Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

Episode 28 of Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense. Lucas and Luna dig into security debt — the accumulated vulnerabilities and outdated controls that plague enterprise environments — and how threat modeling is emerging as a structured approach to pay it down. They examine a real-world case: how one global bank used attack trees and data-flow diagrams to prioritize its most critical risks, saving an estimated $40 million in potential breach costs. The hosts break down the STRIDE and PASTA frameworks, explain why most security teams are drowning in unpatched issues, and debate whether threat modeling should be a full-time role or embedded into every sprint. A practical, specific episode for anyone building or running a security program.

#Cybersecurity #ThreatModeling #SecurityDebt #EnterpriseSecurity #STRIDE #PASTA #RiskManagement #CISO #VulnerabilityManagement #AttackTrees #DataFlowDiagrams #SecurityArchitecture #DevSecOps #Compliance #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CyberDefense

Keep every episode free: buymeacoffee.com/fexingo

Phishing remains the number one attack vector, but a growing number of enterprises are adopting a radical approach: browser isolation. Instead of trying to detect malicious links, these systems run all web content in a remote container, so nothing dangerous ever reaches the endpoint. In this episode, Lucas and Luna break down how Cloudflare, Menlo Security, and Zscaler are competing in this space, how the technology actually works, and why some CISOs argue it's the only way to guarantee protection against zero-day phishing. They also discuss the trade-offs: latency, user experience, and the challenge of handling legacy web apps. If you've ever wondered why your security team blocks certain websites or how remote browsing fits into a zero-trust strategy, this episode gives you the concrete details.

#BrowserIsolation #Phishing #Cybersecurity #ZeroTrust #Cloudflare #MenloSecurity #Zscaler #EnterpriseDefense #RemoteBrowsing #SecurityArchitecture #EndpointSecurity #WebSecurity #CyberAttackVector #CISO #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #SecurityCompanies

Keep every episode free: buymeacoffee.com/fexingo

Episode 26 of Cybersecurity Business with Fexingo. Lucas and Luna explore how the cyber insurance market is driving significant changes in enterprise security practices. They examine the hardening of underwriting standards after the 2021 ransomware surge, with premiums rising 50-100% annually in 2022 and 2023 before stabilizing. The conversation focuses on how insurers now require specific controls like multi-factor authentication, endpoint detection response, and backup segmentation to qualify for coverage. Lucas breaks down the case of a mid-size manufacturing company that saw its premium jump from $150,000 to $350,000 after a near-miss ransomware event, forcing a $2 million security upgrade. They discuss the tension between insurance as a risk transfer tool and as a de facto compliance framework, and whether the industry is moving toward mandated minimum standards. The hosts also touch on the data-sharing ecosystem between insurers and security vendors, and the potential for cyber insurance to mirror workers' comp in shaping corporate behavior. A concrete, numbers-driven look at the intersection of risk management and cyber defense.

#CyberInsurance #EnterpriseSecurity #Ransomware #RiskManagement #Underwriting #MultiFactorAuthentication #EndpointDetection #BackupSegmentation #InsurancePremiums #Cybersecurity #Business #Technology #FexingoBusiness #BusinessPodcast #SecurityCompanies #Breaches #EnterpriseDefense #CyberRisk

Keep every episode free: buymeacoffee.com/fexingo

Episode 25 of Cybersecurity Business with Fexingo examines the shifting dynamics of cybersecurity insurance. Lucas and Luna explore how rising premiums and stricter underwriting requirements are forcing enterprises to adopt stronger security controls. They discuss the case of a midsize logistics company that saw its cyber insurance premium triple after a ransomware attack, and how insurers now mandate specific defenses like multi-factor authentication and endpoint detection before issuing policies. The episode also covers the growth of the cyber insurance market, which according to a 2025 report from the Insurance Information Institute reached $14 billion in direct written premiums in the US, and how carriers are using third-party security ratings to assess risk. Lucas and Luna debate whether insurance is driving genuine security improvements or just creating a compliance checkbox, and what the trend means for CISOs and security vendors. The conversation includes a natural break for listener support before wrapping up with a look at the emerging role of cyber risk quantification tools.

#CybersecurityInsurance #EnterpriseRisk #CyberRiskManagement #InsurancePremium #CISO #Ransomware #MultiFactorAuthentication #EndpointDetection #SecurityRatings #CyberInsuranceMarket #RiskQuantification #BusinessAndTechnology #EnterpriseDefense #CyberResilience #InsuranceUnderwriting #FexingoBusiness #BusinessPodcast #Cybersecurity

Keep every episode free: buymeacoffee.com/fexingo

Episode 24 of Cybersecurity Business with Fexingo examines the shift from manual patching to automated patch management in the race against zero-day exploits. Lucas and Luna break down the economics of patching: the average enterprise has 200,000+ endpoints and takes 97 days to patch a critical vulnerability, while attackers can weaponize a flaw in 15 days. They explore how companies like CrowdStrike, Rapid7, and Automox are building automation tools that cut patch cycles to under 24 hours. The hosts discuss the pressure from cyber insurance carriers who now mandate patching SLAs, the rise of virtual patching for legacy systems, and the trade-offs around change management risk. A concrete takeaway: every day a critical patch is delayed costs a typical large enterprise an estimated $1.2 million in breach exposure. The episode closes with a natural call for listener support to keep the show ad-free.

#PatchManagement #ZeroDay #VulnerabilityManagement #CrowdStrike #Rapid7 #Automox #CyberInsurance #VirtualPatching #ChangeManagement #CISO #EnterpriseSecurity #ITOperations #Automation #SecurityEconomics #BreachPrevention #BusinessAndTechnology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 23 of Cybersecurity Business with Fexingo dives into the rise of virtual CISO (vCISO) services — why mid-sized companies are outsourcing their security leadership to firms like Coalfire and SecurityScorecard. Lucas and Luna break down how the vCISO market grew to over $1.5 billion in 2025, the economics of fractional security executives, and what this means for enterprise defense. They also explore the challenges: liability gaps, culture clashes, and whether a part-time CISO can truly own a breach. A concrete look at a fast-growing business model reshaping how companies buy security expertise.

#Cybersecurity #BusinessAndTechnology #vCISO #SecurityLeadership #OutsourcedSecurity #Coalfire #SecurityScorecard #CISO #EnterpriseSecurity #CyberBusiness #FractionalExecutive #RiskManagement #Compliance #SecurityStrategy #MidMarket #CyberDefense #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 22 of Cybersecurity Business with Fexingo explores why operational technology (OT) security has become the most urgent priority for enterprise CISOs. Lucas and Luna examine the Colonial Pipeline ransomware attack as a turning point, then drill into a specific case: a 2025 water-treatment facility breach in Florida where attackers manipulated chemical controls via the same network as the HVAC system. They discuss the scale of the challenge — an estimated 3.5 million exposed OT devices globally, according to a 2025 Dragos report — and why traditional IT security tools fail in environments running legacy PLCs and SCADA systems. Luna asks whether convergence with IT security is realistic or a pipe dream. Lucas breaks down the shift from air-gapped to connected OT, the rise of OT-specific detection and response tools from companies like Dragos and Nozomi Networks, and why the SEC's new incident disclosure rules are forcing board-level attention. The episode closes with a look at how OT security is reshaping M&A strategy for industrial firms.

#OTSecurity #OperationalTechnology #IndustrialCybersecurity #SCADA #PLCs #CriticalInfrastructure #VendorRisk #Convergence #Dragos #NozomiNetworks #SECRules #CyberInsurance #IndustrialIoT #BusinessAndTechnology #FexingoBusiness #BusinessPodcast #CyberPodcast #NetworkSecurity

Keep every episode free: buymeacoffee.com/fexingo

Endpoint Detection and Response (EDR) is rapidly replacing traditional antivirus in enterprise security. In this episode, Lucas and Luna break down why the shift is happening, using CrowdStrike's Falcon platform as a case study. They discuss how EDR differs from signature-based antivirus, the role of AI in detecting novel threats, and the financial calculus behind the transition. Lucas shares a specific stat: global EDR spending is projected to hit $5.6 billion by 2028, up from $2.1 billion in 2023. Luna pushes back on the idea that EDR is a silver bullet, highlighting common implementation failures. The episode also touches on the cultural resistance within IT teams and why some companies still cling to legacy antivirus. Concrete examples include how a mid-sized retailer avoided a ransomware attack by catching it at the endpoint level. The show ends with a question about where EDR goes next as AI-generated malware becomes more sophisticated.

#EDR #EndpointDetectionAndResponse #CrowdStrike #Falcon #Antivirus #Cybersecurity #EnterpriseSecurity #AISecurity #Malware #Ransomware #ThreatDetection #BehavioralAnalysis #SIEM #BusinessAndTechnology #Podcast #FexingoBusiness #BusinessPodcast #SecurityOperations

Keep every episode free: buymeacoffee.com/fexingo

Episode 20 of Cybersecurity Business with Fexingo explores how security teams are turning to dark web marketplaces—sites like Russian Market and Genesis—as a legitimate source of threat intelligence. Lucas and Luna unpack a concrete case: how a Fortune 500 retail company detected a credential dump on a dark web forum before it was used in an attack, saving an estimated $4 million in potential damages. They discuss the economics of stolen data (a corporate VPN credential sells for $12 on average), the ethical gray zone of monitoring illegal markets, and why companies like Recorded Future and Flashpoint now employ former hackers to crawl these forums. The episode also touches on the tension between passive monitoring and active engagement, and what it means for enterprise defense in mid-2026. If you're a security leader or operator, this is a practical look at how threat intel is evolving beyond CVEs and IoCs.

#DarkWeb #ThreatIntelligence #CyberSecurity #RecordedFuture #Flashpoint #RussianMarket #GenesisMarket #CredentialDump #Fortune500 #EnterpriseDefense #CyberThreats #DataBreach #OSINT #Business #Technology #FexingoBusiness #BusinessPodcast #CyberSec

Keep every episode free: buymeacoffee.com/fexingo

Most cybersecurity spending goes toward keeping attackers out — but what if you invited them in and watched what they did? This episode explores deception technology, a strategy where security teams plant fake credentials, decoy servers, and honeytokens to catch intruders already inside the network. Lucas walks through a real 2025 deployment at a Fortune 500 retailer that detected a ransomware crew within 17 minutes using breadcrumbs planted months earlier. Luna pushes back on the cost and complexity, and they dig into the numbers: companies using layered deception see median dwell time drop from 212 days to under 48 hours. They also discuss the rise of commercial deception platforms from companies like Illusive Networks and Attivo Networks, and why the approach works especially well against human-operated ransomware. Plus: how the show stays ad-free.

#DeceptionTechnology #CyberDeception #Honeytokens #ThreatDetection #RansomwareDefense #DwellTime #CyberStrategy #IllusiveNetworks #AttivoNetworks #Fortune500 #EnterpriseSecurity #IncidentResponse #ZeroTrust #Business #Technology #FexingoBusiness #BusinessPodcast #CyberPodcast

Keep every episode free: buymeacoffee.com/fexingo