The co-hosts of the Defense in Depth podcast, myself and Allan Alford, recorded this video from Black Hat 2019 explaining the editorial model of our show and why we’re imploring listeners to send in hot and trending topics in InfoSec.…
How proactive should we be about security? What’s the value of threat intelligence vs. just having security programs in place with no knowledge of what attackers are trying to do? Check out this post for the discussion that is the…
The CISO/Security Vendor Relationship Podcast returns to NYC for a live recording this September. This recording in front of a live audience will be co-hosted by me, David Spark (@dspark), producer of CISO Series, and special guest co-host JJ Agha,…
We guarantee listening to our show would have done absolutely nothing to prevent the Capital One breach. We’ve consulted our lawyers and we feel confident about making that claim. It’s all coming up on this week’s episode of CISO/Security Vendor…
Is the ATT&CK Matrix the best model to build resiliency in your security team? What is the best way to take advantage of the ATT&CK framework and how do you square away conflicting data coming in from your tools. What…
If you’re having a hard time securing your infrastructure, then maybe you need to step up the requirements for expertise. Why not ask for everything? We’re offering unreasonable advice on this week’s episode of CISO/Security Vendor Relationship Podcast. This episode…
The hacker community needs a new PR campaign. Far too many people equate hacker with criminal. But hacker is a mindset of how one approaches security. What is that approach and why are CISOs so attracted to hiring hackers? Check…
Even if you do give “informed” consent, do you really understand what we’re doing with your data? Heck, we don’t know what we’re going to do with it yet, but we sure know we want a lot of it. It’s…
All professionals like to glom onto “best practices.” But in security, “best” practices may be bad out of the gate, become useless over time, or they’re not necessarily appropriate for all situations. Stay tuned, we’re about to expose some of…
If you’ve got lots of critical data, a massive insurance policy, and poor security infrastructure, you might just be a perfect candidate to be hit with ransomware. This week and this week only, it’s an extortion-free episode of CISO/Security Vendor…
