i
ITSPmagazine Blog — By Sean and Marco
18 articles matching
Coding Is a Fraction of the Work. Harness Secures Everything After It. | A Brand Briefing at Black Hat USA 2026 with Rahul Sood, General Manager, Application Security at Harness | Hosted by Sean Martin
AI is writing more code than ever, and almost none of the new constraint sits in the writing. Recorded on site at Black Hat USA 2026, this conversation looks at what happens to security, policy, and release velocity in the 70 to 80 percent of the life cycle that comes after the code exists.
The Business Decision Hiding Inside FedRAMP's Consolidated Rules for 2026 | A Brand Story Conversation with Jason Ford and Michael Parisi of Steel Patriot Partners | Hosted by Sean Martin
FedRAMP's Consolidated Rules for 2026 are live, the dates are fixed, and the first decision they force on a cloud service provider is not a technical one. Jason Ford and Michael Parisi walk through what actually changes, what the transition costs beyond the budget line, and why the right answer is sometimes to walk awa
Building a Real Security Culture: Why Most AppSec Champion Programs Fall Short | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 5 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Security champions were meant to bridge dev and AppSec—but most programs measure attendance, not outcomes. In this episode of AppSec Contradictions, Sean Martin explains why awareness isn’t culture, what research shows about champion success, and how to rebuild AppSec programs that actually reduce risk.
CI/CD Pipeline Security: Why Attackers Breach Your Software Pipeline and Own Your Build Before Production | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 4 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Attackers don’t need to breach production—they’re owning the CI/CD pipeline long before code goes live. Sean Martin unpacks why cloud and build systems remain the weakest links, the data proving it, and what teams can do to restore delivery integrity.
When the Coders Don’t Code: What Happens When AI Coding Tools Go Dark? | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
What happens when systems are built by AI coding tools—but no one fully understands how they work, or what to do when something breaks? This article explores the growing reliance on tools like ChatGPT and Claude for software development, raising open questions about resilience, incident response, and security in a worl
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction
The Problem With Threat Modeling in Application Security: Too Slow, Too Theoretical, Not Agile | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 2 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Threat modeling is praised as the cornerstone of secure software design, yet only one-third of organizations have a documented process and fewer than four in ten use it systematically at scale. Sean Martin unpacks why adoption is so low—and why evolving processes, not just models, is the key to making it work.
AI in Application Security: Why False Positives Still Overwhelm Teams Despite the Hype | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 1 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
In this first AppSec Contradictions episode, Sean Martin reveals how AI-powered tools—meant to reduce risk—often amplify false positives, overwhelm analysts with alert fatigue, and erode trust across developers, security teams, and business leaders.
Turning AppSec into a Workflow, Not a Roadblock – Building Security Programs That Teams Actually Want to Use | An OWASP AppSec Global 2025 Conversation with Spyros Gasteratos | On Location Coverage with Sean Martin and Marco Ciappelli
What if your AppSec program could be both deeply technical and deeply human? In this On Location episode from OWASP Global AppSec EU 2025 Conference, Spyros Gasteratos shares how automation, open-source tools, and community collaboration can unify fragmented efforts and turn security into a strategic advantage, not a b
Building, Breaking, Defending: Inside a Global AppSec Movement | OWASP AppSec Global 2025 Pre-Event Conversation with Avi Douglen | On Location Coverage with Sean Martin and Marco Ciappelli
This On Location episode offers a firsthand look at what makes a tight-knit application security community so impactful, especially when the conversations go beyond tools and tactics to focus on real collaboration and growth. From AI risks to culture shifts, you’ll hear what to expect at this year’s global gathering an
Resilience Is the Destination, Innovation Is the Path | An RSAC Conference 2025 Conversation | On Location Coverage with Sean Martin and Marco Ciappelli
Sean Martin and Marco Ciappelli walk the buzzing RSAC 2025 show floor to reflect on the real conversations shaping cybersecurity today—from quantum resilience and AI integration to the steady rise of zero trust and DevSecOps. With dozens of interviews recorded and more content on the way, this episode gives a quick but
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Book | The Developer's Playbook for Large Language Model Security: Building Secure AI Applications | A Conversation with Steve Wilson | Redefining CyberSecurity with Sean Martin
In this episode of The Redefining CyberSecurity Podcast, join host Sean Martin and Chief Product Officer, Steve Wilson, as they explore the intricacies of developing secure AI applications and the unique challenges posed by large language models. Discover actionable insights and frameworks, including Wilson's Responsib
Punch Cards, Steam Engines, 48 Volt Batteries, Platform Engineering, and the AI Revolution: The Ongoing Evolution of Language-Based Software Development | An OWASP AppSec Global Lisbon 2024 Conversation with Oleg Shanyuk | On Location Coverage
Join Sean Martin and Oleg Shanyuk at the OWASP AppSec Global conference as they delve into the transformative impact of AI on application security, development processes, and platform engineering. This episode offers nuanced perspectives on the balance between technological innovation and practical efficiency, making i
AI-Fitness and AI-Wellness and Deploying an Effective DevSecOps Team – What’s the Recipe for Success? | An Infosecurity Europe 2024 Conversation with Kevin Fielder | On Location Coverage with Sean Martin and Marco Ciappelli
Dive into a riveting discussion on the fusion of AI and software development with Kevin Fielder, CSO for NatWest Boxed and Metal, alongside hosts Sean Martin and Marco Ciappelli. Explore the ethical, technical, and futuristic implications of AI in the realm of information security and beyond, unveiling the delicate bal
A Reality Check: Platforms vs. Standalone Solutions and Their Place in an Expanding and Contracting Cybersecurity Market | A Conversation with Eric Parizo and Richard Stiennon | Redefining CyberSecurity Podcast with Sean Martin
In this long-awaited episode of Redefining CyberSecurity, security experts and analysts, Eric Parizo and Richard Stiennon, join Sean Martin to dive into a deep debate about cybersecurity platforms' future viability. Their combination of divergent insights and in-depth analysis of the complex market dynamics surrounding
How to Secure Tomorrow: A Cybersecurity Leader's Guide to Navigating 2024 | A Conversation with Etay Maor | Secure Your Strategy Podcast With Chloé Messdaghi
Unlock the secrets of 2024's digital frontier with expert insights and actionable strategies.
Overview of the Software Development Lifecycle (SDLC): Unraveling the World of DevSecOps | A Conversation With Chris Frazier | Loops and Lifecycles Podcast with Josh Mason
Delve into the purpose and significance of the DevSecOps life cycle, exploring how it has evolved over time and applies to various types of software, including web and mobile apps.