Richard Stiennon is back with the Word on the Street! AI isn’t just a chatbot tab anymore. It’s quietly becoming the interface inside the software we already rely on, and that shift changes how fast we can build, operate, and secure modern systems.

We talk about what it feels like when AI is embedded directly into tools like AWS Route 53, guiding you through confusing workflows step by step instead of forcing you to bounce between docs and prompts. From there we zoom out to the “SaaS is dead” noise and what’s actually happening: products racing toward AI-native experiences that help you onboard, connect data, and get value fast. We share a concrete CRM example, why traditional CRMs feel painful, and how newer tools make setup and integrations like website form-to-CRM routing take minutes instead of hours.

Then we get into the limbo stage a lot of teams are in with advanced AI engines like Mythos and the buzz around Fable 5. We break down a real cybersecurity use case: mapping an entire security stack to frameworks like MITRE ATT&CK, MITRE D3FEND, and the NIST Cybersecurity Framework, producing structured outputs that used to take consultants months. That leads to the hard question every software company asks next: how do you build fast with AI without touching customer data and putting HIPAA compliance or SOC 2 controls at risk? We walk through practical guardrails, including using synthetic data and keeping development environments separate.

Finally, we sort out where “AI security vendors” actually fit, from governance and model protection to AI-powered email security, DLP, and SOC automation, and why this category may soon just be called security again. If you’re deciding how to adopt AI safely while still moving fast, this is for you. Subscribe, share this with a teammate, and leave a review with the biggest AI adoption blocker you’re facing.

Visit IT Harvest

Josh's LinkedIn

Fraud doesn’t hide because it’s clever. It hides because our models keep looking for “normal” instead of interrogating “wrong.” That’s where this conversation with Dr. Chase Cunningham (known to many as “Dr. Zero Trust”) gets practical fast. We talk about his recent patent work using deterministic math to surface fraud inside huge systems, and why the usual data science playbook of finding enough “good” data to train on can be a trap when the real signal is buried in what shouldn’t be happening at all.

From there, we zoom out to the AI toolchain most teams are using today. LLMs like Claude and ChatGPT can be powerful, but they’re often optimized to produce the next best-looking answer, not the most adversarial truth. We dig into how to “turn the system on its head” with better prompting, correlation thinking, and agentic AI swarms that behave like a room full of specialists attacking one problem from different angles. If you’re wondering what the next step is beyond using AI for emails, this is the blueprint: orchestration, role clarity, and tight feedback loops.

Then we hit the elephant in the room: AI security. Shadow AI, sensitive data leakage, and agents that can accidentally expose HR documents or internal secrets all come back to fundamentals like identity and access management, least privilege, micro-segmentation, and non-human identities. Zero trust principles still apply, but the speed and scale of agentic systems make every gap matter more. We close with what keeps Chase up at night, including deepfakes and the erosion of shared reality, plus where to follow for more.

Subscribe, share this with a teammate who’s rolling out AI, and leave a review if it helps. What’s the one AI use case you want, but you’re not deploying yet because security feels messy?

Josh's LinkedIn

AI feels like a shortcut until it becomes a liability. We sit down with Nikki Robinson, STSM of AI and Platform at IBM and co author of Human Factors and Cybersecurity, plus security and risk executive Jennifer Baca, to get brutally practical about responsible AI use, data privacy, and what “secure” even means when the tooling changes weekly.

We start with the basics that too many teams skip: due diligence, responsible disclosure, and why you should learn prompt engineering by experimenting in safe sandboxes. Then we dig into the real world problem of families and coworkers pasting sensitive data into chatbots. Nikki explains why LLMs are company owned systems, why terms of service matter, and why you cannot treat AI outputs as truth. Hallucinations, made up citations, and overconfidence are not edge cases, they are daily hazards that demand critical thinking and verification.

From there, the conversation turns to work and careers. We talk about LLMs as interactive partners that can accelerate cloud learning, generate Terraform, and turn developers into “10x” builders when used thoughtfully. The employment takeaway is clear: you may not be replaced by AI, but you can be replaced by someone who knows how to use AI to improve workflows and communicate outcomes to leadership.

Finally, we connect human factors, psychology, and cybersecurity culture. Instead of blaming people, we explore secure by default design, psychological safety, broken metrics in SOC environments, and how emerging frameworks like the NIST AI Risk Management Framework point toward future AI compliance. If you lead a small or mid sized business, we close with concrete steps using AI features already inside tools like Copilot and Slack AI without creating dangerous tool sprawl.

Subscribe, share this with a teammate, and leave a review if it helps. What is one AI rule you want your organization to adopt this month?

To get ready for the AI economy, visit Cybernomics.io

Josh's LinkedIn

Ten months of job hunting can mess with your identity, even when you know you’re good at what you do. We sit down with Jennifer “Jen” T. Baca, a cybersecurity risk leader and single mom, to talk honestly about what it feels like to be qualified, visible, and still stuck in the silence of today’s hiring market. We get into the mental weight of layoffs, the endless loop of applications, and the weird reality that finding a job now demands its own set of skills: LinkedIn strategy, resume tactics, interviewing stamina, and relentless networking.  

Jen also shares the silver linings she didn’t expect: conference exposure, community leadership, and the kind of communication and empathy that can turn a solid cybersecurity manager into a truly effective security leader. We talk imposter syndrome, culture fit, and why “overqualified” is often just a polite way of saying “not our person.” If you’re in governance, risk, and compliance (GRC) or cybersecurity leadership, you’ll recognize the tension between wanting meaningful work and needing stability now.  

Then we shift into the work itself: real-world healthcare cybersecurity risks, the business cost of phishing and account compromise, and how to translate security risk into board-level language tied to revenue, trust, and HIPAA. We also dig into women in cybersecurity, minority experiences in male-dominated rooms, and why soft skills and emotional intelligence are not optional in modern security teams.  

If you’ve ever been ghosted after a great interview, this one will hit. Subscribe to Cybernomics, share this with someone in the job hunt, and leave a review if you want more conversations that tell the truth and push the industry to do better.

Josh's LinkedIn

Most scams don’t start with “bad technology” they start with a perfectly normal human impulse to trust. Josh Bruyning sits down with security speaker Robert Siciliano to get honest about why cybersecurity still doesn’t stick for everyday people, even when the stakes are obvious to CISOs and security teams. We dig into the uncomfortable truth: denial feels good, and compliance training often turns security into a chore instead of a skill that protects real lives.

Robert explains his idea of the “human blind spot” the biological default to trust what seems familiar, even when the message arrives by email, text, phone call, or a convincing deepfake. From there, we get practical about the basics that still move the needle: unique passwords, password managers, and two-factor authentication for critical accounts, especially email. If attackers “own the email,” they can reset passwords, take over financial apps, and cause damage that looks a lot like you doing it.

We also reframe security as something healthy, not paranoid. Think seatbelts, home locks, and proactive protection rather than fear. Robert lays out the shift from security awareness (knowing) to security appreciation (caring), plus the “strategic human firewall” mindset that turns people into an active layer of detection at work and at the kitchen table at home.

Then we look ahead: AI fraud, voice cloning, deepfakes, and pig butchering scams are scaling fast, and the old red flags are disappearing. If you want to follow Robert, find him across social media and at protectnowlc.com. Subscribe to Cybernomics, share this with someone who still says “why would they target me,” and leave a review so more people learn how to verify before they trust.

Josh's LinkedIn

We dig into why security awareness fails even when the risks are obvious, and why the real challenge is human behavior rather than tools. Robert explains the “human blind spot” and how AI deepfakes and voice cloning make trust harder to manage at every level. 

• CISOs and tech executives as unsung heroes protecting modern life 
• why attackers target people instead of systems 
• the human blind spot as biology overriding digital suspicion 
• how social engineering uses trust and mental shortcuts 
• AI deepfakes and voice cloning raising the stakes for fraud 
• denial and convenience driving weak password habits 
• low adoption of unique passcodes and two-factor authentication 
• basic digital literacy questions like judging safe links 

Josh's LinkedIn

We talk with Robert Cicliano about why cybersecurity matters for people who do not work in security and why scams keep working even on smart, capable adults. We dig into how fraudsters build trust, why denial is so common, and why compliance-style training fails to create real risk awareness. 

• why everyday people are targets, not exceptions 
• fraud as a business model built on trust tricks 
• common attack channels like phone, text, and email 
• denial and “it can’t happen to me” thinking 
• why compliance training fails under real pressure 
• what a better approach looks like for spotting risk 

Josh's LinkedIn

We reconnect with Richard Stiennon to chart how AI is rewriting cybersecurity, from the rise of 290 AI security vendors to SOC automation, investor momentum, and the criteria that separate true AI players from marketing.

• Explosion of AI security vendors since late 2022
• Criteria for defining AI-first cybersecurity companies
• Investor appetite, valuations, and looming acquisitions
• SOC automation enabling full alert triage
• Governance gains vs operational impact
• Guidance for buyers and founders on proof and outcomes

Yeah, you should definitely get my book

Josh's LinkedIn

In this clip, Karl Mosgofian breaks down why most vendor pitches lose buyers in the first minutes and how to fix it with a simple, direct first-meeting flow. We show how to validate pain fast, lead with what you built, and make differentiation tangible so a champion can emerge.

• One-slide pain validation with a quick head nod
• Skip the long problem story and benefit monologue
• Lead with what you make in plain language
• Highlight concrete differentiation that fits buyer constraints
• Use a simple proof point instead of deep technical dives
• Design a low-friction next step for pilots and security

FULL EPISODE TITLE: Go-to-Market Strategies of a Veteran CIO

Josh's LinkedIn

We explore how to sell to CIOs who are flooded with pitches yet hungry for real innovation, and how sellers can move from vague benefits to clear outcomes and CFO-ready cases. Carl Mosgofian shares how to frame differentiation, map to the stack, and help champions win internal approval.

• CIO and CISO partnership realities and reporting nuance
• Vendor fatigue contrasted with desire for useful innovation
• Common pitch mistakes and the single validation slide
• Lead with what the product does and where it fits
• Differentiation tied to concrete outcomes and costs
• Shifting from discovery to internal selling mechanics
• Building a three-slide CFO case with credible ROI
• Budget thresholds, approvals, and tool consolidation
• Using networks and reference CFOs to de-risk buys
• Practical phrasing to ask for next steps and help

Check us out across all podcast platforms and on YouTube
If you want to learn more about Bruning Media and what we do, check out Bruyning.com. That is B R U Y N I N G dot com

Josh's LinkedIn