i
ITSPmagazine Blog — By Sean and Marco
161 articles matching · page 2 of 7
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction
Why Cybersecurity Training Isn’t Working — And What To Do Instead | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Dr. Aunshul Rege | Redefining CyberSecurity with Sean Martin
Cybersecurity isn’t just a technical concern... it’s a community issue that spans generations and disciplines. In this episode, Dr. Aunshul Rege, Associate Professor at Temple University, shares how human-centered outreach, storytelling, and hands-on learning can redefine cyber awareness and inclusion at every level.
The Problem With Threat Modeling in Application Security: Too Slow, Too Theoretical, Not Agile | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 2 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Threat modeling is praised as the cornerstone of secure software design, yet only one-third of organizations have a documented process and fewer than four in ten use it systematically at scale. Sean Martin unpacks why adoption is so low—and why evolving processes, not just models, is the key to making it work.
AI in Application Security: Why False Positives Still Overwhelm Teams Despite the Hype | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 1 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
In this first AppSec Contradictions episode, Sean Martin reveals how AI-powered tools—meant to reduce risk—often amplify false positives, overwhelm analysts with alert fatigue, and erode trust across developers, security teams, and business leaders.
AI Dependency Crisis + EV Infrastructure Failures: Tech Reality Check 2025 | Random and Unscripted Weekly Update with Sean Martin and Marco Ciappelli
Welcome back to Random and Unscripted, where Sean Martin and Marco Ciappelli deliver unvarnished reality checks on technology's actual impact on business and society. This week: How AI dependency is creating a critical thinking crisis in cybersecurity teams, why electric vehicle infrastructure promises are hitting hars
From Gatekeeper to Growth Partner: How Modern CISOs Build Trust, Drive Innovation, and Shape AI-Enabled Business Security | A Conversation with Legendary CISO, Andy Ellis | Redefining CyberSecurity with Sean Martin
What if cybersecurity wasn’t just about protection but about enabling the business to thrive? In this episode, Andy Ellis shares how reframing security as an operational and leadership function—not just a risk control—can unlock real innovation, trust, and long-term value.
We're Becoming Dumb and Numb: Why Black Hat 2025's AI Hype Is Killing Cybersecurity -- And Our Ability to Think | Random and Unscripted Weekly Update with Sean Martin and Marco Ciappelli
Sean and Marco expose Black Hat 2025's AI marketing problem on Random and Unscripted: every vendor claimed "agentic AI" while CISOs couldn't tell them apart. Using the Greek myth of Talos, they warn we're surrendering decision-making to imperfect systems, creating echo chambers that make us "dumb and numb" to reality.
The Narrative Attack Paradox: When Cybersecurity Lost the Ability to Detect Its Own Deception and the Humanity We Risk When Truth Becomes Optional | Reflections from Black Hat USA 2025 on the Marketing That Chose Fiction Over Facts
When different vendor technologies are being fed into the same promotional blender, possibly a generative AI one, producing standardized output regardless of what went in. When an entire industry converges on identical language to describe supposedly different technologies, meaningful technical discourse breaks down.
When Artificial Intelligence Becomes the Baseline: Will We Even Know What Reality Is AInymore? | A Black Hat USA 2025 Recap | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
At Black Hat USA 2025, AI wasn’t the differentiator — it was the baseline. In this episode, I explore what happens when black-box automation takes over security decisions, the risks it creates for organizations and CISOs, and why defining and measuring “success” has never been more critical.
How Novel Is Novelty? Security Leaders Try To Cut Through the Cybersecurity Vendor Echo Chamber | Reflections from Black Hat USA 2025 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
Black Hat USA 2025 brought countless vendor announcements — but how many will actually change the way security programs run? In this episode, Sean Martin explores several vendor press releases and recalls several conversations with CISOs to break down the real trends, the AI hype, and what both CISOs and vendors need t
Making Honeypots Useful Again: Identity Security, Deception, and the Art of Detection | A Conversation with Sean Metcalf | Redefining CyberSecurity with Sean Martin
What if you could catch attackers simply by watching what they shouldn’t be touching? Sean Metcalf shares how carefully crafted honeypots and identity traps provide high-fidelity detection without drowning in alerts.
From Black Hat to Black Sabbath / Ozzy: AI Agents and Guitars (again!) + Entry Level Cybersecurity Jobs, Robots Evolution, and the Weekly Recap You Didn’t Expect | Random and Unscripted Weekly Update with Sean Martin and Marco Ciappelli
Marco Ciappelli and Sean Martin are back with another random and unscripted weekly recap—from pre-Black Hat buzz and AI agents to vintage wood guitars, talent gaps, and Glen Miller debates. This week’s reflection hits tech, music, and philosophy in all the right ways. Tune in, ramble with us, and subscribe.
Hiring for the Present Is Hurting the Future of Cybersecurity: Why “Entry-Level” Rarely Means Entry | A Conversation with John Salomon | Redefining CyberSecurity with Sean Martin
Is the cybersecurity talent gap a myth—or just a result of outdated hiring practices? In this episode, we explore why mentorship, business alignment, and bold leadership are essential to building a resilient pipeline.
OT Emergency Preparedness: When Disaster Recovery Meets Real-World Safety | A Conversation with Tobias Halmans | Redefining CyberSecurity with Sean Martin
How do you plan for recovery when the system you’re trying to protect can’t be shut down—and won’t wait for IT’s playbook? In this episode, Tobias Halmans, an incident responder at admeritia in Germany, shares how disaster recovery and business continuity must be rethought when applied to operational technology (OT) en
When AI Looks First: How Agentic Systems Are Reshaping Cybersecurity Operations | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3
In this episode, we break down how AI agents are quietly transforming cybersecurity — acting as tireless scouts that flag what matters before humans ever step in. Hear sharp perspectives on what these systems really do well, where they fall short, and how leaders are rethinking trust, speed, and human oversight in the
From Feed to Foresight: Cyber Threat Intelligence as a Leadership Signal | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3
Join Sean Martin, TAPE3, and a handful of guest contributors as they explore how cyber threat intelligence can become a leadership signal that drives real business decisions and strategic growth. Hear how security and risk leaders use CTI to shape investments, partnerships, and resilience where it matters most.
Agentic AI to the Rescue? From Billable Hours to Bots: The New Legal Workflow | A Conversation with Frida Torkelsen and Maged Helmy | Redefining CyberSecurity with Sean Martin
Agentic AI is changing how legal teams work—enabling faster decision-making, better use of internal knowledge, and automation of high-value tasks. This conversation explores the real opportunities and serious risks that come with putting AI agents to work in law firms and legal departments.
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Building and Securing Intelligent Workflows: Why Your AI Strategy Needs Agentic AI Threat Modeling and a Zero Trust Mindset | A Conversation with Ken Huang | Redefining CyberSecurity with Sean Martin
Ken Huang, Co-Chair of the Cloud Security Alliance AI Working Group, explains how agentic AI is transforming enterprise workflows, redefining cybersecurity, and demanding a new approach to governance and risk. This episode breaks down what leaders across development, IT, and security need to know now to responsibly ado
Detection vs. Noise: What MITRE ATT&CK Evaluations Reveal About Your Security Tools | A Conversation with Allie Mellen | Redefining CyberSecurity with Sean Martin
MITRE ATT&CK Evaluations provide a rare, transparent look at how security tools detect and respond to threats—but making sense of the data is just as important as the results themselves. In this episode, Allie Mellen, Principal Analyst at Forrester, breaks down what the latest evaluations reveal about alert volume, det
The Cyber Resilience Act: How the EU is Reshaping Digital Product Security | A Conversation with Sarah Fluchs | Redefining CyberSecurity with Sean Martin
The Cyber Resilience Act (CRA) is set to transform cybersecurity accountability by requiring manufacturers—not just users—to ensure the security of digital products, from smart devices to industrial control systems. In this episode, Sean Martin speaks with Sarah Fluchs about what the CRA means for businesses, the chall
Hackers, Policy, and the Future of Cybersecurity: Inside The Hackers’ Almanack from DEF CON and the Franklin Project | A Conversation with Jake Braun | Redefining CyberSecurity with Sean Martin
The latest OWASP Top 10 for LLMs reveals the biggest security risks in AI, from prompt injection and supply chain vulnerabilities to emerging threats like system prompt leakage. In this episode, Sandy Dunn and Rock Lambros break down the 2025 updates, explain why LLM security is unlike traditional software risks, and s
Strengthening Cybersecurity Through Zero Trust | A Conversation with Adam Fuller at Zero Trust World 2025 | A Zero Trust World 2025 On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025: Strengthening Cybersecurity Through Zero Trust Zero Trust World 2025 has come to a close, leaving behind a series of thought-provoking discussions on what it truly means to build a culture of security. Hosted by ThreatLocker, the event brought together security professionals, IT leaders, and dec
Building a Community and a Culture of Security Education and Operations | A Zero Trust World Pre-Event Kick-Off | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 kicks off with a deep dive into what Zero Trust really means—beyond the buzzword—focusing on security operations, AI’s growing role, and the necessity of a continuous verification mindset. Hosts Sean Martin and Marco Ciappelli bring you inside the event, capturing insights from industry leaders, h