i
ITSPmagazine Blog — By Sean and Marco
22 articles matching
Using AI to Cut GRC Busywork Without Cutting Out the Human | A Redefining CyberSecurity Podcast Conversation with Princess Okoro, Manager, Security Governance, Risk and Compliance of Trainline
Princess Okoro, Manager, Security Governance, Risk and Compliance at Trainline, makes the case that adding AI to a broken process only makes the process worse. She shows how her team uses a ChatGPT policy review agent as a first pass with a human checking every finding, and why AI governance is the next problem to…
The Regulators Already Assume You Have an AI Inventory. Can You Prove It?
A look at the governance gap between compliance reports and ground truth, why SAST and SCA miss the AI supply chain, and what deterministic discovery of models, MCP servers, and agents actually requires.
Marketing Volume Held Steady. Scrutiny Went Up. | Lens Four by Sean Martin | Read by TAPE9
Black Hat USA 2026 was not the year AI arrived, it was the year the industry stopped asking whether to adopt AI and started grinding through the four questions that come after it. Who is accountable, what is the evidence, where is the data coming from, and is the foundation actually configured to hold the weight.
An imperfect drink with a perfect story. My reflections from Black Hat USA 2026 | An Analog Brain In A Digital Age — An Audio Newsletter by Marco Ciappelli
On day two we decided to go record our recap at the Black Hat bar. We got there too late to get a drink. The expo floor was closing, and the bartender must have had better things to do. Or another bar to tend, somewhere in a city that has more bars than it has hours. They called it a bar. At that time of the afternoon
Sovereign AI Becomes an Operational Requirement, and Crogl Built for It From the Start | A Recap at Black Hat USA 2026 with Monzy Merza, Co-Founder and CEO at Crogl | Hosted by Marco Ciappelli
A free download, a hackathon running a few feet away, and a security community that has stopped asking whether AI belongs in the SOC and started asking who governs it. Monzy Merza explains why sovereignty, model choice, and consistency arrived together this year.
Vulnerability, Visibility, and Velocity Shape the Security Roadmap Now | A Recap at Black Hat USA 2026 with Sean Murphy, Field CISO for North America at F5 | Hosted by Marco Ciappelli
Three days of hallway conversations with CISOs at Black Hat USA 2026 left one pattern behind, and it comes down to three words that start with the same letter. Sean Murphy explains why the acceleration in security reads more like a physics problem than a technology problem, and why the agents now running in production
AI Agents Act at Machine Speed. Menlo Security Governs What They Actually Do. | A Brand Briefing at Black Hat USA 2026 with Eric Avigdor, Vice President of Product of Menlo Security | Hosted by Sean Martin
Enterprises are handing AI agents access to email, file stores, and the open internet at the same time, and most of them have not decided who owns the guardrails. Recorded on location at Black Hat USA 2026, this conversation looks at what changes when the thing reading your web pages has no human skepticism.
Agents in Production Need a Named Accountable Owner | A Full Sponsor Brand Briefing at Black Hat USA 2026 with Sean Murphy, Field CISO for North America at F5 | Hosted by Sean Martin
A security leader who spent years buying F5 technology now works inside the company, and four weeks in he is making the case that availability belongs in the security portfolio and that every agent heading into production needs a name attached to it. Recorded on location at Black Hat USA 2026, this conversation moves f
Customer Zero at Exabyte Scale | A Full Sponsor Brand Briefing at Black Hat USA 2026 with Jeremy Powell, CISO of Sumo Logic | Hosted by Sean Martin
Seven exabytes a day, 100 percent first level triage through automation, and 25 hours a week back per analyst. Jeremy Powell has been running his own company's platform in production for close to a year and explains what it changes about the SOC, the board conversation, and the analyst's job.
Agentic Security Changes Everything | An On Location Conversation at Infosecurity Europe 2026 with John Sotiropoulos and Rock Lambros
The window between initial access and the next attacker move has collapsed from eight hours to twenty-two seconds, and no human-paced incident response process survives that math. John Sotiropoulos and Rock Lambros close out a day of OWASP GenAI Security work at Infosecurity Europe 2026 with the launch of an Agentic Se
A Forrester Analyst on the Security Roles Coming Next — and What AI Makes Obsolete in Cybersecurity | A Conversation with Madelein van der Hout | On Location With Sean Martin And Marco Ciappelli — Infosecurity Europe 2026
Two conferences, two moods: at RSA the drumbeat was resilience; at InfoSec, it's sovereignty. Sean and I close the week with Forrester analyst Madelein van der Hout — beaming in from the Netherlands — on why Europe makes a framework out of everything, what AI deployment is doing to the boardroom, and the security jobs
You're Still Reading the Advisory. The Attacker Already Left. | Lens Four by Sean Martin | Read by TAPE9
Project Glasswing gave 12 elite technology and financial organizations direct access to Anthropic's Claude Mythos Preview — an AI model that autonomously found thousands of zero-day vulnerabilities in weeks — to scan their own proprietary infrastructure and help set disclosure timelines. The rest of the world gets the
Security Is the Network: Integrating AI Firewall and Threat Intelligence Into the Fabric of Enterprise Defense | A Brand Highlight at RSAC Conference 2026 with Mounir Hahad, Head of HPE Threat Labs of Hewlett Packard Enterprise
At RSAC Conference 2026, Mounir Hahad of Hewlett Packard Enterprise joins Sean Martin to unpack two major announcements -- an AI firewall built for enterprise AI governance and the formal launch of HPE Threat Labs -- and explain why security that lives inside the network is fundamentally different from security bolted
Agentic AI at RSAC 2026: Revolutionary Tech or Just Marketing Noise? | Guests: Theresa Lanowitz and Joseph Carson
Is the RSA Conference floor a visionary glimpse into the future, or just an "AI blender" where every vendor tastes the same? Join hosts Marco Ciappelli and Sean Martin as they sit down with industry heavyweights Theresa Lanowitz and Joe Carson to dissect the real sentiment of RSAC 2026.
Task by Task: The Workflows We're Handing to AI — One Decision at a Time | Lens Four by Sean Martin | Read by TAPE9
Nobody decided to build a human-optional workflow — they just kept making reasonable procurement decisions, task by task, until the human became optional across hiring, contracting, finance, and security operations. Sean Martin traces what organizations have actually assembled, where accountability lives when it goes w
Building Community Around the AI SOC Revolution | A Brand Spotlight Conversation with Monzy Merza, Co-Founder and CEO of Crogl | AI SOC Summit 2026
Security teams face a new reality where threat actors operate at agentic speed and the cost of launching sophisticated attacks continues to drop. The AI SOC Summit brings together SOC analysts, security engineers, incident responders, and builders for a day of practical knowledge sharing, hands-on experimentation, and
AI Will Replace Democracy: The Future of Government is Here. Or, is it? Let's discuss! | A Conversation with Eli Lopian | Redefining Society And Technology Podcast With Marco Ciappelli
Technology entrepreneur Eli Lopian joins Marco to explore "AI-cracy" - a revolutionary governance model where artificial intelligence writes laws based on abundance metrics while humans retain judgment. This fascinating conversation examines how we might transition from broken democratic systems to AI-assisted governan
Hackers, Policy, and the Future of Cybersecurity: Inside The Hackers’ Almanack from DEF CON and the Franklin Project | A Conversation with Jake Braun | Redefining CyberSecurity with Sean Martin
The latest OWASP Top 10 for LLMs reveals the biggest security risks in AI, from prompt injection and supply chain vulnerabilities to emerging threats like system prompt leakage. In this episode, Sandy Dunn and Rock Lambros break down the 2025 updates, explain why LLM security is unlike traditional software risks, and s
The 2025 OWASP Top 10 for LLMs: What’s Changed and Why It Matters | A Conversation with Sandy Dunn and Rock Lambros | Redefining CyberSecurity with Sean Martin
The latest OWASP Top 10 for LLMs reveals the biggest security risks in AI, from prompt injection and supply chain vulnerabilities to emerging threats like system prompt leakage. In this episode, Sandy Dunn and Rock Lambros break down the 2025 updates, explain why LLM security is unlike traditional software risks, and s
Enhancing Cyber Defense: AI Innovations and Challenges | A Black Hat USA 2024 Conversation with Rock Lambros | On Location Coverage with Sean Martin and Marco Ciappelli
Rock Lambros, Founder and CEO of RockCyber, joins Sean Martin at Black Hat USA 2024 to discuss the pervasive influence of AI in cybersecurity and its potential to accelerate threat response times. Dive into their enlightening conversation on balancing technological advancements with human oversight and the critical imp
Unpacking Data Privacy and AI Ethics at RSA Conference 2024 | An RSA Conference 2024 Conversation With Anu Talus | On Location Coverage with Sean Martin and Marco Ciappelli
Join us as we share another insightful conversation from the On Location Podcast Coverage of RSA Conference 2024 hosted by Sean Martin and Marco Ciappelli.
Voice of the Future: Exploring AI, Speech Tech, Ethics, and Regulations | A conversation with Nigel Cannings | Redefining Society with Marco Ciappelli
Nigel Cannings, a lawyer and AI and Speech Technology expert, unravels the complexities of artificial intelligence, providing insights into ethics, regulation, and the human connection to technology in this captivating episode.