i
ITSPmagazine Blog — By Sean and Marco
102 articles matching · page 2 of 5
Why Cybersecurity Training Isn’t Working — And What To Do Instead | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Dr. Aunshul Rege | Redefining CyberSecurity with Sean Martin
Cybersecurity isn’t just a technical concern... it’s a community issue that spans generations and disciplines. In this episode, Dr. Aunshul Rege, Associate Professor at Temple University, shares how human-centered outreach, storytelling, and hands-on learning can redefine cyber awareness and inclusion at every level.
The Problem With Threat Modeling in Application Security: Too Slow, Too Theoretical, Not Agile | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 2 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Threat modeling is praised as the cornerstone of secure software design, yet only one-third of organizations have a documented process and fewer than four in ten use it systematically at scale. Sean Martin unpacks why adoption is so low—and why evolving processes, not just models, is the key to making it work.
AI in Application Security: Why False Positives Still Overwhelm Teams Despite the Hype | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 1 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
In this first AppSec Contradictions episode, Sean Martin reveals how AI-powered tools—meant to reduce risk—often amplify false positives, overwhelm analysts with alert fatigue, and erode trust across developers, security teams, and business leaders.
From Gatekeeper to Growth Partner: How Modern CISOs Build Trust, Drive Innovation, and Shape AI-Enabled Business Security | A Conversation with Legendary CISO, Andy Ellis | Redefining CyberSecurity with Sean Martin
What if cybersecurity wasn’t just about protection but about enabling the business to thrive? In this episode, Andy Ellis shares how reframing security as an operational and leadership function—not just a risk control—can unlock real innovation, trust, and long-term value.
When Artificial Intelligence Becomes the Baseline: Will We Even Know What Reality Is AInymore? | A Black Hat USA 2025 Recap | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
At Black Hat USA 2025, AI wasn’t the differentiator — it was the baseline. In this episode, I explore what happens when black-box automation takes over security decisions, the risks it creates for organizations and CISOs, and why defining and measuring “success” has never been more critical.
How Novel Is Novelty? Security Leaders Try To Cut Through the Cybersecurity Vendor Echo Chamber | Reflections from Black Hat USA 2025 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
Black Hat USA 2025 brought countless vendor announcements — but how many will actually change the way security programs run? In this episode, Sean Martin explores several vendor press releases and recalls several conversations with CISOs to break down the real trends, the AI hype, and what both CISOs and vendors need t
Making Honeypots Useful Again: Identity Security, Deception, and the Art of Detection | A Conversation with Sean Metcalf | Redefining CyberSecurity with Sean Martin
What if you could catch attackers simply by watching what they shouldn’t be touching? Sean Metcalf shares how carefully crafted honeypots and identity traps provide high-fidelity detection without drowning in alerts.
Hiring for the Present Is Hurting the Future of Cybersecurity: Why “Entry-Level” Rarely Means Entry | A Conversation with John Salomon | Redefining CyberSecurity with Sean Martin
Is the cybersecurity talent gap a myth—or just a result of outdated hiring practices? In this episode, we explore why mentorship, business alignment, and bold leadership are essential to building a resilient pipeline.
OT Emergency Preparedness: When Disaster Recovery Meets Real-World Safety | A Conversation with Tobias Halmans | Redefining CyberSecurity with Sean Martin
How do you plan for recovery when the system you’re trying to protect can’t be shut down—and won’t wait for IT’s playbook? In this episode, Tobias Halmans, an incident responder at admeritia in Germany, shares how disaster recovery and business continuity must be rethought when applied to operational technology (OT) en
When AI Looks First: How Agentic Systems Are Reshaping Cybersecurity Operations | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3
In this episode, we break down how AI agents are quietly transforming cybersecurity — acting as tireless scouts that flag what matters before humans ever step in. Hear sharp perspectives on what these systems really do well, where they fall short, and how leaders are rethinking trust, speed, and human oversight in the
From Feed to Foresight: Cyber Threat Intelligence as a Leadership Signal | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3
Join Sean Martin, TAPE3, and a handful of guest contributors as they explore how cyber threat intelligence can become a leadership signal that drives real business decisions and strategic growth. Hear how security and risk leaders use CTI to shape investments, partnerships, and resilience where it matters most.
Agentic AI to the Rescue? From Billable Hours to Bots: The New Legal Workflow | A Conversation with Frida Torkelsen and Maged Helmy | Redefining CyberSecurity with Sean Martin
Agentic AI is changing how legal teams work—enabling faster decision-making, better use of internal knowledge, and automation of high-value tasks. This conversation explores the real opportunities and serious risks that come with putting AI agents to work in law firms and legal departments.
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Building and Securing Intelligent Workflows: Why Your AI Strategy Needs Agentic AI Threat Modeling and a Zero Trust Mindset | A Conversation with Ken Huang | Redefining CyberSecurity with Sean Martin
Ken Huang, Co-Chair of the Cloud Security Alliance AI Working Group, explains how agentic AI is transforming enterprise workflows, redefining cybersecurity, and demanding a new approach to governance and risk. This episode breaks down what leaders across development, IT, and security need to know now to responsibly ado
Detection vs. Noise: What MITRE ATT&CK Evaluations Reveal About Your Security Tools | A Conversation with Allie Mellen | Redefining CyberSecurity with Sean Martin
MITRE ATT&CK Evaluations provide a rare, transparent look at how security tools detect and respond to threats—but making sense of the data is just as important as the results themselves. In this episode, Allie Mellen, Principal Analyst at Forrester, breaks down what the latest evaluations reveal about alert volume, det
The Cyber Resilience Act: How the EU is Reshaping Digital Product Security | A Conversation with Sarah Fluchs | Redefining CyberSecurity with Sean Martin
The Cyber Resilience Act (CRA) is set to transform cybersecurity accountability by requiring manufacturers—not just users—to ensure the security of digital products, from smart devices to industrial control systems. In this episode, Sean Martin speaks with Sarah Fluchs about what the CRA means for businesses, the chall
Hackers, Policy, and the Future of Cybersecurity: Inside The Hackers’ Almanack from DEF CON and the Franklin Project | A Conversation with Jake Braun | Redefining CyberSecurity with Sean Martin
The latest OWASP Top 10 for LLMs reveals the biggest security risks in AI, from prompt injection and supply chain vulnerabilities to emerging threats like system prompt leakage. In this episode, Sandy Dunn and Rock Lambros break down the 2025 updates, explain why LLM security is unlike traditional software risks, and s
Building a Community and a Culture of Security Education and Operations | A Zero Trust World Pre-Event Kick-Off | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 kicks off with a deep dive into what Zero Trust really means—beyond the buzzword—focusing on security operations, AI’s growing role, and the necessity of a continuous verification mindset. Hosts Sean Martin and Marco Ciappelli bring you inside the event, capturing insights from industry leaders, h
The 2025 OWASP Top 10 for LLMs: What’s Changed and Why It Matters | A Conversation with Sandy Dunn and Rock Lambros | Redefining CyberSecurity with Sean Martin
The latest OWASP Top 10 for LLMs reveals the biggest security risks in AI, from prompt injection and supply chain vulnerabilities to emerging threats like system prompt leakage. In this episode, Sandy Dunn and Rock Lambros break down the 2025 updates, explain why LLM security is unlike traditional software risks, and s
Shadow IT: Securing Your Organization in a World of Unapproved Apps | A Zero Trust World Conversation with Ryan Bowman | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode of On Location with Sean and Marco, Ryan Bowman, VP of Solutions Engineering at ThreatLocker, breaks down the growing risks of Shadow IT—unauthorized applications and tools that create security gaps, operational inefficiencies, and compliance challenges. With real-world insights and practical strategies
Cyber Threat Research, Hands-On Labs, and a Challenge You Can’t Afford to Miss | A Zero Trust World Conversation with Kieran Human | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 is bringing IT professionals, business leaders, and security practitioners together for hands-on hacking labs, expert-led sessions, and high-profile keynotes on the future of cybersecurity. In this episode, Sean Martin and Marco Ciappelli preview the must-attend event with Kieran Human, exploring
From Signaling to Safety: Protecting Critical Infrastructure and the Modern Railway from Digital Threats | A Conversation with Fahad Mughal | Redefining CyberSecurity with Sean Martin
Railway systems are becoming more digitized and interconnected, but with this progress comes significant cybersecurity risks that threaten safety, reliability, and operations. In this episode of Redefining Cybersecurity, Sean Martin and Fahad Mughal explore real-world cyber incidents, vulnerabilities in railway OT syst
Establishing a New Standard for Cybersecurity Professionals Worldwide: Addressing Trust, Standards, and Risk for the CISO Role | CISO Circuit Series with Heather Hinton | Michael Piacente and Sean Martin | Redefining CyberSecurity Podcast
Join hosts Sean Martin and Michael Piacente as they sit down with cybersecurity leader Heather Hinton to discover how a pioneering organization is transforming the role of CISOs by introducing professional standards, accreditation, and advocacy to elevate cybersecurity as a recognized discipline. This episode explores
From Code to Confidence: The Role of Human Factors in Secure Software Development | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Kelsey Fulton | Redefining CyberSecurity with Sean Martin
This episode explores the critical role of human factors in secure software development, featuring Dr. Kelsey Fulton’s insights on integrating security into the development lifecycle through collaboration, education, and thoughtful tool design. Discover how developers can overcome common challenges and shift towards a