Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

In this episode, Lucas and Luna dive into the growing adoption of Zero Trust Network Access (ZTNA) as enterprises move beyond traditional VPNs. They examine the 2025 CrowdStrike ZTNA report, which found that 73% of organizations have either implemented or are piloting ZTNA, up from 41% in 2023. The hosts discuss the specific drivers: the rise of remote work, the complexity of hybrid cloud environments, and high-profile breaches like the 2024 Okta supply chain attack. Lucas explains how ZTNA differs from VPNs by authenticating per-session rather than per-network, and Luna questions whether ZTNA actually reduces attack surface or just shifts it. They break down the three main ZTNA architectures — cloud-delivered, on-premises, and peer-to-peer — and highlight which fits different enterprise profiles. The episode closes with a look at the skills gap in deploying ZTNA properly and what the next 18 months might bring as zero trust matures into a regulatory requirement.

#ZeroTrust #ZTNA #NetworkSecurity #VPN #CrowdStrike #Okta #RemoteWork #HybridCloud #CyberSecurity #EnterpriseSecurity #Business #Technology #CyberDefense #AccessControl #Authentication #FexingoBusiness #BusinessPodcast #CyberSecurityBusiness

Keep every episode free: buymeacoffee.com/fexingo

Episode 106 of Cybersecurity Business with Fexingo. Lucas and Luna dive into the shift from batch-updated threat intelligence feeds to real-time, AI-driven streaming data. They examine how security teams at companies like Palo Alto Networks and CrowdStrike are integrating live threat telemetry to cut detection gaps from hours to seconds. The conversation covers the challenges of signal-to-noise ratio, the rise of inference-based feeds that predict attacker moves before they happen, and what this means for CISOs building next-gen SOCs. Lucas cites a mid-2026 survey showing 42% of enterprises now use real-time threat feeds, up from 18% two years prior. Luna questions whether smaller teams can afford the bandwidth and compute cost. The episode closes on whether real-time intel will become table stakes for cyber insurance underwriting.

#ThreatIntelligence #RealTimeFeeds #AIPoweredSecurity #CrowdStrike #PaloAltoNetworks #SOC #SecurityOperations #InferenceBasedIntel #SignalToNoise #CyberInsurance #EnterpriseDefense #BusinessAndTechnology #Cybersecurity #CISO #CyberThreats #FexingoBusiness #BusinessPodcast #SecurityTeams

Keep every episode free: buymeacoffee.com/fexingo

Episode 105 of Cybersecurity Business with Fexingo. Lucas and Luna examine the growing trend of cyber insurance policies excluding coverage for 'acts of war' and 'state-backed attacks.' They discuss how a 2025 Merck court case reinforced insurers' ability to deny claims tied to nation-state hacking, leaving enterprises to self-insure against advanced threats. The hosts explore the practical fallout: security teams now architect defense in layers, assume state-sponsored breaches won't be reimbursed, and scrutinize policy language for grey-zone operations. Specific tactics like maintaining separate war-exclusion carve-outs and investing in resilience over risk transfer are covered. The conversation also touches on the debate around attribution and whether the insurance industry is shifting risk back to companies. A must for CISOs and risk managers.

#CyberInsurance #WarExclusion #MerckCase #StateSponsoredHacking #SelfInsurance #RiskTransfer #EnterpriseSecurity #CISO #PolicyLanguage #Attribution #NotPetya #Resilience #GrayZone #InsuranceExclusions #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CybersecurityBusiness

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna explore how enterprise security teams are adopting cyber range platforms to train staff and test defenses in realistic, simulated environments. They discuss the shift from traditional tabletop exercises to immersive, hands-on training using platforms like RangeForce and Cyberbit. The hosts walk through a real example: how a regional bank in the Midwest used a cyber range to reduce its mean time to detect a phishing attack by 40 percent in six months. They also touch on the cost savings from automating breach simulations and the challenge of keeping scenarios up to date with evolving threats. This episode is packed with concrete numbers and practical takeaways for CISOs, security engineers, and anyone responsible for building resilient teams.

#CyberRange #SecurityTraining #HandsOnLearning #Simulation #BreachSimulation #RangeForce #Cyberbit #Defense #EnterpriseSecurity #Phishing #DetectionTime #CISO #SecurityTeam #Business #Technology #FexingoBusiness #BusinessPodcast #Cybersecurity

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna drill into the practice of digital forensics and incident response — DFIR — as it's practiced in mid-2026. They walk through a real incident timeline: a healthcare company's ransomware attack detected on a Tuesday afternoon, the initial containment, evidence preservation, root-cause analysis, and the choice between paying the ransom and restoring from backups. They discuss why DFIR teams now use memory forensics and log aggregation tools like Velociraptor and Timesketch, how the average mean time to detect has dropped from 207 days in 2023 to around 68 days according to recent industry data, and why the skills gap in DFIR remains acute despite growing investment. The episode closes with Lucas questioning whether automation will eventually replace the human analyst's judgment calls during incident response.

#DigitalForensics #IncidentResponse #DFIR #Cybersecurity #Ransomware #ThreatHunting #MemoryForensics #Velociraptor #Timesketch #MeanTimeToDetect #IncidentResponsePlan #DataBreach #RansomwareNegotiation #Business #Technology #FexingoBusiness #BusinessPodcast #Podcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 102 of Cybersecurity Business with Fexingo dives into SaaS Security Posture Management (SSPM). Lucas and Luna explore how enterprises are using SSPM tools to detect misconfigurations in apps like Salesforce, Slack, and Google Workspace. They break down the 2025 Cloud Security Alliance report finding that 68% of organizations experienced a SaaS-related security incident. The hosts discuss how SSPM differs from traditional CASB, the role of API-based scanning, and why the market is consolidating. Specific examples include how a misconfigured Slack token exposed internal data and why the average enterprise has over 200 SaaS apps. No ads — listener-supported at buy me a coffee dot com slash fexingo.

#SSPM #SaaS #CloudSecurity #Misconfiguration #CyberSecurity #CASB #Salesforce #Slack #GoogleWorkspace #APISecurity #EnterpriseSecurity #SecurityPosture #CloudSecurityAlliance #Business #Technology #FexingoBusiness #BusinessPodcast #CyberDefense

Keep every episode free: buymeacoffee.com/fexingo

Episode 101 dives into the growing use of cyber insurance audits as a tool for enterprise security teams to validate their defenses. Lucas and Luna discuss how carriers like Lloyd's and Chubb now require detailed security questionnaires, penetration tests, and incident response plans before issuing policies. They explore specific examples, including the 2024 ransomware claim that reshaped underwriting standards, and how auditors use frameworks like the NIST Cybersecurity Framework to assess risk. The hosts also examine pushback from CISOs who argue audits create compliance overhead without improving security posture. The episode concludes with a look at how insurance audits are driving standardization in security practices across industries like finance, healthcare, and energy. A natural donation segment ties the discussion to the value of independent security conversations.

#CyberInsurance #SecurityAudits #Lloyds #Chubb #NISTFramework #Ransomware #CISO #EnterpriseSecurity #BusinessAndTechnology #BusinessPodcast #FexingoBusiness #Podcast #InsuranceAudit #SecurityCompliance #CyberRisk #IncidentResponse #PenetrationTesting #Underwriting

Keep every episode free: buymeacoffee.com/fexingo

In episode 100 of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprise security teams are using adversary emulation — structured, intelligence-driven attack simulations — to validate their defenses. They break down why traditional penetration testing is no longer enough, how frameworks like MITRE ATT&CK shape modern emulation, and a specific case where a Fortune 500 company used a threat intelligence report to build a custom emulation plan against a known ransomware group. Lucas argues that the shift from red-teaming to continuous emulation represents a fundamental change in how CISOs think about readiness. Luna questions whether smaller teams can realistically adopt this approach without breaking the bank. The episode closes with a reflection on what adversary emulation reveals about the gap between compliance and actual security.

#AdversaryEmulation #Cybersecurity #PenetrationTesting #MITREATTACK #ThreatIntelligence #RedTeam #BlueTeam #CISO #Ransomware #EnterpriseSecurity #DefenseInDepth #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #Episode100 #SecurityTesting #ThreatModeling #CyberResilience

Keep every episode free: buymeacoffee.com/fexingo

Episode 99 of Cybersecurity Business with Fexingo dives into an emerging angle in enterprise defense: using blockchain to secure software and hardware supply chains. Lucas and Luna break down how the approach works—anchoring tamper-proof manifests on a distributed ledger to verify integrity from code commit to deployment. They discuss a concrete example from the 2025 compromise of a major open-source registry, where a blockchain-based provenance trail caught a backdoor before it reached production. The conversation covers why traditional checksum verification falls short, how firms like Transparent Supply Chain and Sigstore are making blockchain verification practical, and why the approach is gaining traction with CISOs after a string of high-profile supply chain attacks. The hosts also explore challenges: latency, cost, and integration with legacy CI/CD pipelines. A focused, actionable look at a defense technique that moves beyond perimeter thinking.

#Blockchain #SupplyChainSecurity #Cybersecurity #EnterpriseDefense #CISO #OpenSource #DevSecOps #TransparentSupplyChain #Sigstore #SoftwareBillOfMaterials #SBOM #ZeroTrust #Provenance #BackdoorDetection #CI/CD #Business #Technology #FexingoBusiness

Keep every episode free: buymeacoffee.com/fexingo

When a ransomware attack hits, who actually talks to the criminals? In this episode, Lucas and Luna dive into the controversial but increasingly common practice of hiring professional ransomware negotiators. They explore how firms like Coveware and Kivu Consulting act as intermediaries between victims and attackers, using data from past incidents to drive down ransom demands. Lucas explains the typical playbook: threat actors demand $5 million, negotiators use industry benchmarks to get it below $1 million. Luna questions the ethical tightrope—do these firms legitimise extortion? They discuss the rise in ransom payments despite law enforcement crackdowns, and how the FBI quietly tolerates negotiation as a harm-reduction strategy. Specific numbers: average ransom payment in Q1 2026 was $812,000, down 18% year-over-year. The episode also covers how CISOs weigh reputational risk against paying, and why some insurers now mandate a negotiation firm in their policies.

#RansomwareNegotiation #Coveware #KivuConsulting #EnterpriseSecurity #CyberRansom #IncidentResponse #CISO #CyberInsurance #FBI #HarmReduction #RansomwarePlaybook #BusinessPodcast #FexingoBusiness #BusinessAndTechnology #CybersecurityBusiness #CyberExtortion #RansomPayment #NegotiationTactics

Keep every episode free: buymeacoffee.com/fexingo