Future of Threat Intelligence

By Team CymruBusiness

Future of Threat Intelligence episodes

January 23, 2025The Cyber Hut's Simon Moffatt on Transforming Identity Security from Static to Dynamic Defense
David steps into the new world of identity security with Simon Moffatt, Founder & Research Analyst at The Cyber Hut, on the latest episode of The Future of Threat Intelligence. With over two decades of experience, Simon illuminates the dramatic transformation from static directory management to dynamic, threat-informed security architecture. He walks through the challenges of modern identity security, exploring how cloud computing, remote work, and the rise of non-human identities are reshaping our approach to access management.

Simon shares invaluable insights on building adaptive security systems that can respond in real time to emerging threats while balancing usability and privacy concerns. From passwordless authentication to AI-driven security controls, discover how organizations can move beyond traditional static defenses to create more resilient security architectures for an increasingly complex digital landscape.

Topics discussed:
The evolution of identity security from static directory management to dynamic, adaptive systems responding to real-time threat intelligence and behavioral analysis.
Misconceptions about identity threat intelligence and the importance of moving from static protections to dynamic, responsive security controls.
The intersection of zero trust architecture with identity security principles and how both concepts transcend individual product implementations.
Emerging trends in non-human identity management, including API security, workload identity, and infrastructure automation authentication challenges.
Implementation of adaptive access controls that can make fine-grained security decisions based on real-time context and behavioral analysis.
Balancing privacy considerations with the need for comprehensive security monitoring and threat intelligence sharing across organizations.
The rise of passwordless authentication and its impact on both security posture and user experience in modern digital environments.
Strategies for understanding and mapping your complete identity landscape, including human and non-human identities across cloud and on-premises systems.
The importance of runtime behavior monitoring and real-time intervention capabilities in modern identity security architectures.
Practical approaches to implementing threat-informed defense strategies while maintaining operational efficiency and user productivity.

Key Takeaways:
Map your complete identity landscape across cloud and on-prem environments to establish a comprehensive visibility baseline for both human and non-human identities.
Implement adaptive authentication controls that can dynamically adjust access permissions based on real-time context and behavioral analysis.
Deploy passwordless authentication solutions to enhance both security posture and user experience while eliminating password-related vulnerabilities.
Establish robust authentication mechanisms for non-human identities, including API credentials, service accounts, and infrastructure automation tools.
Design fine-grained access controls that can respond to contextual changes by adjusting permissions in real-time rather than simply terminating sessions.
Integrate threat intelligence feeds with identity security controls to enable dynamic, threat-informed defensive responses.
Develop privacy-preserving methods for sharing threat intelligence across organizations while maintaining competitive boundaries and regulatory compliance.
Build resilient identity architectures that assume breach scenarios and focus on rapid detection and response capabilities.
Monitor runtime behaviors of both human and non-human identities to establish baseline patterns and detect anomalous activities.
Create surgical, precise security controls informed by sector-specific threats and actual attack patterns targeting your industry.
26 min
January 16, 2025Zoom's Lee Ramsey on Transforming Customer Service Skills into Cybersecurity Success
David’s latest guest on The Future of Threat Intelligence points out the unexpected ways his customer service background enhances his cybersecurity work. From mastering the art of asking the right questions to navigating remote SOC operations, Lee Ramsey, Senior Security Analyst at Zoom shares practical insights on digital forensics, incident response, and the future of AI in security.
Drawing from his experience in customer service and his journey to his current role at Zoom, Lee offers valuable perspectives on building successful security teams, implementing effective incident response plans, and maintaining critical thinking in an AI-driven world.
Topics discussed:
The intersection of customer service skills and cybersecurity investigations, focusing on effective communication and problem-solving techniques.
Common pitfalls in incident response planning and the importance of having documented procedures before crises occur.
The impact of AI on digital forensics and incident response, including potential risks and benefits.
Challenges and strategies for managing remote SOC operations in the post-pandemic era.
Key Takeaways:
Implement a documented incident response plan before you need it to avoid legal and operational complications.
Borrow from customer service skills to improve security investigations through better question-asking techniques.
Approach AI tools with healthy skepticism and always validate their outputs manually.
Build remote SOC capabilities with proper tools and processes for remote data acquisition.
Maintain team cohesion in remote environments through proactive engagement and trust-building.
Document all security practice experience, including CTF participation, to demonstrate practical skills.
Attend local security conferences and volunteer to build professional networks.
Pursue relevant certifications for both credentials and learning opportunities.
Balance tool automation with critical thinking to avoid over-reliance on technology.
16 min
January 09, 2025Google’s James Brodsky on Securing AI and Building Security Ecosystems
In our latest episode of the Future of Threat Intelligence podcast, David is joined by James Brodsky, Head of Global Security Architects at Google, who shares insights from his extensive career in cybersecurity. Drawing from his experience at Splunk, Okta, and now Google, James discusses the challenges of securing AI applications and infrastructure, emphasizing the importance of basic security hygiene in the AI era.
James walks David through Google's approach to AI security through their SAFE framework, the critical role of partnerships in building comprehensive security solutions, and the importance of continuous learning in cybersecurity. James also introduces tools like Model Armor and NotebookLM that are shaping the future of AI security.
Topics discussed:
The multiple layers of protection needed for AI systems, from infrastructure to model security, including protection against prompt injection attacks.
How Google's SAFE framework ensures privacy-first approach to AI implementation, with strict data usage and training policies.
Why even large organizations like Google need strategic partnerships for comprehensive security coverage and specialized expertise.
How fundamental security practices remain crucial for AI applications, focusing on data access control and protection.
How continuous learning through CTFs, podcasts, and hands-on experience is essential for staying current in cybersecurity.
The value of focusing on hiring passionate, curious individuals who continuously learn and adapt to new challenges.
Key Takeaways:
Implement foundational security controls for AI applications, focusing first on data location, access controls, and DLP before advancing to more complex measures.
Review OWASP's top 10 list for protecting LLMs and Google's SAFE framework as starting points for AI security best practices.
Establish clear data privacy protocols for AI models, including explicit policies about how customer data is used in model training.
Monitor AI applications for unusual behaviors like prompt injection attacks, model poisoning, and unauthorized data exfiltration.
Develop detection mechanisms for AI-driven threats like deepfake meetings by correlating calendar data with video conference attendance.
Leverage free or low-cost learning resources like CTFs, security podcasts, and platforms like Google Cloud Skills Boost for team development.
Create partnerships to fill security gaps, especially in areas requiring specialized expertise or unique data sets.
Use tools like NotebookLM to stay current with security research and white papers while managing information overload.
Maintain regular security hygiene practices for AI applications, including access control, authentication, and data protection.
Build security teams with diverse skill sets, prioritizing curiosity and continuous learning mindsets.
27 min
January 07, 2025EP 9 — Avanath Capital Management’s David Natt on Finding ROI in Affordable Housing
If you think sustainability means sacrificing profits, think again. In this episode of The Future of CRE Sustainability, David Natt, SVP of Asset Management & Sustainability, Avanath Capital Management is flipping the script on ESG in affordable housing, proving that green initiatives can be a goldmine when done right. From slashing water bills with innovative tech to launching the country's largest dedicated portfolio of solar in affordable housing, Natt shares the secrets behind their meteoric rise in GRESB scores (40s to high 80s in just four years!).

As institutional investors demand higher ESG standards, Natt tells Sean how his asset manager's mindset turned sustainability challenges into opportunities, delivering impressive ROIs while reducing carbon emissions. It's a masterclass in making green work — for the planet and the bottom line.

Topics discussed:
How affordable housing companies can boost their GRES scores despite inherent challenges.
The strategic installation of solar across 18 properties, positioning Avanath as an industry pioneer and achieving Fannie Mae's first-ever approval for solar in affordable housing.
Specific ROI metrics for sustainability improvements, proving the financial viability of green investments.
The critical role of European and social impact investors in driving higher ESG standards, including their influence on portfolio management decisions and investment criteria.
Innovative approaches to reducing utility costs in affordable housing, including the implementation of Aquamizer technology and heat pump conversions for significant cost savings.
The importance of data collection and analysis in ESG strategy, using mean variance analysis to identify "energy pigs" and optimize portfolio-wide energy consumption.
Strategies for maintaining affordability while implementing sustainable improvements, including leveraging federal and state rebate programs to offset installation costs.
The successful integration of solar benefits for residents, providing approximately $50 monthly savings on electricity bills through innovative programs like SOMA.
Long-term vision for expanding successful California sustainability initiatives across other states, while maintaining focus on both environmental impact and financial returns.
30 min
January 02, 2025Veeva Systems’ Justin Jettòn on Balancing Human Analysis and Automation in Threat Intel
In our latest episode of the Future of Threat Intelligence podcast, David welcomes Justin Jettòn, Senior Threat Intelligence Engineer at Veeva Systems who brings his military intelligence background to discuss the evolving landscape of cybersecurity. Drawing from his experience transitioning from forensics to threat intelligence, Justin explores how AI is transforming both offensive and defensive capabilities in cybersecurity.
They discuss the potential of AI in early threat detection, the critical need for breaking down organizational silos to improve collective defense, and finding the right balance between automation and human analysis. Justin also emphasizes that while technology advances, the human element remains crucial for effective threat intelligence analysis.
Topics discussed:
Artificial intelligence is reducing the timeline between threat identification and new attack development, lowering barriers for adversaries.
Using AI models for "indications and warning" could help identify threat patterns earlier, enabling proactive defense strategies.
Breaking down organizational silos and creating security collectives is crucial for effective threat intelligence in modern cybersecurity.
Despite technological advances, human analysts remain essential for contextual understanding and strategic threat assessment.
Adding multiple security tools can extend detection time; organizations need better strategies for tool integration and automation.
Clear distinction between engineering and analyst roles, with engineers handling technology while analysts focus on assessment and dissemination.
Future security teams need balanced automation with human oversight, following the military's OODA (Observe, Orient, Decide, Act) loop.
Key Takeaways:
Implement human verification checkpoints within automated security processes to maintain the "trust but verify" approach in threat intelligence workflows.
Evaluate your organization's security tool stack to prevent tool fatigue — focus on understanding each tool's workflow before adding new ones.
Develop comprehensive understanding of automation processes, from data collection points to decision thresholds, before deploying new security automation.
Establish cross-organizational information sharing frameworks to enhance collective threat detection capabilities through shared AI models.
Differentiate clearly between threat intelligence engineering and analyst roles to optimize team structure and workflow efficiency.
Incorporate the OODA loop (Observe, Orient, Decide, Act) methodology into your threat intelligence processes, ensuring human oversight at critical points.
Broaden your threat intelligence perspective by studying geopolitical events and connecting them to potential cybersecurity implications.
Create sampling protocols to regularly verify that automated security systems are functioning as intended and catching relevant threats.
Build collaborative relationships with ISPs, tech companies, and security vendors to expand threat detection capabilities beyond organizational boundaries.
Document automation workflows thoroughly to ensure security teams understand where decision points occur and how data flows through the system.
32 min
December 19, 2024VOTH 2024 Roundtable: Building Visibility in Cybersecurity
In our special episode of the Future of Threat Intelligence podcast, David welcomes Ryan Chapman, Threat Hunter & Author and Instructor at SANS Institute and Matthew Winters, Lead Threat Hunter at T. Rowe Price, to break down Team Cymru's second annual Voice of a Threat Hunter report. Our two experts discuss the statistic that nearly 50% of organizations experienced a major security breach last year, emphasizing the critical role of threat hunting in enhancing incident response.

Ryan and Matt also touch on the importance of proactive detection in cybersecurity, the necessity of curiosity as a fundamental skill for threat hunters, and the challenges organizations face regarding visibility and tool availability.

Topics discussed:
Nearly 50% of organizations reported experiencing a major security breach in the past year, highlighting the urgency for improved security measures.
72% of breached organizations believe that threat hunting significantly enhanced their ability to respond to incidents effectively.
Proactive detection is becoming essential as organizations recognize the need to stay ahead of evolving cyber threats and attacks.
Curiosity is a key skill for threat hunters, enabling them to uncover hidden vulnerabilities and enhance overall security posture.
Many organizations struggle with visibility into their networks, which hampers effective threat hunting and incident response efforts.
The importance of leveraging existing tools and resources is emphasized to maximize threat hunting capabilities without requiring significant new investments.
Collaboration across security teams can enhance threat hunting efforts, leading to better detection, response, and overall cybersecurity resilience.

Key Takeaways:
Assess your organization's current security posture to identify potential vulnerabilities and areas needing improvement in threat detection and response.
Implement proactive threat hunting practices to stay ahead of evolving cyber threats and enhance incident response capabilities.
Foster a culture of curiosity within your security team to encourage exploration and investigation of anomalies in your network.
Leverage existing tools and resources effectively to maximize your threat hunting efforts without incurring significant additional costs.
Collaborate across different security teams to share insights and improve the overall effectiveness of threat detection and incident response.
Invest in training programs focused on threat hunting skills to empower your team with the knowledge needed to identify threats.
Document all threat hunting activities and findings to create a knowledge base that can inform future security strategies and decisions.
Establish clear KPIs to measure the effectiveness of your threat hunting initiatives and overall security posture.
Engage with external cybersecurity communities to share experiences, learn best practices, and stay updated on the latest threat intelligence.
Review and update your security tools regularly to ensure they are equipped to handle the latest threats and vulnerabilities.
45 min
December 17, 2024EP 8 — Omnidian’s Dave Kenny on Third-Party Ownership Models in Solar Energy
In this episode of The Future of CRE Sustainability, Sean sits down with Dave Kenny, COO and Co-founder of Omnidian, to discuss the critical role of proactive performance management in maximizing the value of solar investments, highlighting how many asset owners overlook this aspect.
He also dives into the significance of third-party ownership models, which have made solar more accessible to a broader audience. Additionally, Dave shares insights on the resilience of the solar market amidst fluctuating utility prices and regulatory changes, emphasizing the importance of strategic management for long-term success in commercial real estate sustainability.
Topics discussed:
The importance of proactive performance management in solar energy to ensure asset owners maximize their investments and avoid costly issues over time.
How fluctuating utility prices create a demand for solar solutions, allowing consumers to take control of their energy consumption and costs.
The evolution of the solar industry from technology challenges to business model innovation, focusing on user adoption and scalability.
The impact of third-party ownership models, such as power purchase agreements (PPAs), on making solar energy more accessible.
Key milestones in the solar industry, including the transition to financing models that support both commercial and residential solar installations.
The dynamic mix of financing options available in the solar market, including cash, loans, and third-party ownership, and their implications for adoption.
The value of timely issue identification and communication in maintaining solar asset performance.
The role of federal- and state-level policies in shaping the solar industry, including the Investment Tax Credit (ITC) and its effects on market growth.
Future trends in sustainability, including the convergence of solar, battery storage, and EV charging technologies to create integrated energy solutions.
The challenges and opportunities for solar investors as they navigate regulatory changes and market dynamics in the coming years.
23 min
December 13, 2024GigaOm’s Howard Holton on Cyber Threats Facing Small Businesses
In our latest episode of the Future of Threat Intelligence podcast, David speaks with Howard Holton, CTO of GigaOm. Howard shares his insights on the increasing vulnerability of small and medium-sized businesses to cyber threats because adversaries are targeting them due to their limited resources and maturity in cybersecurity practices.

Howard emphasizes the importance of understanding the business-like nature of cybercriminals and their strategies. He also explores the role of AI and large language models in enhancing threat intelligence, highlighting how these tools can help organizations prioritize their security efforts effectively.

Topics discussed:
The increasing trend of cybercriminals targeting small and medium-sized businesses due to their lack of resources and cybersecurity maturity.
Understanding how adversaries operate like businesses, seeking maximum profit by exploiting vulnerabilities in less fortified organizations.
Actionable cybersecurity measures that organizations can implement immediately to reduce risks and enhance their defenses.
The role of AI and large language models in improving threat intelligence and making security tools more intuitive for users.
The challenges of transitioning from a technical role to an executive position and the skills needed for effective leadership in cybersecurity.
The significance of communication and awareness within organizations to ensure that executive teams understand cybersecurity risks and resource needs.
Strategies for mitigating the impact of cyber attacks, focusing on prioritizing efforts based on potential threats and vulnerabilities.
The evolving landscape of cyber threats and how organizations can stay informed and adapt to new challenges in real-time.
The necessity of governance in implementing AI and LLMs to ensure that sensitive information is handled appropriately within organizations.
The ongoing need for continuous improvement in cybersecurity practices, as threats are constantly evolving and new vulnerabilities emerge.

Key Takeaways:
Assess your organization's cybersecurity maturity to identify vulnerabilities and prioritize areas for improvement, especially if you are a small or medium-sized business.
Implement immediate cybersecurity measures to reduce the likelihood of a compromise, focusing on actionable steps that can be completed within hours or days.
Leverage AI and large language models to enhance threat intelligence, making it easier to analyze data and respond to potential threats effectively.
Communicate regularly with your executive team about cybersecurity risks and resource needs to ensure they are informed and can provide necessary support.
Establish a governance framework for AI and LLMs to manage sensitive information and ensure compliance with organizational policies.
Educate your team on the business-like nature of cybercriminals, helping them understand how attackers target organizations based on perceived weaknesses.
Prioritize cybersecurity training for employees to foster a culture of awareness and preparedness against potential cyber threats.
Monitor emerging cyber threats continuously to stay informed about new tactics and vulnerabilities that could impact your organization.
Document all cybersecurity policies and procedures clearly, ensuring that employees understand their roles and responsibilities in maintaining security.
Review and update your incident response plan regularly to reflect changes in the threat landscape and ensure your organization is prepared for potential attacks.
22 min
December 10, 2024EP 7 — GreenT Climate Software’s Mary Nitschke On Transforming Multi-family Sustainability
In this episode of The Future of CRE Sustainability, Sean speaks with Mary Nitschke, Chief Sustainability Officer at GreenT Climate Software. In their conversation, Mary shares her expertise on sustainability in multi-family properties. She discusses the unique challenges of utility management, emphasizing the importance of data analytics and technology in optimizing energy consumption.

Mary also highlights the impact of building performance standards and the need for proactive compliance to avoid costly fines. Additionally, she explores the significance of tenant engagement and education in driving sustainable practices within communities.

Topics discussed:
The unique challenges of multi-family properties in sustainability, including multiple energy meters and the complexity of tenant engagement for effective resource management.
The role of technology in capturing utility consumption data, enabling property managers to make informed decisions that drive sustainability initiatives and reduce costs.
The importance of building performance standards (BPS) and how compliance can significantly impact financial performance and operational efficiency in commercial real estate.
Strategies for engaging residents and property teams in sustainability efforts, fostering a sense of community and shared responsibility for resource conservation.
The emerging trend of viewing utility costs as controllable expenses, encouraging property managers to actively manage and reduce consumption.
Insights on the impact of regulations and incentives related to sustainability, highlighting the need for property owners to stay informed and proactive.
The potential of AI and data analytics to model building performance and identify areas for improvement in energy efficiency and sustainability.
The significance of tenant education in promoting sustainable practices, ensuring residents understand their role in reducing energy and water consumption.
The benefits of integrating renewable energy solutions, such as solar and battery storage, to enhance sustainability and resilience in multi-family properties.
The connection between sustainability initiatives and financial performance, demonstrating how efficient properties can command higher rents and attract investment.
41 min
December 05, 2024CDW’s Ryan Link on Building a Culture of Continuous Learning
In our latest episode of the Future of Threat Intelligence podcast, David sits down with Ryan Link, Principal of Threat Detection and Response at CDW. Ryan shares his decade-long journey in cybersecurity, emphasizing the importance of thinking like an attacker to enhance threat detection capabilities.

He discusses the critical role of continuous training for security teams and the integration of AI in reducing detection fatigue. Additionally, Ryan highlights the necessity of cloud training to future-proof cybersecurity teams in an increasingly digital landscape. Tune in for valuable insights on building a resilient and adaptive security strategy!

Topics discussed:
The importance of thinking like an attacker to identify potential risks and improve overall security posture.
The critical role of continuous training for cybersecurity professionals to keep skills sharp and stay updated on threats.
The integration of AI in threat detection, focusing on reducing noise and enhancing efficiency in security operations.
The need for collaboration between blue and red teams to improve detection capabilities and incident response processes.
The value of cloud training as essential for future-proofing cybersecurity teams in an increasingly cloud-centric digital environment.
Why organizations should assess their maturity level before leveraging threat intelligence, ensuring it aligns with their capabilities and resources.

Key Takeaways:
Assess your cybersecurity maturity level to determine the appropriate use of threat intelligence and avoid overspending on unnecessary tools.
Implement continuous training programs for your security team to keep skills sharp and ensure they stay updated on evolving threats.
Encourage team members to think like attackers to better identify vulnerabilities and enhance your organization’s overall security posture.
Integrate AI technologies into your threat detection processes to reduce noise and improve the efficiency of security operations.
Foster collaboration between blue and red teams to enhance detection capabilities and ensure effective incident response strategies.
Prioritize cloud training for your team to understand the complexities of cloud environments and secure data effectively.
Develop custom detection capabilities by leveraging threat intelligence to create tailored responses to specific threats your organization may face.
Document processes and procedures regularly to maintain clarity and support onboarding of new team members effectively.
Utilize automated testing environments to streamline the threat detection lifecycle and improve the accuracy of your security tools.
Take regular breaks to prevent burnout among your security team, ensuring they remain mentally sharp and effective in their roles.
22 min

About Future of Threat Intelligence

From the publisher's feed

Welcome to the Future of Threat Intelligence podcast, where we explore the transformative shift from reactive detection to proactive threat management. Join us as we engage with top cybersecurity…

Share Future of Threat Intelligence

Sign up to save your podcasts

Future of Threat Intelligence

Future of Threat Intelligence episodes

About Future of Threat Intelligence

More shows like Future of Threat Intelligence

Risky Business

Risky Bulletin