
Sign up to save your podcasts
Or


Most security leaders position themselves as guardians against risk, but Aimee Cardwell, CISO in Residence at Transcend and Board Member at WEX, built her reputation on a different approach: balancing risk to accelerate business growth. Her unconventional path from Fortune 5 CIO to CISO of a 1,200-person security team at UnitedHealth Group showcases how technical leaders can become true business partners rather than obstacles.
Managing two company acquisitions every month, Aimee tells David how she developed a shifted-left security integration process that actually accelerated deal timelines while improving security outcomes. Her framework for risk appetite conversations moves executives beyond fear, uncertainty and doubt into productive discussions about cyber resilience, changing how organizations think about security investment and business enablement.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
The economics of ransomware reveal a sophisticated criminal enterprise that most security leaders dramatically underestimate. Steve Baer, Field CISO at Digital Asset Redemption, operates at the intersection of cybercrime and legitimate business, where his team's human intelligence gathering in Dark Web communities provides early warning systems that traditional security infrastructure cannot match. His insights into criminal business models, negotiation psychology, and the financial flows funding modern cybercrime offer a perspective rarely available to security practitioners.
Steve walks David through Digital Asset Redemption's evolution from facilitating compliant cryptocurrency payments to building comprehensive threat intelligence capabilities using native speakers who maintain long-term relationships with criminal actors. His team's approach has enabled them to identify targeting intelligence before attacks occur and, in one notable case, leverage personal information about an attacker to secure free decryption keys for a nonprofit organization.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
Most security leaders are fighting yesterday's ransomware war while today's attackers have moved to data exfiltration and reputation destruction. Manisha Agarwal-Shah, Deputy CISO at McAfee, brings 18 years of cybersecurity experience from consulting through AWS to explore why traditional ransomware defenses miss the mark against modern threat actors. Her framework for building security teams prioritizes functional coverage over deep expertise, ensuring organizations can respond to crises even when leadership transitions occur.
Manisha tells David how privacy regulations like GDPR actually strengthen security postures rather than create compliance burdens. She also shares practical strategies for communicating technical threats to C-suite executives and explains why deputy CISO roles serve organizational continuity rather than ego management. Her insights into ransomware evolution trace the path from early scareware through encryption-based attacks to today's supply chain infiltration and data theft operations.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
Jeff Hughes brings a 15-year perspective on why solar consistently delivers returns while battery storage requires completely different evaluation criteria based on whether you're optimizing for savings or resilience. Jeff also explains why the Inflation Reduction Act fundamentally shifted energy project financing toward ownership models and how organizations can scale renewable energy programs without the common pitfall of trying to deploy across entire portfolios simultaneously.
As National Senior Director of Distributed Energy Resources at McKinstry, Jeff has deployed clean energy solutions across public and private sectors, giving him rare insight into what separates successful programs from expensive mistakes. His insights on utilities as partners rather than competitors, plus emerging technologies like micro grids and EV infrastructure catalysts, provide a roadmap for the next phase of commercial clean energy adoption.
Topics discussed:
Team Cymru's threat researchers have spent years developing an almost psychological understanding of cybercriminals, tracking their behavioral patterns alongside technical infrastructure to predict where attacks will emerge before they happen. Josh and Abigail share with David how their multi-year tracking of Russian cybercrime groups enabled critical contributions to Operation Endgame. Their work demonstrates how sustained intelligence gathering creates opportunities for law enforcement victories that reactive security cannot achieve.
Drawing from Josh's eight years at Team Cymru and background in law enforcement national security investigations, and Abigail's specialization in Russian cybercrime tracking, they reveal how NetFlow telemetry provides unprecedented visibility into criminal operations. Their approach goes far beyond traditional indicator-based threat intelligence, focusing instead on understanding the human patterns that drive criminal infrastructure deployment and management.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
As one of Omnidian's first investors and current board member, Abe Yokell, Co-founder & Managing Partner at Congruent Ventures, brings a unique perspective to commercial real estate sustainability. Abe explains why technology-enabled service models are essential for scaling distributed energy resources and how stakeholder misalignment continues to block wider CRE sustainability adoption despite superior economics.
Abe tells Sean how successful climate tech companies solve real economic problems rather than just environmental ones. He shares frameworks for identifying which sustainability investments will deliver outsized returns and why the current macro environment creates both challenges and opportunities for climate venture capital. Abe also discusses how climate risk remains dramatically underpriced in real estate markets worth trillions of dollars, creating inevitable repricing pressure that could emerge gradually over decades or suddenly within years.
Topics discussed:
The convergence of AI load growth and distributed generation is creating a once-in-a-generation opportunity for commercial real estate owners. Eric Meyer, Partner at Activate Capital, reflects on how, after a decade of utilities fighting distributed solar, 4% annual demand growth is forcing an "all solutions on deck" mentality that changes the competitive landscape.
Eric outlines Activate's unique approach to climate investing for Sean: rather than betting on early-stage technologies, they target growth-stage businesses with proven product-market fit and real revenue streams. Their portfolio construction strategy around distributed energy assets provides a blueprint for understanding how the energy transition will actually unfold at scale.
Topics discussed:
The AI boom has triggered the most dramatic transformation in data center history, but it's also created an epidemic of “fake” projects that threaten to undermine the entire sector. Daniel Golding, Chief Technology Officer, Appleby Strategy Group, has coined the term "fake data center" to describe the 90% of proposed AI infrastructure projects that exist only on paper. In his conversation with Sean, Dan reflects on how AI workloads have shattered 25 years of predictable data center development, with single racks now consuming 120 kilowatts — equivalent to powering 30 houses — compared to 10 kilowatts for traditional cloud computing.
This extreme power density has forced operators to abandon air cooling systems entirely in favor of liquid coolants, while project costs have skyrocketed to $5 billion for a single AI-capable building, eliminating speculative development and requiring 100% pre-leasing before ground breaking. Dan also touches on why fiber connectivity often determines project success more than power availability, and why small modular nuclear reactors represent the only sustainable solution for AI's massive energy requirements that only hyperscalers like Google, Meta, and Microsoft have the capital to fund.
Topics discussed:
Jonathan Jaffe, CISO at Lemonade, has built what he predicts will be "the perfect AI system" using agent orchestration to automate vulnerability management at machine speed, eliminating the developer burden of false positive security alerts. His unconventional approach to security combines lessons learned from practicing law against major tech companies with a systematic strategy for partnering with security startups to access cutting-edge technology years before competitors.
Jonathan tells David a story that showcases how even well-intentioned people will exploit systems if they believe they won't get caught or cause harm, which has shaped his approach to insider threat detection and the importance of maintaining skeptical oversight of automated security controls. His team leverages AI agents that automatically analyze GitHub Dependabot vulnerabilities, determine actual exploitability by examining entire code repositories, and either dismiss false positives or generate proof-of-concept explanations for developers.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
The security industry's obsession with cutting-edge threats often overshadows a more pressing reality: the vast majority of organizations are still mastering basic AI implementation. Vivek Menon, CISO & Head of Data at Digital Turbine, brings his insights from the RSA expo floor to share why the agentic AI security rush may be premature, while highlighting the genuine opportunities AI presents for resource-constrained security teams.
Vivek shares with David how smaller organizations can leverage AI automation to achieve enterprise-level security capabilities without corresponding budget increases. His balanced approach to AI security threats demonstrates why defenders maintain strategic advantages over attackers, despite the expanded attack surface that dominates industry discussions.
Topics discussed:
Key Takeaways:
Listen to more episodes:
Apple
Spotify
YouTube
Website
From the publisher's feed

374 Listeners

46 Listeners