Phishing For Answers

Send us Fan Mail Our conversation with Steve Winterfeld unveils critical insights for anyone looking to forge a successful career in cybersecurity. We discuss the importance of strategic planning, building a security culture, and adapting to the rapid evolution of threats, especially phishing and social engineering attacks. • Exploring three career paths in cybersecurity  • The importance of strat...

Send us Fan Mail Javed Ikbal shares his transformative experiences as a CISO, highlighting the challenges of cultivating a security-centric culture in organizations. He emphasizes the importance of communication, understanding user psychology, and establishing foundational practices to navigate the complexities of cybersecurity today.  • Importance of cybersecurity culture in organizations  • Chal...

Send us Fan Mail Cecil Pineda, the CISO at R1RCM, shares his journey into cybersecurity, emphasizing the importance of communication, emotional intelligence, and effective risk management in CISO roles. He discusses how emotional awareness and tailored training approaches can significantly enhance cybersecurity awareness and compliance across organizations. • Importance of storytelling and communi...

Send us Fan Mail This episode features Philip Wiley, a cybersecurity expert, who discusses the nuances of penetration testing versus red teaming, shares thrilling hacking experiences, and emphasizes the importance of addressing human errors in security. He provides insights into effective cybersecurity training and the relevance of networking for career growth in the industry.  • Understanding the...

Send us Fan Mail This podcast episode emphasizes the critical intersection of cybersecurity and private equity, highlighting the importance of conducting thorough cybersecurity assessments before acquisitions. Bob Flores, an experienced CIO and CISO, discusses key issues like the rise of AI in cyber threats, user education, and effective role-based training as vital components for safeguarding inv...

Send us Fan Mail This episode delves into the human side of cybersecurity, featuring insights from Rob LaMagna-Reiter on the importance of communication, mentorship, and understanding AI-related threats. By focusing on personalized training and fostering a culture of open dialogue, organizations can empower their workforce to effectively navigate evolving risks in cyber defense.  • Highlighting th...

Send us Fan Mail This episode delves into the critical intersection of cybersecurity and the human element, emphasizing the importance of effective training and mentoring. Cody Burrows shares insights from his extensive experience, advocating for a shift from punitive training to one that nurtures understanding and encourages proactive behavior.  • Cody's journey from pen tester to CISO  • Th...

Send us Fan Mail Jess Vachon shares insights into her calm approach as a CISO and how empathy in cybersecurity can significantly transform organizational culture. The episode emphasizes the importance of effective communication, role-based training, and the evolving impact of artificial intelligence on how organizations secure their operations.  • Exploring personal journeys into cybersecurity  •...

Send us Fan Mail The episode focuses on the evolving threats posed by phishing scams enhanced by artificial intelligence, particularly in corporate settings. Tim Chase shares real-life experiences and insights into the changing landscape of cybersecurity and the need for tailored training to empower employees in recognizing and combating these threats. • Discusses a significant gift card scam inci...

Send us Fan Mail The episode emphasizes the critical role of security awareness in protecting organizations from cyber threats, particularly phishing attacks. Andrew Obadiaru, CISO of Cobalt, discusses strategies for enhancing employee education, implementing phishing simulations, and leveraging AI to stay ahead of evolving cybercriminal tactics. • The human element is key in cybersecurity defense...

Send us Fan Mail In our latest episode, Angela Chen, CIO of the University of Delaware, shares her personal experience with phishing, revealing the profound emotional and psychological impacts of these attacks. We discuss the importance of making cybersecurity a collective responsibility that spans generational divides and the need for tailored education to enhance awareness among vulnerable popul...

Send us Fan Mail Ever thought attending a security awareness class could make you more vulnerable to phishing attacks? Join us as Wendy Nather, a former CISO, unravels this unexpected phenomenon and challenges industry norms. We tackle the complexities of security training and explore why traditional methods might not be hitting the mark. Wendy shares insights into designing systems that protect a...

Send us Fan Mail What if the key to fortifying your organization's cybersecurity was hidden in the ethical deployment of AI? Join us for an enlightening conversation with Dr. Joshua Scarpino, a dual expert in cybersecurity as CISO VP of Information Security at TrustEngine and CEO of Assess Intelligence. Our episode charts the powerful intersection of AI and cybersecurity, exploring how AI can...

Send us Fan Mail Join us for an insightful conversation with Ira Winkler, the Chief Information Security Officer of CYE Security, as we explore the often-overlooked human element in cybersecurity. With a rich career spanning more than 30 years, Ira shares compelling insights drawn from his experiences at the NSA, Walmart, and HP. Together, we challenge the traditional notion that users are the las...

Send us Fan Mail In this candid conversation, Allan Abrams, CISO at Kipu Health , joins “Phishing for Answers” to share how an early fascination with computers (and a few 2600 magazine exploits) set him on the path to cybersecurity leadership. Host Joshua Crumbaugh digs into Allan’s journey—from poking around pay phones in high school to defending PHI in a cutting-edge healthcare environment. Alon...

Send us Fan Mail In this enlightening episode of “Phishing for Answers,” Kevin Gowen , CISO at Synovus , takes us on a journey through three decades of transformation—both for himself and the bank. From his start in IT and risk management to a near-instant leap into the top security role, Kevin shares how Synovus’ security culture has evolved alongside industry threats. Host Joshua Crumbaugh digs...

Send us Fan Mail In this special Security Awareness Month edition of “Phishing for Answers,” we reel in Norman Kromberg—a finance-whiz-turned-CISO who blends down-to-earth Midwest values with sharp cybersecurity insight. Raised in Lincoln, Nebraska, Norman cut his teeth in banking before jumping into IT governance and risk compliance. Now, he’s applying that business-first mindset to keep organiza...

Send us Fan Mail In this lively installment of “Phishing for Answers,” our host kicks things off with a quirky, AI-generated rap—then challenges guest Dean Sapp , SVP of Information Security at Filevine , to a game of “Stock or Not?” to test just how convincing AI images can get. But the conversation quickly turns serious as Dean reveals how scammers are weaponizing these same AI tools to spin up...

Send us Fan Mail What happens when a sneaky phish nabs your domain credentials and quietly reroutes your customers to a competitor’s site? Today’s guest Jyotin (Jotun) Gambhir has seen it all—and that’s just one of his many cautionary tales. In this special Security Awareness Month edition of “Phishing for Answers,” Jyotin draws on 20+ years of cybersecurity consulting (with stints at Deloitte Tou...

Send us Fan Mail In today's digital age, cyber threats are becoming more sophisticated, and the stakes have never been higher. Amid advancing technology and evolving attack vectors, one factor remains critically important yet often overlooked: the human element. People can be the weakest link in cybersecurity, but with the right approach, they can also become the most formidable line of defen...

Send us Fan Mail Reducing Human Error through Behavioral Science: A Conversation with Pieter VanIperen In the latest episode of the "Phishing for Answers" podcast, PhishFirewall ’s CEO, Joshua Crumbaugh, sat down with cybersecurity expert Pieter VanIperen, CISO of Own Company, to discuss how understanding human behavior can significantly enhance cybersecurity. Their conversation delved i...

Send us Fan Mail In this insightful episode of Phishing for Answers , I had the opportunity to sit down with Steve Cobb, CISO of Security Scorecard, to explore the critical role human behavior plays in modern cybersecurity. With the rise of sophisticated cyber threats, particularly AI-driven phishing attacks, Steve underscores how the human element remains both the weakest link and the most powerf...

Send us Fan Mail In this episode of Phishing for Answers , I sit down with Joe Evangelisto, CISO of NetSPI, to discuss some surprising insights on phishing susceptibility within organizations. We dive into the two most vulnerable groups—sales and developers—and how their different day-to-day responsibilities lead to unique phishing risks. Joe and I explore real-world examples of employees falling...

Send us Fan Mail In this Security Awareness Month edition of Phishing for Answers , Joshua Crumbaugh sits down with Christopher Russell, CISO of tZERO Group, to discuss his path from military intelligence to mastering corporate cybersecurity. Christopher shares some of the latest tactics he’s seen, including a shocking snail mail phishing attack, and why bad actors continue to exploit human vulner...

Send us Fan Mail In this episode of Phishing for Answers , Joshua Crumbaugh , CEO and Founder of PhishFirewall, interviews Paul Sheth , the CISO of the Women’s Tennis Association (WTA). They explore Paul’s journey from infrastructure to cybersecurity leadership, diving into the critical role of risk management, the threats of phishing and ransomware, and the rise of AI-driven cyberattacks. Learn h...