wadje, Managing Director and Global Head of Emerging Technology Operational Risks & Intelligence at BNP Paribas, reveals the hidden challenges of securing one of the world's largest banks in an AI-driven world. From his unconventional journey starting in a TV factory to now influencing global regulatory guidelines, Sandip shares how the browser is a gigantic attack surface for banks, the harmfulness of redundant security controls and how communication is the most important soft skill one should have. 

0:00 Security for AI and AI for security come hand in hand
13:41 Threat actors aren't just targeting privileged users
21:33 Unlearning is key to building a high-performing diverse team
25:33 Controls fatigue from stacking too many security tools
32:38 “What you often perceive as resistance is lack of clarity”

🔔 Follow Sandip and Aleksandra on:
https://www.linkedin.com/in/digitaldefender/
https://www.linkedin.com/in/aleksandra-melnikova-1012/ 

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Martin Holzworth, CISO at UnitingCare Queensland, brings 25 years of cybersecurity to this episode of the Be Fearless Podcast. In this conversation with Aleksandra Melnikova, Martin shares hard-won insights about protecting patient data, managing supply chain risks in healthcare, and why securing browsers has become non-negotiable in today’s threatscape. He discusses the unique challenges of healthcare security where patient safety is at stake and offers practical advice for building security culture — from teaching password hygiene through song lyrics to taking business leaders on the security journey.

0:00 The unique challenges of healthcare cybersecurity
13:43 "Take your business on the journey with you"
22:35 Evolving ransomware threats in healthcare
30:09 Diverse backgrounds strengthen cyber defense teams
36:29 AI security fails without governance and risk appetite

🔔 Follow Martin and Aleksandra on:
https://www.linkedin.com/in/martinholzworth/
https://www.linkedin.com/in/aleksandra-melnikova-1012/ 

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Brad Berkson, CEO of Miles Space, sits down with John Carse to discuss his journey from McKinsey partner to serving as a former Pentagon senior official operations, to now pioneering space technology. Brad shares eye-opening insights about how most security breaches come from basic housekeeping failures rather than sophisticated attacks, his dot-com startup experience and why aerospace and defense face fundamentally different security stakes where it's not just about money — it's about national security and lives. 

0:00 Leaving a seven figure job to join the defense industry
12:16 New innovations in signal enhancement
23:02 Cybersecurity stakes in defense that consumer brands never face
31:41 More funding doesn't mean better solutions
40:29 Leadership principles that work universally

🔔 Follow Brad and John on:
https://www.linkedin.com/in/brad-berkson-4295274/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

With years directing cyber operations in the United States Air Force as a Cyber Officer, Sarah Cleveland brings a unique perspective to cybersecurity. In this conversation with John Carse, she discusses how military risk calculation differs from corporate approaches, shares practical insights on selling cybersecurity to federal agencies, why nation-state actors are becoming more in-your-face and what figure skating taught her about resilience. 

0:00 Sarah’s experience leading C4 (Command, Control, Communications, Computers) in the military
13:40 Selling to the government: understanding federal procurement and budget cycles
21:24 The shift from network defense to browser-based threats
35:07 Nation-state hacks becoming more “in your face” and impacting citizens
44:27 Volunteering with the Armed Services Arts Partnership, closing advice

🔔 Follow Sarah and John on:
https://www.linkedin.com/in/sarah-u-cleveland/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

Drawing from her experience at Dell and Infosys, Security Engineer Yaamini Mohan breaks down why getting your security basics right — boring stuff like passwords, patching, and MFA— will move the needle much more than any expensive AI-powered solution. In this conversation with SquareX Field CISO John Carse, she also discusses how the shift to cloud and SaaS has expanded our attack surface, why most security work should be boring, and the myth of gender imbalance in the industry.

0:00 Security is not a 9 to 5 job
18:04 The importance of building a good cybersecurity foundation
27:46 How not getting the basics right expands your attack surface
35:17 The myth of gender imbalance in cybersecurity

🔔 Follow Yaamini and John on:
https://www.linkedin.com/in/yaamini-mohan/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0