Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

Episode 68 of Cybersecurity Business with Fexingo dives into Continuous Threat Exposure Management (CTEM) — the framework Gartner predicts will reduce attack surface exploitation by two-thirds by 2027. Lucas and Luna break down how a mid-size retailer used CTEM to prioritize a critical API vulnerability before a breach, saving an estimated $4 million in potential damages. They discuss the five phases of CTEM — scoping, discovery, prioritization, mobilization, and measurement — and why the shift from reactive patching to continuous exposure management is reshaping CISO strategy. Specific examples include how one CISO cut mean time to remediation by 40% using automated prioritization rules. A must-listen for security leaders and technology operators.

#ContinuousThreatExposureManagement #CTEM #Gartner #CISO #VulnerabilityManagement #APISecurity #CyberRisk #AttackSurface #Prioritization #Remediation #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #Cybersecurity #ExposureManagement #MeanTimeToRemediation #SecurityFramework #EnterpriseDefense

Keep every episode free: buymeacoffee.com/fexingo

In Episode 67 of Cybersecurity Business with Fexingo, Lucas and Luna dive into how security teams are using adversary-in-the-middle (AiTM) attack simulations to test their phishing defenses. Lucas explains that AiTM attacks bypass multi-factor authentication by proxying credentials and session cookies in real time, and how tools like EvilGinx and Modlishka have made this technique accessible to both attackers and defenders. They discuss why traditional phishing simulations that only test credential entry miss the most dangerous modern threat, and how companies like a mid-sized healthcare firm used AiTM testing to uncover a gap in their conditional access policies. Luna notes that Microsoft reported a 146% increase in AiTM attacks in 2025, making this a top concern for CISOs. The episode also covers how defenders are now deploying their own AiTM frameworks to train users and harden session controls. No prior knowledge of adversarial simulation is needed—just an interest in how red teams think. Recorded June 22, 2026.

#AdversaryInTheMiddle #AiTM #Phishing #MFA #RedTeam #BlueTeam #EvilGinx #Modlishka #Cybersecurity #SecurityTesting #SessionHijacking #ConditionalAccess #CISO #BusinessPodcast #FexingoBusiness #Technology #CyberDefense #Episode67

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into Cloud Infrastructure Entitlement Management (CIEM), a security discipline that addresses the risk of excessive permissions in multi-cloud environments. They break down how CIEM tools help organizations enforce least-privilege access across AWS, Azure, and Google Cloud, using the example of a 2025 breach at a major financial services firm that traced back to an over-privileged service account. Lucas explains why traditional IAM falls short in dynamic cloud ecosystems, and Luna notes how CIEM adoption is accelerating as cloud bills grow and auditors demand tighter controls. They discuss key vendors like Microsoft, Palo Alto Networks, and emerging startups, and explore the challenge of balancing security with developer velocity. The conversation closes with a look at how CIEM integrates with broader cloud security platforms like CSPM and CWPP. A natural donation segment ties in the complexity of managing cloud permissions to the show's independent research.

#CloudInfrastructureEntitlementManagement #CIEM #CloudSecurity #LeastPrivilegeAccess #MultiCloud #AWS #Azure #GoogleCloud #IAM #CSPM #CWPP #PaloAltoNetworks #Microsoft #EnterpriseDefense #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #Cybersecurity

Keep every episode free: buymeacoffee.com/fexingo

Episode 65 of Cybersecurity Business with Fexingo dives into the shift from bolt-on API security tools to vendor-native API protection inside platforms like AWS, Azure, and Google Cloud. Lucas and Luna discuss why CISOs are trading point solutions for integrated defenses, using examples from Capital One's 2019 breach and how API gateway native controls could have blocked the attack. They explore cost, complexity, and coverage trade-offs, and why vendor lock-in is less of a fear than fragmentation. The episode also touches on how startups like Salt Security are pivoting, and what the rise of native API security means for enterprise architecture decisions in mid-2026.

#APISecurity #CISO #CloudSecurity #AWS #Azure #GoogleCloud #CapitalOne #SaltSecurity #ZeroTrust #VendorLockIn #EnterpriseSecurity #SecurityArchitecture #BusinessAndTechnology #Cybersecurity #Podcast #FexingoBusiness #BusinessPodcast #SecurityOperations

Keep every episode free: buymeacoffee.com/fexingo

Episode 64 of Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense. Lucas and Luna explore how the tightening of directors and officers (D&O) liability insurance is reshaping cybersecurity strategy. They unpack the case of a 2024 shareholder lawsuit against a publicly traded healthcare company after a ransomware attack revealed inadequate oversight. Lucas explains how D&O insurers now require documented board-level risk committees, quarterly security briefings, and cyber maturity assessments — or they deny coverage. Luna questions whether this is genuine accountability or just a checkbox exercise. The episode drills into the specific metrics insurers demand: mean time to detect (MTTD) under 48 hours, penetration testing every six months, and an incident response plan tested at least annually. Lucas cites data from a 2025 survey by the Professional Liability Underwriting Society showing 63 percent of underwriters now require a CISO attestation on security controls before writing a D&O policy. The conversation closes with a look at how this trend could push the average Fortune 500 company to increase its cybersecurity budget by 12 to 18 percent over the next two years. No ads — listener supported via buy me a coffee dot com slash fexingo.

#CISOLiability #DandOInsurance #CybersecurityPriorities #BoardOversight #CyberRisk #RansomwareLawsuit #PLUSSurvey2025 #SecurityAttestation #MTTD #PenetrationTesting #IncidentResponse #InsuranceRequirements #Fortune500 #CyberBudget #BusinessPodcast #FexingoBusiness #SecurityCompanies #EnterpriseDefense

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into deception technology — a proactive defense strategy where security teams deploy decoys, honeypots, and breadcrumbs to mislead attackers and detect intrusions early. They explore a real-world case: how a mid-sized financial services firm used fake database credentials and simulated customer records to unmask a latent ransomware group before any real data was encrypted. Lucas explains the three layers of modern deception — low-interaction honeypots, high-interaction lures, and breadcrumb data planted in real systems — and breaks down the economics: a cloud-based deception platform costs roughly $50,000 to $100,000 per year for a thousand-employee company, compared to the average breach cost of $4.5 million. Luna challenges the assumption that deception only works against unsophisticated attackers, citing a 2025 incident where a state-sponsored group spent 48 hours inside a decoy Active Directory server before realizing it was fake. They also discuss how to measure return on investment: mean time to detect can drop from weeks to minutes. This is a practical, tactical episode for CISOs and security architects looking to add a layer of active defense without drowning in false positives.

#DeceptionTechnology #Honeypots #ActiveDefense #ThreatDetection #CyberDeception #CISO #FinancialServices #Ransomware #StateSponsored #MeanTimeToDetect #SecurityArchitecture #DecoyNetwork #Breadcrumbs #Lures #Business #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Industrial control systems and operational technology networks were long treated as air-gapped fortresses. That assumption collapsed in 2022 with the Colonial Pipeline shutdown and again in 2024 when a German wind turbine fleet was remotely hijacked. Today, Lucas and Luna drill into a specific case: the 2025 breach at a Gulf Coast petrochemical plant that entered through a legacy temperature sensor on the loading dock. They unpack why OT security spending is projected to hit $35 billion by 2027, how the Purdue model is being rethought, and why CISOs at manufacturing and energy firms are suddenly buying protocols like OPC UA and IEC 61850 as security controls—not just automation standards. If you manage risk for a business that touches physical infrastructure, this episode is for you.

#OTSecurity #IndustrialCybersecurity #CISO #CriticalInfrastructure #PurdueModel #ColonialPipeline #IEC61850 #OPCUA #ITOTConvergence #ZeroTrustOT #PetrochemicalBreach #Ransomware #NIST80082 #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CybersecurityBusiness #EnterpriseDefense

Keep every episode free: buymeacoffee.com/fexingo

Episode 61 of Cybersecurity Business with Fexingo explores how attackers are weaponizing MFA fatigue—bombarding users with push notifications until they approve—and what security teams are doing about it. Lucas and Luna break down the rise of MFA bombing attacks, the role of number matching and conditional access policies, and why some enterprises are moving to phishing-resistant FIDO2 keys. They examine a real-world case: how a mid-sized financial firm cut successful MFA fatigue attacks by 94 percent after implementing a three-pronged defense. If you operate or build in business technology, this episode offers a practical look at the evolving authentication arms race.

#MFAFatigue #Authentication #Cybersecurity #PushBombing #FIDO2 #NumberMatching #ConditionalAccess #PhishingResistant #ZeroTrust #IdentitySecurity #EnterpriseDefense #Microsoft #DuoSecurity #Business #Technology #FexingoBusiness #BusinessPodcast #SecurityOperations

Keep every episode free: buymeacoffee.com/fexingo

Episode 60 of Cybersecurity Business with Fexingo dives into User and Entity Behavior Analytics (UEBA) — the technology that learns what 'normal' looks like for users and machines, then flags the anomalous. Lucas and Luna explore how CrowdStrike and Microsoft Sentinel are baking behavioral baselining into their platforms, why a finance intern's late-night VPN login from a new device triggered a real incident response, and how UEBA differs from signature-based detection. They also discuss the challenge of false positives when a company has 10,000 employees and each one behaves differently. By the end, you'll understand why UEBA is becoming a core layer in enterprise defense — and why some CISOs still struggle to trust it.

#UserAndEntityBehaviorAnalytics #UEBA #CrowdStrike #MicrosoftSentinel #Cybersecurity #AnomalyDetection #BehavioralAnalytics #MachineLearning #EnterpriseDefense #SOC #IncidentResponse #FalsePositives #SecurityOperations #InsiderThreat #DataScience #BusinessAndTechnology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 59 of Cybersecurity Business with Fexingo explores why enterprise security teams are adopting dedicated SaaS-to-SaaS backup tools to protect critical cloud applications like Salesforce, Microsoft 365, and ServiceNow. Lucas and Luna break down the shared responsibility model gap, the shift from legacy on-prem backup approaches, and why recovering deleted or corrupted data from a SaaS app can take days or weeks without a proper backup layer. They cite real-world examples, including a 2024 outage at a major CRM provider that permanently lost customer records for organizations relying solely on native recycle bins. The hosts also explain how modern SaaS backup solutions use API-based incremental snapshots and immutable storage to ensure rapid recovery. If you are responsible for securing enterprise collaboration tools or managing vendor risk, this episode will help you assess whether your current data protection strategy has a blind spot.

#SaaSToSaaSBackup #DataProtection #CyberResilience #EnterpriseSecurity #Microsoft365 #Salesforce #ServiceNow #SharedResponsibility #BackupStrategy #CloudSecurity #BusinessContinuity #SaaSApps #DataRecovery #CISO #SecurityArchitecture #FexingoBusiness #BusinessPodcast #BusinessAndTechnology

Keep every episode free: buymeacoffee.com/fexingo