Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how the speed and accuracy of breach disclosure can influence cyber insurance payouts, using the 2024 Change Healthcare ransomware attack as a case study. They unpack the insurer's perspective, the role of forensic investigators, and the delicate dance between legal obligations and policy requirements. With cyber premiums up an average of 15% in 2026, understanding the disclosure timeline is more critical than ever. The hosts also discuss real-world examples, like the MGM Resorts breach, where delays complicated claims, and they offer practical steps for CISOs to ensure their incident response plans align with insurance policies. If you're involved in enterprise defense or just curious about how cyber insurance really works after a breach, this episode gives you a clear picture of what happens when the clock starts ticking.

#CyberInsurance #BreachDisclosure #IncidentResponse #ChangeHealthcare #MGMResorts #CISO #CyberRisk #InsurancePayouts #ForensicInvestigation #Ransomware #EnterpriseDefense #Business #Technology #FexingoBusiness #BusinessPodcast #CyberSecurity #DataBreach #RiskManagement

Keep every episode free: buymeacoffee.com/fexingo

Security teams drown in alerts—some estimates put the volume at thousands per day. In this episode, Lucas and Luna explore how CISOs are using AI-powered triage to separate real threats from noise. They dig into the math behind false positives, why traditional rules-based systems are failing, and what it means for security analysts' jobs. With a concrete example from a mid-sized fintech, they show how AI cut alert volume by 70 percent while catching a sophisticated credential-stuffing attack that evaded the old stack. They also discuss the risks: AI triage can miss novel attacks, and over-reliance on automation can dull analysts' skills. Practical takeaways for CISOs and security leaders weighing this shift.

#AIAlertTriage #AlertFatigue #Cybersecurity #CISO #SecurityOperations #SOC #MachineLearning #ThreatDetection #FalsePositives #SecurityAnalytics #FintechSecurity #CredentialStuffing #SecurityAutomation #HumanInTheLoop #Business #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business, Lucas and Luna dive into the gritty mechanics of how cyber insurance premiums are calculated after a company suffers a breach. They explore the role of security questionnaires, loss history, and remediation efforts, using a concrete example of a mid-sized logistics firm that saw its premium double after a ransomware incident. The conversation unpacks how insurers differentiate between a single event and a pattern of poor security hygiene, and why a strong incident response plan can blunt the financial blow. They also touch on the growing influence of cyber insurance in shaping enterprise security priorities, from mandatory multi-factor authentication to real-time threat monitoring. If you're a security leader or a business owner wondering why your renewal quote just spiked, this episode gives you the language and framework to advocate for better terms. Lucas and Luna also acknowledge how listener support keeps the show ad-free, with a subtle nod to buy me a coffee dot com slash fexingo.

#CyberInsurance #CyberRisk #InsurancePremium #Ransomware #IncidentResponse #SecurityPosture #CISO #RiskManagement #Underwriting #SecurityQuestionnaire #MultiFactorAuthentication #ThreatMonitoring #LogisticsCyberAttack #BreachResponse #CyberLiability #BusinessPodcast #FexingoBusiness #Tech

Keep every episode free: buymeacoffee.com/fexingo

Enterprises have long struggled to prove to auditors, regulators, and business partners that they've been breached without exposing the very vulnerabilities that allowed it. Zero-knowledge proofs, a cryptographic technique that lets one party prove a fact without revealing the underlying data, are emerging as a practical solution. In this episode, Lucas and Luna explore how firms are using zero-knowledge proofs to verify breach notifications, share threat intelligence without leaking sensitive indicators, and satisfy compliance requirements while keeping attack details private. They walk through real-world examples, including a mid-sized bank that used a zero-knowledge proof to demonstrate to its regulator that a credential-stuffing attack had been contained, without revealing which accounts were affected. They also discuss the engineering trade-offs, the computational overhead, and why adoption is still in its early days. If you're a security leader or a technologist trying to make breach disclosure both honest and safe, this episode explains a tool that's quietly changing how trust works in cybersecurity.

#ZeroKnowledgeProofs #Cybersecurity #BreachDisclosure #Cryptography #ThreatIntelligence #Compliance #CISO #SecurityOperations #DataPrivacy #EnterpriseSecurity #Audit #Regulation #Technology #Business #Podcast #FexingoBusiness #BusinessPodcast #Security

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business, Lucas and Luna look at a quiet but significant shift in enterprise security: on-premise security information and event management, or SIEM. After more than a decade of 'cloud first' messaging, a growing number of security teams are pulling their log data back in-house. Lucas walks through the math that's driving the change—data ingestion costs, egress fees, and the trade-offs between cloud scalability and on-prem control—and cites a concrete case: a mid-sized bank that cut its SIEM bill by roughly 40 percent after moving to an internal deployment. Luna challenges the idea that on-prem equals legacy, pointing to hybrid models and recent innovations in storage and query engines that have closed the performance gap. Together they discuss what this means for security vendors, CISOs, and the future of security operations centers. If you're deciding where to run your own detection stack, this episode offers a clear framework for the build-versus-buy decision.

#SIEM #OnPremSecurity #Cybersecurity #SecurityOperations #DataIngestion #CloudCosts #HybridCloud #CISO #LogManagement #ThreatDetection #SecurityVendors #Business #Technology #FexingoBusiness #BusinessPodcast #CyberDefense #EnterpriseSecurity #SecurityBudget

Keep every episode free: buymeacoffee.com/fexingo

Episode 151 of Cybersecurity Business with Fexingo looks inside the world of proactive threat hunting. Lucas and Luna examine how enterprise security teams move beyond automated alerts to actively search for signs of intrusion that slipped past their defenses. They break down the difference between reactive monitoring and hunting, the role of the MITRE ATT&CK framework as a roadmap, and the human intuition that still matters when machines miss the subtle clues. Using the example of a stealthy attacker dwelling in a network for months, they explain how hunters think like adversaries and use hypotheses to chase down anomalies. They also tackle the practical challenges: the talent shortage, the cost of skilled analysts, and the pressure to show return on investment when nothing is found. The hosts share concrete takeaways for security leaders considering a hunt program, from starting with high-value assets to measuring success beyond simple detection counts. Tune in for a clear-eyed look at one of the most dynamic roles in cybersecurity today.

#ThreatHunting #Cybersecurity #MITREATTACK #SecurityOperations #ProactiveDefense #CyberThreats #InfoSec #SecurityAnalyst #ThreatDetection #EnterpriseSecurity #BlueTeam #CyberResilience #IncidentResponse #SecurityStrategy #BusinessTechnology #FexingoBusiness #BusinessPodcast #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this special 150th episode, Lucas and Luna explore how the zero trust model is fundamentally changing enterprise network security. They trace the shift from perimeter-based defenses to a verify-everything approach, using the 2023 Okta breach as a case study to show how even identity providers can fall victim to credential theft. The conversation covers the rise of identity-centric security, the practical challenges of implementing zero trust, and the uncomfortable truth that perimeters no longer exist in a world of cloud and remote work. They discuss how CISOs are adopting zero trust architecture, the cultural pushback from employees, and the role of AI in automating policy decisions. With a realistic look at the costs and benefits, this episode gives listeners a clear framework for understanding why zero trust matters and how it's reshaping the industry. Plus, they celebrate the podcast's 150th episode with a nod to the listeners who keep it ad-free.

#ZeroTrust #NetworkSecurity #Cybersecurity #OktaBreach #IdentitySecurity #CISO #EnterpriseDefense #SecurityArchitecture #CloudSecurity #RemoteWork #SecurityStrategy #Business #Technology #Podcast #FexingoBusiness #SecurityPodcast #TechPodcast #InfoSec

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore the rise of threat intelligence sharing among enterprises. They dive into how companies are moving from siloed security to collaborative defense, using platforms like the Cyber Threat Alliance and industry-specific ISACs. The conversation centers on a concrete example: the 2021 Kaseya supply-chain attack, where shared indicators of compromise helped organizations respond faster. Lucas breaks down the economics of intelligence sharing, noting that the average cost of a data breach now exceeds four and a half million dollars, making collaboration a prudent investment. They also discuss the challenges, including trust issues and legal concerns over sharing sensitive data. Listeners will learn how threat intelligence platforms are evolving to automate sharing and why even small security teams can participate. Tune in for a practical look at how enterprises are turning information sharing into a strategic advantage.

#ThreatIntelligence #CyberDefense #ISAC #CyberThreatAlliance #KaseyaAttack #SupplyChainSecurity #CISO #InfoSharing #CyberEconomics #SecurityOperations #EnterpriseSecurity #Business #Technology #FexingoBusiness #BusinessPodcast #CyberSecurity #CollaborativeSecurity #ThreatSharing

Keep every episode free: buymeacoffee.com/fexingo

Episode 148 of Cybersecurity Business with Fexingo looks at how CISOs use tabletop exercises to stress-test their incident response plans before a real breach hits. Lucas and Luna walk through a realistic ransomware scenario, showing how a well-run exercise can expose gaps in communication, decision-making, and technical readiness. They discuss why many exercises fail because they're too scripted, how red teams and purple teams add realism, and what CISOs can learn from the military's use of sand tables. The conversation references the 2023 MGM Resorts breach as a cautionary tale, and touches on the growing role of AI-generated injects to keep exercises unpredictable. If you're responsible for security strategy—or just curious about how companies prepare for the worst—this episode offers a practical look at turning a often-boring compliance checkbox into a genuine tool for resilience.

#Cybersecurity #TabletopExercises #IncidentResponse #CISO #Ransomware #Business #Technology #SecurityOperations #RiskManagement #EnterpriseSecurity #CyberResilience #ThreatSimulation #FexingoBusiness #BusinessPodcast #Leadership #CrisisManagement #Preparation #Podcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the evolving role of cyber insurance in enterprise security. With premiums rising sharply and carriers demanding stronger security controls, insurers are becoming de facto regulators of corporate cybersecurity. Lucas breaks down how underwriting now involves technical assessments, how policy terms are tightening around ransomware and business email compromise, and why some companies are self-insuring while others embrace 'cyber insurance as a service' to improve their security posture. The conversation includes real-world examples of how insurance requirements are driving adoption of multifactor authentication and endpoint detection, and how the market is responding with new products like parametric policies. Listeners will learn why cyber insurance is no longer just a financial backstop but a strategic lever for improving security readiness. Tune in for a focused, practical look at the intersection of insurance and cybersecurity.

#CyberInsurance #EnterpriseSecurity #CybersecurityBusiness #RiskManagement #Ransomware #CISO #InsuranceTech #SecurityPosture #BusinessContinuity #DigitalRisk #CyberResilience #TechPodcast #BusinessPodcast #Finance #Technology #FexingoBusiness #FexingoPodcast #SecurityStrategy

Keep every episode free: buymeacoffee.com/fexingo