In Episode S7E8, Steven welcomes Arvind Parthasarathi, founder and CEO of CYGNVS, to discuss reinventing cyber incident readiness and response collaboration. Arvind shares his background in analytics and cybersecurity, explaining how CYGNVS was created to address the chaos organizations face during major cyber incidents. The conversation covers the importance of comprehensive preparation for cyber incidents, the benefits of CYGNVS’s incident response platform, and the company’s approach to preparing, practicing, responding to, and reporting on cyber crises.

In Episode S7E7, Steven welcomes Glenn Day, CEO of NVISIONx, to discuss data risk intelligence and emerging threats in the age of AI and complex data environments. Glenn shares insights on data governance, the importance of proper data organization for AI adoption, and how NVISIONx helps organizations manage and purge data responsibly. The conversation underscores the significance of intelligent data classification in cybersecurity and the need for collaborative data governance across departments to achieve enhanced protection, compliance, and a competitive edge through AI models.

In Episode S7E6 of the Brilliance Security Magazine Podcast, host Steven Bowcut sits down with Dmitri Vellikok, VP of Embedded Security at F-Secure, to discuss F-Secure’s newly launched Scam Kill Chain Framework and explore critical insights into how cybercriminals select and exploit their targets.

The Inspiration Behind Scam Kill Chain

Dmitri shares his 20+ year journey in cybersecurity, from his early fascination with web-based hacking to his extensive experience with F-Secure, highlighting what motivates him to continue tackling cyber threats. He explains the inspiration behind the Scam Kill Chain Framework, a groundbreaking approach designed to close gaps in existing cybersecurity strategies, providing better protection for both businesses and consumers.

Exploring the Scam Kill Chain Framework

The discussion delves deep into each stage of the Scam Kill Chain, from initial reconnaissance and infrastructure setup to lateral movement and eventual monetization. Dmitri emphasizes that timely intervention, especially during initial contact attempts by scammers, is critical for effective defense.

Dispelling Misconceptions About Cyber Scams

Listeners gain valuable insights into common misconceptions around scams, understanding the psychology of cybercriminals, and why attacks, although widespread, aren't typically personal but rather opportunistic and scaled. Dmitri also addresses emerging cybersecurity threats associated with connected IoT devices and AI-based systems, emphasizing the need for updated software and proactive threat detection.

AI’s Role in Threat Detection

The role of artificial intelligence and machine learning in identifying and preventing cyber threats within the Scam Kill Chain Framework is explored, providing practical guidance for security professionals interested in integrating this approach into their practices.

Future Cybersecurity Challenges and Preparation

Finally, Dmitri shares forward-looking perspectives on evolving threats and how F-Secure is proactively preparing to stay ahead of increasingly sophisticated cybercriminals. Don't miss this episode packed with actionable insights to enhance your cybersecurity strategies.

In Episode S7E5, host Steven Bowcut speaks with Ian Amit, CEO and Founder of Gomboc AI. The conversation covers various aspects of Gomboc AI and its approach to computer science and cybersecurity. Ian shares his practical problem-solving philosophy and insights into the evolving landscape of cybersecurity, highlighting the impact of generative AI and the inefficiencies in traditional cloud security and DevOps processes. They discuss the complexities of cloud security, including risks from misconfigurations and shadow IT, and outline Gomboc AI's deterministic approach to AI, which relies on provider documentation to deliver precise solutions while maintaining human oversight. Finally, Ian emphasizes the future direction of Gomboc AI, advocating for improved DevSecOps practices and the integration of infrastructure as code and GitOps methodologies.

In Episode S7E4,David Matalon, CEO and Founder ofVenn, joins Steven Bowcut to explore the evolving landscape of remote work security and the challenges of traditional Virtual Desktop Infrastructure (VDI). David shares insights into how financial services and other industries have struggled with data security, compliance, and usability in a BYOD-driven world, and how Venn’sSecure Enclave and Blue Border technology provide a more seamless, secure alternative. They also discuss the importance ofwork+life integration over balance, how Venn’s approach enhances remote productivity without sacrificing security, and the lessons learned from scaling a cybersecurity business. The conversation delves into thefuture of BYOD, its growing strategic importance in hybrid workforces, and how Venn is shaping the future of secure remote access by integrating with existing applications and infrastructure. David also shares his vision for thenext phase of remote work, where BYOD becomes the standard rather than the exception.

In Episode S7E3, the discussion features Marko Simenov, CEO of Plainsea, who talks about the company's innovative augmented penetration testing platform. Marko explains the origins of Plainsea, its unique features, and its benefits to both pen-testing companies and their clients, including time and cost savings, continuous testing capabilities, and improved efficiency. The conversation also covers Plainsea's integration with various industries, compliance requirements, and other cybersecurity software, as well as its potential for future development based on user feedback and market demands.

In this podcast conversation, Steven and Edward explore the potential of AI in cyber defense, emphasizing its role in augmenting human security teams. Edward highlights a case study where AI enables a tech startup to function as if it has more engineers on staff. They delve into the concept of 'agentic AI' and its application in coaching AI systems, with Edward noting Dropzone AI's recognition as a 'cool vendor' by Gartner in October of the previous year—an important milestone for the company.

Edward explains that agentic AI refers to systems capable of autonomously performing complex tasks without incremental instructions from users. He underscores the importance of coachability in AI, comparing these systems to digital workers who must adapt to an organization’s specific needs. Steven adds that the value of a team member grows exponentially as they learn the operational nuances of the organization. Edward points out the trend of utilizing agentic AI to enhance productivity by offloading tedious tasks, such as tier-one analytical work.

The duo also discusses the ethical training of large language models, addressing the challenges related to using unlicensed and private customer data. Edward raises concerns about the risks involved and advocates for responsible data handling, urging vendors to keep a clear distinction between private information and data used for system improvement. Steven expresses worry about the potential for agentic AI systems to learn from humans who may not fully grasp ethical standards. In response, Edward emphasizes the significance of case studies from fields like medicine.

Finally, they discuss the growing adoption of AI in cybersecurity, with Edward noting that the technology has matured significantly in the past year. He highlights the potential for attackers to exploit large language models as well. Sharing his vision for the future, Edward aspires to create the most capable and trustworthy AI security analyst, which would empower organizations of all sizes to investigate security alerts promptly, making it harder for attackers to succeed. Steven conveys enthusiasm about the prospect of using digital workers as a force multiplier for startups and small businesses.

In Episode S7E1, the host, Steven Bowcut, and Rita Gurevich, the CEO and founder of SPHERE, discuss the importance of identity hygiene in cybersecurity, emphasizing its continuous nature and role in protecting organizations from identity-related risks. They also discussed the challenges in identity management, the need for automation, and the impact of identity hygiene on cyber insurance costs. The conversation concludes with a discussion on the applicability of these concepts to different verticals and the increasing scope of identity management.

In this episode, Steven Bowcut sat down with Jori VanAntwerp, Founder and CEO of EmberOT, to explore the challenges and innovations in operational technology (OT) security. Jori, a seasoned expert with nearly 20 years of experience in both OT and IT security, discussed EmberOT’s mission to enhance visibility, security, and risk quantification for critical infrastructure. He detailed how EmberOT’s software sensors provide unmatched protection for OT networks and shared insights into the importance of risk quantification for their clients.

The conversation covered a wide range of topics, from the convergence of OT and IT security to the most significant threats facing critical infrastructure today. Jori shared practical steps for organizations new to OT security and highlighted a success story where EmberOT dramatically improved a client’s security posture. Looking ahead, he also discussed emerging trends and technologies that will shape the future of OT security and how EmberOT is preparing to lead in this evolving space.

This episode is a must-listen for anyone interested in critical infrastructure security and the innovative solutions EmberOT is bringing to the table.

In Episode S6E5 of the BSM podcast, we sit down with Ryan Smith, the founder of QFunction, to delve into the transformative power of AI and Machine Learning in cybersecurity. Ryan shares his insights on the pressing challenges businesses face in securing their data amidst the rising tide of cyberattacks and how QFunction's innovative approach is bridging the gap where traditional tools fall short.

Ryan explains how QFunction leverages cutting-edge AI and Machine Learning technologies to proactively identify cyber threats, even for businesses without extensive cybersecurity expertise. He highlights the cost-effectiveness of QFunction's solutions, detailing how they improve cybersecurity posture while saving businesses money compared to new AI-powered solutions.

Looking to the future, Ryan discusses the ongoing evolution of AI in cybersecurity and the considerations businesses must consider when implementing these advanced technologies. He also addresses the specific needs of small and medium-sized companies, explaining how QFunction's solutions are designed to be effective without overwhelming limited IT resources.

The conversation covers how QFunction keeps its AI models current and adapts to the ever-changing cybersecurity landscape. Ryan also emphasizes the importance of data privacy and security in their processes, ensuring that their solutions protect and respect client data.

Finally, Ryan offers a glimpse into future AI-driven threat detection and prevention innovations. Tune in to learn how QFunction is at the forefront of revolutionizing cybersecurity with AI and Machine Learning.