In this bonus episode, Ciaran and James sit down with Dr. Bilyana Lilly, to discuss cyber disinformation, diplomacy and defense. Here Bilyana sheds light on how geopolitical risk affects technology, including cyber threats, information warfare, and the evolving global security landscape.

To learn more about our guest Dr. Bilyana Lilly and for links from the episode, visit https://www.sans.org/podcasts/cyber-leaders/

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Ciaran and James are joined by Senior SANS instructor John Hubbard to discuss the ever-changing threat landscape and how SOC teams can stay ahead. John shares his expertise on spotting threats early, how to test your defences before the real attackers show up, and why he’s on a mission to simplify cybersecurity operations for the next generation of defenders.

To learn more about our guest John Hubbard and for links from the show, visit https://www.sans.org/podcasts/cyber-leaders/

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Ciaran and James sit down with Tarah Wheeler, scholar, campaigner and entrepreneur, to discuss risk, safety and security in an increasingly unstable digital world. Tarah shares her expertise on protecting the most vulnerable, navigating legal grey zones in cybersecurity research, and translating complex technical issues into action for policymakers and small businesses alike.

Find more information about our guest Tarah Wheeler and episode links at https://www.sans.org/podcasts/cyber-leaders/

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Ciaran and James meet Max Smeets, Co Director of Virtual Routes and Senior Researcher at the Center for Strategic Studies at ETH Zurich, to discuss how digital threats are reshaping geopolitics. Max shares his expertise on the cyber dimensions of modern warfare, and the impact of ransomware attacks on global security.

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Ciaran and James meet Christine Gadsby, Vice President and CISO at BlackBerry, to talk supply chain security; from exploding pagers to software liabilities. Christine reflects on how the industry is maturing around regulation, secure development, and vendor accountability as well as what happens when even hardware becomes a weapon.

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Ciaran and James are joined by Ross McKerchar, CISO at Sophos, to discuss one of the most significant – and to some, controversial – counter cyber operations ever carried out by a private company. Ross shares insights from the frontlines of the Pacific Rim campaign, as well as the shifting dynamics of the cybersecurity industry and what active defence really looks like in practice.

Contact:

Have questions or comments? Email us at [email protected]

In this episode, Lisa Forte, founder of Red Goat, joins Ciaran and James to discuss risk, security and the threat from within. Lisa offers her expertise on insider threat, crisis management, and high risk adventures. 

Highlights:

Insider threat; the breakdown

U.S. CERT definitions and mitigation

• Defining Insider Threats | CISA | Insider Threat Mitigation Guide 

NPSA guidance and tools

• Insider Risk | NPSA | Reducing Insider Risk | NPSA 

A pervasive problem

• SANS – Decoding: “Insider Threat” 
• Forget the outside hacker, the bigger threat is inside • The Register Surveillance won’t curb insider threats — but workplace culture can | Security Magazine 

Red Goat Security research into the barriers preventing reporting.

• Insider Threat Report 2019 

Additional Resources:

Red Goat Cyber Security
Whistleblowing for employees 

Contact:

Have questions or comments? Email us at [email protected]

Kicking off series two, Ciaran and James sit down with none other than the CIO of NATO, Manfred Boudreaux-Dehmer, to discuss what collective defence means in the cyber domain. Manfred offers a rare inside look at managing security and information risk across NATO’s vast digital landscape and shares insights on emerging threats, evolving technologies, and how the Alliance is adapting to keep its members protected in an increasingly contested cyberspace.

Contact:

Have questions or comments? Email us at [email protected]

We're Back for Season 2!

Catch up on episodes from Season 1: https://www.sans.org/podcasts/cyber-leaders/

Contact:

Have questions or comments? Email us at [email protected]

In this bonus episode, Ciaran and James ring in the new year with a look back at the standout guests and thought-provoking topics from series one. They also take a sneak peek at what 2025 holds for the ever-evolving world of tech security.

And to top it off, there’s a special announcement to chase away those January blues.

Highlights:
Typhoon Variants
Ciaran and James take a look at developing cyber threats from China, including:

• Volt Typhoon: a persistent botnet with wide-reaching impacts
• Volt Typhoon back with vengeance | Blowing out the bots
• Salt Typhoon: a new wave of cyber espionage
• Wall Street Journal article: How Chinese Hackers Graduated From Clumsy Corporate Thieves to Military Weapons | Department of Treasury Press
  Release

New year, new legislation
As the U.S. pulls back on regulation, other nations are strengthening their
cybersecurity laws.

• Australia’s new law mandates ransomware attack reporting
• Mandatory ransomware payment reporting | Cyber Sanctions
• UK: Cybersecurity and resilience bill focused on ransomware mitigation
• Cyber Security and Resilience Bill | Ransomware Legislative Proposals: Government Consultation

Additional Resources:

Cyber Leaders Series One Episodes
The myth of the 8-character password
Lazarus Heist: The intercontinental ATM theft that netted $14m in two hours
Cyber Threat Conference

Contact:

Have questions or comments? Email us at [email protected]