Ever wonder if Security Orchestration, Automation, and Response (SOAR) is truly essential—or just another buzzword in cybersecurity? 

In this episode of Cyber After Hours—SOAR: Hype or Necessity?—Paul and Evan sit down with Josh Lawson to unpack exactly that, starting with some amusing (and insightful) stories on workplace culture and how company dynamics directly impact security practices.

The conversation quickly heats up as they dive into Identity and Access Management (IAM), exploring why automation isn't just a nice-to-have anymore—it's critical for lean teams trying to keep pace with the growing complexity of cyber threats.

They also debate the real-world applications of SOAR, sharing tips on how to vet and test implementations effectively, avoid hidden cloud costs, and leverage behavioral analysis alongside AI integration.

Plus, they chat about the surprising trend of organizations shifting back to on-prem solutions, and why cybersecurity is becoming increasingly accessible even for smaller teams.

Is SOAR just a fancy feature, or is it the cornerstone of modern cybersecurity operations?

Listen in as Evan, Paul, and Josh blend humor, candid experiences, and practical advice for navigating the evolving landscape of security tools.

Pour yourself a drink, hit play, and join us for a spirited debate—because cybersecurity conversations shouldn’t be dull.

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever wonder if endpoint security truly deserves the hype as your first line of defense—or is there more to the story?

In this lively episode of Cyber After Hours—Endpoint Security: Is It Really the First Line of Defense?—Paul Marco and Evan Morgan kick things off by swapping stories about the unpredictable rollercoaster of entrepreneurship, proving once again you often learn more from spectacular failures than steady successes.

As the conversation heats up, they tackle the great cybersecurity debate: Is endpoint protection really the front-line hero, or should access controls step into the spotlight as the new perimeter?

The duo digs deep into why endpoint detection and response (EDR) tools, while critical, can't go it alone—and why defense-in-depth remains the gold standard for true cyber resilience.

Beyond technical talk, Paul and Evan emphasize why collaboration beats competition in cybersecurity, highlighting how building a supportive network is essential not just for career growth, but for tackling the industry's biggest challenges.

They also dive into why businesses must truly understand their unique risks before throwing money at shiny security tools.

Whether you’re an entrepreneur navigating the wild world of cybersecurity or simply curious about protecting your business better, grab a beverage and join Paul and Evan for an honest, insightful, and occasionally humorous discussion about the realities of endpoint security.

Tune in to Cyber After Hours—where security talk stays human, helpful, and just the right amount of fun.

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever feel numb when you hear about yet another data breach?

You're not alone.

In this episode of Cyber After Hours—Data Privacy vs. Cybersecurity: Where Do They Intersect?—Evan and Paul welcome Steve Ward, a seasoned cybersecurity leader turned venture capitalist, for an insightful (and surprisingly humorous) conversation on privacy, security, and why consumers barely blink at breaches these days.

From diving into Steve's impressive career navigating the tricky venture capital waters, to exploring why cybersecurity often feels like Groundhog Day, the trio discusses how the constant drumbeat of cyber threats has led to consumer indifference—and why this needs to change.

Steve sheds light on the blurry lines between data privacy and cybersecurity, highlighting why simply "checking the compliance box" isn't enough anymore.

Together, they unpack critical questions:

Are privacy regulations actually making a difference?

Can organizations move from visibility to meaningful risk reduction?

And why does innovation in security often lag behind the threats themselves?

Along the way, they chat about how AI is shaking things up, why data integrity might soon overshadow confidentiality, and how ransomware underscores the importance of availability (because what's privacy worth if your data’s locked away?).

Whether you're a cybersecurity pro or just privacy-curious, join us for an entertaining, eye-opening discussion on where security meets privacy—and why the future might be less about keeping secrets and more about building trustworthy communities.

Grab a drink, settle in, and tune in to Cyber After Hours—because talking about privacy and security shouldn’t put you to sleep.

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever felt like cybersecurity is always the team that says “no” to everything?

Well, it’s time to change that narrative.

In this episode of Cyber After Hours—How to Prevent Security From Becoming the "Department of No"—we start off sharing laughs about New York snowstorms and the funny ways different cultures react to weather surprises.

But quickly, the discussion dives deeper, exploring Simon Sinek’s powerful concept of playing the “infinite game” rather than getting stuck on short-term wins.

Through candid personal stories, Paul and Evan tackle why security teams often get painted as the gatekeepers of “no.”

They share how shifting the focus from risk avoidance to storytelling and context can make cybersecurity a business enabler instead of a blocker.

We unpack real-world strategies for transforming security teams from risk-averse gatekeepers into innovative partners who say “yes”—strategically, of course!

This episode is all about balancing caution with courage, technical skills with empathy, and leadership with collaboration.

Whether you’re deep in the cybersecurity trenches or simply curious about building stronger, more positive security cultures, this episode offers humor, practical insights, and a fresh perspective on how to embrace the art of saying “yes.”

Tune in, grab your favorite beverage, and join us for another engaging round at Cyber After Hours—because cybersecurity is best served with a side of humanity.

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

What happens when AI meets quantum computing in the heart of your SOC?

In this week’s episode of Cyber After Hours, we’re joined by Edward Wu, CEO of Dropzone AI, to explore just how fast the cybersecurity game is changing—and what it means for defenders trying to stay one step ahead.

From the frozen roofs of Syracuse to palm-sized quantum machines, we dive into a wide-ranging conversation on the future of cybersecurity.

Edward shares his journey from building alert-generating tools to creating AI agents that actually help analysts make sense of the noise—think SOC automation, but with purpose.

Then the real fun begins: quantum computing.

We dig into its impact on encryption, national security, and risk prediction—asking the big questions like,

Can quantum AI predict the exact day of a breach?

Or better yet, can it prevent one?

But it’s not all theory—we stay grounded in practical reality.

Edward breaks down why a fully autonomous SOC is still out of reach, and why the smartest play today is using AI to amplify, not replace, human analysts.

As Paul puts it, "The only limit right now is imagination."

Add in a few good-natured jabs about flip-flops vs. snow boots, some big questions about nation-state surveillance, and a surprising Star Trek tangent on quantum entanglement, and you’ve got a wild, thoughtful, and surprisingly human take on where cyber defense is headed.

If you’ve ever wondered how to future-proof your security program in the face of exponential tech growth, this is your episode.

Thanks for watching and listening!

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever wonder what a candid bar-side chat can teach us about the future of cybersecurity regulation?

In the latest episode of Cyber After Hours—“S1 E17: What’s Next for Cybersecurity Regulation?”—we look back at how this podcast began and share a key realization: it’s not just about cybersecurity or AI.

It’s about perspective, and how understanding the “why” behind decisions can transform the way we tackle complex, tech-driven challenges.

They reflect on the show’s humble origins and shine a light on the profound role of human insight in a field too often dominated by flashy tools and jargon.

With a nod to Simon Sinek’s “Golden Circle,” they highlight the value of digging into motives, not just methods.

In a relaxed, bar-like setting where unscripted humor mixes with expert know-how, you’ll get a front-row seat to the personal stories, thought-provoking questions, and spirited debates that make cybersecurity a truly people-centric endeavor.

Ready for a fresh take on the next wave of cybersecurity regulation—and the perspectives shaping it?

Tune in to Cyber After Hours, grab your favorite beverage, and join the conversation.

This is where technology meets humanity, one lively discussion at a time.

Thank you for watching / listening!

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever wonder how someone juggling customer service, consulting, and sales can still find time for a debate on decaf coffee and cyber threats?

In this episode of Cyber After Hours, we sit down with Eric Gerena—whose colorful career path gives him a refreshingly unique perspective on staying motivated and delivering real value to clients.

From demystifying the art of sales (spoiler: it’s really about solving people’s problems) to revealing how post-quantum cryptography could upend today’s security protocols, we cover the spectrum of what’s next in cybersecurity. 

Think biometrics, physical keys, and the cutting-edge world of quantum computing—all in one candid conversation.

But we don’t stop at the theoretical: we dig into practical insights, like how password managers (hello, YubiKey) and multi-factor authentication are making waves in industries like healthcare.

We also tackle the cultural hurdles of adopting new security tech—because let’s face it, not everyone is as excited about password changes as we are.

And yes, there’s a lighthearted detour about decaf coffee (trust us, it’s worth the laugh).

Tune in to find out why continuous innovation in digital security is crucial, what the future might hold for your organization’s authentication methods, and how a little bit of humor can keep you sane in the ever-evolving world of cybersecurity.

Join us for this lively deep dive—you won’t want to miss it!

Connect with us on LinkedIn:

Evan: https://www.linkedin.com/in/evanmorgan/

Paul: https://www.linkedin.com/in/pm01/

Ever wish strategic planning felt more like a celebration and less like a chore? 

In this episode, we pop the cork on what makes a planning session truly satisfying, from the thrill of crossing off to-do items to the power of hitting pause for some much-needed self-reflection. 

Get ready to raise a glass—because by the end of this conversation, you’ll be toasting the art (and fun) of mapping out your next big moves.

Once the party hats come off, we dive headfirst into the cutting edge of cybersecurity. 

AI models like DeepSeek take center stage, offering both enticing efficiencies and equally potent threats to data integrity and privacy. 

We unravel how adversarial nations might exploit these innovations and discuss why there’s no room for shortcuts when security is on the line.

Finally, we chart an exciting course into the realms of AI and quantum computing. 

Think AI agents, RAG models, and quantum superposition—tech frontiers that promise to reshape our daily lives and radically enhance how we identify and manage risk. 

Our chat brims with curiosity and awe, exploring the momentous possibilities that quantum breakthroughs may unlock. 

If you’re even remotely curious about the future of cybersecurity (or just love a good adventure story), this is one episode you won’t want to miss. 

Tune in now!

Thank you for watching / listening!

Ever wonder what would happen if paying cyber ransom demands was flat-out illegal?

In this lively new installment of Cyber After Hours—S1E14, “Should Governments Make It Illegal to Pay Cyber Extortion Demands?”—we explore exactly that.

Our guest is Ross, a dynamic entrepreneur operating in stealth mode, who adds fresh perspective (and a few laughs) to the conversation.

We share everything from goofy phishing scams promising toothbrush rewards to serious cautionary tales involving Uber and Equifax.

We dig into the controversial issue of banning ransomware payments, asking if companies should be forced to fend off attackers without cutting that check.

Real-world experiences and high-profile cases reveal the dangers of flawed decryption keys, repeated attacks, and the temptation to rely on quick fixes instead of building stronger defenses.

Ross’ entrepreneurial insights show why cybersecurity investments might be a better bet than gambling on a criminal’s word.

We also explore how government incentives and cyber insurance could reshape security strategies, pushing organizations to harden their defenses rather than pay their way out of trouble.

The parallels between cybersecurity and healthcare come into focus, highlighting why threat visibility and information sharing are so crucial.

Throughout the episode, we touch on the often-overlooked risks in operational technology and celebrate the growing influence of Chief Information Security Officers.

Their leadership—and the rise of trusted information-sharing networks—could spell a more secure future.

But it’s a team effort: everyone from executives to engineers plays a role in making it happen.

Join us for an engaging discussion that blends humor, entrepreneurship, and real talk about the crossroads of innovation and cybersecurity.

Tune in to Cyber After Hours to see how these stories and perspectives might just shape the way we tackle cyber threats moving forward.

Thank you for watching / listening!

Ever wonder how facial hair fundraisers and cybersecurity connect?

In this lively episode of Cyber After Hours—S1E8 Patch Management: How to Handle Zero-Day Vulnerabilities—we kick off with humorous mustache mishaps (including one domestic faux pas!) before tackling the serious business of zero-day exploits.

From waxing poetic about handlebar mustaches to recounting the moment a seemingly secure environment was breached, our conversation moves from laughter to lessons learned.

We underscore why a defense-in-depth approach is essential, covering everything from vulnerability management and identity/access controls to the nuances of patch management and data loss prevention.

We also delve into the importance of trust—both within cybersecurity teams and with vendors and executives—highlighting how collaboration can make or break your security posture.

Throughout the episode, we share personal stories that reflect the passion, resilience, and occasional hilarity of working in cyber.

Whether you’re a tech novice or a seasoned professional, this episode offers insights, camaraderie, and a glimpse into the spirited life of cybersecurity experts.

Tune in, join the conversation, and learn how to fortify your defenses against the unknown!

Thank you for watching / listening!