Hacker Valley Studio

Latest Episodes:

A Human-Centric Approach to Cybersecurity with Edna Conway Feb 04, 2025

Show notes

What if cybersecurity was more than just tech—what if it was about the people it serves? In this episode, Edna Conway, Founder and CEO of EMC Advisors, shares her incredible journey from law to cybersecurity and explores the human element often overlooked in technology.

Recorded live at InfoSec Nashville 2024, Edna discusses the intersection of innovation and tradition, the critical role of accuracy in AI, and her vision for cybersecurity's future. From anomaly detection to the wisdom of creating "enclaves," her insights remind us that tech is here to serve people, not the other way around.

Impactful Moments:

00:00 – Introduction
01:22 – Keynote insights: Innovation meets tradition
02:39 – From prosecutor to cybersecurity leader
07:00 – Human-first approach to AI and security
11:40 – LLMs in cybersecurity: opportunities and accuracy
16:34 – Balancing risk with AI use in business
23:06 – Bringing diverse talent into cybersecurity
32:30 – Advice on leadership and collaboration

Links:

Connect with our guest, Edna Conway: https://www.linkedin.com/in/ednaconway/

Learn more about ISSA Middle TN here: https://issamidtn.org/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Rise of the Machines: Why Your Attack Surface Has More Holes Than You Think ft Pandian Gnanaprakasam Jan 28, 2025

Show notes

Did you know nearly half of your enterprise devices are agentless—leaving your attack surface wide open? In this episode, Ron is joined by Pandian Gnanaprakasam, Co-Founder and Chief Product Officer at Ordr, to discuss the critical risks posed by agentless devices and how orchestration can strengthen your defenses.

Pandian shares key findings from Ordr’s 2024 "Rise of the Machines" report, highlighting the risks of overlooked agentless devices. He covers the rapid growth of these devices, strategies to manage vulnerabilities, and how automation can strengthen your defenses.

Impactful Moments:

00:00 - Introduction

04:15 - Why agentless devices dominate the next decade

06:30 - Insights from Ordr's “Rise of the Machines” report

08:50 - Hidden risks: 42% of devices are agentless

11:15 - Solving the "Swiss cheese" problem of security gaps

14:30 - Prioritizing vulnerabilities with business context

18:10 - Orchestration vs. automation: The harmony difference

22:00 - Why visibility is the foundation of security

27:30 - Ordr’s unique approach to securing the attack surface

Links:

Connect with our guest, Pandian Gnanaprakasam: https://www.linkedin.com/in/gpandian/

Check out Ordr’s Rise of the Machines report here: https://ordr.net/resources/rise-of-the-machines-report-2024

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

How a Game Turned a Watchmaker into a Cybersecurity Pro with Simeon Kakpovi Jan 22, 2025

Show notes

What if cybersecurity training could be as engaging as your favorite game? In this episode, Simeon Kakpovi, founder of the KC7 Foundation, shares how his gamified approach is changing lives and reshaping the cybersecurity pipeline by making cybersecurity education accessible.

From his journey as a threat hunter to building a free online game that teaches real-world blue team skills, Simeon joins Ron to show how creativity and inclusion can unlock potential in unexpected places. Plus, listen to the remarkable story about how a watchmaker with no cyber background landed a dream job at Microsoft—all thanks to KC7.

Impactful Moments

00:00 - Introduction

01:11 - The evolution of cybersecurity

03:03 - Cybersecurity Mergers & Acquisitions

05:38 - Meet our guest: Simeon Kakpovi of KC7 Foundation

06:00 - KC7 wins “Team of the Year” at the SANS DMAs

8:43 - Founding the KC7 Foundation

10:00 - Lessons from Lockheed Martin’s Cyber Analyst Challenge

11:46 - How KC7 gamifies real-world cybersecurity

14:52 - Bringing KC7 to high school and middle school students

16:52 - Expanding access to cybersecurity careers

25:09 - A watchmaker’s journey to Microsoft

34:00 - How to get started with KC7

Links

Connect with our guest, Simeon Kakpovi on LinkedIn: https://www.linkedin.com/in/kakpovi/

Check out the Cybersecurity M&A Roundup Article here: https://www.securityweek.com/cybersecurity-ma-roundup-37-deals-announced-in-december-2024/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Managing and Mitigating Cyber Risks For Your Assets with Jerich Beason and Wes Wright Jan 14, 2025

Show notes

What’s the key to mitigating unseen cyber risks? In this episode, Wes Wright, Chief Healthcare Officer at Ordr and Jerich Beason, CISO at WM uncover the complexities of attack surface management (ASM) and its impact on cybersecurity.

Together with Ron, they explain what constitutes an attack surface and introduce practical frameworks like See-Know-Secure, emphasizing the need for complete visibility and data-driven risk mitigation.

Impactful Moment:

00:00 - Introduction

03:00 - Defining attack surface management

06:13 - See-Know-Secure framework

09:05 - Analogies for explaining ASM to stakeholders

15:33 - Building an inventory for asset visibility

20:42 - Convincing leadership: Budget strategies

25:00 - Tools and methodologies for ASM

36:57 - Managed services vs. in-house approaches

43:00 - Starting your ASM journey

Links:

Connect with our guests –

Wes Wright: https://www.linkedin.com/in/4kidwes/

Jerich Beason: https://www.linkedin.com/in/jerich-beason/

Learn more about Ordr: https://ordr.net/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

The Year of the Agent: AI, Bug Bounties, and Cybersecurity Insights with Marco Figueroa Jan 10, 2025

Show notes

How will AI redefine cybersecurity in 2025? According to Marco Figueroa, Program Manager for Gen AI at the ODIN Bug Bounty Program, this year is set to be the "Year of the Agent," where AI systems and integrations take a central role.

In this special New Year bonus episode, Ron sits down with Marco to discuss the transformative role of AI in solving cybersecurity challenges. Marco breaks down AI jailbreak techniques, the impact of bug bounty programs on securing AI systems, and why 2025’s fast-evolving tech landscape demands creative thinking. Learn how tools like ChatGPT and Gemini 2.0 are reshaping the industry and why staying adaptable is essential.

Impactful Moments:

00:00 - Introduction

02:14 - Speed vs. safety: AI system challenges

05:30 - Why experience matters more than information

07:45 - Legal stakes for deepfakes and AI

18:36 - Marco’s creative journey in cybersecurity

28:00 - Jailbreaks: Risks and surprising AI findings

37:13 - 2025 predictions: The rise of agents

41:00 - Closing thoughts and the power of community

Links:

Connect with our guest, Marco Figueroa: https://www.linkedin.com/in/marco-figueroa-re/

Chuck Brooks' 2025 Cybersecurity Predictions article: https://www.forbes.com/sites/chuckbrooks/2024/12/24/cybersecurity-trends-and-priorities-to-watch-for-2025/

Focus Areas for the FaccT Conference News: https://facctconference.org/2025/focusareas

“Unreasonable Hospitality” by Will Guidara Book Link: https://www.amazon.com/Unreasonable-Hospitality-Remarkable-Giving-People/dp/0593418573

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Understanding the Psychology of Cyber Risk with David Shipley Jan 07, 2025

Show notes

Most people think cybersecurity training is about knowledge, but what if motivation is the real key to success? David Shipley, CEO and Field CISO at Beauceron Security, shares how psychology and neuroscience reshape how we approach security awareness, reducing risks in ways tech alone never could.

In this episode, Ron and David examine why people, not technology, are at the core of effective cybersecurity. David teaches us about the SCARF model, warns us about the dangers of overconfidence in training, and explains how gamification can drive meaningful behavior change when it comes to cybersecurity awareness and risk reduction.

Impactful Moments:

00:00 – Introduction

02:00 – David Shipley’s journey from journalist to cybersecurity leader

06:10 – Why motivation outshines knowledge in security training

08:20 – The Dunning-Kruger effect: Overconfidence in cybersecurity

11:17 – How overreliance on tech increases click rates

17:03 – Cybercriminals’ evolving tactics and emotional manipulation

25:00 – Gamification in cybersecurity: Changing security behaviors

30:56 – Using the SCARF model to enhance security culture

39:45 – Emotional intelligence as a defense against AI threats

Links:

Connect with our guest, David Shipley: https://www.linkedin.com/in/dbshipley/

Learn more about Beauceron Security here: www.beauceronsecurity.com/partner

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

From Landscaping to Cyber Leadership with Cole Lisko Dec 24, 2024

Show notes

How does a scorching July day in a van with no air conditioning lead to a career at one of the world’s top cybersecurity companies? In this episode, Cole Lisko shares his journey from landscaping to becoming the Cortex Team Manager at Palo Alto Networks.

Joined by his bestie Cole, Ron weaves the conversation through their history of friendship with laughs and lessons learned along the way. Discussing career pivots, unexpected opportunities, and the impact of mentorship, this conversation offers relatable motivation and a candid look at the power of meaningful connections.

Impactful Moments:

00:00 - Introduction

03:00 - Cole’s first exposure to cybersecurity

06:30 - Pivotal moment: a call for mentorship

11:40 - Breaking into cleared work

18:30 - Lessons learned at Booz Allen

22:00 - The art of work-life compartmentalization

27:45 - Leadership insights from landscaping days

32:50 - What’s next for Cole at Palo Alto Networks

Links:

Connect with our guest, Cole Lisko: https://www.linkedin.com/in/matthewlisko/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Think Like a Hacker, Solve Like a Leader featuring Ted Harrington Dec 17, 2024

Show notes

What if the key to innovation is breaking the rules? Ted Harrington, Executive Partner at Independent Security Evaluators and a pioneering ethical hacker, explores the power of commitment, curiosity, creativity, and nonconformity to rethink cybersecurity and life itself. From hacking the first iPhone to disrupting misconceptions about security testing, Ted shows why the hacker mindset matters more now than ever.

Join Ron and Ted as they discuss strategies for using the hacker mindset to solve problems, address risks like AI-driven deepfakes, and uncover unconventional opportunities in both business and personal growth.

Impactful Moments:

00:00 - Intro
03:15 - The four traits of a hacker mindset
07:40 - Hacking the first iPhone and Tesla
11:50 - Why penetration testing is misunderstood
16:30 - Risks and realities of AI deepfakes
21:20 - Applying hacker traits to entrepreneurship
28:45 - Ted’s upcoming book: Inner Hacker
33:00 - Why mindset matters most

Links:

Connect with our guest, Ted Harrington: https://www.linkedin.com/in/securityted/

Order Ted Harrington’s book “Hackable” here: https://www.amazon.com/Hackable-How-Application-Security-Right-ebook/dp/B08MFTQ7Q4

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Hacking Trust with AI and Deepfakes featuring Iain Jackson Dec 12, 2024

Show notes

What happens when cutting-edge AI meets the art of deception? In this episode, Iain Jackson, Academy Hive Leader at CovertSwarm, takes us through the uncanny potential and risks of synthetic voices and AI in cybersecurity.

Together, Ron and Iain discuss how adversaries are using AI to bypass human intuition. From synthetic voice calls to automating phishing attacks at scale, this episode explores how hackers leverage technology using these tactics and what you can do to stay one step ahead.

Impactful Moments:

00:00 - Introduction
01:56 - Iain shares his journey with AI
03:29 - Demonstrating voice cloning in real-time
06:31 - Risks of automated synthetic voice attacks
09:46 - Impact of AI on social engineering tactics
11:00 - Importance of "vibe checks" in cybersecurity
15:17 - Real-world phishing and HR scam example
20:00 - Uncanny Valley: Defense against AI deception
23:37 - The future of AI in adversary emulation

Links:

Connect with our guest, Iain Jackson: https://www.linkedin.com/in/iain-j-98578a238/

Learn more about CovertSwarm here: https://covertswarm.com/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Championing the Human in Cybersecurity with Julie Haney Dec 03, 2024

Show notes

What happens when cybersecurity puts people first? Julie Haney, Human-Centered Cybersecurity Program Lead at NIST, shares how designing security with humans at the center leads to greater adoption, reduced frustration, and stronger protection.

In this episode, Julie discusses how to improve user adoption by simplifying complex security processes, why empathy is a game-changer for effective security, and strategies for empowering people to feel confident and secure online. This conversation will inspire you to rethink how we protect people in the digital age and shares a fresh perspective on making cybersecurity work for all.

Impactful Moments:

00:00 - Introduction
07:15 - Breaking down barriers in user design
15:40 - Why empathy matters in cybersecurity solutions
21:05 - Challenges in bridging tech and humanity
28:30 - Designing systems with people, not just for them
35:10 - Practical steps to empower users in security
42:45 - Final reflections on human-centered innovation

Links:

Connect with our guest, Julie Haney here: https://www.linkedin.com/in/julie-haney-037449119

Check out NIST’s Online Community of Interest here: https://csrc.nist.gov/Projects/human-centered-cybersecurity/hcc-coi

Learn more about Human-Centered Cybersecurity on NIST’s website here: https://csrc.nist.gov/projects/human-centered-cybersecurity

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected