The Security Sandbox

In this episode, Chris and Phil recap what they learned at this year's Rochester Security Summit, from AI-powered attacks and shadow AI to vulnerability management, identity security, and SOC automation.

They discuss why faster vulnerability discovery is shrinking patching windows, how AI can make phishing more convincing, and how security teams can manage unsanctioned AI use without losing sight of the business needs behind it. They also explore passkeys and identity risks, resilience when critical services go down, and what automation could mean for junior analysts entering cybersecurity.

Follow the Rochester Security Summit here:

https://www.rochestersecurity.org/

Cybersecurity is already hard. When you add nonstop alerts, 3 a.m. calls, AI-fueled threats, and the pressure to be right all the time, it can become crushing. Paul Robinson explains why the real crisis in security is often human, not technical - and what defenders can do before stress, imposter syndrome, and burnout take over. Paul, founder and managing director of Tempus Network LLC and a longtime cybersecurity leader, shares why security teams feel they need to be perfect, why that mindset is impossible to sustain, and why “the math doesn’t math” when a handful of defenders are up against thousands of attackers.You’ll hear Paul, Chris, and Phil break down:

• Why imposter syndrome is so common in cybersecurity, even for experienced practitioners
• How social media and LinkedIn can distort reality and make everyone else look like they’re winning
• The warning signs of burnout, including the urge to stay plugged in even on PTO
• Practical recovery habits like early mornings, fresh air, exercise, and true unplugging

But rather than leaving you in fear, the episode lands on something more useful: you are not your job, you cannot control everything, and you do not have to carry this alone. If you work in security, lead a team, or know what it feels like to constantly brace for the next incident, then this episode is for you. This conversation is a reminder that resilience is built in community, not perfection.

Follow Paul here: https://www.linkedin.com/in/paul-robinson-tempusnetwork/

Data loss prevention isn’t simply about stopping files from moving—it’s about recognizing when that movement creates risk. Chris and Phil explore how modern DLP works and why context matters more than the data alone. You’ll hear why overblocking can push employees toward workarounds, how education can strengthen a DLP program, and what it takes to tune policies through baseline building, testing, exclusions, and validation. The conversation also covers insider threats, unmanaged devices, shadow IT and shadow AI.

This episode features the show's first guest appearance. Jordan is an RIT cybersecurity student and intern who is about to step into his master's program, but the real value here is how quickly he went from learning theory to shipping production cybersecurity work. In this episode, Chris and Phil unpack the gap between classroom labs and the messy reality of live enterprise defense, where clean datasets disappear, users become the wildcard, and tools like SIEMs, EDR, and DLP suddenly make sense only after you've been in the room.

Most security teams think a SIEM is just a log bucket until the alerts start piling up, the costs spike, and a real incident slips through the cracks. In this episode, Chris and Phil break down what a SIEM actually does, why visibility is not the same as security, and how the right setup turns raw telemetry into investigations you can trust.

Discover how foundational operational skills shape a cybersecurity career, from hands-on troubleshooting to developing effective security strategies. In this episode, Chris and Phil share insights on establishing a solid operational baseline in cybersecurity, emphasizing the importance of practical experience

In this episode, Chris and Phil share their journeys into cybersecurity, discuss industry misconceptions, and explore the evolving landscape of cybersecurity including AI's impact.