Defense in Depth

Latest Episodes:

Securing AI-Generated Open Source Code Sep 24, 2026

Show notes

All links and images can be found on CISO Series

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Abby Kearns, CEO, ActiveState.

In this episode:

Trust, but nobody verifies
The economics of trust just changed
Implicit trust doesn't scale anymore
Rethinking what "open" even means

A huge thanks to our sponsor, ActiveState

ActiveState gives security and engineering teams a single governed source for open source software. With 79 million components built from source, continuously remediated, and delivered directly into the tools teams already use, ActiveState eliminates the CVE backlog and the developer toil that comes with it. Companies see a 60 to 99% reduction in CVEs and reclaim up to 30% of developer time. Learn more at activestate.com.

BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection Sep 21, 2026

Show notes

All links and images can be found on CISO Series

This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern.

In this episode, David Spark is joined by Karl Mattson, founder and managing director of Squared Circle Ventures, and Howard Holton, founder and principal analyst at Phronia Counsel LLC, to discuss how your existing environment shapes what you buy next — and whether that's a strategy or just inertia.

Watch the full one-hour show at Crowdcast.

Subscribe to Super Cyber Friday Express, or any show on CISO Series, at CISOseries.com/subscribe.

How AppSec Needs to Change For the Speed of AI Sep 17, 2026

Show notes

All links and images can be found on CISO Series

Check out this post by Anand Singh, CSO, Symmetry Systems, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Steve Zalewski. Joining us is Ryan Barrett, svp, security, Intermedia Cloud Communications.

In this episode:

Risk by default, not by decision
Identity, not just speed
Building security into the pipeline, not around it
Letting the machine make the fix

A huge thanks to our sponsor, ThreatLocker

An AI-generated attack may be new, but it still needs to execute, access data, and move through your environment. ThreatLocker applies enforceable controls at each of those points, limiting what attackers can do regardless of how their code was created. Book a demo at threatlocker.com/ciso.

Building Resilience for Microsoft 365 Sep 10, 2026

Show notes

All links and images can be found on CISO Series

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Brett Conlon, CISO, American Century Investments. Joining us is our sponsored guest, Simon Hughes, vp of field security at CoreView.

In this episode:

Ecosystem, not platform
Beyond backup, into resilience
What survives the restore
Toward a digital twin

A huge thanks to our sponsor, CoreView

Attackers don't break into Microsoft 365. They log in and reconfigure it. When tenant configurations drift or get tampered with, recovery can take weeks and missed settings can reopen the door. The Cyber Resilience Framework for Microsoft 365 covers the five pillars, harden, govern, detect, respond, recover, and shows exactly where today's tools leave gaps. Download the free practical guide

Recommendations to Reboot the Security Vendor Pitch Sep 03, 2026

Show notes

All links and images can be found on CISO Series

Check out this post by Val Tsanev of CyberRisk Alliance, for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Jill Rhodes, svp, CISO, Option Care Health.

In this episode:

The ten-minute test
Relevance beats format
Price the problem or lose the room
Whose meeting is it, really

A huge thanks to our sponsor, Teleskope

Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai

Market Confusion Is Responsible for the Biggest Gaps in Cybersecurity Aug 27, 2026

Show notes

All links and images can be found on CISO Series

Check out this post from Joe Head of RELEX Solutions for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining is Mary Rose Martinez, CISO, and vp of digital technology services, Marathon Petroleum Corporation.

In this episode:

Left behind
A hypothetical sale
The philosophy problem
Stop shifting the problems

A huge thanks to our sponsor, ActiveState

Will AI Replace Detection Roles in Cybersecurity? Aug 20, 2026

Show notes

All links and images can be found on CISO Series

Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Adrian Ludwig, CSO, Rippling.

In this episode:

The messy middle
The automatable part
Where automation stops
The influence gap

A huge thanks to our sponsor, ThreatLocker

ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.

What Makes a Good AI Security Deployment? Aug 13, 2026

Show notes

What Makes a Good AI Security Deployment?

All links and images can be found on CISO Series

Check out this post by Chris Matthews of UpGuard for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Peter Liebert, CISO, Salesloft & Clari.

In this episode:

Non-determinism changes everything
The foundation problem
Nobody owns the whole problem
The authorization gap

A huge thanks to our sponsor, CoreView

The Office Politics of Remediation Aug 06, 2026

Show notes

All links and images can be found on CISO Series

Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Dan Walsh, CISO, Datavant. Joining is our sponsored guest, Elizabeth Nammour, founder and CEO, Teleskope.

In this episode:

Data ownership before automation
A shared vocabulary for agent risk
Maturing from crawl to run
Trust earns automation its place

A huge thanks to our sponsor, Teleskope

Why is Preventative Security So Difficult? Jul 30, 2026

Show notes

All links and images can be found on CISO Series

Prevention in cybersecurity is a lot like flossing: everyone knows they should do it, but few do it enough. What's stopping us?

Check out this post by Ross Haleliuk of Venture in Security for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Edward Contreras, senior evp and CISO, Frost Bank. Joining us is Deneen DeFiore, vice president & chief information security officer, United Airlines.

In this episode:

The sponsorship gap
One strike and you're out
Policy without position
Prevention isn't static

A huge thanks to our sponsor, CoreView

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected