
Sign up to save your podcasts
Or


Send us Fan Mail
A voice call comes in from the CEO’s real number, using the CEO’s voice, asking a finance leader to move money right now. It sounds legitimate, it matches the company context, and it hits that perfect “urgent but plausible” tone. The only reason it fails is simple: the employee follows process instead of pressure. That moment sets the stage for a wide-ranging talk about the human element of cybersecurity and why psychology is becoming the new firewall.
We sit down with Vishal, Chief Information and Security Officer at Onclusive, to unpack what’s changing as AI-powered phishing, deepfakes, and role-based attacks get sharper. We get into what effective security awareness training looks like when emails are near-perfect, why “easy reporting” beats shaming people for clicks, and how least privilege access control plus multiple approvals can keep one mistake from turning into a full-scale breach. We also dig into policy engagement, employee acknowledgements, and how commitment bias can turn boring policy into real behavior change.
Then we zoom out to the AI paradox: the same tools that can compress weeks of hacking work into minutes can also help small security teams move faster, reduce technical debt, and fix vulnerabilities sooner. The final takeaway is practical and urgent: embrace AI, modernize your procedures, and treat your people as your strongest detection system when you train them well. If you got value from this, subscribe, share it with a teammate, and leave a review.
Joshua Crumbaugh is a world-renowned ethical hacker and a subject matter expert in social engineering and behavioral science. As the CEO and Founder of PhishFirewall, he brings a unique perspective on cybersecurity, leveraging his deep expertise to help organizations understand and combat human-centered vulnerabilities in their security posture. His work focuses on redefining security awareness through cutting-edge AI, behavioral insights, and innovative phishing simulations.
PhishFirewall uses AI-driven micro-training and continuous, TikTok-style video content to eliminate 99% of risky clicks—zero admin effort required. Ready to see how we can fortify your team against phishing threats? Schedule a quick demo today!
By Joshua Crumbaugh, Founder & CEO of PhishFirewallSend us Fan Mail
A voice call comes in from the CEO’s real number, using the CEO’s voice, asking a finance leader to move money right now. It sounds legitimate, it matches the company context, and it hits that perfect “urgent but plausible” tone. The only reason it fails is simple: the employee follows process instead of pressure. That moment sets the stage for a wide-ranging talk about the human element of cybersecurity and why psychology is becoming the new firewall.
We sit down with Vishal, Chief Information and Security Officer at Onclusive, to unpack what’s changing as AI-powered phishing, deepfakes, and role-based attacks get sharper. We get into what effective security awareness training looks like when emails are near-perfect, why “easy reporting” beats shaming people for clicks, and how least privilege access control plus multiple approvals can keep one mistake from turning into a full-scale breach. We also dig into policy engagement, employee acknowledgements, and how commitment bias can turn boring policy into real behavior change.
Then we zoom out to the AI paradox: the same tools that can compress weeks of hacking work into minutes can also help small security teams move faster, reduce technical debt, and fix vulnerabilities sooner. The final takeaway is practical and urgent: embrace AI, modernize your procedures, and treat your people as your strongest detection system when you train them well. If you got value from this, subscribe, share it with a teammate, and leave a review.
Joshua Crumbaugh is a world-renowned ethical hacker and a subject matter expert in social engineering and behavioral science. As the CEO and Founder of PhishFirewall, he brings a unique perspective on cybersecurity, leveraging his deep expertise to help organizations understand and combat human-centered vulnerabilities in their security posture. His work focuses on redefining security awareness through cutting-edge AI, behavioral insights, and innovative phishing simulations.
PhishFirewall uses AI-driven micro-training and continuous, TikTok-style video content to eliminate 99% of risky clicks—zero admin effort required. Ready to see how we can fortify your team against phishing threats? Schedule a quick demo today!