i
ITSPmagazine Blog — By Sean and Marco
147 articles matching · page 1 of 7
Beg Bounty: The New Wave of Unrequested Bug Claims and What They Mean | A Conversation with Casey Ellis | Redefining CyberSecurity with Sean Martin
This episode breaks down the rise of “beg bounties” and examines how unsolicited vulnerability claims create confusion, noise, and operational overhead for security teams. Sean Martin and Casey Ellis discuss what organizations can do to prepare, respond, and set clear expectations through structured disclosure policies
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction
We're Becoming Dumb and Numb: Why Black Hat 2025's AI Hype Is Killing Cybersecurity -- And Our Ability to Think | Random and Unscripted Weekly Update with Sean Martin and Marco Ciappelli
Sean and Marco expose Black Hat 2025's AI marketing problem on Random and Unscripted: every vendor claimed "agentic AI" while CISOs couldn't tell them apart. Using the Greek myth of Talos, they warn we're surrendering decision-making to imperfect systems, creating echo chambers that make us "dumb and numb" to reality.
How Novel Is Novelty? Security Leaders Try To Cut Through the Cybersecurity Vendor Echo Chamber | Reflections from Black Hat USA 2025 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
Black Hat USA 2025 brought countless vendor announcements — but how many will actually change the way security programs run? In this episode, Sean Martin explores several vendor press releases and recalls several conversations with CISOs to break down the real trends, the AI hype, and what both CISOs and vendors need t
Holding the Line on Quality in an AI-Driven SDLC | An OWASP AppSec Global 2025 Conversation with Sarah-Jane Madden | On Location Coverage with Sean Martin and Marco Ciappelli
Sarah-Jane Madden shares a practical and passionate take on how AI can enhance—not replace—secure software development, urging developers and business leaders alike to rethink how they balance speed, quality, and security. From architecture to code to culture, she challenges us to embrace change without leaving critica
Agentic AI to the Rescue? From Billable Hours to Bots: The New Legal Workflow | A Conversation with Frida Torkelsen and Maged Helmy | Redefining CyberSecurity with Sean Martin
Agentic AI is changing how legal teams work—enabling faster decision-making, better use of internal knowledge, and automation of high-value tasks. This conversation explores the real opportunities and serious risks that come with putting AI agents to work in law firms and legal departments.
Why CISOs Should Still Say Yes to the Role—Even Now | A RSAC Conference 2025 Conversation with Tim Brown | On Location Coverage with Sean Martin and Marco Ciappelli
Tim Brown, CISO at SolarWinds, shares why the CISO role—despite its pressures—is more important and rewarding than ever, offering a candid look at leadership, liability, and resilience in today’s cybersecurity environment. From personal lessons learned to critical conversations on stress, insider threats, and supply ch
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Building and Securing Intelligent Workflows: Why Your AI Strategy Needs Agentic AI Threat Modeling and a Zero Trust Mindset | A Conversation with Ken Huang | Redefining CyberSecurity with Sean Martin
Ken Huang, Co-Chair of the Cloud Security Alliance AI Working Group, explains how agentic AI is transforming enterprise workflows, redefining cybersecurity, and demanding a new approach to governance and risk. This episode breaks down what leaders across development, IT, and security need to know now to responsibly ado
Interoperability, AI, and the Future of Trust in Healthcare | A HIMSS 2025 Conversation with Robert Havasy | On Location Coverage with Sean Martin and Marco Ciappelli
AI is transforming healthcare, but questions remain about how it will be implemented, regulated, and integrated into patient care. In this episode, Robert Havasy, Senior Director, Connected Health at HIMSS, shares insights on AI-driven EHRs, interoperability challenges, and the evolving role of policy in shaping the fu
Beyond the Briefings: Exploring the Pulse of Cybersecurity Communities | A Black Hat Europe 2024 Conversation with Steve Wylie | On Location Coverage with Sean Martin and Marco Ciappelli
Join Sean Martin and Marco Ciappelli in a lively conversation about the global impact of the Black Hat Platform and the unique flavors each regional event brings to the cybersecurity community. From London’s vibrant culture to the balance between global trends and local insights, this episode captures the heart of inno
From Healthcare to Cybersecurity: Leveraging Past Professions to Enhance Cybersecurity Programs | A Conversation with Gina D’Addamio | Redefining CyberSecurity with Sean Martin
Join host Sean Martin as he talks with Gina D’Addamio, a former nurse turned threat analyst at the Canadian Cyber Threat Exchange, about her transformative journey into cybersecurity and the vital skills she brings from her healthcare background. Discover how diverse experiences can enrich cybersecurity programs and wh
When Risk Management and Information Security Resonate with Hearts and Minds | A Conversation with Nadine Michaelides and Julie Haney | Redefining CyberSecurity with Sean Martin
Explore how Nadine Michaelides, a security and crime psychologist, redefines the role of employees in cybersecurity by focusing on intrinsic motivation and human risk management. Joined by hosts Julie Haney and Sean Martin, this episode delves into creating a culture where the human element strengthens, rather than wea
Leveraging Data for Cyber Insurance to Bring Consistency and Clarity in Underwriting | 7 Minutes on ITSPmagazine From HITRUST Collaborate 2024 | A Trium Cyber Short Brand Innovation Story with Josh LaDeau
Discover how Trium Cyber, in collaboration with HITRUST, is revolutionizing cyber insurance through data integrity and structured frameworks. Join Sean Martin and Josh LaDeau as they explore the challenges and innovative solutions transforming the industry.
A New People-Centric Approach to Determining an Organization's Exposure to a Third-Party Data Breach | A SecTor Cybersecurity Conference Toronto 2024 Conversation withChristine Dewhurst and Dr. Thomas Lee | On Location Coverage
In this episode of the On Location with Sean and Marco as part of our coverage of SecTor Information Security Conference in Toronto, Canada, Christine Dewhurst and Dr. Thomas Lee introduce a groundbreaking model that predicts an organization's exposure to third-party data breaches based on staffing levels and certifica
Strategies for Effective Cybersecurity Governance and Protection to Better Balance Innovation and Regulation in Cybersecurity | CISO Circuit Series with Mandy Huth and Whitney Merrill | Michael Piacente and Sean Martin | Redefining CyberSecurity Podcast
Join Sean Martin and Michael Piacente in this compelling episode of the Redefining CyberSecurity podcast, as they explore the complexities of cybersecurity leadership and liability with industry veterans Mandy Huth and Whitney Merrill. Discover pivotal insights on shared responsibility, regulatory expectations, and the
Unveiling AI's Impact and Challenges at SECTOR 2024 | A SecTor Cybersecurity Conference Toronto 2024 Conversation with Helen Oakley and Larry Pesce | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode of "On Location with Sean Martin and Marco Ciappelli," the duo delves into the intricacies of AI integration in today's technology landscape, joined by experts Helen Oakley and Larry Pesce at SECTOR 2024 in Toronto, Canada.
A Sneak Peek into SecTor 2024: AI, Open-Source, and Cybersecurity Trends | A SecTor Cybersecurity Conference Toronto 2024 Conversation with Steve Wylie | On Location Coverage with Sean Martin and Marco Ciappelli
Discover the highlights of the upcoming Black Hat SecTor Conference in Toronto, featuring insightful discussions on AI, open-source security, and more. Join Steve Wylie, Sean Martin, and Marco Ciappelli as they preview keynotes, summits, and unique aspects of this premier cybersecurity event.
HITRUST Collaborate 2024 Keynote—Industry Perspectives: Charting The Path Forward—Innovations in Security and Assurance | A Conversation with Dan Nutkis, Robert Booker, Omar Khawaja, Cliff Baker, and Andrew Hicks | On Location Coverage with Sean Martin
Join Sean Martin and a panel of leading cybersecurity figures from HITRUST Collaborate 2024 as they discuss the importance of a robust, adaptable security framework and HITRUST's commitment to addressing real-world security challenges. Discover how continuous innovation and collaborative efforts are transforming cybers
Exploring the Future of Automotive Technology | An AutoSens and InCabin Europe 2024 Conversation with Sara Sargent and Rob Stead | On Location Coverage with Sean Martin and Marco Ciappelli
In the latest episode of "On Location with Sean Martin and Marco Ciappelli," hosts Sean Martin and Marco Ciappelli delve into the intricacies of automotive technology with Sara Sargent and Rob Stead at the upcoming AutoSens and InCabin Europe 2024 conferences in Barcelona.
Hacking Deepfake Image Detection System with White and Black Box Attacks | A SecTor Cybersecurity Conference Toronto 2024 Conversation with Sagar Bhure | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode of Sector 2024, Sean Martin, Marco Ciappelli, and security researcher Sagar Bhure discuss the escalating threat of deepfake technology and its implications for misinformation, financial fraud, and cybersecurity. Tune in to explore real-world examples and learn about innovative detection methods that aim
Book | The Developer's Playbook for Large Language Model Security: Building Secure AI Applications | A Conversation with Steve Wilson | Redefining CyberSecurity with Sean Martin
In this episode of The Redefining CyberSecurity Podcast, join host Sean Martin and Chief Product Officer, Steve Wilson, as they explore the intricacies of developing secure AI applications and the unique challenges posed by large language models. Discover actionable insights and frameworks, including Wilson's Responsib
Hello From the Dumpster Fire: Real Examples of Artificially Generated Malware, Disinformation and Scam Campaigns | A SecTor Cybersecurity Conference Toronto 2024 Conversation with Ashley Jess | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode, Sean Martin and Marco Ciappelli explore with Ashley Jess, Senior Threat Intelligence Analyst, how AI is being weaponized for disinformation and scam campaigns, and the pressing need for stronger regulations and detection methods. Ashley sheds light on real-world examples, including deepfake propaganda
The Missing Link: How We Collect and Leverage SBOMs | An OWASP 2024 Global AppSec San Francisco Conversation with Cassie Crossley | On Location Coverage with Sean Martin and Marco Ciappelli
Join Sean Martin and Marco Ciappelli as they sit down with Cassie Crossley at the OWASP Global AppSec conference in San Francisco to explore the critical role of Software Bill of Materials (SBOMs) in securing applications. Dive into an engaging discussion on how SBOMs can help manage software risks, even for smaller co