Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

In 2025, a deepfake voice clone of a CEO tricked a multinational firm into wiring $25 million. As generative AI tools make voice and video synthesis cheap and convincing, enterprises are scrambling to update their social engineering defenses. This episode drills into how security teams verify identity on calls, the state-of-the-art in liveness detection, and why old-school callback protocols are making a comeback. We look at real-world incidents, the detection arms race between security vendors and deepfake creators, and the role of employee training in the age of synthetic media. A must-hear for CISOs, security architects, and anyone who ever takes a phone call from their boss asking for a wire transfer.

#Cybersecurity #Deepfake #SocialEngineering #EnterpriseDefense #GenerativeAI #CISO #VoiceCloning #BiometricVerification #FraudPrevention #CrisisCommunications #IncidentResponse #MachineLearning #SecurityAwareness #ZeroTrust #Authentication #BusinessTechnology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

On July 27, 2026, a mid-sized healthcare company suffered a ransomware attack and filed an SEC 8-K within 48 hours. Lucas and Luna explore how the SEC's cybersecurity disclosure rule, effective since late 2023, has fundamentally changed how enterprises prepare for and respond to breaches. They discuss the pressure on CISOs to assess materiality quickly, the rise of disclosure committees, and why tabletop exercises now include mock filings. Plus: how the rule is forcing firms to rethink the legal and communication workflows around incidents. A concrete look at regulation shaping security operations.

#Cybersecurity #SEC #IncidentResponse #DisclosureRules #Regulation #8K #Ransomware #DataBreach #EnterpriseSecurity #Materiality #CISO #Governance #RiskManagement #Compliance #CyberInsurance #FexingoBusiness #BusinessPodcast #BusinessAndTechnology

Keep every episode free: buymeacoffee.com/fexingo

Episode 135 of Cybersecurity Business with Fexingo dives into the rapid adoption of Managed Detection and Response (MDR) services. Lucas and Luna explore why over 60% of organizations now outsource threat hunting to providers like CrowdStrike and Arctic Wolf, citing a severe shortage of cybersecurity analysts and the need for 24/7 coverage. They break down the economics: a typical in-house SOC costs upwards of $1.5 million annually, while MDR subscriptions can start at $50,000 per year for small businesses. The hosts also discuss trade-offs, such as reduced visibility into security tool configurations and over-reliance on vendor alerting. Tune in for a concrete look at how MDR is reshaping enterprise defense in 2026, complete with real-world examples from a mid-sized retailer that slashed its mean time to detect by 70% after switching to a co-managed model.

#ManagedDetectionAndResponse #MDR #CrowdStrike #ArcticWolf #SOC #ThreatDetection #Cybersecurity #Outsourcing #SecurityOperationsCenter #ThreatHunting #EnterpriseDefense #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CybersecurityPodcast #Breach #Detection #Response

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna explore the rise of security rating platforms like BitSight and SecurityScorecard, which are replacing traditional vendor questionnaires. They discuss how a typical Fortune 500 company with over 1,300 third-party vendors uses continuous monitoring to assess risk, referencing the Verizon DBIR statistic that one in five breaches traces back to a third party. The hosts examine the methodology behind these ratings, including external scanning and breach data, and consider limitations like false positives. They also touch on how regulatory pressure from SEC rules is accelerating adoption. The episode ends with a donation appeal tied to the show's value for security professionals.

#BitSight #SecurityScorecard #ThirdPartyRisk #VendorRiskManagement #SecurityRatings #CyberSupplyChain #ContinuousMonitoring #VerizonDBIR #SECCyberRules #ExternalScanning #CyberBreach #EnterpriseSecurity #Business #Technology #FexingoBusiness #BusinessPodcast #CyberSecurity #RiskManagement

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are adopting Identity Threat Detection and Response (ITDR) to combat rising credential-based attacks. Using the 2023 Okta breach as a case study, they explain how ITDR fills gaps between traditional IAM and EDR, and why Gartner predicts that by 2026, 75% of enterprises will deploy ITDR. Lucas breaks down the difference between ITDR and other tools, citing vendors like Silverfort and CrowdStrike. The hosts discuss how ITDR detects session hijacking, token theft, and lateral movement using identity signals. They also touch on challenges like identity sprawl and alert fatigue. The episode concludes with a donation segment supporting the ad-free podcast, then a reflection on how ITDR fits into a zero-trust strategy.

#CybersecurityBusiness #FexingoBusiness #BusinessPodcast #ITDR #IdentityThreatDetection #CredentialTheft #ZeroTrust #CrowdStrike #Silverfort #OktaBreach #IdentitySecurity #IAM #Gartner #SecurityPodcast #BusinessAndTechnology #EnterpriseSecurity #Cybersecurity #PodcastRecommendation

Keep every episode free: buymeacoffee.com/fexingo

When ransomware strikes, many enterprises now hire third-party negotiation firms to handle the attacker directly. This episode explores the rise of professional ransomware negotiators — often staffed by former FBI agents and crisis psychologists — who step in as intermediaries between victims and criminal groups. We discuss how these firms assess attackers' credibility, drive down ransom demands (by an average of 38% according to Coveware), and coordinate with legal and insurance teams in real time. With data theft now accompanying 94% of ransomware attacks (Unit 42, 2025), the pressure to pay has intensified, making the negotiator's role both strategic and ethically fraught. We also examine the process: profiling the ransomware group, verifying the leak site, and managing the risk of paying the criminal ecosystem. A frank look at a controversial but increasingly standard incident response practice.

#Ransomware #NegotiationFirms #CyberSecurity #Coveware #Unit42 #Kivu #IncidentResponse #DataTheft #CyberResilience #CISO #BusinessTechnology #FexingoBusiness #BusinessPodcast #CyberExtortion #LockBit #BlackCat #ThirdPartyRisk #CyberInsurance

Keep every episode free: buymeacoffee.com/fexingo

Episode 131 of Cybersecurity Business with Fexingo explores the emerging practice of cyber deception technology. Lucas and Luna break down how companies like a major European bank deployed fake assets—decoy databases, credentials, and network shares—to detect and study attackers in real time. They discuss a real case where a deception layer caught a ransomware group within hours of initial access, before any actual data was encrypted. Lucas explains the three types of lures: breadcrumbs, honeytokens, and full honeypots, and why these are becoming essential for mid-market firms that can't afford 24/7 SOC teams. Luna challenges the cost and complexity, and they debate whether deception is a replacement for detection tools like EDR or a complementary layer. This episode gives listeners a concrete framework for thinking about proactive defense without the hype.

#CyberDeception #Honeypots #EnterpriseSecurity #CISO #ThreatDetection #Ransomware #ProactiveDefense #SecurityStrategy #DeceptionTech #Breadcrumbs #Honeytokens #SOC #MidMarket #CyberResilience #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CybersecurityPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 130 of Cybersecurity Business with Fexingo dives into cyber exposure management — the practice of continuously quantifying and prioritizing cyber risk across an organization's entire attack surface. Lucas and Luna explore how this approach goes beyond traditional vulnerability management by factoring in business context, asset criticality, and threat intelligence. They discuss the rise of exposure management platforms like Tenable's Exposure360 and Qualys TotalCloud, and how companies such as a major European airline used exposure scoring to cut remediation time by 40 percent. The hosts also touch on the role of the CISO in driving board-level conversations around cyber risk quantification and why the SEC's new disclosure rules are accelerating adoption of exposure management frameworks. If you're in security leadership or just curious about how enterprises are shifting from reactive patching to proactive risk reduction, this episode offers a concrete look at the tools and metrics that are reshaping defense strategies.

#CyberExposureManagement #CyberRiskQuantification #VulnerabilityManagement #AttackSurfaceManagement #Tenable #Qualys #CISO #SECDisclosure #RiskScoring #EnterpriseSecurity #ThreatIntelligence #SecurityOperations #BusinessTechnology #Business #FexingoBusiness #BusinessPodcast #Cybersecurity #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 129 of Cybersecurity Business explores how enterprises are migrating from traditional VPNs to zero-trust network access (ZTNA). Lucas and Luna discuss the CrowdStrike outage in July 2024 that accelerated the shift, the specific security weaknesses of VPNs — including lateral movement risks and credential theft — and how ZTNA architectures enforce least-privilege access. They break down the differences between ZTNA and VPNs, using Zscaler as a key example, and examine why the zero-trust model is particularly relevant in a cloud-first, remote-work world. Concrete data points include a 40% reduction in breach costs for ZTNA adopters from an IBM/Ponemon study. The episode also touches on implementation challenges, including latency and application compatibility. Perfect for CISOs, security architects, and anyone evaluating modern network security.

#ZeroTrust #ZTNA #VPN #CrowdStrike #Zscaler #NetworkSecurity #RemoteWork #CloudSecurity #LateralMovement #IdentitySecurity #LeastPrivilege #CyberInsurance #IBM #Ponemon #SecurityArchitecture #BusinessAndTechnology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are operationalizing cyber threat intelligence platforms. They dive into a specific case: how a mid-sized financial services firm used an open-source CTI platform to reduce incident response time by 40 percent. Lucas explains the difference between strategic, tactical, and operational intelligence, and why many companies still fail to connect intelligence to actual detection rules. Luna challenges whether smaller teams can realistically staff a dedicated CTI function, and Lucas shares how automation and shared feeds level the playing field. The hosts also discuss the role of frameworks like MITRE ATT&CK and how to avoid 'alert fatigue' from too many uncorrelated feeds. If you're a security leader trying to make sense of the threat intelligence vendor landscape or just starting to build a CTI program, this episode offers a grounded look at what works and what doesn't.

#CyberThreatIntelligence #CTI #ThreatIntelligence #SecurityOperations #SOC #MITREATTACK #ThreatHunting #IncidentResponse #OpenSourceThreatIntel #Automation #ThreatFeeds #AlertFatigue #SecurityTeams #EnterpriseDefense #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #Cybersecurity

Keep every episode free: buymeacoffee.com/fexingo