In this episode of the Entropy podcast, host Francis Gorman speaks with Richard Ford, CTO of Integrity 360, about the evolving landscape of cybersecurity. They discuss the growth journey of Integrity 360, the complexities of the cybersecurity channel, and the current threat landscape organizations face. Richard shares insights on the importance of cloud security, Zero Trust architecture, and the trend of consolidation in cybersecurity technologies. They also delve into the implications of AI in cybersecurity and Richard's personal journey with dyslexia, emphasizing the importance of understanding and leveraging unique perspectives in the tech industry.

Takeaways

• Integrity 360 has grown significantly over the years, expanding its footprint in the cybersecurity market.
• The cybersecurity channel involves partnerships between vendors and service providers to deliver effective solutions.
• Organizations must prioritize cloud security to mitigate risks associated with misconfiguration and human error.
• Zero Trust architecture is becoming essential for protecting data and access in organizations.
• Consolidation in the cybersecurity market is a growing trend, impacting technology choices for organizations.
• XDR (Extended Detection Response) is evolving, with both closed and open models available for organizations.
• Generative AI poses risks to organizations, particularly regarding data security and privacy.
• Understanding the fundamentals of cybersecurity is crucial for professionals, especially in the age of AI.
• Dyslexia can be a superpower, allowing individuals to think differently and approach problems uniquely.
• Confidence and the willingness to push beyond comfort zones are key to success in cybersecurity.

Sound Bites

• "It's been quite a long journey for myself."
• "Our role is to be a partner."
• "XDR is now very much where technology sits."
• "Consolidation of technologies is a growing trend."
• "Generative AI is like the new femme fatale."
• "Don't be afraid to do it in the first place."
• "Kids don't know how good they've got it."

In this episode of the Entropy podcast, host Francis Gorman speaks with Katie Colgan, an application security professional and advocate for women in tech, about the critical issue of online safety for children. They discuss the various threats children face in the digital world, the importance of parental involvement in cybersecurity, and the challenges of balancing screen time with real-life interactions. Katie shares insights on the potential dangers of child-focused devices and the implications of monitoring children's online activities. The conversation emphasizes the need for open communication between parents and children regarding technology use and the importance of setting boundaries to ensure a safe digital environment.

Takeaways

• Parents should start discussing online safety as soon as children use technology.
• Supervision is crucial as children engage with tech at a young age.
• Understanding the apps children use is essential for parents.
• Monitoring devices can lead to trust issues between parents and children.
• Privacy concerns arise when third-party companies monitor children's data.
• Children's online interactions can expose them to risks from unknown users.
• Balancing screen time with real-life activities is important for children's development.
• Parents need to set boundaries around technology use for their children.
• The decision to step back from a career can be driven by family priorities.
• Empowering children with knowledge about tech is vital for their safety.

Sound Bites

• "Kids are not built to live on their screens."
• "You don't know who works for that company."
• "We are there to help them become functional adults."
• "Tech is wonderful, but it brings problems."
• "It's a conversation about boundaries."
• "You're giving the world access to your child."

In this episode of the Entropy podcast, host Francis Gorman speaks with Jack Barsky, a former KGB sleeper agent who shares his extraordinary life story. From his recruitment by the KGB in East Germany to his eventual defection and life in America, Jack discusses the complexities of living a double life, the emotional challenges of his decisions, and his journey into corporate America. He emphasizes the importance of emotional intelligence, authenticity, and storytelling in both personal and professional realms, offering valuable insights for listeners.

Takeaways

• Jack Barsky's journey from KGB sleeper agent to American citizen is extraordinary.
• He was initially recruited by the KGB due to his curiosity and intelligence.
• Barsky's decision to defect was driven by his love for his daughter.
• He emphasizes the importance of emotional intelligence in leadership.
• Authenticity is crucial in corporate environments, yet often lacking.
• Barsky's experience in crisis management shaped his corporate career.
• He believes in the power of storytelling to engage audiences.
• Public speaking can be learned through practice and resilience.
• Trusting one's instincts is vital in decision-making.
• Barsky's life illustrates the complexities of identity and belonging.

Sound Bites

• "This is something of the movies, but you've lived it."
• "I was going to be a college professor."
• "I had to make a decision and it wasn't that easy."
• "I became fully Americanized."
• "I had a daughter living with me and her mother."
• "I told them I had contracted HIV AIDS."
• "Love conquers all."
• "Trust your gut and verify."
• "I was a breath of fresh air because I wasn't playing."

In this episode of the Entropy Podcast, host Francis Gorman speaks with Fadi Daood, Zero Trust Strategy Lead at Swift, about the evolving landscape of cybersecurity and the concept of Zero Trust. Fadi shares his journey into cybersecurity, emphasizing the importance of aligning security strategies with business needs and the misconceptions surrounding Zero Trust. The conversation delves into the role of change management, the necessity of embedding Zero Trust principles into organizational processes, and the impact of emerging technologies like generative AI on cybersecurity. During the conversation Francis also highlights the importance of human resilience and critical thinking in navigating the complexities of modern cyber threats.

Takeaways

• Zero Trust is seen as an opportunity to do the right thing in cybersecurity.
• Aligning cybersecurity with business needs is crucial for effective strategy.
• Change management is essential for successful implementation of security measures.
• Technology is only a small part of the cybersecurity equation; people and processes are key.
• Zero Trust should be embedded in organizational processes for sustainability.
• Generative AI is changing the landscape of cyber threats and defenses.
• Understanding the 'why' behind security measures can foster better compliance.
• Common sense approaches are often overlooked in cybersecurity practices.
• Stakeholder engagement is vital for aligning security with business objectives.
• Human resilience and critical thinking are necessary to combat evolving cyber threats.

Sound Bites

• "Zero Trust is an opportunity."
• "Never assume you know the business."
• "Our job is to protect the business."
• "Common sense is not so common."
• "Technology is just 20% of the job."
• "We need to show them the why."
• "We are not here to make your job difficult."

In this episode, Francis Gorman speaks with Michael Freeman, Head of Threat Intelligence at Armis, about his career path from working in U.S. intelligence and cryptography to co-founding the cybersecurity company CTCI. The discussion explores how Michaels approach to threat intelligence led to the early identification of significant vulnerabilities such as Log4j, sometimes months before they were publicly known.

The episode covers:

- Michaels background in crypto analysis and offensive security

- His perspective on post-quantum cryptography and emerging risks

- The founding and approach behind CTCI, including identifying active vulnerabilities before others in the industry

- The challenge of false positives in commercial threat feeds

- The importance of asset visibility and contextual vulnerability management

- The role of AI in both enhancing cybersecurity operations and in aiding attackers

- Michaels thoughts on modern election security, influence operations, and the broader geopolitical implications of technology

- Risks of over-reliance on AI for critical thinking and decision-making

The conversation emphasizes practical insights into how organizations can better understand and secure their environments in the face of rapidly evolving threats.

In this episode of the Entropy Podcast, host Francis Gorman speaks with Francesco Cipollone, founder and CEO of Phoenix Security. They discuss the evolution of application security, the challenges faced in the industry, and the innovative approaches taken by Phoenix Security to address these issues. Francesco shares insights on the importance of collaboration between security teams and engineers, the role of AI in enhancing security measures, and the necessity of prioritizing vulnerabilities in a rapidly changing digital landscape. The conversation also touches on the reality of cybersecurity solutions and the need for organizations to adapt to new threats and technologies.

Takeaways

• Francesco Cipollone's journey to founding Phoenix Security.
• The friction between security teams and engineering during cloud transformations.
• The importance of gamifying security objectives at the business level.
• AI can augment human capabilities but cannot replace them in decision-making.
• Organizations must prioritize vulnerabilities effectively to keep pace with threats.
• The need for a comprehensive understanding of application security beyond just tools.
• The obsession with software bill of materials may distract from core security issues.
• Collaboration between security and engineering is crucial for effective vulnerability management.
• The rapid evolution of threats necessitates a proactive approach to security.
• Understanding the fundamentals of security is essential for effective risk management.

Disclaimer: The views and opinions expressed in this podcast are solely those of the host and guests, based on personal experiences. They do not represent facts and are not intended to defame or harm any individual or business. Listeners are encouraged to form their own opinions.

In this episode, Francis Gorman interviews Mark Megarry, a PhD student specializing in 6G open radio access networks. They discuss Mark's journey into cybersecurity, the implications of 6G technology, and the security risks associated with open radio access networks. The conversation also covers the role of machine learning in future networks, the real-world consequences of insecure networks, and the importance of public speaking and community engagement in the cybersecurity field. Mark shares insights from his Capture the Flag competitions and emphasizes the need for resilience in network security.

Takeaways

• Mark transitioned from electronics to cybersecurity through hands-on experience.
• Curiosity drives the field of cybersecurity and research.
• 6G networks will focus on enabling new applications beyond just speed.
• Security risks in open radio access networks often stem from misconfigurations.
• Machine learning is becoming integral to the development of future networks.
• Insecure networks can lead to serious privacy breaches and data theft.
• Public speaking can be improved by sharing topics you are passionate about.
• Community engagement is crucial for personal and professional growth in cybersecurity.
• Capture the Flag competitions provide practical experience and learning opportunities.
• Quantum security is a significant concern for future network specifications.

In this episode of the Entropy Podcast, Francis Gorman speaks with Dr. James Merrick about the challenges and opportunities in achieving low carbon electricity in Ireland and globally. They discuss Ireland's 2030 emissions reduction targets, the role of technology in addressing climate change, and the impact of agriculture on emissions. The conversation also explores the importance of small countries in leading climate initiatives, innovative projects in electrical systems, and the need for a rethinking of grid design to accommodate renewable energy sources. Finally, they touch on future innovations in energy generation and the translation of academic theory into practical solutions.

Takeaways

• Ireland's commitment to a 51% reduction in greenhouse gases is ambitious but may only achieve a 29% reduction.
• Economic growth in Ireland has outpaced emissions reductions, showcasing a positive trend.
• Decoupling economic growth from emissions is a significant achievement.
• Small countries can show leadership in climate initiatives despite global challenges.
• Agriculture's role in emissions is complex and requires nuanced understanding.
• Technological advancements in agriculture can help reduce emissions.
• The grid design needs to adapt to the increasing use of renewable energy sources.
• Local energy solutions can mitigate the strain on the grid.
• Nuclear power should be reconsidered as a viable option for decarbonization.
• Innovative projects can lead to more efficient energy generation and consumption.

In this episode of the Entropy Podcast, Francis Gorman speaks with Louise McCormack, a trustworthy AI consultant and PhD candidate, about the critical importance of trust in AI systems. They explore the ethical frameworks that govern AI, the implications of AI decision-making on society, and the need for transparency and accountability in AI technologies. The conversation delves into the potential dystopian future of AI, the impact of technology on human resilience and language, and the pressing issues of data privacy and consent in the digital age. Louise emphasizes the need for regulation and the societal responsibility to ensure that AI serves the public good rather than corporate interests.

Takeaways

• Trustworthy AI is defined by ethical frameworks and principles.
• The AI Act aims to reinforce existing rights and protections.
• There is a significant gap in understanding AI's implications.
• Over-reliance on technology can diminish human resilience.
• AI is changing the structure of language and communication.
• Data profiling by private companies poses risks to democracy.
• The impact of AI on society is poorly researched.
• Transparency in AI algorithms is crucial for accountability.
• Digital detox may be necessary in an AI-driven world.
• Consent for data use needs to be revisited and regulated.

In this episode of the Entropy Podcast, host Francis Gorman speaks with Chris Dale, Chief Hacking Officer of River Security, about the dynamic and ever-evolving field of cybersecurity. They discuss the importance of penetration testing, the overlooked security risks companies face, and the role of offensive security in today's landscape. Chris shares valuable insights on how organizations can better prepare for cyber threats, the significance of education in the field, and the potential impact of generative AI on cybersecurity training. The conversation also touches on future challenges in cybersecurity, including the implications of geopolitical cyber warfare.

Takeaways

• Penetration testing is crucial for identifying vulnerabilities.
• Reusing credentials across multiple services is a major risk.
• Supply chain attacks are a growing concern in cybersecurity.
• Offensive security plays a vital role in defense strategies.
• Assuming a breach mindset is essential for organizations.
• Network segmentation and least privilege are key security practices.
• Education in cybersecurity needs to focus on timeless knowledge.
• Generative AI can enhance understanding but has limitations.
• Future cybersecurity challenges will involve AI-driven vulnerabilities.
• Geopolitical tensions may lead to more sophisticated cyber warfare