TechSpective Podcast

How do you navigate a cybersecurity landscape where the threats are constantly evolving—and so is the government’s role in defending against them?

I sat down with Jeff Man, a respected voice in cybersecurity and someone with deep roots in both the public and private sectors, to talk about this (and a bunch of other stuff) for the latest episode of the TechSpective Podcast. Jeff’s career spans more than four decades, including time at the National Security Agency during a pivotal era of transformation. He’s also spent years in the trenches with PCI-DSS compliance and now consults with companies across industries on how to build better, more resilient security programs.

We talk about the philosophical and practical intersections between cybersecurity, trust, and governance in a rapidly changing world. Jeff and I discuss how cybersecurity has evolved since the Cold War, how the mythology around institutions like the NSA and Unit 8200 influences perception, and how recent political decisions are reshaping the roles of CISA, NSA, and other federal cyber agencies.

But this episode isn’t just a retrospective or a policy rant. It’s a raw, candid, and sometimes uncomfortable look at where we are today.

We question whether the growing skepticism of public institutions is warranted—and what it means when tech companies, not governments, are trusted as de facto arbiters of truth. And we grapple with the uncomfortable reality that while the cybersecurity stakes are higher than ever, the public’s confidence in traditional sources of authority may be at an all-time low.

If you’re looking for a surface-level chat about tech trends, this isn’t it. But if you want to hear a thoughtful, unscripted discussion about the deeper issues impacting cybersecurity and society, this episode is a must-listen.

Cybersecurity isn’t what it used to be—and that’s a good thing.

In the latest episode of the TechSpective Podcast, I sat down with Sunil Muralidhar, Vice President of Marketing and Partnerships at ColorTokens, to explore how organizations are rethinking traditional security approaches and what it means to be “breach ready” in today’s threat landscape.

For years, enterprise security revolved around the concept of perimeter defense—building bigger walls and stronger gates to keep attackers out. But the game has changed. With cloud adoption, remote work, IT/OT convergence, and the rise of identity-based threats, the idea of a clearly defined perimeter no longer holds water.

Sunil brings a wealth of experience to the table and makes a compelling case for why microsegmentation and Zero Trust architecture are no longer optional—they’re essential.

The Shift from Reactive Defense to Proactive Containment

Let’s face it: attackers are going to get in. Whether it’s through stolen credentials, social engineering, or misconfigured cloud resources, initial access is easier to achieve than ever. What matters now is what happens next.

That’s where the concept of lateral movement becomes critical. Once inside, attackers often spend days, weeks, or even months quietly exploring internal networks, moving from one system to another in search of valuable assets. Breach readiness means being prepared to contain that movement, limit the blast radius, and prevent a minor incident from becoming a full-blown crisis.

Sunil emphasizes that this isn't just a technical challenge—it's a business imperative. Cyber resilience is about ensuring that even when something goes wrong, operations continue with minimal disruption. It’s about keeping the business running while the security team does its job.

Why Microsegmentation Matters

At the heart of breach readiness is microsegmentation—a strategic approach that enforces strict access controls between workloads, devices, and users. It’s the digital equivalent of closing fire doors in a building: if one area is compromised, the threat can’t easily spread.

But while the concept isn’t new, adoption has lagged due to complexity and fear of disruption. Sunil shares how ColorTokens is helping organizations overcome these barriers with simplified, agentless deployment models and greater visibility into interdependencies.

The goal isn’t to create friction—it’s to build confidence that the right protections are in place without bringing operations to a halt.

IT/OT Convergence: A New Frontier for Risk

Another major topic we cover in the episode is the increasingly blurred line between IT and OT environments. Industrial systems that were once isolated are now networked, monitored, and managed remotely. While this drives efficiency and innovation, it also expands the attack surface.

Sunil explains how the same principles of Zero Trust and microsegmentation apply here, too—just with additional considerations around legacy devices and protocols. Protecting these environments requires visibility, adaptability, and context-aware policy enforcement, especially when traditional agents can’t be installed.

AI, Cloud, and the Evolving Threat Landscape

We also touch on how AI is reshaping both attack and defense strategies, from identity spoofing to fully autonomous threats. With AI workloads increasingly built and deployed in the cloud, Sunil discusses why cloud-native security and identity-first protection are more important than ever.

Breach readiness isn’t just about preventing attacks. It’s about designing systems that expect compromise, contain threats by default, and allow the business to stay resilient and responsive.

Breach Ready

This conversation is a must-listen for CISOs, security architects, and anyone navigating the modern cybersecurity landscape. Sunil brings thoughtful insights and practical advice to the table—and whether you’re already exploring Zero Trust or just starting to question your current strategy, there’s something here for you.

Check out the episode to hear our full discussion on breach readiness, microsegmentation, IT/OT convergence, and what it really means to be secure in a borderless world.

If you are going to be at RSAC 2025 in San Francisco next week, stop by Booth 2027 to meet the ColorTokens team and learn more.

The rise of artificial intelligence has opened up exciting possibilities, but it’s also creating new challenges--particularly for cybersecurity.

I sat down with my friend Sam Curry, Global VP and CISO in residence at Zscaler, for an in-depth conversation about the ways AI is transforming cybersecurity, how it’s being adopted across industries, and what organizations need to do to keep pace with these rapid changes.

Throughout the discussion, Sam emphasizes that AI is no longer a question of "if," but "how." As generative AI tools like ChatGPT continue to grow in popularity, they are being used in everything from content creation to customer service. However, with the tremendous opportunities come significant risks. We take a closer look at how AI is reshaping cyberattacks, particularly the rise of AI-powered phishing scams and deepfakes, which are increasingly difficult to detect and can have devastating consequences for individuals and businesses alike.

One of the most fascinating points of discussion in this episode of the TechSpective Podcast is the generational divide in AI adoption. While many tech-savvy individuals, particularly from older generations, have embraced AI tools, there’s a noticeable resistance from younger generations, who are more concerned about the environmental impact of these technologies. We explore these differing perspectives and discuss the complex ethical considerations around AI, including concerns about data privacy, security, and the power these tools give to cybercriminals.

The episode also dives into the practical side of cybersecurity, with Sam outlining the importance of implementing zero trust and least privilege principles in organizational infrastructure. With AI and other emerging technologies continuously altering the attack surface, these concepts are becoming even more critical for businesses looking to safeguard their sensitive data and ensure they are prepared for the next wave of cyber threats.

This episode is packed with valuable insights for anyone concerned with the future of AI, cybersecurity, and the evolving threat landscape. If you’re looking to understand how to navigate these changes and secure your organization against the growing risks of AI-powered attacks, you won’t want to miss this conversation.

So, whether you're an IT professional, a business leader, or simply someone interested in the intersection of technology and security, this episode offers a must-listen perspective on the future of AI in cybersecurity.

Tune in to learn how we can all better prepare for the AI-driven future of cybersecurity.

How do you balance business priorities and AI trends with truly effective cybersecurity practices—and make sure you’re still doing right by employees and customers? My friend Matt Alderman, Chief Product Officer at CyberSaint and host of the Business Security Weekly podast, joins me to talk about this and more for this TechSpective Podcast episode.

Matt’s career spans decades in cybersecurity, from early consulting days to product leadership at several well-known companies. Beyond his own hands-on experience, he’s got a deep appreciation for how fast technology and security threats evolve—and how leaders must adapt.

In this episode, Matt and I touch on:

The buzz around AI and what it actually means for cybersecurity teams

How automation and platform consolidation are reshaping budgets and tools

The tricky intersection of ethics, risk management, and real-world security

Observations on leadership and moral responsibility in an increasingly complex digital world

One of the most compelling parts of my conversation with Matt Alderman was about the human side of business decisions—especially when it comes to hiring and layoffs. In an industry driven by growth metrics and investor expectations, it’s easy to lose sight of the fact that behind every headcount number is a real person with a life and family. Matt shared some personal stories and reflections that bring this reality into sharp focus.

We talked about how leaders can—and should—factor empathy and ethics into their decision-making, even when the financial pressure is high. Letting people go might be a business necessity at times, but doing so with compassion and transparency matters. On the flip side, companies also need to be careful about overhiring in the first place, which often leads to the inevitable cycle of cutbacks. Doing the right thing and running a smart business aren’t mutually exclusive.

It was great catching up with Matt, sharing stories of what worked, what didn’t, and where cybersecurity is headed next. Get a unique perspective on how AI can simultaneously empower attackers and defenders, and how boardroom decisions (and moral compasses) factor into cybersecurity strategies.

You won’t want to miss this episode.

Cybersecurity is constantly evolving, and staying ahead of threats requires more than just tools—it demands strategy, leadership, and expertise. The unfortunate reality is that the threat landscape affects all companies regardless of industry or size, but many companies simply do not have the expertise or budget to defend effectively.

On the latest episode of the TechSpective Podcast, I sat down with my good friend Den Jones, Founder and CEO of 909Cyber, to talk about his latest venture and why it’s helping to fill that void and hitting the mark for companies of all sizes.

If you know Den, you know he’s not someone who stands still for long. From leading security initiatives at Adobe and Cisco to helping Banyan Security scale up before its acquisition, his career has been defined by forward motion. Now, with 909Cyber, he’s taking everything he’s learned and offering it as a service—literally.

In this episode, Den shares the inspiration behind 909Cyber, his take on the current cybersecurity landscape, and why organizations today need flexible, pragmatic solutions more than ever. We talk about the challenges facing small and mid-sized businesses, the growing demand for virtual CISOs, and how a "strategy and execution" approach can fill critical security gaps.

We also get into the mindset shift that's happening across the industry: it's no longer about buying the shiniest tool, but about understanding your business, your risks, and deploying the right solutions—sometimes with what you already have.

Whether you’re a CISO, a business leader, or just interested in how cybersecurity consulting is evolving, this conversation is full of insights you won’t want to miss.

Watch or listen to the full episode now and learn how 909Cyber is helping organizations rethink security from the ground up.

You should also check out the Cyber909 podcast—which I recently guested on with Den.

I recently sat down with my long-time friend and cybersecurity expert, Michael Farnum, to discuss his journey in the industry, his role as an advisory CISO at Trace3, and the evolution of the Houston Security Conference—more commonly referred to as HOU.SEC.CON.

Farnum has a deep-rooted passion for cybersecurity and his commitment to community-building shines through as he shares the story behind the creation of HOU.SEC.CON—a regional event that has grown into something much larger.

We delve into how HOU.SEC.CON started as a local cybersecurity conference but quickly gained traction with a unique twist: a strong community focus and a deep commitment to providing valuable, non-vendor-centric content. As the conference expanded, so did its scope, with specialized tracks like OT.SEC.CON EXEC.SEC.CON, and recently YOUTH.SEC.CON catering to niche segments like operational technology, executive-level discussions, and providing guidance and education for students.

One of the standout themes in our conversation is how HOU.SEC.CON has managed to create an environment that's distinct from the larger industry conferences like RSAC and Black Hat. Farnum reflected on the importance of keeping the event accessible and affordable, with tickets priced around $100 to ensure broad participation. It’s all about fostering a community of cybersecurity practitioners, not just showcasing the latest vendor offerings.

In addition to talking about the event itself, we explore broader trends in cybersecurity, including the potential for AI to disrupt the job market. Farnum offers a candid perspective on how generative AI could affect entry-level cybersecurity roles and the skills required for the next generation of security professionals. While the conversation touches on some of the challenges ahead, it’s clear that Farnum is excited about the future of cybersecurity and the opportunities to pivot into new areas within the field.

Whether you’re a seasoned cybersecurity professional or just starting out, this episode offers valuable insights into the changing landscape of the industry and the importance of community-driven events like HOU.SEC.CON. Tune in to hear more about Farnum’s experiences and his vision for the future of cybersecurity conferences. You’ll also hear about some exciting updates for HOU.SEC.CON in 2025, so check it out.

Also, make sure you take a look at the upcoming events and register to attend:

OT.SEC.CON – April 17

EXEC.SEC.CON – April 22

YOUTH.SEC.CON – September 30

HOU.SEC.CON – September 30 – October 1

In the latest episode of the TechSpective Podcast, I sit down with Anthony Freed, Director of Research Communications at Halcyon, to dive deep into the ever-evolving ransomware landscape. We explore how ransomware has transformed from a financial cybercrime tool into a powerful weapon with geopolitical implications. We had more technical difficulties than I prefer and the audio is rough in parts, but a great conversation nonetheless, so here it is.

Anthony and I have been in this industry long enough to witness ransomware’s evolution firsthand. From the early days of financially motivated attacks to today’s sophisticated ransomware-as-a-service (RaaS) ecosystems, we break down the layers of this thriving criminal enterprise. We discuss the rise of initial access brokers, affiliate attackers, and even the IT support structures that cybercriminals use to scale their operations—almost mirroring legitimate businesses.

But the conversation takes an even more unsettling turn as we examine the intersection of ransomware and nation-state operations. Many cybercriminal groups enjoy safe harbor in countries like Russia and China, and there’s increasing evidence that some attacks—particularly those targeting critical infrastructure, healthcare, and supply chains—are serving dual purposes: profiting from ransom payments while also advancing geopolitical agendas.

Is ransomware just a financial nuisance, or is it a national security crisis? Why has the response from governments remained largely reactive, and what should be done to disrupt this growing threat? We tackle these hard questions while also exploring the blurred lines between cybercrime, espionage, and information warfare.

If you’re concerned about the future of cybersecurity—and the role ransomware plays in the global power struggle—this is an episode you won’t want to miss. Tune in now to hear the full conversation.

TechSpective Podcast Episode 148

Security Information and Event Management (SIEM) solutions were once hailed as the cornerstone of modern cybersecurity, promising centralized visibility, streamlined threat detection, and efficient response. Over time, though, many organizations have struggled with SIEM’s complexities, high costs, and an overwhelming volume of alerts—often leading to what’s known as "swivel chair syndrome" as analysts jump between multiple tools to investigate and respond to incidents.

Next-gen SIEM is working to change that, though, and redefine the role of security operations centers (SOCs), bringing AI-powered automation and intelligent threat detection into the equation.

Ajit Sancheti, GM of Next-Gen SIEM at CrowdStrike, joins the TechSpective Podcast to explore how SIEM solutions are evolving and what security leaders should expect in the coming years. We discuss:

The legacy SIEM dilemma – Why traditional SIEMs struggled with scalability, data overload, and false positives

AI-driven analytics – How AI is transforming SOC workflows, making security operations more efficient

The rise of predictive security – How AI-powered models are shifting cybersecurity from reactive to proactive

Data complexity and visibility – Why organizations need a single source of truth for security data

The future of automated response – How security teams can move beyond rule-based playbooks to more dynamic AI-driven decision-making

Organizations are now looking beyond traditional security stacks to solutions that seamlessly integrate threat detection, automated response, and predictive intelligence—all without the manual tuning and endless configuration that plagued legacy systems.

Where is SIEM headed, and what does it mean for your security strategy? If you’re a CISO, SOC analyst, or security leader, you should check out the conversation.

TechSpective Podcast Episode 147

 

I sat down with Trevor Dearing, Director of Critical Infrastructure Solutions at Illumio, to unpack the findings of Illumio’s Global Cost of Ransomware study.

The results? A wake-up call for organizations that believe they have ransomware under control.

Key Highlights from the Conversation:

58% of organizations had to halt operations due to ransomware—why is this number climbing?

The dangerous disconnect between confidence and reality in cybersecurity strategies.

Why paying the ransom rarely works—and often leads to repeat attacks.

The shift from data theft to operational disruption—why cybercriminals are changing tactics.

The AI arms race in ransomware—how attackers are using AI to accelerate their attacks and what organizations can do to keep up.

Ransomware isn’t just about stolen data anymore—it’s about shutting down businesses, crippling supply chains, and disrupting entire industries. And yet, many companies continue to underestimate their vulnerability.

We also dive into the evolving role of zero trust, microsegmentation, and AI-powered defense strategies, exploring why containment—not just prevention—is the key to surviving modern cyber threats.

Don’t miss this insightful conversation. Listen now to hear firsthand insights from Trevor on the state of ransomware, security resilience, and what organizations must do to protect themselves.

TechSpective Podcast Episode 146

 

Loneliness is a powerful emotion, and scammers know how to exploit it.

Every year, in the weeks leading up to Valentine’s Day, there is a sharp rise in online romance scams. Similar spikes occur around the holidays, as people seek companionship during a season of togetherness.

Karin Zilberstein, VP of Product at Guardio, joins me on the latest episode of the TechSpective Podcast to explore how romance scams have evolved, the red flags you need to watch for, and how AI-driven scams are making online deception more convincing than ever.

“Everybody wants to feel connected, and that’s completely understandable,” Zilberstein says. “But scammers know how to take advantage of that vulnerability.”

These scams don’t just happen on dating sites. Social media, gaming platforms, and even professional networking sites have become breeding grounds for deception.

The Red Flags You Shouldn’t Ignore

While romance scams are becoming more advanced, they still follow patterns that, if recognized early, can prevent costly mistakes. Here are the key warning signs that a seemingly romantic connection may be a scam:

They insist on moving the conversation off-platform. Dating apps and social media platforms have security measures in place. Scammers want to communicate through encrypted channels where they can’t be traced.

They avoid video calls or in-person meetings. Deepfake videos are improving, but many scammers still refuse face-to-face interactions, often citing excuses like a broken camera or military deployment.

They create a sense of urgency. Scammers rush their victims into emotional or financial decisions. They might claim a sudden medical emergency or a last-minute travel expense that requires immediate help.

They ask for money in unconventional ways. Rather than direct bank transfers, scammers often request cryptocurrency, gift cards, or wire services, making transactions harder to trace and recover.

Their stories don’t add up. Inconsistencies in their background, vague answers to direct questions, or changes in personal details over time are all red flags.

Recognizing these signs early can be the difference between protecting yourself and becoming the next victim of a costly con.

AI and Deepfake Technology: The Future of Fraud

Perhaps the most alarming trend in romance scams is the integration of artificial intelligence.

There are cases where threat actors use deepfake videos to mimic real people, allowing scammers to hold video calls with their victims while pretending to be someone else. It’s no longer enough to rely on voice or even video as proof of authenticity. The technology is improving so quickly that, in some cases, even cybersecurity experts struggle to detect the fakes.

This growing sophistication raises serious concerns about how online deception will evolve. With AI capable of generating customized messages, videos, and even entire social media profiles, scams will become harder to spot, making digital awareness and cybersecurity tools more critical than ever.

The High Cost of Romance Scams

The financial toll of romance scams is staggering. In 2023 alone, victims lost more than $1.14 billion to these schemes, according to the Federal Trade Commission. But the true cost isn’t just measured in dollars. Many victims suffer emotional distress, embarrassment, and even isolation from family and friends.

Some cases involve devastating losses, with victims draining retirement accounts or losing their homes after being manipulated into financial ruin. The emotional investment can be so deep that, even when presented with clear evidence, victims refuse to believe they’ve been scammed.

“It’s heartbreaking because the people being targeted just want connection,” Zilberstein says. “They’re not foolish or reckless. They’re being deceived by criminals who are experts in manipulation.”

Fighting Back Against Digital Deception

As romance scams become more advanced, individuals aren’t the only ones responsible for defense. Technology companies, internet providers, and mobile carriers all play a role in combating online fraud.

Yet, many platforms still struggle to implement effective safeguards. Scammers adapt quickly, using burner numbers, disposable accounts, and AI-driven tools to evade detection. Consumers are often left to fend for themselves, relying on skepticism and cybersecurity solutions to stay protected.

Zilberstein emphasizes the importance of using technology to fight technology. Guardio’s cybersecurity tools, for example, detect fake websites, phishing messages, and suspicious activity in real time, offering an added layer of protection that vigilance alone can’t provide.

“People shouldn’t have to navigate this alone,” she says. “There are tools that can help keep them safe, and they should take advantage of them.”

Listen to the Full Episode

Romance scams are evolving, and everyone is a potential target. Whether you or someone you know is looking for love online, staying informed is the best defense against digital deception.

Don’t let cybercriminals ruin trust in the digital age. Listen to the full episode now.