Cybersecurity has built its learning model around breaches, but as Wendy Nather explains, the real value lies in the incidents that almost happened. In this CYBR.SEC.CAST episode with hosts Michael Farnum and Sam Van Ryder, she makes the case for shifting focus to near-misses: the attacks stopped by a single decision, control, or moment of awareness. These unseen saves reveal how defenses actually work in real time, yet they rarely get shared due to trust, legal, and cultural barriers. Until the industry starts capturing and learning from these quieter wins, it will continue optimizing for failure instead of understanding success.

SHOW NOTES:

Things Mentioned:

• The Security Poverty Line: https://www.scrut.io/post/risk-grustlers-ep-20-the-security-poverty-line
• 1Password talks and expo activity during RSAC 2026: https://1password.com/blog/rsa-2026-leading-the-way-to-secure-agentic-ai
• Upcoming CYBR.SEC.Community events: https://www.cybrsecmedia.com/conference/
• CYBR.SEC.Careers: https://www.linkedin.com/company/cybr-sec-careers/about/ fundraisers:
  • Cards for a Cause: https://www.linkedin.com/posts/cybr-sec-careers_cybrseccareers-nonprofit-cybersecurity-activity-7436794892787359744-v4Cz
  • CYBR CLAY SHOOT: https://www.linkedin.com/posts/cybr-sec-careers_cybrclayshoot-cybersecurity-cybercareers-activity-7435353518951084033-1iw9
  • Proceeds support CYBR.SEC.Careers mission is to build a strong, diverse workforce by providing career exposure, access to education and certifications, and mentorship for students and veterans pursuing careers in cybersecurity.

EPISODE 66 Timestamps:

• 00:00 – 01:30 – Intro, guest setup, and Wendy Nather background
• 01:30 – 07:00 – CyberSecCon announcements and community initiatives
• 07:00 – 09:30 – Wendy’s early career: liberal arts → sysadmin → Switzerland
• 09:30 – 12:30 – Transition into cybersecurity and global security leadership
• 12:30 – 15:30 – Analyst career, Duo Security, Cisco, and 1Password
• 15:30 – 18:30 – Career philosophy: ditching the ladder, focusing on impact
• 18:30 – 22:00 – Current role: advising, speaking, training, and strategy work
• 22:00 – 25:30 – RSA talk intro: “Less Blood, More Bits” concept
• 25:30 – 31:00 – The power of near-miss stories and why they matter
• 31:00 – 36:00 – Real-world near-miss examples and lessons learned
• 36:00 – 41:00 – Threat intelligence sharing challenges and trust barriers
• 41:00 – 45:00 – ISACs vs. informal “steak and ale” intelligence sharing
• 45:00 – 49:00 – Why scaling trust and sharing remains unsolved
• 49:00 – End – Wrap-up and closing thoughts

Do you have a question for the hosts? Reach out to us at [email protected]