CyberSound™

Send us Fan Mail

 If cookie banners aren't actually required by law in the US, then why is every website showing you one?

In this episode of CyberSound, Jason Pufahl is joined by Alex Cox, privacy attorney at Troutman Pepper Locke, to explain how tracking cookies, website privacy laws, and consumer data regulations are changing across the United States. They discuss Connecticut's updated privacy law, California's CCPA, Europe's GDPR, Global Privacy Control (GPC), CIPA wiretapping lawsuits, biometric and sensitive personal data, and why many businesses misunderstand cookie consent requirements. Jason and Alex also explain what a properly implemented cookie banner should do, why simply displaying a banner isn't enough, and how organizations can reduce legal risk while building trust with website visitors. 

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

In this episode of CyberSound, Jason Pufahl and Mark Jennings explain what the DoD's CMMC Phase II suspension actually means for defense contractors. They discuss why the November Level 2 third-party certification was paused, the 60-day program review behind it, what still applies under DFARS 252.204-7012, NIST SP 800-171, SPRS self-assessments, DIBCAC audits, and the False Claims Act, and why organizations should continue preparing for CMMC rather than putting compliance on hold. Whether you're planning a C3PAO assessment or wondering if the pause changes your obligations, this episode explains what changed, what didn't, and what comes next.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

What happens to your business when the AI model you depend on disappears overnight?

In our 150th episode of CyberSound, Jason Pufahl is joined by Dylan Marquis, lead of Vancord's penetration testing practice, to discuss the Anthropic Fable 5 takedown, a frontier AI model that was globally pulled just days after its release under a novel application of U.S. export control authorities. They walk through what's known about the jailbreak research and government concerns behind the takedown, why the ban applied to everyone rather than select customers, and what this unprecedented move signals for the future of frontier model regulation. The conversation then shifts to the risk most businesses never planned for: AI business continuity. Dylan and Jason cover model routers, multi-provider strategies, open source models versus frontier models, platforms like Amazon Bedrock, and why it's smart to let new AI features settle in before you build your work around them.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

Will AI eliminate jobs, or is the bigger challenge preparing workers for a workforce that is changing faster than ever?

In this episode of CyberSound, Jason Pufahl and Jeff Auker, Director of Development Services for the City of Hartford, discuss how AI is reshaping workforce development, education, and economic growth. The conversation covers the future of work, the growing impact of AI on entry-level jobs, the Connecticut AI Alliance, workforce development initiatives, prompt engineering skills, AI education, and Hartford's efforts to build an applied AI innovation ecosystem. They also examine the gap between how students are taught to use AI and what employers increasingly expect in today's workplace. As AI adoption accelerates, organizations and communities that invest in workforce readiness today may be best positioned to succeed tomorrow.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

Is ISO 42001 becoming one of the most important new standards in cybersecurity and AI governance?

In this episode of CyberSound, Jason Pufahl is joined by Walter Haydock, Founder of StackAware, to discuss ISO 42001, the international standard for AI management systems and governance.

They explore what ISO 42001 certification requires, how it compares to frameworks like SOC 2 and ISO 27001, and why organizations in regulated industries are beginning to pay closer attention.

They explore what ISO 42001 certification requires, how it compares to frameworks like SOC 2 and ISO 27001, and why organizations in regulated industries are starting to take it seriously as AI adoption accelerates.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

Can AI find software vulnerabilities faster than security teams can fix them?

In this episode of CyberSound, Jason Pufahl and Dylan Marquis discuss Claude Mythos, Claude Code, and the growing role of AI in vulnerability discovery. They explain how AI may speed up bug discovery, exploit development, and security testing while also increasing pressure on defenders. The conversation connects AI-assisted coding, human-led penetration testing, attack surface management, and vulnerability management to a larger question: how prepared are organizations when AI accelerates both offense and defense?

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

When global conflict escalates, cyber threats often follow. But what does that mean for businesses that are not directly involved?

In this episode of CyberSound, Jason Pufahl, Michael Grande, and Patrick Wallenhorst discuss how geopolitical events can shape cyber threats, from hacktivist activity and DDoS attacks to ransomware, social engineering, and critical infrastructure risk. They explain why organizations should stay alert without panicking, review incident response plans, and strengthen disaster recovery readiness during periods of global unrest.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

What's the difference between fully managed and co-managed IT, and how do you know which model is right for your business?

In this episode of CyberSound, Jason Pufahl, Michael Grande, Dan Kaupp, Jim Riley, and Lou Ardolino break down how managed IT services have evolved into security-first models. They explain the differences between fully managed and co-managed IT, what a security-enabled MSP really means, and how organizations can choose the right approach based on their needs, resources, and risk.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

AI is rapidly entering the classroom, but how should schools approach adoption, governance, and student use?

In this episode of CyberSound, Jason Pufahl is joined by Steve Maresca and John Madura, a technology education teacher at The Morgan School in Clinton, Connecticut, to explore how AI is shaping education today. They discuss AI in the classroom, student concerns about future jobs, teacher readiness, and the challenges of responsible AI use. The conversation also covers AI governance, prompt engineering, and how educators can use AI as a tool to support learning without replacing critical thinking.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity

Send us Fan Mail

What actually happens during a penetration test, and how does it reveal real security risks?

In this episode of CyberSound, Jason Pufahl is joined by Dylan Marquis, lead of Vancord’s penetration testing practice, to break down how penetration testing works and why organizations are relying on it more than ever. They discuss the difference between vulnerability assessments and pen tests, the role of human-led testing versus automation, and how internal, external, and web application testing can expose real attack paths inside modern networks.

______________
Stay up to date on the latest cybersecurity news and industry insights by
subscribing to our channel and visiting our blog at https://www.vancord.com/💻.

Stay Connected with us 🤳
LinkedIn: https://www.linkedin.com/company/vancord
Facebook: https://www.facebook.com/VancordCS
Instagram: https://www.instagram.com/vancordsecurity/
Twitter: https://twitter.com/VancordSecurity