i
ITSPmagazine Blog — By Sean and Marco
23 articles matching
Coding Is a Fraction of the Work. Harness Secures Everything After It. | A Brand Briefing at Black Hat USA 2026 with Rahul Sood, General Manager, Application Security at Harness | Hosted by Sean Martin
AI is writing more code than ever, and almost none of the new constraint sits in the writing. Recorded on site at Black Hat USA 2026, this conversation looks at what happens to security, policy, and release velocity in the 70 to 80 percent of the life cycle that comes after the code exists.
Vulnerability Backlogs Can Finally Reach Zero | A Brand Spotlight Conversation with Ondrej Vlcek, Co-Founder and CEO of AISLE | Hosted by Sean Martin
A backlog of a million open vulnerabilities has never had a realistic path to zero, and the window between disclosure and exploitation keeps getting shorter. Ondrej Vlcek explains what changes when AI stops matching patterns and starts reasoning about code the way an attacker does.
Building a Real Security Culture: Why Most AppSec Champion Programs Fall Short | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 5 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Security champions were meant to bridge dev and AppSec—but most programs measure attendance, not outcomes. In this episode of AppSec Contradictions, Sean Martin explains why awareness isn’t culture, what research shows about champion success, and how to rebuild AppSec programs that actually reduce risk.
Zero Trust in Action: Revolutionizing Incident Response | A Zero Trust World Conversation with Art Ocain | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode, Art Ocain, VP of Cybersecurity & Incident Response at Airiam, shares practical strategies for applying zero trust principles to incident response, revealing how dynamic containment and micro-segmentation can safeguard critical systems during a breach. Listen in to learn how to align security initiative
From Code to Cloud: Breaking Down Advanced Software Supply Chain Red Teaming Techniques | A Conversation with Paul McCarty | Redefining CyberSecurity with Sean Martin
Dive into the evolving landscape of software supply chain security with host Sean Martin and guest Paul McCarty, who unpack the complexities and the need for nuanced red teaming approaches in today's digital ecosystem. Explore their insights on the multi-layered aspects of application environments, the pivotal role of
Leadership and Transformation: Building a Business-Centric Cybersecurity Framework | A Conversation with Nitin Raina | Redefining CyberSecurity with Sean Martin
In this new episode of the Redefining Cybersecurity Podcast, Sean Martin chats with Nitin Raina about pioneering a transformative approach to cybersecurity that aligns with business growth and strategy. Nitin shares invaluable insights from his journey of evolving his organization's cybersecurity framework, demonstrati
Confused Learning: Supply Chain Attacks through Machine Learning Models | A Conversation With Adrian Wood and Mary Walker | On Location Coverage with Sean Martin and Marco Ciappelli
Join Sean Martin as he explores the world of supply chain attacks through machine learning models with security engineers Mary Walker and Adrian Wood from Dropbox. Discover the hidden risks of using machine learning models as software programs and the proactive steps needed to safeguard against shadow AI threats.
Book | Software Supply Chain Security: Securing the End-to-end Supply Chain for Software, Firmware, and Hardware | A Conversation with Cassie Crossley | Redefining CyberSecurity Podcast with Sean Martin
In this episode of the Redefining CyberSecurity Podcast, host Sean Martin engages with Cassie Crossley, a leading voice in supply chain security at Schneider Electric, to dissect the intricate complexities of securing IT, OT and IoT systems in an ever-evolving cybersecurity landscape. This conversation not only illumin
Beyond Traditional Software Security: Let's Explore the Concept of a Workflow Bill of Materials (WBOM) | A Conversation with Francesco Cipollone | Redefining CyberSecurity Podcast with Sean Martin
In this episode of Redefining CyberSecurity Podcast, host Sean Martin and guest Francesco Cipollone discuss the security vulnerabilities in pre-made website development tools and the importance of threat modeling and secure defaults.
Elevating Pen Testing: The ASVS Revolution | A Conversation With Grant Ongers | Loops and Lifecycles Podcast with Josh Mason
Grant Ongers unveils the ASVS revolution – a game-changer in pen testing!
Follow the Money | From Bugs to Bad Intentions: Evolving Perspectives on Product Security | A Conversation with Allison Miller | Las Vegas Black Hat 2023 Event Coverage | Redefining CyberSecurity Podcast With Sean Martin
Bug or feature? Vulnerability or exploitation? These questions often arise in the realm of product security. Also anti-fraud. Let's have that intricate dance between fraud, cyber attacks, and risk management with Allison Miller, Marco Ciappelli, and Sean Martin.
Beyond the Code: The Human Side of Cybersecurity and Social Engineering | A Conversation with Aunshul Rege | Redefining CyberSecurity Podcast With Sean Martin
Discover the fascinating world of social engineering and cybersecurity as we dive into a captivating conversation with Aunshul Rege, revealing the secrets of blending tech and human psychology.
The ROC Revolution: Risk Management Reimagined with Business Context Overlays in the Risk Operations Center | A Their Story Conversation from RSA Conference 2023 | A Brinqa Story with Mayuresh Ektare
Dive into the world of risk management and cybersecurity as Mayuresh Ektare and Sean Martin discuss the importance of centralizing risk management frameworks, creating a unified data model, and understanding the business context in order to prioritize and mitigate potential vulnerabilities.
AppSec Village At DEF CON 30 | Chats On The Road | A Conversation With Chris Kubecka, Liora Herman, And Erez Yalon | Black Hat 2022 And DEF CON 30 Las Vegas Event Coverage | Redefining CyberSecurity Podcast With Sean Martin And Marco Ciappelli
Applications run the world. They provide an interface to the rest of the technologies and data we create, share, and make decisions with. Sometimes these interfaces come in the form of a user interface (UX), sometimes in the form of an API. In both cases, they offer a path to the systems and information we hold dear to
From Enrolling In College To Gambling, Traveling, And Shopping, Evasive Bad Bots Are A Major Source Of Online Fraud | The Bad Bot Report 2022 | Part 2 | An Imperva Brand Story With Ryan Windham
As we continue this 2nd part of the conversation, we immediately kick things off with Gremlins and quickly move into real-world scenarios where bots wreak havoc.
From Enrolling In College To Gambling, Traveling, And Shopping, Evasive Bad Bots Are A Major Source Of Online Fraud | The Bad Bot Report 2022 | Part 1 | An Imperva Brand Story With Ryan Windham
A new year and a new Bad Bot Report from Imperva. How is it looking? Well, this year, we see an increase in the sophistication level of bad bots compared to last year, with advanced bad bots accounting for 25.9% of all bad bot traffic in 2021, compared to 16.7% in 2020. In addition, evasive bad bots are on the rise, no
Chats On The Road: From France To Colorado To Las Vegas | Founders' Journey To Make The World Of Information Security Better Through Information Sharing | A CrowdSec Brand Story With CEO Philippe Humeau
The venture market in cybersecurity continues to shift as the economy ebbs and flows throughout the world. However, when you have a good idea, it still gets the attention of the users and the investors, even if that means starting at the bottom and working your way up.
Making The World A Better Place Through Software | A WSO2 Brand Story About The Founders' Vision And Mission And The Journey To Bring The Asgardeo IDaaS To Market With Michael Bunyard
The founder's journey can directly impact what a company focuses on and why. In this Asgardeo by WSO2 story, you'll get to hear how their work is making the world a better place through software.
RSA Conference 2022 | A BlackCloak Brand Story About Supply Chain Security, Hacking Back, And MySpace With Dr Chris Pierson
Dr Chris Pierson has held many roles and has been a regular speaker at RSA Conference over the years. What's he up to this year as the event goes back to in-person engagements?
Knowledge Is Different Than Information | Investing In The CyberSecurity Crowd Means Investing In Businesses, Society, And Humanity | A CrowdSec Brand Story With CEO Philippe Humeau And Hacker-Maker Phillip Wylie
How can an industry have so much data and information yet still lack the knowledge necessary to make quick, meaningful, impactful decisions? There could be many reasons, but one is no longer a missing intelligence-sharing platform.
A Dialogue with Caroline Wong, VP of Cobalt Labs
Crowdsourcing puts a whole new perspective on how we do pen testing in the InfoSec industry. ITSPmagazine sat down with Caroline Wong, CISSP and VP of Security Strategy at Cobalt Labs, who explains the benefits of crowdsourced security, how diversity plays a part, and why structuring your metrics is key to determining
Champion for Justice – Robert Wood Tackles Healthcare Security
Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bo
A Dialogue with Julien Bellanger, CEO Prevoty
How does a startup CEO with no cybersecurity experience end up a leader in runtime application security? Read about Prevoty co-founder and CEO Julien Bellanger’s journey in infosec in this exclusive ITSPmagazine interview.