i
ITSPmagazine Blog — By Sean and Marco
102 articles matching · page 1 of 5
Cybersecurity Leadership Is a People Problem, Not a Technology Problem | A Redefining CyberSecurity Podcast Conversation with Tera Ladner, Deputy Global Chief Information Security Officer of Aflac
A deputy global CISO who came up through information governance and law school makes the case that the strongest security leaders lead with risk, relationships, and storytelling, not with technology. It is a conversation about non-traditional paths into cyber, building people-centric teams, and why the talent pipeline
When Patient Records, Powerlines, and Prompts All Lead to the Same Risk | A Redefining CyberSecurity Podcast Conversation with Gil Bashe, Chair, Global Health and Purpose of FINN Partners
Healthcare is one of the most attacked systems in cybersecurity, and the people defending it are saving lives just as surely as the EMT racing through traffic. Sean Martin sits down with Gil Bashe to examine where information, AI, and human leadership intersect in a system that still runs on fax machines and ransom pay
DriveThru Hacking: When Your Dashcam Becomes the Attack Vector | A Redefining CyberSecurity Podcast Conversation with Alina Tan and George Chen
Your dashcam is capturing far more than accidents -- and researchers Alina Tan and George Chen have built an automated tool to prove it, compromising dashcams in under six minutes through a fast food drive-through. This conversation explores how connected vehicle peripherals have become a gateway to privacy invasion, m
Order of Operations: The Foundation Risk Healthcare AI Is Running Past | Lens Four by Sean Martin | Read by TAPE9
Healthcare is deploying AI on a foundation it knows is incomplete — and the patient is sitting in the gap between the ambition and the infrastructure it requires. This analysis examines what the program data, the market dynamics, and the language of transformation are actually revealing about who owns the risk and who
When AI Touches Everything: Operationalizing the Five Most Dangerous New Attack Techniques at RSAC 2026 | A Redefining CyberSecurity Podcast Conversation with Ed Skoudis, President of SANS Technology Institute and Founder & CEO of Counter Hack
Every year, the SANS "Five Most Dangerous New Attack Techniques" session at RSA Conference draws standing-room-only crowds -- and every year, Ed Skoudis and his panel raise the stakes. This year, for the first time in the session's ten-year run on the main stage, AI is woven into every single topic on the list, signali
When Cyber Meets Physical: Building Executive and Employee Protection Programs That Actually Work | A Redefining CyberSecurity Podcast Conversation with Roland Cloutier, Principal of The Business Protection Group
Most organizations treat security as a technology problem -- but when executives are threatened, employees are caught in disasters, or physical and cyber risks collide, the gaps in that thinking become dangerously clear. Roland Cloutier, Principal of The Business Protection Group and former Global Chief Security Office
The 72-Minute Gap: What the Breaches, the Vendors, and the Messaging Are Actually Telling Us | Lens Four by Sean Martin | Read by TAPE9
AI-driven cyberattacks now move from breach to exfiltration in just 72 minutes, yet most security programs still operate on human timelines. Sean Martin examines what the latest breach data, vendor consolidation moves, and industry messaging are actually telling CISOs — through three lenses that connect the dots others
SOC Automation and the AI-Driven Future of Cybersecurity Defense | A Redefining CyberSecurity Podcast Conversation with Richard Stiennon, Chief Research Analyst of IT-Harvest
As AI models grow more capable by an order of magnitude each year, a new category of SOC automation vendors is replacing manual alert triage with autonomous, around-the-clock detection and response -- and the numbers suggest adoption is already well underway. In this conversation, Richard Stiennon, Chief Research Analy
Speaking Security with a Business Accent: Why Being Right Isn't Enough If Nobody Listens | A Redefining CyberSecurity Podcast Conversation with Josh Mason
Cybersecurity professionals are often technically right but strategically ignored, and the gap between security knowledge and business impact comes down to how the story is told. In this conversation, Josh Mason draws on his Air Force background, MBA training, and new book to explore how security teams can reframe thei
It's Not a Technology Problem, It's an Organizational Opportunity -- Building a Culture of Cybersecurity | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Dr. Keri Pearlson | Redefining CyberSecurity with Sean Martin
Organizations continue to invest heavily in cybersecurity technology, yet breaches persist at alarming rates. This conversation explores why building a culture of cybersecurity rooted in values, attitudes, and beliefs may be the missing piece that transforms how organizations approach resilience and protection.
It Fractured, Then Rebuilt Itself: The CISO Role Changed More in Five Years Than Ever Before, Setting the Stage for 2026 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
The CISO role has shifted from technical defense to business risk leadership, demanding judgment, communication, and trust as core capabilities. This conversation explores how security leaders redefine success by focusing on prioritization, human decision-making, and business alignment.
Five Patterns From 152 Episodes That Reshaped How I Think About Security, Technology, and Work Heading into 2026 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
After 152 conversations across security, technology, and creative disciplines, five recurring patterns emerge that challenge how organizations think about visibility, integration, and workflow design. This episode connects those patterns into a single view of what effective security actually requires heading into 2026.
The Hidden Risk Inside Your Build Pipeline: When Open Source Becomes an Attack Vector | A Conversation with Paul McCarty | Redefining CyberSecurity with Sean Martin
Malicious open source packages are no longer edge cases. They are deliberate, scalable attack paths targeting developers, CI pipelines, and the software supply chain itself.
Rethinking Public Health Workflows Through Automation and Governance: Why Data Modernization May Be The Key | A Conversation with Jim St. Clair | Redefining CyberSecurity with Sean Martin
AI is transforming how public health agencies collect, interpret, and act on data, but the benefits depend on strong interoperability, governance, and security foundations. This conversation breaks down the real-world opportunities and risks that leaders must navigate as AI adoption accelerates.
Inside the Economics That Shape Modern Cybersecurity Innovations: How the Cybersecurity Startup Engine Really Works | A Conversation with Investor and Author, Ross Haleliuk | Redefining CyberSecurity with Sean Martin
This episode explores how cybersecurity startups form, why the market produces so many tools, and how security buyers should evaluate both emerging and established vendors. Sean Martin and Ross Haleliuk break down the forces shaping today’s innovation engine and the business realities behind modern security solutions.
Beg Bounty: The New Wave of Unrequested Bug Claims and What They Mean | A Conversation with Casey Ellis | Redefining CyberSecurity with Sean Martin
This episode breaks down the rise of “beg bounties” and examines how unsolicited vulnerability claims create confusion, noise, and operational overhead for security teams. Sean Martin and Casey Ellis discuss what organizations can do to prepare, respond, and set clear expectations through structured disclosure policies
Building a Real Security Culture: Why Most AppSec Champion Programs Fall Short | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 5 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Security champions were meant to bridge dev and AppSec—but most programs measure attendance, not outcomes. In this episode of AppSec Contradictions, Sean Martin explains why awareness isn’t culture, what research shows about champion success, and how to rebuild AppSec programs that actually reduce risk.
Bridging the Cybersecurity Divide Between the Haves and Have-Nots: Lessons from Australia’s CISO Community | A Conversation with Andrew Morgan | Redefining CyberSecurity with Sean Martin
Andrew Morgan joins Sean Martin to unpack the widening cybersecurity gap between large enterprises and resource-strapped organizations. He shares how collaboration, cultural alignment, and practical resilience strategies can help close that divide.
How to Stay Resilient When Cybercrime Becomes Your Competition | A Conversation with Author and Former FBI Agent, Eric O'Niell | Redefining CyberSecurity with Sean Martin
Cybercrime has become a full-scale global economy, forcing legitimate businesses to compete with criminals for survival. Former FBI operative and NeXasure National Security Strategist Eric O’Neill joins Sean Martin to explain how preparation, clear strategy, and strong communication can keep companies resilient when—no
CI/CD Pipeline Security: Why Attackers Breach Your Software Pipeline and Own Your Build Before Production | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 4 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Attackers don’t need to breach production—they’re owning the CI/CD pipeline long before code goes live. Sean Martin unpacks why cloud and build systems remain the weakest links, the data proving it, and what teams can do to restore delivery integrity.
Sampling, Stealing, or Something Else Entirely: Who Gets the Credit When AI Creates the Song? | A Conversation with Marco Ciappelli | Music Evolves with Sean Martin
Can machines make music that feels human—without stealing from humans? In this episode, Sean Martin and Marco Ciappelli unpack the ethics, creativity, and emotional reality of AI-generated music, challenging each other (and listeners) to rethink what we call art.
The Silent Risk in AI-Powered Business Automation: Why No-Code Needs Serious Oversight | A Conversation with Walter Haydock | Redefining CyberSecurity with Sean Martin
AI-driven automation with no-code tools is empowering business teams to move fast—but at what risk? In this episode, Walter Haydock, founder of StackAware, joins Sean Martin to outline the hidden dangers, governance gaps, and practical safeguards every organization needs to understand before letting no-code AI fly free
The Hidden Cost of Too Many Cybersecurity Tools (Most CISOs Get This Wrong) | A Conversation with Pieter VanIperen | Redefining CyberSecurity with Sean Martin
Pieter VanIperen, Chief Information Security and Technology Officer at AlphaSense, shares what it really means to simplify security by focusing on context, value, and relevance—not volume or complexity. This conversation challenges the assumptions vendors make and offers real-world principles that security leaders can
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction