Cybersecurity Sessions

In this episode of the Cybersecurity Sessions, Andy Ash speaks with Simon Brownhill, a cybersecurity leader with a military background. Simon shares his journey from Navy weapons engineer to CISO, offering insights on leadership, risk management, and security culture. They discuss AI’s impact on cybersecurity, balancing innovation with risk, and the importance of mentorship. Simon highlights the need for proactive security, hands-on learning, and effective board communication.

In this episode of the Cybersecurity Sessions, Andy Ash speaks with Simon Brownhill, a cybersecurity leader with a military background. Simon shares his journey from Navy weapons engineer to CISO, offering insights on leadership, risk management, and security culture. They discuss AI’s impact on cybersecurity, balancing innovation with risk, and the importance of mentorship. Simon highlights the need for proactive security, hands-on learning, and effective board communication.

If you work in application security, you’re probably familiar with the OWASP Top 10. But open-source frameworks like those maintained by OWASP members have a lot to offer security practitioners. In this episode, Netacea CISO Andy Ash meets OWASP Global Board Member and London Chapter Leader Sam Stepanyan to find out how Sam got involved with OWASP, and the influence it has on the security world. The duo is also joined by Netacea’s Cyril Noel-Tagoe, who is a core contributor to the BLADE Framework, an open-source project focused on defining business logic attack tactics and techniques.

In this episode of Cybersecurity Sessions, host Andrew Ash, CISO at Netacea, is joined by Dr. Mark Greenwood, Netacea’s Chief Technical Architect, and Dr. Christoph Burtscher, AI researcher and author. Together, they explore the evolving partnership between humans and AI in cybersecurity, discussing machine-led defenses, ethical challenges, and the role of trust in AI adoption.

The conversation highlights the shift from human-led security to AI-driven systems and how generative AI is reshaping cyber defense. Christoph also shares insights from his upcoming book, Silicon Minds and Human Hearts: How to Navigate the AI Revolution.

Join us for an engaging discussion on bridging technology and the human element in cybersecurity.

In this insightful episode, Stuart Seymour, Group CISO and CSO at Virgin Media O2, joins Andrew Ash (CISO, Netacea) to discuss how his experience as a British Army Captain shaped his unique leadership style in cybersecurity. Stuart also shares his passion for building diverse, neurodiverse teams, drawing from his own experience with dyslexia. He dives into the growing importance of AI in SOCs and the complex challenges of navigating global cybersecurity regulations. A must-listen for anyone looking to understand the evolving role of a CISO in today's landscape.

Host Andy Ash (CISO at Netacea) is joined by Arve Kjoelen, who recently left a six-year stint as CISO of McAfee to join startup CynomIQ as Chief Solutions Officer. In this episode they discuss differences in how CISOs are compensated across both sides of the Atlantic, how the role is shifting to account for increased governance and regulations, and the 'left of boom' approach to preventative security. Andy and Arve also compare notes on how they first become fascinated with security and their own paths to the position of CISO.

Netacea bot experts discuss the challenges around the Oasis reunion tour ticket sales, focusing on the issues caused by bots and scalping in high-demand events. The discussion explores the technical difficulties of managing ticket sales, the tactics used by bot operators to secure tickets, and the broader implications for the industry.

The team also discuss why current methods to prevent bot activity often fail and why a multi-pronged strategy combining real-time detection, post-transaction analysis, and clamping down on secondary markets is critical.

The talk concludes with insights on how increased intelligence and understanding of attacker behavior can eventually win the battle against bot-driven ticket scalping.

The Cybersecurity Sessions podcast is set to return for its third season, focusing on the human side of cybersecurity.

This season will feature conversations with experts from various industries, including entertainment, fintech, and digital commerce, who will share their insights on managing human factors in cybersecurity.

Netacea CISO Andy Ash will also explore topics like the impact of AI and human factors in cybersecurity.

In the meantime, catch up on past episodes featuring notable guests from Amazon, Mimecast, the Ministry of Defence and more while awaiting the new season.

Netacea CISO Andrew Ash welcomes two special guests to the podcast this month to talk about AI adoption and managing third party risk: Thomas Ballin (CTO, Cytix) and Haydn Brooks (CEO, Risk Ledger).

In 2023 the AI genie is well and truly out of the bottle, gaining mainstream attention and usage across business, academia and in day-to-day life. As a result, AI has become somewhat of a buzzword used to sell solutions or make products appear smart and modern. As mutual advocates of AI to solve problems more efficiently for clients, Andrew and Thomas weigh in on how to define “real AI”, which solutions really benefit from incorporating AI, and how we can validate these claims.

Meanwhile, CISOs are rightly concerned with gaining as much control as possible over internal systems so that they can be secured against known and novel threats. But businesses are also reliant on their supply chain and third-party systems, which have their own potential vulnerabilities. Haydn has a wealth of experience in this area, and sheds light on the potential risks third party relationships expose and how CISOs can manage them whilst maintaining the value of these relationships.

Finally, threat researcher extraordinaire Cyril Noel-Tagoe explains why criminals use bots to mass create fake accounts on web services, the other attacks these accounts facilitate, and how businesses can cut off fake accounts before they do their damage.

Host

Andrew Ash – CISO, Netacea

Andy Ash has worked in IT Services and cyber for 21 years. He has been part of Netacea since its inception and is currently CISO, overseeing the operation and security of the technical platform and Netacea Threat and Bot Expert teams.

https://www.linkedin.com/in/andrew-ash-3963b19/

Panel

Haydn Brooks – CEO & co-founder, Risk Ledger

Originally a big four cyber risk consultant, Haydn found that current supply chain assurance programs were far from frictionless and actively caused clients and their suppliers’ headaches. This led him to found Risk Ledger, a technology platform that combines a security governance platform with a secure social network.

https://www.linkedin.com/in/haydn-brooks/

Thomas Ballin – CTO & co-founder, Cytix

The technical co-founder of Cytix, Thomas is focused on disrupting the UK security testing space. With a background in penetration testing, he has spent the past 10+ years building and innovating service lines to support businesses with their continuous security testing needs.

https://www.linkedin.com/in/thomasjballin/

Cyril Noel-Tagoe – Principal Security Researcher, Netacea

Cyril Noel-Tagoe is an experienced information security professional and Principal Security Researcher at Netacea. He spends his time researching, speaking and writing about malicious bots and other cyber security topics.

https://www.linkedin.com/in/cybercyril

https://twitter.com/cyber_cyril

To start this month’s episode, we once again weigh in on AI – this time considering the privacy implications when feeding prompts into generative AI tools like ChatGPT and Bard. We’ll discuss whether it’s safe to share company IP or your own personal information into such tools, before hearing how we approach this at Netacea from Principal Software Engineer John Beech.

Next, we’ll look to the news of another major data breach, as it was recently revealed that millions of stolen records from genetics testing site 23andMe were available for sale from an underground forum. The attackers even touted that the data identifies those with Jewish genealogy. 23andMe held customers responsible for reusing their passwords on other sites that had been hacked previously, but where does responsibility for protecting this kind of sensitive information lie and what can each party do to keep data safe? Having spent five years of his career in biotech, Engineering Manager Karol Horosin has plenty to add to this story.

Finally, our security researcher extraordinaire Cyril returns to tell us about freebie bots – a type of scalping bot that targets discounted goods to resell in bulk at retail prices. Sounds like a “prime” bot attack type to target recent and upcoming sales events…

Host

Dani Middleton-Wren – Head of Media, Netacea

Dani is a cybersecurity writer and marketing specialist, who strives to decipher the mysteries behind complex cybersecurity subjects and deliver them to a wide audience. Since joining Netacea in 2019, Dani has used her experience in journalism and analyst relations to create compelling external communication strategies that effectively articulate the threat of automated attacks.

https://www.linkedin.com/in/danielle-middleton-wren-95826767/

Panel

Cyril Noel-Tagoe – Principal Security Researcher, Netacea

Cyril Noel-Tagoe is an experienced information security professional and Principal Security Researcher at Netacea. He spends his time researching, speaking and writing about malicious bots and other cyber security topics.

https://www.linkedin.com/in/cybercyril

https://twitter.com/cyber_cyril

Karol Horosin – Engineering Manager, Netacea

As well as his role as Engineering Manager at Netacea, Karol is the founder of an AI sentiment analysis product sentimatic.io. He is a frequent conference speaker and writes online about programming, product development and startups on his personal blog.

https://www.linkedin.com/in/horosin/

https://twitter.com/horosin_

John Beech – Principal Software Engineer, Netacea

Currently a team lead for Netacea’s software engineering department, John has been working on highly scalable secure applications platforms over the span of 20 years. He’s enthusiastic about welcoming in a new era of AI and computer intelligence.

https://www.linkedin.com/in/johnbeech/