Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

Episode 78 of Cybersecurity Business with Fexingo dives into the practical world of cyber threat intelligence sharing. Lucas and Luna explore how organizations like the Financial Services Information Sharing and Analysis Center (FS-ISAC) help banks and fintechs exchange real-time threat data. They discuss the tension between sharing and competitive secrecy, the role of automated platforms like MISP, and why even rival firms now collaborate on defense. The episode looks at how threat intelligence sharing stopped a ransomware attack targeting a midsize credit union in early 2026, and explains the emerging standard of structured threat information expression (STIX). Tune in for a grounded look at how security teams are pooling their data to outpace attackers.

#CyberThreatIntelligence #ThreatIntelligenceSharing #FSISAC #MISP #STIX #Ransomware #CreditUnion #SecurityTeams #EnterpriseDefense #CISO #Collaboration #Business #Technology #FexingoBusiness #BusinessPodcast #Cybersecurity #InformationSharing #CyberDefense

Keep every episode free: buymeacoffee.com/fexingo

Episode 77 of Cybersecurity Business with Fexingo dives into graph-based threat detection, which maps relationships between users, devices, and data to spot attacks that traditional rules miss. Lucas and Luna examine how this approach caught a sophisticated supply-chain compromise at a healthcare firm in Q2 2026, where attackers used stolen credentials that wouldn't have triggered alerts in a standard SIEM. The episode explores how graph databases like Neo4j are being adopted by security teams, the role of entity resolution, and why this technique is especially effective against living-off-the-land and lateral-movement attacks. Lucas also covers the challenges: scaling graph queries for real-time detection and the shortage of analysts trained in graph theory. A practical look at how one security operations center cut mean time to detect by 68% using graph-based analytics.

#GraphBasedSecurity #ThreatDetection #Cybersecurity #Neo4j #SIEM #EntityResolution #SupplyChainAttack #HealthcareSecurity #LateralMovement #LivingOffTheLand #SecurityOperations #ThreatIntelligence #DataScience #GraphTheory #Business #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 76 of the Cybersecurity Business podcast digs into how security teams are now using generative AI not just for threat intelligence summaries, but to automate the first few minutes of incident response. Lucas and Luna walk through a real case: a mid-market retailer that integrated a large language model into its SOAR platform, cutting mean-time-to-respond for phishing incidents from 18 minutes to under 4. They discuss the risks — hallucinations, prompt injection, and the CISO's liability — and why one industry observer calls this 'co-pilot for the SOC.' No hype, just what operators are actually deploying in Q2 2026.

#GenerativeAI #IncidentResponse #SOAR #SecurityOperationsCenter #Automation #SOC #LLM #Phishing #MeanTimeToRespond #PromptInjection #CISO #EnterpriseSecurity #BusinessAndTechnology #Cybersecurity #FexingoBusiness #BusinessPodcast #MidMarket #ThreatDetection

Keep every episode free: buymeacoffee.com/fexingo

Episode 75 of Cybersecurity Business with Fexingo dives into the fastest-growing worry for enterprise defenders: software supply chain security. Lucas and Luna unpack the SolarWinds aftermath and why CISOs are now mandating SBOMs—software bills of materials—before signing any vendor deal. They discuss how the Biden administration's executive order accelerated adoption, why companies like Microsoft and Google are publishing their own SBOMs, and what a smaller SaaS vendor needs to do to stay in enterprise procurement lists. The hosts also cover the practical challenges: SBOMs are hard to generate for legacy code, and most security teams lack tools to actually analyze them. Plus, a look at how attackers are pivoting to exploit package managers like npm and PyPI. A concrete episode for anyone who works with third-party software—or sells it.

#SupplyChainSecurity #SBOM #SolarWinds #CISO #VendorRisk #SoftwareBillOfMaterials #Cybersecurity #EnterpriseDefense #ThirdPartyRisk #DevSecOps #ZeroTrust #OpenSource #npm #PyPI #ExecutiveOrder #Microsoft #Google #BusinessAndTechnology

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into Zero Trust Network Access — ZTNA — and why it's rapidly replacing traditional VPNs for remote access. They break down the key difference: instead of granting network-level access, ZTNA connects users to specific applications based on identity, device posture, and context. The conversation centers on a real-world deployment at a mid-sized financial services firm that cut its attack surface by 80 percent after moving from VPN to ZTNA. Lucas explains the architectural shift — how ZTNA uses a software-defined perimeter and a broker to authenticate every request, not just at login. Luna asks about user friction, and Lucas points to modern solutions that use single sign-on and device compliance checks to keep login times under two seconds. They also touch on the cost: roughly $15 to $25 per user per month for a cloud-delivered ZTNA service, compared to the hidden costs of maintaining VPN infrastructure. The episode closes with a forward look at how ZTNA fits into a broader zero-trust architecture alongside microsegmentation and continuous monitoring.

#ZeroTrustNetworkAccess #ZTNA #VPNreplacement #RemoteAccess #SoftwareDefinedPerimeter #IdentityBasedAccess #DevicePosture #CyberSecurity #EnterpriseSecurity #SDP #CloudSecurity #Business #Technology #FexingoBusiness #BusinessPodcast #CybersecurityBusiness #LucasAndLuna #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 73 of Cybersecurity Business with Fexingo explores why CISOs are shifting away from third-party security appliances toward cloud-native controls like AWS Security Hub, Azure Policy, and Google Security Command Center. Lucas and Luna break down the 2025 Cloud Security Alliance report showing that 68% of enterprises now prioritize native tools over best-of-breed third parties. They discuss the trade-offs — reduced complexity vs. potential vendor lock-in — and walk through a real example: how a mid-size SaaS company cut its security stack from 15 tools to 7 by leaning on AWS native services. The hosts also examine the economics: average 40% cost savings on licensing, but hidden costs in training and migration. Perfect for security leaders weighing platform vs. point-product decisions.

#CloudNativeSecurity #CISO #AWS #Azure #GoogleCloud #SecurityControls #CloudSecurityAlliance #VendorLockIn #SecurityStack #EnterpriseDefense #BCDR #InfrastructureAsCode #DevSecOps #BusinessAndTechnology #CybersecurityBusiness #FexingoBusiness #BusinessPodcast #SecurityStrategy

Keep every episode free: buymeacoffee.com/fexingo

Episode 72 of Cybersecurity Business explores the rise of 'living off the land' (LotL) attacks, where hackers use built-in system tools like PowerShell and WMI instead of malware. We dive into a real case involving a mid-sized financial firm that lost $2.3 million when attackers abused Microsoft's own remote management tools. Lucas and Luna discuss why LotL evades detection, how endpoint detection and response tools are evolving, and what security teams are doing differently — from behavior-based baselines to disabling unneeded scripts. Plus, a 2025 CrowdStrike report shows 71% of attacks now involve LotL techniques. If you're in security operations, this episode explains why you need to monitor your own tools.

#LivingOffTheLand #LotL #CyberSecurity #LOLBins #PowerShell #WMI #BusinessPodcast #FexingoBusiness #EnterpriseSecurity #ThreatDetection #CrowdStrike #SecurityOperations #EDR #BehavioralAnalysis #CyberAttack #Breach #SecurityTools #Podcast

Keep every episode free: buymeacoffee.com/fexingo

In Episode 71 of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprise security teams are using remote browser isolation to stop web-based threats. They break down the two main architectures — clientless and client-based — and discuss why companies like Google and Cloudflare are investing heavily in this space. The hosts explain how isolation works, when it makes sense, and what the trade-offs are for user experience and cost. They also touch on the rise of browser-borne malware and why traditional web filters are no longer enough. If you're in IT or security, this episode gives you a concrete framework for evaluating isolation as part of your stack.

#RemoteBrowserIsolation #BrowserSecurity #ZeroTrust #CloudSecurity #CyberDefense #EnterpriseSecurity #WebSecurity #Google #Cloudflare #BrowserIsolation #CyberThreats #MalwareProtection #CISO #Business #Technology #FexingoBusiness #BusinessPodcast #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

External Attack Surface Management (EASM) is one of the fastest-growing segments in cybersecurity, and for good reason. Lucas and Luna dive into why organizations are discovering they don't actually know what's exposed to the internet. They break down a real case: a mid-sized financial services firm that found 47 unknown subdomains and three unpatched databases after running an EASM scan for the first time. The episode covers how EASM works, who the major players are (CrowdStrike, Tenable, Palo Alto Networks, and newer entrants like Censys and Assetnote), and why the Gartner hype cycle has officially moved EASM into the 'slope of enlightenment.' Lucas argues that EASM should be a baseline practice for any company with a cloud footprint, while Luna pushes back on whether it's just another tool that creates noise. A practical, specific conversation for security leaders managing attack surface complexity in mid-2026.

#EASM #AttackSurfaceManagement #Cybersecurity #CrowdStrike #Tenable #PaloAltoNetworks #Censys #Assetnote #CloudSecurity #CyberDefense #Technology #Business #Podcast #FexingoBusiness #BusinessPodcast #Security #InfoSec #Episode70

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna drill into a specific tactic gaining traction in enterprise defense: cyber deception. They explore how security teams deploy decoy systems, fake credentials, and breadcrumb files to lure ransomware operators into sandboxes where their behavior can be analyzed and their attacks neutralized. Lucas cites a case study involving a mid-sized healthcare network that used deception to detect a Ryuk variant before it could encrypt patient records. They discuss the cost of deployment, the importance of keeping decoys realistic, and why this approach is especially effective against automated ransomware that scans for vulnerable targets. Luna pushes back on the risk of false positives and whether attackers can spot the decoys. They also touch on the overlap with threat intelligence and how deception data feeds into broader detection strategies. A practical, grounded look at a tool that flips the asymmetry of the defender- attacker dynamic.

#CyberDeception #RansomwareDefense #EnterpriseSecurity #ThreatHunting #DecoyNetworks #Honeypots #SecurityOperations #CISO #IncidentResponse #Business #Technology #Podcast #FexingoBusiness #BusinessPodcast #Cybersecurity #DetectionEngineering #AdversarySimulation #SecurityStrategy

Keep every episode free: buymeacoffee.com/fexingo