i
ITSPmagazine Blog — By Sean and Marco
18 articles matching
Detection at AI Speed, Prioritization by Workflow, and Autonomous Elimination | A Recap at Black Hat USA 2026 with May Mitchell, Chief Marketing Officer at Qualys | Hosted by Marco Ciappelli
Three years of customer questions produced one answer on the show floor at Black Hat USA 2026, and it runs on detection, prioritization, and elimination. May Mitchell explains what changed in the AI conversation this year, and why ROI now sits next to governance in the same meeting.
Vulnerability, Visibility, and Velocity Shape the Security Roadmap Now | A Recap at Black Hat USA 2026 with Sean Murphy, Field CISO for North America at F5 | Hosted by Marco Ciappelli
Three days of hallway conversations with CISOs at Black Hat USA 2026 left one pattern behind, and it comes down to three words that start with the same letter. Sean Murphy explains why the acceleration in security reads more like a physics problem than a technology problem, and why the agents now running in production
Autonomous Remediation Is Already Running at Enterprise Scale | A Full Sponsor Brand Briefing at Black Hat USA 2026 with Sumedh Thakar, President and CEO at Qualys | Hosted by Sean Martin
Ninety days to fix a vulnerability turned into ninety seconds, and the window between disclosure and exploitation now closes faster than most teams can staff for. This conversation covers what shifts when detection, prioritization, and remediation stop waiting for someone to approve each step.
Vulnerability Backlogs Can Finally Reach Zero | A Brand Spotlight Conversation with Ondrej Vlcek, Co-Founder and CEO of AISLE | Hosted by Sean Martin
A backlog of a million open vulnerabilities has never had a realistic path to zero, and the window between disclosure and exploitation keeps getting shorter. Ondrej Vlcek explains what changes when AI stops matching patterns and starts reasoning about code the way an attacker does.
Measuring Risk Was Never the Point | A Brand Spotlight at Infosecurity Europe 2026 with Matt Middleton-Leal, Regional Vice President, Northern Europe of Qualys
One client walked in with 62 million risk findings. This conversation breaks down how that number gets cut to less than one percent of fixes that actually matter, and why a SOC alone was never going to get you there.
Vulnerability Management in the Age of AI: From Data Overload to Decisive Action | A Brand Spotlight at RSAC Conference 2026 with Daniel DeCloss, Founder & CTO of PlexTrac
Adversaries are building exploits faster than most teams can patch -- so what does it actually mean to manage vulnerability risk in 2026? Daniel DeCloss, Founder & CTO of PlexTrac, joins Sean Martin live on the RSAC Conference 2026 show floor to answer that question with hard-won operational clarity.
From Visibility to Actionability: How Asset Intelligence Drives Real Security Outcomes | A Brand Spotlight at RSAC Conference 2026 with Angelos Kottas, VP of Product and Corporate Marketing at Axonius
At RSAC Conference 2026, Angelos Kottas of Axonius makes the case that visibility without follow-through is just a board report -- and that the security industry is now entering a new era defined by actionability. This conversation explores what that shift means for CISOs navigating AI, exposure management, and the per
Closing the Exposure Window: From Vulnerability Management to Remediation Operations | A Brand Highlight at RSAC Conference 2026 with Sunil Gottumukkala, CEO & Co-Founder of Averlon
Security teams have spent decades getting better at finding vulnerabilities -- but the ability to actually fix them has never kept pace. At RSAC Conference 2026, Sunil Gottumukkala of Averlon explains why the industry needs to shift from vulnerability management to remediation operations, and how agentic AI is finally
KEVology: How Exploit Scores and Timelines Shape Real Security Decisions | A Brand Highlight Conversation with Tod Beardsley, Vice President of Security Research of runZero
Not every vulnerability on the CISA KEV catalog demands the same level of urgency, and treating them equally can overwhelm security teams with false priorities. Discover how KEVology and the KEV Collider help defenders cut through the noise by enriching KEV data with exploit scores, timelines, and real-world context.
From Department of No to Department of Know: The CISO Evolution | A Brand Highlight Conversation with Ivan Milenkovic, Vice President, Cyber Risk Technology of Qualys
AI is making account takeover attacks faster, cheaper, and harder to stop. Discover how one company is flipping the script by detecting victims in real time and feeding scammers fake credentials they can never use.
When AI Guesses and Security Pays: Choosing the Right Model for the Right Security Decision | A Brand Story Highlight Conversation with Michael Roytman, CTO of Empirical Security
Security teams are overusing general purpose AI models for decisions they were never designed to make. This conversation explains why predictive security requires purpose built models, continuous retraining, and disciplined data science.
The Cyber Resilience Act: How the EU is Reshaping Digital Product Security | A Conversation with Sarah Fluchs | Redefining CyberSecurity with Sean Martin
The Cyber Resilience Act (CRA) is set to transform cybersecurity accountability by requiring manufacturers—not just users—to ensure the security of digital products, from smart devices to industrial control systems. In this episode, Sean Martin speaks with Sarah Fluchs about what the CRA means for businesses, the chall
The Evolution from Governance, Risk & Compliance to Cyber Risk Governance | A Conversation with John Sapp | Redefining CyberSecurity Podcast with Sean Martin
In this episode of Redefining CyberSecurity, host Sean Martin and his guest, John Sapp, navigate the complex terrain of cyber risk governance and the concept of cyber risk as a product.
The Future of Secure Business Browsing: Isolation and Protection | Browser Security : Isolation-101 | A SecTor Event Coverage Conversation with Evgeniy Kharam
In this episode of the Redefining CyberSecurity Podcast, Sean Martin and guest Evgeniy Kharam discuss browser security, remote browser isolation, enterprise browsers, and the impact on security programs.
Zero-Day Showdown—Is the wrEchoChamber Vulnerability Worse Than Log4Shell? | Navigating Cyber Threats in the Age of AI and Instant News | A Musing On the Future of Cybersecurity and Humanity with Sean Martin and TAPE3 | Read by TAPE3
Join us for a fictional tale of two security leaders—Sarah and Roger—and their contrasting approaches to zero-day crisis management.
Visualizing and Prioritizing Risk Management in Cybersecurity: A Data-Driven Approach | A Brinqa Brand Story with CEO Amad Fida
Hosts Sean Martin and Marco Ciappelli talk with Amad Fida, CEO, and co-founder of Brinqa, about the importance of visualizing and prioritizing risk management in cybersecurity using a data-driven approach.
Eoin Keary, CEO Of edgescan, Shares Some Highlights From Their Latest Vulnerability Statistics Report
Eoin Keary, CEO of edgescan, and Sean Martin from ITSPmagazine, catch up in Dublin, Ireland as Eoin shares some of the key findings captured during their latest vulnerability assessment and management research activities.
A Dialogue with Steve Cochran, CEO STEALTHbits
What's the connection between automating IT tasks and securing the world's identity directories? STEALTHbits CEO, Steve Cochran, describes the journey his company took to focus completely on information security.