Ready for a crash course in cybersecurity? Grab your note-taking tools and join us for a riveting conversation with the esteemed Dr. Nikki Robinson, the trailblazing STSM and lead architect at IBM, and a Cybersecurity Influencer of the Year. Armed with a wealth of knowledge and insights, Dr. Robinson guides us through the labyrinth of vulnerability management, unpacking the latest tools, processes, and strategies that are setting new benchmarks in the security realm.

Prepare to delve into the nuances of CVSS 4.0, CISA, the known exploited vulnerability catalog, and the exploitability predictability scoring system (EPSS), as Dr. Robinson brilliantly elucidates their vital role in vulnerability scoring and prioritization. She underscores the importance of these tools in aiding organizations streamline their remediation efforts, a pressing challenge many security leaders grapple with today. This enlightening episode promises a clear understanding of the complexities of cybersecurity, helping listeners appreciate the challenges and solutions in today's rapidly evolving digital landscape. So buckle up and let's decode cybersecurity together with Dr. Nikki Robinson.

Josh's LinkedIn

Get ready to have your assumptions about cybersecurity turned on their head! Cybersecurity veteran and acclaimed author, Rich Owen, joins us in a riveting conversation exploring the surprising intersection of artificial intelligence (AI) and the human element in cybersecurity. Drawing from his 50 years of experience, including his pioneering work on the first local area network at the Michigan Control Center and Johnson Space Center, Rich shares intriguing real-life anecdotes that solidify his belief: it's the people, not the technology, that are the linchpin of security.

In the back half of our chat, Rich delves into the untapped significance of human factors in cybersecurity. He astutely points out that the code we utilize is the product of human creators, complete with their own biases and potentially with a lack of regard for security. He navigates us through the complex maze of code reviews, code reusability, and the inherent risks involved. Rich's profound insights into these involved topics transform this discussion into an eye-opening episode you simply can't afford to skip!

Josh Bruyning
Rich Owen

Josh's LinkedIn

Are you ready to unravel the mysteries of cybersecurity and exploit prediction? We're joined by our esteemed guest, Jay Jacobs. Today's episode promises to be a thrilling ride into the world of data insecurity as we welcome the innovator behind the groundbreaking EPSS (exploit prediction scoring system). This ingenious machine learning model, launched in 2021, predicts the likelihood of a vulnerability being exploited. Not only does it help us zero in on potential threats, but it also offers us the luxury of knowing which ones can be put on the back-burner for patching. With daily updates and a scoring system that ranges from 0 to 1, we'll discuss how this system has become indispensable in the realm of cybersecurity.

Josh Bruyning LinkedIn
Jay Jacobs LinkedIn

Josh's LinkedIn

Today's guest, Charles Payne, brings a unique perspective to cybersecurity with his background in finance, his current roles as CISO and CTO at Neptune Media, and his experiences as an angel investor. Charles shines a light on his transition from finance to cybersecurity, unraveling how his technical knowledge has given him a unique perspective on investment opportunities. He also shares strategies to overcome the challenges of selling to different regions and how to build an effective BS meter.

The conversation gets captivating as Payne emphasizes the importance of building relationships within the cybersecurity industry. He explores the gender dynamics at play, shedding light on how men and women measure success differently, and the disparities women face in the industry. We also discuss the necessity of Diversity, Equality, and Inclusion (DEI) initiatives in closing the gender gap and fostering a supportive sisterhood within the cybersecurity realm.

As we delve into the ever-evolving cybersecurity landscape, our discussion takes an intriguing turn with the Joe Sullivan case and its potential implications for C-suite executives. We explore the legal responsibilities of corporate executives and the importance of having a proactive approach to cybersecurity. We also discuss the initial steps a new CISO should take to set the stage for success. Join us for this insightful conversation as we uncover the intricacies of cybersecurity and strategic partnerships.

Josh's LinkedIn

Get set for a mind-expanding journey as we navigate the intriguing world of AI and blockchain with our special guest, Jonathan Capriola, the innovative CEO and founder of AI Blockchain Ventures. Jonathan, a best-selling author, successful entrepreneur, and futurist, captivates with his unique perspective on the rapidly evolving world of technology. As we unpack his journey from creating a Lego embedded with a LED that drew attention from significant investors, to using AI to write his bestselling book, you'll find yourself fascinated by the complexity and potential of AI and blockchain.

We turn our gaze to the future, exploring Elon Musk's ambitious plans for AI-enabled chipsets and robots, Amazon's robot rollout, and the curious AI girlfriend phenomenon. Discussing the intersection of AI and blockchain, you'll find our conversation compelling as we delve into the potential of these technologies in security, privacy, and record-keeping. Jonathan's insights on how AI can help scale blockchain to increase efficiency, and the potential societal impacts of AI, will leave you contemplating the exciting future that lies ahead.

Finally, we explore how embracing AI and blockchain technologies can revolutionize organizations. Jonathan offers his insights on how AI's automation of mundane tasks can lead to efficiency and growth. We also highlight the critical aspect of cybersecurity, emphasizing the need for investment in security software and effective planning to shield organizations from cyber threats. Through our enlightening conversation, we aim to inspire you to consider the potential of these technologies in your own lives and businesses. Buckle up for this riveting journey into the future of AI and blockchain.

Josh's LinkedIn

Dubbed the Oprah of Cybersecurity and the Cybersecurity Social Media Queen, Dana Mantilia joins us for an exhilarating journey into the world of cybersecurity. Starting from zero just four years ago, Dana has since built a notable presence on LinkedIn and YouTube with her accessible approach to educating the everyday person about cybersecurity. The episode peels back the layers on the importance of CMMC (Cybersecurity Maturity Model Certification), the pivotal role universities play in educating and certifying future cybersecurity professionals, and how companies stand to benefit from it all.

We also delve into the nitty-gritty of safe online practices. Do you realize how crucial secure passwords and multi-factor authentication are to your online safety? Cyber threats don’t care if you’re a tech whiz or a tech novice - they strike indiscriminately. As we further underscore the role of a Business Information Security Officer in enlightening the masses, we also shed light on the challenges posed by budget cuts and hiring freezes, emphasizing the need to grow talent from within.

Social media isn't just for sharing vacation snaps and foodie pics - it's also a frontier for career development in cybersecurity. Dana shares insights into the potentials of LinkedIn for video content creation and how a YouTube account can serve as a resource library for those seeking to carve a path in the cybersecurity field. And as we wrap up the conversation, we explore the murky world of scams, giving you the know-how to protect yourself and your loved ones from being exploited. This episode is more than a warm chat with Dana. It’s a deep dive into a world that affects us all, offering invaluable insights for both the cybersecurity enthusiast and the online safety curious. Tune in!

Dana Mantilia
Josh Bruyning
Maggie Dillon 

Josh's LinkedIn

Ready to get your mind blown by the intriguing world of policy orchestration? Gain a whole new perspective as we dissect this cutting-edge concept alongside Gerry Geble from Strata. Gerry introduces us to the fascinating world of identity query language (IDQL) - a revolutionary approach to defining access rules and policies. Come along on this invigorating journey as Gerry details Strata's mission to transform the way we handle multiple cloud systems access.

The discussion deepens as we unravel how Strata is making strides to simplify identity policy complexities and mitigate risk. Find out how establishing standard access rules and implementing them across different environments can reduce complexity. Hear about the integration of risk metrics into Strata's system and how this serves to bolster security.

Josh Bruyning
Maggie Dillon
Gerry Gebel
Strata

Josh's LinkedIn

Are you ready to unlock the secrets of API security? Today, we've got a thrilling dialogue with Ameya Talwalkar and Varun Kohli from Cequence, a cybersecurity firm that's been securing APIs for prominent financial institutions and Fortune 500 companies for nearly a decade. In a world where 80% of internet traffic is API-related, our conversation couldn't be more timely. We'll explore the ever-expanding sphere of API integrations, the escalating demand for secure APIs, and why API security has just recently taken the spotlight in the aftermath of high-profile data breaches.

As we traverse the labyrinth of modern network security, we're unveiling the challenges that come with expanding security capabilities in an increasingly connected world. Learn from the experts as they share how Cequence has successfully provided API protection using their high-performance network scanning engine, amidst a market teeming with companies aiming to tackle the same problem. From large finance businesses to fintech firms, Cequence's reach in the industry is both impressive and diverse.

And to top it all off, we're giving you an insider's glimpse into how Cequence stays ahead of the curve in the face of fierce market competition. Ameya recounts a fascinating case involving a Fortune 500 cosmetics company, where Cequence's managed services team identified a significant anomaly in their system. We’ll shed light on the concept of time-to-value, demonstrating how Cequence’s prompt service has led to visible returns for their customers. Finally, don’t miss out as Varun and Ameya invite you to seize the opportunity of a free assessment offered by Cequence, allowing you to discover just how many APIs your business has.

Josh's LinkedIn

Get ready for an enlightening exchange with seasoned industry expert, Richard Stiennon, as he uncovers the secrets behind his successful journey in the security ecosystem. Richard, the mastermind behind IT-Harvest, offers exclusive insights into the creation and operations of a data-driven analyst product that stands in contrast to Gartner as a beacon in the crowded security market. With a deep dive into his Security Yearbook 2023 and the exciting transition to Wiley for the 2024 edition, there’s much to learn from Richard's experiences.

The conversation heats up as we tackle the impressive task of categorizing and collecting data points for over 3582 vendors! Richard unveils the mystery behind vendor health scores and web traffic analysis, shedding light on the giants of the industry and debunking common misconceptions. We delve into the intriguing case of Microsoft, its revenue claims, and the introduction of Windows. Don't miss Richard’s expert commentary on the hurdles vendors face in database inclusion and the ambitious project of encompassing all global security consulting firms. 

We then set our sights on the role of artificial intelligence in security, with Richard arguing for a proactive approach towards security integration before adopting Chat GPT. He shares his views on risk identification and the importance of a threat-based security approach over a risk-centric one. We wrap up with exciting news about the launch of Richard's new book, and how to maximize the user experience on the website. Brace yourselves for a rollercoaster ride into the intense world of security market insights with Richard Stiennon!

Josh's LinkedIn

We're thrilled to welcome Mark Dorsi, CISO at Netlify, to our show for a deep dive into the complexities of startup maturity and the vital role of security practice. Mark spills the secrets on transitioning startups from early stages to full maturity, and the different types of exits that companies can pursue. He offers his invaluable perspective on understanding your customer's value and how to convey this value in a snap.

We'll be exploring the often underappreciated role of a CISO and their pivotal position in the sales process. Discover why vendors need to keep this in mind when conceptualizing their products, and how varying degrees of maturity play into different market segments. Learn about the virtue of patience, the necessity for repeatable processes, and more. Mark's expertise and practical advice make for an episode you'll be replaying time and again.

Host: Josh Bruyning

Josh's LinkedIn