The Security Strategist

The fight against cybercrime is a never-ending battle. Firewalls and antivirus software, our traditional defences, are like trusty shields—good against basic attacks but not enough. Advanced attackers can slip through the cracks, exploiting new weaknesses or mimicking harmless traffic. Thus, businesses are exposed and face potential data breaches, financial ruin, and damaged reputations.

That's where Advanced Threat Intelligence (ATI) comes in – a game-changer in the cybersecurity arsenal. Unlike our old shields, ATI offers real-time intel on the latest threats, how attackers operate, and their ever-evolving tactics. 

Recognising the limitations of traditional security solutions, Radware goes beyond basic shields. Imagine a high-powered watchtower constantly scanning the digital horizon, identifying threats before they strike. 

In this episode of the EM360 Podcast, Analyst Jonathan Care speaks to Arik Atar, Senior Threat Intelligence Researcher at Radware, to discuss: 

• The Current Threat Landscape
• Modern Attacker Tactics
• Romance Scams & Pig Butchering
• The Radware Advantage 

The cloud revolutionised how businesses operate, but managing dynamic, complex environments presents new and unique challenges.

While digital transformation has brought significant benefits, the reality is that organisations now require innovative solutions to effectively navigate intricate, hybrid, multi-cloud environments.

Evolven Software, driven by a mission to simplify complexity and mitigate risk, empowers large organisations to overcome the challenges of governing extensive hybrid ecosystems. By harnessing the power of AI/ML, Evolven enables a more secure, streamlined, and efficient cloud journey with fewer outages or compliance gaps.

In this episode of the EM360 Podcast, industry veteran Tom Croll, advisor at Lionfish Tech Advisors, speaks to Sasha Gilenson, Founder and CEO of Evolven Software, to discuss: 

• The current state of enterprise cloud architectures and the challenges in managing hybrid multi-cloud environments.
• Why managing risk in hybrid multi-cloud environments demands a new paradigm.
• The unique challenges large organizations face in maintaining visibility, control, and governance across their landscapes.
• How Evolven's AI/ML-driven solution empowers enterprises to overcome this complexity, enhance security, and optimize performance.

Automated Security Validation. Involving tools, scripts and platforms to emulate true-to-life attacks, Automated Security Validation is a key part of assessing the readiness of the security infrastructure and guiding prioritized remediation. 

But how does this implementation of automation really work to empower human expertise? How does all of this relate to compliance? And what words of wisdom can be given for those looking to level up their security strategy in 2024?

In this episode of the EM360 Podcast, Analyst Jonathan Care speaks to Thomas Pore, Director of Product Marketing at Pentera, as they discuss:

• The pen-testing landscape
•  How important testing and validating are
• Empowering human expertise and remaining compliant

It seems like VPN products are consistently the initial access vectors for ransomware groups and targetted attacks. 

This was demonstrated in the recent Ivanti Connect Secure zero-day vulnerabilities, as well as Cisco when they admitted last year that Akira Ransomware was specifically targeting their VPNs.

But what is the real problem with VPNs - and are they vulnerable by design? How do they fit into wider security architectures and strategies? 

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Benny Lakunishok, Co-Founder and CEO of Zero Networks, to discuss:

• The problem with VPNs
• ‘Insecure by default’?
• ZTNA and remote access solutions

Rapid breach response. The art of quickly reacting to a security breach or incident. Key for minimising the impact of attacks and ensuring your team is as effective as possible, rapid breach response is an important part of any security strategy. 

With the rise and innovation we see in the automation space right now, how could automation be implemented into a security strategy to level up the efficacy of rapid breach response?

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Devin Johnstone, Security Operations Specialist at Palo Alto Networks, to discuss: 

• Demystifying rapid breach response
• Implementing and leveraging automation in RBR
• Advice for SOC teams and shifting mindset

The audit process is broken. CISOs and CTOs have faced a multitude of challenges under this outdated audit landscape, and the efficacy of companies are being stunted by a system that desperately needs updating. 

But how can technology be leveraged to streamline or even transform that auditing process? And what does the future of infosecurity compliance look like?

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Leith Khanafseh, Managing Director of Assurance and Compliance Products at Thoropass as they discuss:

• The old audit landscape
• Challenges for CISOs and CTOs
• Multiframeworks and the future of compliance

In the world of complex supply chains, it’s not enough to secure our own data but also ensuring that third party vendors we work with have robust security.

When it comes to proactively stopping threats and mitigating issues, supply chain monitoring and ensuring a secure software supply chain is crucial to keep organizations’ data safe.  

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Rahul Sasi, Co-Founder and CEO at CloudSEK, to discuss: 

• Current state of cloud computing security
• Common vulnerabilities in the software supply chain
• Remote work, cloud reliance and mitigating risk

In 2024, the conventional approach of responding to threats is dead. As cyberspace becomes more complex, interconnected, and sophisticated, companies are beginning to recognise the shift from a reactive stance to a proactive one. 

This shift isn’t just a technological upgrade - it’s a fundamental change in mindset that can cause ripples throughout the business. 

In this episode of the EM360 Podcast, Analyst Jonathan Care speaks to Uri Dorot, Senior Product Marketing Manager at Radware as they discuss:

• AI-powered attacks
• Responsive protection vs proactive protection
• How proactivity works in practice

Using threat intelligence effectively in incident investigation is crucial for identifying, mitigating, and preventing cybersecurity threats. 

By integrating relevant threat intelligence feeds, security teams gain insights into the tactics, techniques, and procedures employed by malicious actors. This aids in swift detection and response to potential incidents.

In this episode of the EM360 Podcast, Analyst Richard Stiennon speaks to Richa Priyanka, Solutions Architect at Palo Alto Networks, to discuss:

• Role of threat hunting in SOC
• Typical threat intelligence feeds for incident investigation
• The future of threat hunting

Application security is a complex, wide-ranging field. 

With attackers using a wide range of attacks from credential stuffing to cookie poisoning, how can you keep up with the ever-evolving landscape?

• Main challenges in protecting applications
• Growing threat landscape
• Consistent security across multi-cloud and hybrid environments