TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Technology

    Redefining CyberSecurity

    Redefining CyberSecurity Podcast
    Hosted by Sean Martin, CISSP

    Have you ever thought that we are selling cybersecurity insincerely, buying it indiscriminately, and deploying it ineffectively?

    For cybersecurity to be genuinely effective, we must make it consumable and usable. We must also bring transparency and honesty to the conversations surrounding the methods, services, and technologies upon which businesses rely. If we are going to protect what matters and bring value to our companies, our communities, and our society, in a secure and safe way, we must begin by operationalizing security.

    Executives are recognizing the importance of their investments in information security and the value it can have on business growth, brand value, partner trust, and customer loyalty.

    Together with executives, lines of business owners, and practitioners, we are Redefining CyberSecurity.

    Advertise

    Copyright: ITSPmagazine is an imsmartin publication © Copyright 2015-2023 imsmartin, LLC, All Rights Reserved

    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    AI-powered, Unified Detection and Response Platform Streamlines Cybersecurity for MSPs and IT Service Providers | 7 Minutes on ITSPmagazine | A Guardz Short Brand Innovation Story with Dor Eisner Sep 09, 2024
    Show notes

    As cyber threats grow more sophisticated and target various aspects of businesses across digital assets and surfaces, a common practice is to increase the number of security layers a company uses, often tasked to an MSP. However, this approach has led to a new dilemma: MSPs are now dealing with managing a plethora of disparate point solutions simultaneously. These solutions generate an overwhelming amount of data, information, and alerts that demand attention. As SMBs often lack dedicated personnel and resources to handle these alerts, the task falls on MSPs. This leaves MSPs struggling to manage the flood of information effectively.

    Guardz empowers MSPs and IT service providers to protect their clients effectively and efficiently, offering a unified platform with automated detection and response, which ensures digital assets, emails, endpoints, data and cloud directories are secure, allowing businesses to focus on growth. The Guardz platform is tailor-made for MSPs, simplifying cybersecurity management for SMBs and the MSPs that serve them. Leveraging the power of AI, Guardz automates threat detection and response, reducing false alerts and focusing on real threats. It provides scalable solutions for MSPs, comprehensive coverage for SMBs, and a user-friendly interface, ensuring robust protection and proactive security measures like regular vulnerability assessments and continuous monitoring.

    Guardz is transforming the future of cybersecurity by streamlining security management and enhancing efficiency. By unifying disparate solutions into a single platform that unifies detection from its own security stack and automates the response utilizing AI,Guardz empowers MSPs to significantly reduce complexity and operational burdens as they secure their SMB customers. AI-driven threat detection and automated response capabilities minimize false alerts and ensure rapid remediation of threats, allowing MSPs to focus on strategic tasks rather than being overwhelmed by data. The scalability of Guardz’s solutions means that even small businesses can access enterprise-quality security, fostering a more secure business environment overall. This transformation leads to better-prepared MSPs, more resilient SMBs, and a more secure digital landscape.

    Learn more about Guardz: https://itspm.ag/guardzrgig

    Note: This story contains promotional content. Learn more.

    Guest: Dor Eisner, CEO and Co-Founder, Guardz [@GuardzCyber]

    On LinkedIn | https://www.linkedin.com/in/dor-eisner-17067744/

    Resources

    Learn more and catch more stories from Guardz: https://www.itspmagazine.com/directory/guardz

    For a free 14 day trial of Guardz’s platform please visit https://itspm.ag/guardzgvu3.

    Learn more about 7 Minutes on ITSPmagazine Short Brand Story Podcasts: https://www.itspmagazine.com/purchase-programs

    Newsletter Archive: https://www.linkedin.com/newsletters/tune-into-the-latest-podcasts-7109347022809309184/

    Business Newsletter Signup: https://www.itspmagazine.com/itspmagazine-business-updates-sign-up

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    How AI-Enhanced Phishing Changes the Economic Dynamics of Phishing Attacks | A Conversation with Marco Ciappelli and Fred Heiding | Redefining CyberSecurity with Sean Martin Aug 28, 2024
    Show notes

    Guests:

    Fred Heiding, Research Fellow, Harvard

    On LinkedIn | https://www.linkedin.com/in/fheiding/

    On Twitter | https://twitter.com/fredheiding

    On Mastodon | https://mastodon.social/@fredheiding

    On Instagram | https://www.instagram.com/fheiding/

    Marco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society Podcast

    On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli

    ____________________________

    Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    View This Show's Sponsors

    ___________________________

    Episode Notes

    In today's digital era, AI-enhanced phishing attacks are transforming the landscape of cybersecurity. An insightful episode of The Redefining CyberSecurity Podcast features host Sean Martin alongside ITSPmagazine co-founder Marco Ciappelli, and guest Fred Heiding, a research fellow in computer science at Harvard School of Engineering and Applied Sciences, and a fellow at the Harvard Kennedy School.

    Fred Heiding shares updates on the evolution of phishing attacks using AI, highlighting both the technical facets and the societal implications. He explains how advanced language models can now automate the creation of highly realistic phishing emails, making it easier and more cost-effective for attackers to target individuals and organizations.

    Heiding discusses the concept of hyper-personalization, where attackers gather granular information about their targets, such as their communication patterns and personal interests, to craft emails that seem authentic and trustworthy. This hyper-personalization poses significant challenges.

    Heiding provides an example where attackers mimicked a Black Hat organizer's email, highlighting the precision and timing crucial for successful phishing. The use of open-source language models, which can be adjusted by developers to remove any built-in protections, further exacerbates the issue.

    Marco Ciappelli ponders the potential solutions by leveraging AI for defensive strategies. Heiding acknowledges this is an area with promise, particularly in personalized spam filters, yet notes the inherent advantages attackers hold over defenders due to the unpatchable nature of human intuition. Defense mechanisms using AI can marginally enhance current spam filters but face limitations in practicality and widespread adoption because of people's reluctance toward continuous training and complex defense mechanisms.

    Sean Martin evaluates the potential of AI in monitoring patterns of human vulnerability over time, which could redefine phishing training by focusing on specific, individualized principles. However, he also stresses the economic aspect, citing that cheaper and more efficient phishing methods increase the attack's scale and frequency, further complicating defensive strategies.

    Heiding and Ciappelli both emphasize that while technological advancements provide tools for protection, they also require more personal data to be effective—a trade-off that involves significant privacy concerns. The future of online trust, according to Heiding, appears precarious. As phishing attacks become more sophisticated, the very nature of how people trust digital communications must evolve.

    Overall, this episode underscores the critical need for ongoing research and dialogue in cybersecurity, focusing on balancing innovation in defense mechanisms against the ever-advancing sophistication of attacks.

    ___________________________

    Sponsors

    Imperva:https://itspm.ag/imperva277117988

    LevelBlue: https://itspm.ag/attcybersecurity-3jdk3

    ___________________________

    Watch this and other videos on ITSPmagazine's YouTube Channel

    Redefining CyberSecurity Podcast with Sean Martin, CISSP playlist:

    📺 https://www.youtube.com/playlist?list=PLnYu0psdcllS9aVGdiakVss9u7xgYDKYq
    ITSPmagazine YouTube Channel:

    📺 https://www.youtube.com/@itspmagazine

    Be sure to share and subscribe!

    ___________________________

    Resources

    Harvard Business Review article: https://hbr.org/2024/05/ai-will-increase-the-quantity-and-quality-of-phishing-scams

    IEEE Access article: https://ieeexplore.ieee.org/document/10466545

    BSides presentation: https://bsideslv.org/talks#8WK8P3

    Hacking Humans Using LLMs with Fredrik Heiding: Devising and Detecting Phishing: Large Language Models vs. Smaller Human Models | Las Vegas Black Hat 2023 Event Coverage | Redefining CyberSecurity Podcast With Sean Martin and Marco Ciappelli: https://redefining-cybersecurity.simplecast.com/episodes/hacking-humans-using-llms-with-fredrik-heiding-devising-and-detecting-phishing-large-language-models-vs-smaller-human-models-las-vegas-black-hat-2023-event-coverage-redefining-cybersecurity-podcast-with-sean-martin-and-marco-ciappelli

    A Framework for Evaluating National Cybersecurity Strategies | A Black Hat USA 2024 Conversation with Fred Heiding | On Location Coverage with Sean Martin and Marco Ciappelli: https://redefining-cybersecurity.simplecast.com/episodes/a-framework-for-evaluating-national-cybersecurity-strategies-a-black-hat-usa-2024-conversation-with-fred-heiding-on-location-coverage-with-sean-martin-and-marco-ciappelli

    Deep Backdoors in Deep Reinforcement Learning Agents | A Black Hat USA 2024 Conversation with Vas Mavroudis and Jamie Gawith | On Location Coverage with Sean Martin and Marco Ciappelli: https://itsprad.io/redefiningcybersecurity-454

    ___________________________

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:

    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in sponsoring this show with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    An Introduction to CyberTech NYC Conference 2024 with Event Director Steve Corrick | On Location Coverage with Sean Martin and Marco Ciappelli Aug 26, 2024
    Show notes

    Guest: Steve Corrick, Director, Cybertech New York

    On LinkedIn | https://www.linkedin.com/in/stevecorrick/

    On Twitter | https://x.com/scorrick

    On Facebook | https://www.facebook.com/stephen.corrick

    ____________________________

    Hosts:

    Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    Marco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society Podcast

    On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli

    ____________________________

    Episode Notes

    A Virtual Road Trip to CyberTech NYC

    In a lively pre-event discussion, we embark on a metaphorical journey across the States, representing our excitement for the CyberTech NYC Conference, happening on September 5th, 2024, at the Metropolitan Pavilion in Chelsea. The idea of this "drive" is a fun nod to the interconnectedness of our virtual world and our anticipation of the event.

    Event Spotlight: Why CyberTech NYC Matters

    We kick things off by highlighting the significance of this event, mentioning that it starts early on September 4th with pre-event activities, leading up to the main event on the 5th. Steve Corrick, one of the key organizers, provides a behind-the-scenes look at the planning process and explains how this third edition of CyberTech NYC has become a distinctive fixture in the cyber ecosystem.

    The Global and Local Impact of CyberTech

    Steve takes us through the journey of CyberTech as a global series, tracing its roots from Tel Aviv to its expansion across multiple continents. What sets CyberTech NYC apart, he says, is its dual focus on both global trends and local innovation. New York City, now a burgeoning hub for tech and cybersecurity, plays host to an event that showcases local talent, startups, and established players alike.

    Comprehensive Coverage of Cyber Topics

    The event’s agenda is packed with content designed to tackle critical issues, such as:

    • Cyber Talent Initiative: Programs for everyone, from students to professionals looking to upskill.
    • VC and Investor Focus: The Investing in the Best initiative to help startups boost their funding.
    • Government and Agency Involvement: Discussions on how localities can strengthen their cyber ecosystems.
    • Main Stage Content: Keynotes on fake news, the role of cyber in elections, and other pressing topics.

    Inclusivity and Innovation: A Diverse Speaker Lineup

    We appreciate the diversity of speakers and the range of topics covered. With big names like Walmart, AWS, and various innovative startups, the event promises to offer something for everyone. Steve also explains the event’s blend of formats, including main stage panels, roundtables, and think tanks, all aimed at fostering in-depth discussions and knowledge sharing.

    The Evolving Cyber Landscape

    Reflecting on how cybersecurity events have evolved over the years, Steve notes the shift from niche gatherings to mainstream importance. With cyber threats becoming part of our daily lives, collaboration among countries and industries has become essential for enhancing global security.

    Local Focus with Global Reach

    We commend the event’s ability to balance global participation with a strong local focus. Steve agrees, emphasizing their collaboration with local and state-level initiatives in New York, further solidifying the city’s place on the global cybersecurity map.

    Looking Forward to CyberTech NYC 2024

    Our conversation wraps up with a sneak peek at the event’s schedule, including a Happy Cyber Hour on the evening of September 5th and additional pre-event activities on the 4th. Steve and his team are excited to connect with participants from around the globe, and we’ll be sharing more updates as CyberTech NYC 2024 approaches.

    Be sure to follow our Coverage Journey and subscribe to our podcasts!

    ____________________________

    This Episode’s Sponsors

    Are you interested in sponsoring our event coverage with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    Want to tell your Brand Story as part of our event coverage?

    Learn More 👉 https://itspm.ag/evtcovbrf

    ____________________________

    Follow our Cybertech NYC 2024 coverage: https://www.itspmagazine.com/cybertech-nyc-2024-cybersecurity-event-coverage-in-new-york-city

    On YouTube: 📺 https://www.youtube.com/playlist?list=PLnYu0psdcllRjdy_wDSLBwgPkM3zSeau_

    Be sure to share and subscribe!

    ____________________________

    Resources

    Learn more about Cybertech NYC 2024: https://nyc.cybertechconference.com/

    ____________________________

    Catch all of our event coverage: https://www.itspmagazine.com/technology-cybersecurity-society-humanity-conference-and-event-coverage

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit: https://www.itspmagazine.com/redefining-cybersecurity-podcast

    To see and hear more Redefining Society stories on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-society-podcast

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Recapping Black Hat 2024 and What’s Next | On Location Coverage with Sean Martin and Marco Ciappelli Aug 20, 2024
    Show notes

    Hosts:

    Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    Marco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society Podcast

    On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli

    ____________________________

    Episode Notes

    In this episode of "On Location With Sean Martin and Marco Ciappelli," our hosts dive into their time at Black Hat 2024 in Las Vegas, reflecting on key takeaways and sharing what’s next on their journey. Whether you're deep into cybersecurity or just curious about the industry, this blog post offers a snapshot of what to expect from Sean and Marco.

    Recapping Black Hat 2024
    Marco Ciappelli
    Choo, choo . . .
    Sean Martin
    Is that the sound of the fast train back from Vegas? Or just the rush of everything we experienced?

    Marco Ciappelli
    I'm still wondering why there's no train from LA to Vegas. And don't get me started on LA to San Francisco—that's another conversation entirely.

    The conversation kicks off with a lighthearted nod to travel woes before shifting to the core of the episode: their reflections on Black Hat 2024. Sean and Marco bring unique perspectives, emphasizing the importance of thinking beyond cybersecurity's technical aspects to consider its broader impact on society and business.

    Sean's Operational Insights
    Sean Martin
    I like to look at things from an operational angle—how can we take what we learn and bring it back to the business to help leaders and practitioners do what they love?

    Sean’s Black Hat 2024 Recap Newsletter explores the evolution from reactive data responses to strategic enablement, AI and automation, modular cybersecurity, and the invaluable role of human insights. His focus is clear: helping businesses become more resilient and adaptable through smarter cybersecurity practices.

    Marco's Societal Impact
    Marco Ciappelli
    Cybersecurity isn’t a destination—it’s a journey. We’re never going to be fully secure, and that’s okay. Cultures change, technology evolves, and we have to keep adapting.

    Marco’s take highlights the societal implications of cybersecurity. He talk about how different fields and nations are breaking down silos to collaborate more effectively. His newsletter often reflects on the need for digital literacy across business, society, and education, emphasizing the importance of broadening our understanding of technology’s role.

    Upcoming Events and Conferences
    The duo is excited about their packed schedule for the rest of 2024 and beyond, including:

    • CyberTech New York (September 2024): Focused on policy, innovation, SecOps, AppSec, and sustainability.
    • OWASP AppSec San Francisco (September 2024): Covering the OWASP Top 10 for LLMs and more.
    • Sector in Toronto (October 2024): Offering unique coverage ideas, closely tied to Black Hat.
    • Did someone said that they will be back covering an APJ event, in Melbourne, before the end of the year???

    Additional Ventures
    They’ll also be hosting innovation panels and keynotes at a company event in New Orleans, with CES in Las Vegas and VivaTech in Paris on the horizon for 2025, blending B2B startup insights with consumer tech, all with a cybersecurity twist.

    Subscribe and Stay Tuned
    Marco and Sean invite you to subscribe to their newsletters and follow their podcast, "On Location," as they continue their journey around the globe—both physically and virtually—bringing fresh perspectives on business, technology, and cybersecurity. You’ll also find unique "brand stories" that highlight innovations making our world safer and more sustainable.

    Stay connected, enjoy the ride, and don’t forget to subscribe to both their newsletters and the "On Location" podcast on YouTube!

    Be sure to follow our Coverage Journey and subscribe to our podcasts!

    ____________________________

    This Episode’s Sponsors

    LevelBlue: https://itspm.ag/levelblue266f6c

    Coro: https://itspm.ag/coronet-30de

    SquareX: https://itspm.ag/sqrx-l91

    Britive: https://itspm.ag/britive-3fa6

    AppDome: https://itspm.ag/appdome-neuv

    ____________________________

    Follow our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegas

    On YouTube: 📺 https://www.youtube.com/playlist?list=PLnYu0psdcllRo9DcHmre_45ha-ru7cZMQ

    Be sure to share and subscribe!

    ____________________________

    Resources

    Sean's Newsletter Article: https://www.linkedin.com/pulse/reflecting-black-hat-2024-operationalizing-enhanced-business-martin-ccive/

    Marco's Newsletter Article: https://www.linkedin.com/pulse/my-reflections-from-itspmagazines-black-hat-usa-2024-state-ciappelli-ayglc/?trackingId=hLvuq5LqQ%2B2RHNpgDtIJlQ%3D%3D

    On Location Podcast: https://on-location-with-sean-martin-and-marco-ciappelli.simplecast.com

    Learn more about Black Hat USA 2024: https://www.blackhat.com/us-24/

    ____________________________

    Catch all of our event coverage: https://www.itspmagazine.com/technology-cybersecurity-society-humanity-conference-and-event-coverage

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit: https://www.itspmagazine.com/redefining-cybersecurity-podcast

    To see and hear more Redefining Society stories on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-society-podcast

    Are you interested in sponsoring our event coverage with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    Want to tell your Brand Story as part of our event coverage?

    Learn More 👉 https://itspm.ag/evtcovbrf

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    OWASP Top 10 For Large Language Models: Project Update | An OWASP 2024 Global AppSec San Francisco Conversation with Steve Wilson | On Location Coverage with Sean Martin and Marco Ciappelli Aug 20, 2024
    Show notes

    Guest: Steve Wilson, Chief Product Officer, Exabeam [@exabeam] & Project Lead, OWASP Top 10 for Larage Language Model Applications [@owasp]

    On LinkedIn | https://www.linkedin.com/in/wilsonsd/

    On Twitter | https://x.com/virtualsteve

    ____________________________

    Hosts:

    Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    Marco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society Podcast

    On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli

    ____________________________

    Episode Notes

    In this episode of the Chat on the Road On Location series for OWASP AppSec Global in San Francisco, Sean Martin hosts a compelling conversation with Steve Wilson, Project Lead for the OWASP Top 10 for Large Language Model AI Applications. The discussion, as you might guess, centers on the OWASP Top 10 list for Large Language Models (LLMs) and the security challenges associated with these technologies. Wilson highlights the growing relevance of AppSec, particularly with the surge in interest in AI and LLMs.

    The conversation kicks off with an exploration of the LLM project that Wilson has been working on at OWASP, aimed at presenting an update on the OWASP Top 10 for LLMs. Wilson emphasizes the significance of prompt injection attacks, one of the key concerns on the OWASP list. He explains how attackers can craft prompts to manipulate LLMs into performing unintended actions, a tactic reminiscent of the SQL injection attacks that have plagued traditional software for years. This serves as a stark reminder of the need for vigilance in the development and deployment of LLMs.

    Supply chain risks are another critical issue discussed. Wilson draws parallels to the Log4j incident, stressing that the AI software supply chain is currently a weak link. With the rapid growth of platforms like Hugging Face, the provenance of AI models and training datasets becomes a significant concern. Ensuring the integrity and security of these components is paramount to building robust AI-driven systems.

    The notion of excessive agency is also explored—a concept that relates to the permissions and responsibilities assigned to LLMs. Wilson underscores the importance of limiting the scope of LLMs to prevent misuse or unauthorized actions. This point resonates with traditional security principles like least privilege but is recontextualized for the AI age. Overreliance on LLMs is another topic Martin and Wilson discuss.

    The conversation touches on how people can place undue trust in AI outputs, leading to potentially hazardous outcomes. Ensuring users understand the limitations and potential inaccuracies of LLM-generated content is essential for safe and effective AI utilization.

    Wilson also provides a preview of his upcoming session at the OWASP AppSec Global event, where he plans to share insights from the ongoing work on the 2.0 version of the OWASP Top 10 for LLMs. This next iteration will address how the field has matured and new security considerations that have emerged since the initial list.

    Be sure to follow our Coverage Journey and subscribe to our podcasts!

    ____________________________

    This Episode’s Sponsors

    Are you interested in sponsoring our event coverage with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    ____________________________

    Follow our OWASP 2024 Global AppSec San Francisco coverage: https://www.itspmagazine.com/owasp-2024-global-appsec-san-francisco-cybersecurity-and-application-security-event-coverage

    On YouTube: 📺 https://www.youtube.com/playlist?list=PLnYu0psdcllTcqoGpeR1rdo6p47Ozu1jt

    Be sure to share and subscribe!

    ____________________________

    Resources

    OWASP Top 10 for Large Language Models: Project Update: https://owasp2024globalappsecsanfra.sched.com/event/1g3YF/owasp-top-10-for-large-language-models-project-update

    Safeguarding Against Malicious Use of Large Language Models: A Review of the OWASP Top 10 for LLMs | A Conversation with Jason Haddix | Redefining CyberSecurity with Sean Martin: https://itsprad.io/redefining-cybersecurity-190

    OWASP LLM AI Security & Governance Checklist: Practical Steps To Harness the Benefits of Large Language Models While Minimizing Potential Security Risks | A Conversation with Sandy Dunn | Redefining CyberSecurity Podcast with Sean Martin: https://itsprad.io/redefiningcybersecurity-287

    Hacking Humans Using LLMs with Fredrik Heiding: Devising and Detecting Phishing: Large Language Models vs. Smaller Human Models | Las Vegas Black Hat 2023 Event Coverage | Redefining CyberSecurity Podcast With Sean Martin and Marco Ciappelli: https://itsprad.io/redefining-cybersecurity-208

    Learn more about OWASP 2024 Global AppSec San Francisco: https://sf.globalappsec.org/

    ____________________________

    Catch all of our event coverage: https://www.itspmagazine.com/technology-cybersecurity-society-humanity-conference-and-event-coverage

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit: https://www.itspmagazine.com/redefining-cybersecurity-podcast

    To see and hear more Redefining Society stories on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-society-podcast

    Are you interested in sponsoring our event coverage with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    Want to tell your Brand Story as part of our event coverage?

    Learn More 👉 https://itspm.ag/evtcovbrf

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Building Resilient Software: Secure by Design, Transparency, and Governance Remain Key Elements | A Conversation with Chris Hughes | Redefining CyberSecurity with Sean Martin Aug 20, 2024
    Show notes

    Guest: Chris Hughes, President / Co-Founder, Aquia

    On LinkedIn | https://www.linkedin.com/in/resilientcyber/

    ____________________________

    Host: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    View This Show's Sponsors

    ___________________________

    Episode Notes

    In this episode of The Redefining CyberSecurity Podcast, host Sean Martin connects with Chris Hughes, a seasoned author and consultant in cybersecurity. The primary focus is on the intricacies of vulnerability management and software supply chain security, particularly in an era where software pervades every aspect of modern life.

    Chris Hughes emphasizes the paramount importance of understanding what is in the software we consume. Software Bill of Materials (SBOM) has emerged as a focal point, akin to ingredient lists in the food industry, highlighting the need for transparency. Hughes argues that transparency is not just about knowing the components; it extends to understanding the risks associated with those components. He illustrates his point by referencing infamous incidents like the Log4j vulnerability, which unveiled the critical gaps in our knowledge of software components.

    The conversation also shifts towards the broader challenges in software supply chain security. Hughes discusses the government's push for self-attestation and the role of third-party validators in ensuring software security. While acknowledging the complexities and potential bottlenecks, he underscores the necessity for a balanced approach that combines self-attestation with external validation to foster a secure software ecosystem.

    Additionally, Hughes addresses the concept of Secure by Design, advocating for practices that embed security into the software development lifecycle right from the outset. He notes the historical context of this concept, which dates back to the Ware Report, and argues for its relevance even today. Secure by Design entails building security measures inherently into products, thereby reducing the need for perpetual patching and vulnerability management.

    Internal risk management within organizations also gets spotlighted. Hughes insists that organizations should maintain an inventory of the software and components they use internally, evaluate their risks, and contribute to the open-source communities they rely on. This comprehensive approach not only helps in mitigating risks but also fosters a resilient and sustainable software ecosystem.

    On the topic of platform engineering, Hughes shares his insights on its potential to streamline software development processes and enhance security through standardization and governance. However, he is candid about the challenges, particularly the need to balance standardization with the diverse preferences of development teams.

    As the discussion wraps up, Hughes and Martin underline the importance of focusing on contextual risk assessment in vulnerability management, rather than merely responding to static severity scores. Hughes' advocacy for a more nuanced approach to security, balancing immediate risk mitigation with longer-term strategic planning, offers listeners a thoughtful perspective on managing cybersecurity challenges.

    Top Questions Addressed

    1. How can organizations ensure transparency and security in their software supply chains?
    2. What strategies can be implemented to address the challenges of vulnerability management?
    3. How can platform engineering and internal governance improve software security within organizations?

    ___________________________

    Sponsors

    Imperva:https://itspm.ag/imperva277117988

    LevelBlue: https://itspm.ag/attcybersecurity-3jdk3

    ___________________________

    Watch this and other videos on ITSPmagazine's YouTube Channel

    Redefining CyberSecurity Podcast with Sean Martin, CISSP playlist:

    📺 https://www.youtube.com/playlist?list=PLnYu0psdcllS9aVGdiakVss9u7xgYDKYq
    ITSPmagazine YouTube Channel:

    📺 https://www.youtube.com/@itspmagazine

    Be sure to share and subscribe!

    ___________________________

    Resources

    NCF Whitepaper: https://tag-app-delivery.cncf.io/whitepapers/platforms/

    CNCF Platform Maturity Model: https://tag-app-delivery.cncf.io/whitepapers/platform-eng-maturity-model/

    Secure-by-Design at Google: What is the website URL for Secure-by-Design at Google?
    https://research.google/pubs/secure-by-design-at-google/

    Software Transparency: Supply Chain Security in an Era of a Software-Driven Society (Book): https://a.co/d/0bNaPmF

    Effective Vulnerability Management: Managing Risk in the Vulnerable Digital Ecosystem: https://a.co/d/6xs5saH

    ___________________________

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:

    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in sponsoring this show with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Harnessing Dark Web Insights to Understand Risks from the Attacker's Viewpoint | A Brand Story Conversation From Black Hat USA 2024 | A Resecurity Story with Christian Lees and Shawn Loveland | On Location Coverage with Sean Martin and Marco Ciappelli Aug 19, 2024
    Show notes

    At Black Hat USA 2024, the spotlight is on redefining and rethinking security, as discussed in this Brand Story episode with Resecurity. Sean Martin, Christian Lees, and Shawn Loveland share the mic to explore the cutting-edge innovations shifting paradigms within the cybersecurity domain. Christian Lees and Shawn Loveland from Resecurity dive deep into the substance of their work and its impact on modern security teams. The primary focus is Resecurity's approach towards threat intelligence and how it aids organizations in proactively mitigating risks.

    The discussion kicks off with an overview of Resecurity's approach to threat intelligence. Unlike conventional models that operate from within the firewall, Resecurity adopts an outside-in perspective, helping clients understand what attackers might know about their infrastructure. Shawn Loveland emphasizes this unique viewpoint by illustrating how Resecurity helps organizations identify potential breaches and vulnerabilities from the attacker's perspective, well before any threats materialize.

    One intriguing point discussed by Lees and Loveland is Resecurity's comprehensive data sourcing from the dark web. Resecurity does not simply rely on common threat intel from visible websites but digs deep into exclusive, invitation-only forums and other obscure corners of the web. This meticulous venture results in a much more profound understanding of potential threats, minimizing blind spots and the risk of data inaccuracies or AI hallucinations. By drawing on diverse data sources, Resecurity promises more significant and accurate insights into the motives and methods of cybercriminals.

    Moreover, Loveland highlights the technologically sophisticated tactics employed by Resecurity, combining AI to convert unstructured data into structured, actionable intelligence for security teams. This automation not only boosts efficiency but also empowers analysts to make more informed decisions swiftly. AI in Resecurity's arsenal is not a standalone entity but integrates deeply with the human-driven aspects of threat intelligence, enriching the overall analytic experience with contextual understanding and tangible evidence.

    The guests also touch on Resecurity's AI capabilities, illustrating this through scenarios where AI accelerates threat detection and response. By transforming vast amounts of data into comprehensible formats, and even summarizing complex situations into actionable insights, AI significantly reduces the ordeal for security analysts while enhancing precision.

    In conclusion, Resecurity’s state-of-the-art threat intelligence solutions, emphasized by the knowledgeable insights from Christian Lees and Shawn Loveland, represent a proactive and innovative approach to modern cybersecurity.

    Learn more about Resecurity: https://itspm.ag/resecurb51

    Note: This story contains promotional content. Learn more.

    Guests:

    Christian Lees, CTO, Resecurity [@RESecurity]

    On LinkedIn | https://www.linkedin.com/in/christian-lees-72886b3/

    Shawn Loveland, Chief Operating Officer, Resecurity [@RESecurity]

    On LinkedIn | https://www.linkedin.com/in/shawn-loveland/

    Resources

    Learn more and catch more stories from Resecurity: https://www.itspmagazine.com/directory/resecurity

    View all of our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegas

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Reflecting on Black Hat 2024: Operationalizing Cybersecurity for Enhanced Business Outcomes and Improved Resilience | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3 Aug 13, 2024
    Show notes

    Join Sean Martin and TAPE3 as they dive into key insights from Black Hat 2024, highlighting the crucial need to embed cybersecurity into core business practices to drive growth and resilience. Discover how leveraging AI, modular frameworks, and human expertise can transform cybersecurity from a defensive function into a strategic enabler of business success.

    ________

    This fictional story represents the results of an interactive collaboration between Human Cognition and Artificial Intelligence.

    Enjoy, think, share with others, and subscribe to "The Future of Cybersecurity" newsletter on LinkedIn.

    Sincerely, Sean Martin and TAPE3

    ________

    Sean Martin is the host of the Redefining CyberSecurity Podcast, part of the ITSPmagazine Podcast Network—which he co-founded with his good friend Marco Ciappelli—where you may just find some of these topics being discussed. Visit Sean on his personal website.

    TAPE3 is the Artificial Intelligence for ITSPmagazine, created to function as a guide, writing assistant, researcher, and brainstorming partner to those who adventure at and beyond the Intersection Of Technology, Cybersecurity, And Society. Visit TAPE3 on ITSPmagazine.

    Follow our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegas

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Enhancing Cyber Defense: AI Innovations and Challenges | A Black Hat USA 2024 Conversation with Rock Lambros | On Location Coverage with Sean Martin and Marco Ciappelli Aug 13, 2024
    Show notes

    Guest: Rock Lambros, CEO and founder of RockCyber [@RockCyberLLC]

    On LinkedIn | https://www.linkedin.com/in/rocklambros/

    On Twitter | https://twitter.com/rocklambros

    ____________________________

    Hosts:

    Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]

    On ITSPmagazine | https://www.itspmagazine.com/sean-martin

    Marco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society Podcast

    On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli

    ____________________________

    Episode Notes

    In a recent On Location episode recorded at Black Hat USA 2024, Sean Martin and Rock Lambros explore the prevailing topics and critical insights from the event's AI Summit. Sitting in the media room, not on the bustling show floor, the paid dissect the impact of artificial intelligence (AI) on cybersecurity, shedding light on its multifaceted implications.

    Rock Lambros, Founder and CEO of RockCyber, shares his observations about the predominance of AI in every corner of the conference. He notes how AI's presence is ubiquitous, even saturating advertisements at the airport. Lambros provides an overview of the AI Summit, highlighting the diversity of sessions ranging from high-level talks to vendor pitches. While some were mere product promotions, others provided substantial insights and valuable statistics, which Lambros is keen to share on platforms like LinkedIn.

    The discussion progresses to the remark by Nvidia's CEO, Bartley Richardson, suggesting that cyber is fundamentally a data problem, and AI could be the solution. Lambros concurs with this in part but emphasizes the necessity of maintaining human oversight in the process. Martin and Lambros reflect on the potential of AI to augment cybersecurity tasks, particularly for tier one analysts. There is a focus on leveraging AI to expedite responses to threats, potentially reducing the reaction time, which currently lags significantly behind the speed of AI-driven attacks.

    Lambros presents a balanced perspective, warning against the risk of reducing entry-level jobs in cybersecurity due to AI advancements, advocating instead for upskilling these professionals to handle more complex roles. The conversation touches on governance and risk management, with Lambros stressing the importance of integrating AI governance into existing frameworks without rendering AI oversight an exclusive domain for data scientists alone. He highlights the EU AI Act and Colorado AI Act as critical regulatory frameworks that emphasize this need.

    Lambros also brings attention to DARPA's open-source resources aimed at securing AI, encouraging practitioners to utilize these tools. Towards the end, a poignant observation from Robert Flores, former CISO of the CIA, underscores the difficulty governments face in keeping up with AI's rapid evolution. Lambros reflects on the mixed audience at the summit, a blend of technical practitioners and policy leaders, all grasping the significant impact and challenges AI brings to the field.

    The episode underscores the crucial balance between embracing technological advancements and maintaining human oversight and governance within cybersecurity. The insights shared by Rock Lambros and Sean Martin offer a nuanced perspective on the current state of AI in the field, emphasizing a collaborative approach to integrating these innovations responsibly.

    Be sure to follow our Coverage Journey and subscribe to our podcasts!

    ____________________________

    This Episode’s Sponsors

    LevelBlue: https://itspm.ag/levelblue266f6c

    Coro: https://itspm.ag/coronet-30de

    SquareX: https://itspm.ag/sqrx-l91

    Britive: https://itspm.ag/britive-3fa6

    AppDome: https://itspm.ag/appdome-neuv

    ____________________________

    Follow our Black Hat USA 2024 coverage: https://www.itspmagazine.com/black-hat-usa-2024-hacker-summer-camp-2024-event-coverage-in-las-vegas

    On YouTube: 📺 https://www.youtube.com/playlist?list=PLnYu0psdcllRo9DcHmre_45ha-ru7cZMQ

    Be sure to share and subscribe!

    ____________________________

    Resources

    Rock's LinkedIn Post: https://www.linkedin.com/posts/rocklambros_ai-cybersecurity-ciso-activity-7226988285410074626-rX3-

    AI Summit Keynote: Enhancing National Security with AI-Driven Cybersecurity | A Black Hat USA 2024 Conversation with Dr. Kathleen Fisher -- https://redefiningcybersecuritypodcast.com/episodes/ai-summit-keynote-enhancing-national-security-with-ai-driven-cybersecurity-a-black-hat-usa-2024-conversation-with-dr-kathleen-fisher-on-location-coverage-with-sean-martin-and-marco-ciappelli

    Learn more about Black Hat USA 2024: https://www.blackhat.com/us-24/

    ____________________________

    Catch all of our event coverage: https://www.itspmagazine.com/technology-cybersecurity-society-humanity-conference-and-event-coverage

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit: https://www.itspmagazine.com/redefining-cybersecurity-podcast

    To see and hear more Redefining Society stories on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-society-podcast

    Are you interested in sponsoring our event coverage with an ad placement in the podcast?

    Learn More 👉 https://itspm.ag/podadplc

    Want to tell your Brand Story as part of our event coverage?

    Learn More 👉 https://itspm.ag/evtcovbrf

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Innovations in Autonomous Penetration Testing and Continuous Security Posture Management | 7 Minutes on ITSPmagazine | A Short Brand Innovation Story From Black Hat USA 2024 | A Horizon3 Brand Story with Snehal Antani Aug 13, 2024
    Show notes

    In 7 Minutes on ITSPmagazine Short Brand Story recorded on location during Black Hat USA 2024, Sean Martin had a fascinating conversation with Snehal Antani, CEO and Co-Founder of Horizon3.ai. The discussion revolved around the innovative strides Horizon3.ai is making in autonomous penetration testing and continuous security posture management.

    Snehal Antani shared his journey from being a CIO to founding Horizon3.ai, highlighting the critical gaps in traditional security measures that led to the inception of the company. The main focus at Horizon3.ai is to continuously verify security postures through autonomous penetration testing, essentially enabling organizations to "hack themselves" regularly to stay ahead of potential threats. Antani explained the firm's concept of “go hack yourself,” which emphasizes continuous penetration testing. This approach ensures that security vulnerabilities are identified and addressed proactively rather than reacting after an incident occurs.

    A significant portion of the discussion centered around the differentiation between application and infrastructure penetration testing. While application pen testing remains a uniquely human task due to the need for identifying logic flaws in custom code, infrastructure pen testing can be effectively managed by algorithms at scale. This division allows Horizon3.ai to implement a human-machine teaming workflow, optimizing the strengths of both.

    Antani likened its functionality to installing ring cameras while conducting a pen test, creating an early warning network through the deployment of honey tokens. These tokens are fake credentials and sensitive command tokens designed to attract attackers, triggering alerts when accessed. This early warning system helps organizations build a high signal, low noise alert mechanism, enhancing their ability to detect and respond to threats swiftly.

    Antani emphasized that Horizon3.ai is not just a pen testing company but a data company. The data collected from each penetration test provides valuable telemetry that improves algorithm accuracy and offers insights into an organization’s security posture over time. This data-centric approach allows Horizon3.ai to help clients understand and articulate their security posture’s evolution.

    A compelling example highlighted in the episode involved a CISO from a large chip manufacturing company who utilized Horizon3.ai’s rapid response capabilities to address a potential vulnerability swiftly. The CISO was able to identify, test, fix, and verify the resolution of a critical exploit within two hours, showcasing the platform's efficiency and effectiveness.

    The conversation concluded with a nod to the practical benefits such innovations bring, encapsulating the idea that effective use of Horizon3.ai’s tools not only promotes better security outcomes but also enables security teams to perform their roles more efficiently, potentially even getting them home earlier.

    Learn more about Horizon3.ai: https://itspm.ag/horizon3ai-bh23

    Note: This story contains promotional content. Learn more.

    Guest: Snehal Antani, Co-Founder & CEO at Horizon3.ai [@Horizon3ai]

    On LinkedIn | https://www.linkedin.com/in/snehalantani/

    On Twitter | https://twitter.com/snehalantani

    Resources

    Learn more and catch more stories from Horizon3.ai: https://www.itspmagazine.com/directory/horizon3ai

    View all of our OWASP AppSec Global Lisbon 2024 coverage: https://www.itspmagazine.com/owasp-global-2024-lisbon-application-security-event-coverage-in-portugal

    Learn more about 7 Minutes on ITSPmagazine Short Brand Story Podcasts: https://www.itspmagazine.com/purchase-programs

    Newsletter Archive: https://www.linkedin.com/newsletters/tune-into-the-latest-podcasts-7109347022809309184/

    Business Newsletter Signup: https://www.itspmagazine.com/itspmagazine-business-updates-sign-up

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story

    About the host

    Sean Martin, CISSP, is a cybersecurity journalist, marketer and the host of Redefining CyberSecurity. He talks with practitioners, CISOs, researchers and business leaders about how security connects to the way organizations operate, and what that means for risk, revenue and trust. He holds the CISSP, first earned in 2003, and co-founded ITSPmagazine in 2015, where he covers technology, cybersecurity and society.

    Podcast, Redefining CyberSecurity: https://www.seanmartin.com/redefining-cybersecurity-podcast
    Video, Redefining CyberSecurity on YouTube: https://www.youtube.com/playlist?list=PLnYu0psdcllRWnxWBBf8E2rGm4AaELu1Y
    Newsletter, The Future of Cybersecurity: https://www.linkedin.com/newsletters/the-future-of-cybersecurity-7108625890296614912/
    Journalism, ITSPmagazine: https://www.itspmagazine.com
    For cybersecurity and technology companies, Studio C60: https://www.studioc60.com
    LinkedIn: https://www.linkedin.com/in/imsmartin/


    Previous 1 13 14 15 16 17 61 Next

    Related Podcasts

    Reply All

    1

    Reply All Games & Hobbies
    Inside VR & AR

    2

    Inside VR & AR Gadgets
    Note to Self

    3

    Note to Self News
    BrainStuff

    4

    BrainStuff Natural Sciences
    This Week in Tech (Audio)

    5

    This Week in Tech (Audio) News
    Hands-On Tech (Audio)

    6

    Hands-On Tech (Audio) Technology
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights