i
ITSPmagazine Blog — By Sean and Marco
14 articles matching
The Hidden Risk Inside Your Build Pipeline: When Open Source Becomes an Attack Vector | A Conversation with Paul McCarty | Redefining CyberSecurity with Sean Martin
Malicious open source packages are no longer edge cases. They are deliberate, scalable attack paths targeting developers, CI pipelines, and the software supply chain itself.
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction
The Problem With Threat Modeling in Application Security: Too Slow, Too Theoretical, Not Agile | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 2 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Threat modeling is praised as the cornerstone of secure software design, yet only one-third of organizations have a documented process and fewer than four in ten use it systematically at scale. Sean Martin unpacks why adoption is so low—and why evolving processes, not just models, is the key to making it work.
Holding the Line on Quality in an AI-Driven SDLC | An OWASP AppSec Global 2025 Conversation with Sarah-Jane Madden | On Location Coverage with Sean Martin and Marco Ciappelli
Sarah-Jane Madden shares a practical and passionate take on how AI can enhance—not replace—secure software development, urging developers and business leaders alike to rethink how they balance speed, quality, and security. From architecture to code to culture, she challenges us to embrace change without leaving critica
When Guardrails Aren’t Enough: How to Handle AI’s Hidden Vulnerabilities | An Infosecurity Europe 2025 Pre-Event Conversation with Peter Garraghan | On Location Coverage with Sean Martin and Marco Ciappelli
AI isn’t magic—it’s still software, and with that comes familiar risks that too often get overlooked in the hype. In this episode, Professor Peter Garraghan breaks down how traditional security thinking still applies, and why understanding the nuances of AI systems is essential to keeping them secure.
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Building Resilient Software: Secure by Design, Transparency, and Governance Remain Key Elements | A Conversation with Chris Hughes | Redefining CyberSecurity with Sean Martin
In this episode of The Redefining CyberSecurity Podcast, Sean Martin engages with cybersecurity consultant and author Chris Hughes to explore the complexities of software supply chain security and vulnerability management. Together, they discuss practical strategies for achieving transparency in software components and
Punch Cards, Steam Engines, 48 Volt Batteries, Platform Engineering, and the AI Revolution: The Ongoing Evolution of Language-Based Software Development | An OWASP AppSec Global Lisbon 2024 Conversation with Oleg Shanyuk | On Location Coverage
Join Sean Martin and Oleg Shanyuk at the OWASP AppSec Global conference as they delve into the transformative impact of AI on application security, development processes, and platform engineering. This episode offers nuanced perspectives on the balance between technological innovation and practical efficiency, making i
It's Just Software, What Could Possibly Go Wrong? Exploring Deterministic GenAI and AI Trust Cards | An OWASP AppSec Global Lisbon 2024 Conversation with Isabel Praça, Dinis Cruz, and Rob van der Veer | On Location Coverage
Join Sean Martin as he dives into a lively discussion with AI and cybersecurity leaders about the intersection of artificial intelligence and application security at the upcoming OWASP AppSec Global conference in Lisbon. Discover how AI is reshaping cybersecurity practices and why interdisciplinary collaboration is cru
From Secure Foundations to Resilient Futures: The UK's Digital Security by Design Initiative | An Infosecurity Europe 2024 Conversation with Professor John Goodacre | On Location Coverage with Sean Martin and Marco Ciappelli
In this On Location podcast, Sean Martin engages in a thought-provoking conversation with Professor John Goodacre, a tech innovator and government program director. Explore the transformative journey towards secure-by-design technology, as Professor Goodacre navigates the complex realm of cyber resilience and unveils g
Why the Industry Needs OpenSSF | A Conversation with Omkhar Arasaratnam, Adrianne Marcum, Arun Gupta, and Christopher Robinson | Redefining CyberSecurity with Sean Martin
Dive into the critical discussions around securing the open source software ecosystem with the latest episode from the Redefining CyberSecurity Podcast, featuring insights from leaders at OpenSSF. Learn about the collective efforts to enhance software supply chain security and the importance of community participation
Redefining Cybersecurity by Unlocking Government and Startup Collaboration While Enhancing Software Supply Chain Visibility | A Conversation with Melissa Oh and Anil John | Redefining CyberSecurity with Sean Martin
Discover how the Silicon Valley Innovation Program is redefining cybersecurity through innovative collaborations between the government and the startup community, as discussed by leaders Melissa Oh and Anil John. Tune in to learn about the impactful role of Software Bill of Materials in enhancing software supply chain
Knowing When to Pivot | A Conversation With Ian Hamilton | Tech Done Different Podcast With Ben Schmerler and Ted Harrington
This week's guest is Ian Hamilton, the CTO of Signiant. The guys discuss how, over 20+ years, Signiant has transformed as the industry evolved to insure the company pivots with the market.
The Application Security Audit Adventure: Unpacking Penetration, Whitebox, and Blackbox Testing | A Conversation with Andrew Woodhouse and Dr. Mario Heiderich | Redefining CyberSecurity Podcast With Sean Martin
Andrew Woodhouse, Dr. Mario Heiderich, and Sean Martin share their insights, experiences, and perspectives on blackbox and whitebox testing, the potential vulnerabilities in software, and the significance of a comprehensive security initiative.