Cybersecurity Sessions

In this episode of the Cybersecurity Sessions, Andy Ash speaks with Simon Brownhill, a cybersecurity leader with a military background. Simon shares his journey from Navy weapons engineer to CISO, offering insights on leadership, risk management, and security culture. They discuss AI’s impact on cybersecurity, balancing innovation with risk, and the importance of mentorship. Simon highlights the n...

In this episode of the Cybersecurity Sessions, Andy Ash speaks with Simon Brownhill, a cybersecurity leader with a military background. Simon shares his journey from Navy weapons engineer to CISO, offering insights on leadership, risk management, and security culture. They discuss AI’s impact on cybersecurity, balancing innovation with risk, and the importance of mentorship. Simon highlights the n...

If you work in application security, you’re probably familiar with the OWASP Top 10. But open-source frameworks like those maintained by OWASP members have a lot to offer security practitioners. In this episode, Netacea CISO Andy Ash meets OWASP Global Board Member and London Chapter Leader Sam Stepanyan to find out how Sam got involved with OWASP, and the influence it has on the security world. T...

In this episode of Cybersecurity Sessions, host Andrew Ash, CISO at Netacea, is joined by Dr. Mark Greenwood, Netacea’s Chief Technical Architect, and Dr. Christoph Burtscher, AI researcher and author. Together, they explore the evolving partnership between humans and AI in cybersecurity, discussing machine-led defenses, ethical challenges, and the role of trust in AI adoption. The conversation hi...

In this insightful episode, Stuart Seymour, Group CISO and CSO at Virgin Media O2, joins Andrew Ash (CISO, Netacea) to discuss how his experience as a British Army Captain shaped his unique leadership style in cybersecurity. Stuart also shares his passion for building diverse, neurodiverse teams, drawing from his own experience with dyslexia. He dives into the growing importance of AI in SOCs and...

Host Andy Ash (CISO at Netacea) is joined by Arve Kjoelen, who recently left a six-year stint as CISO of McAfee to join startup CynomIQ as Chief Solutions Officer. In this episode they discuss differences in how CISOs are compensated across both sides of the Atlantic, how the role is shifting to account for increased governance and regulations, and the 'left of boom' approach to preventative secur...

Netacea bot experts discuss the challenges around the Oasis reunion tour ticket sales, focusing on the issues caused by bots and scalping in high-demand events. The discussion explores the technical difficulties of managing ticket sales, the tactics used by bot operators to secure tickets, and the broader implications for the industry. The team also discuss why current methods to prevent bot activ...

The Cybersecurity Sessions podcast is set to return for its third season, focusing on the human side of cybersecurity. This season will feature conversations with experts from various industries, including entertainment, fintech, and digital commerce, who will share their insights on managing human factors in cybersecurity. Netacea CISO Andy Ash will also explore topics like the impact of AI and h...

Netacea CISO Andrew Ash welcomes two special guests to the podcast this month to talk about AI adoption and managing third party risk: Thomas Ballin (CTO, Cytix) and Haydn Brooks (CEO, Risk Ledger). In 2023 the AI genie is well and truly out of the bottle, gaining mainstream attention and usage across business, academia and in day-to-day life. As a result, AI has become somewhat of a buzzword used...

To start this month’s episode, we once again weigh in on AI – this time considering the privacy implications when feeding prompts into generative AI tools like ChatGPT and Bard. We’ll discuss whether it’s safe to share company IP or your own personal information into such tools, before hearing how we approach this at Netacea from Principal Software Engineer John Beech. Next, we’ll look to the news...

This month’s episode takes off with a journey into the controversial world of skiplagging, also known as hidden city flying. Airlines and holiday businesses are taking legal action against passengers and websites like Skiplagged that exploit pricing loopholes, leaving empty seats on the second leg of multi-stop itineraries. But with scraper bots at the root of the issue, is there a technical solut...

This month we begin by examining the 2023 National Risk Register, a public version of the National Security Risk Assessment, which assesses the most serious risks to lives, health, society, critical infrastructure, economy and sovereignty. Cyber-attacks on infrastructure are listed as moderate impact – Our panel discusses how businesses can use the information within the report to prepare for atta...

In this month’s episode, we start by focusing on the real-world impact of bots (scripts used to automate tasks and exploit business logic). In the UK, bots are being used to book up every available driving test before reselling them for profit; meanwhile in the US, gig workers delivering groceries are losing out to bots that hoard the most profitable delivery jobs. Our panel explains how this happ...

A fresh Netacea panel of cyber experts are on hand once again to discuss the latest developments in security and bot-related news! This month, in light of OpenAI CEO Sam Altman standing before US senators and requesting regulation of AI businesses, we give our views on whether one body – or even one nation – can or should regulate this rapidly developing industry. Universal Music Group also instig...

In part two of our RSA Conference 2023 series, Netacea CPO Andy Still and CISO Andy Ash return from San Francisco to share their insights from the biggest cybersecurity event of the year. As part of Netacea’s C-suite, both Andys are always looking ahead at how new threats are developing – “what’s new, scary and worth worrying about?” The rapid advancement of AI, both as an offensive threat to cybe...

Welcome to a new format for the Cybersecurity Sessions! We’ve refocused our podcasts to provide insights into the latest news and trends in cybersecurity, calling on the expertise of Netacea’s threat researchers, bot specialists and business leaders. This month, new host Dani Middleton-Wren is joined by Matthew Gracey-McMinn, Chris Pace and Tom Platt. First they discuss the ever-intriguing topic o...

We’re going to San Francisco! Netacea will once again be at the Moscone Center from 24-27 April for the RSA Conference. We’re looking forward to it so much that we decided to compile our top five most anticipated sessions on the Cybersecurity Sessions podcast. Special host Danielle Middleton-Wren will be in sunny San Francisco, alongside her two guests for this episode: Netacea co-founder and CPO...

Our reliance on personal mobile devices leaves us vulnerable to attack; not just from anonymous criminal groups, but in some cases, from those closest to us. Stalkerware, a category of apps designed to secretly monitor the unsuspecting victim whose device they’re installed on, are a growing concern for security and privacy advocates, as well as law enforcement agencies. This month on the Cybersecu...

Not a week goes by without a massive data leak being reported in the news – both in tech publications and across mainstream media. According to Atlas VPN, 5.9 billion credentials were leaked in 2021 alone. But it’s not just credentials under attack; personal data, payment information, sensitive corporate data, and even source code are all at risk of being leaked. But how is so much data leaked so...

If a stranger walked into your workplace and asked you your name and email address, would you co-operate? What if they asked you to open a door for them, or to use your laptop or phone, all whilst wearing a shirt that said “CHALLENGE ME” on it? This is the malicious floorwalker, an example of the behavioral interventions staged by the UK Ministry of Defence to educate their workforce about securit...

In a recent Netacea report, 60% of businesses reported a minor financial impact caused by bots skewing their analytics, and with the busiest eCommerce period of the year fast approaching, businesses need to fight back. How do bots affect businesses’ data, marketing campaigns and paid media planning? Host and Principal Security Researcher Cyril Noel-Tagoe is joined by Spike’s Head of Paid Media Mat...

Illicit forums and dark web marketplaces are so closely guarded that it’s almost impossible to know how many stolen user accounts, digital assets, or data leaks are exposed, let alone who is responsible. But the more we can uncover, the better we can defend against attacks and hold threat actors accountable. In this bonus episode, Cyril is joined by his boss and Netacea’s Head of Threat Research,...

Bonus episode: Cybersecurity Sessions host Cyril Noel-Tagoe was recently featured on the Mimecast podcast series Phishy Business. Cyril joined hosts Alice Jeffery and Brian Pinnock, plus fellow guest, Mimecast Senior Product Manager Dr Kiri Addison, for a fascinating conversation about bots and what they are used for (both good and bad). About Phishy Business Fed up with the same old cybersecurity...

Stress and burnout in cybersecurity is widespread, especially since the pandemic. The cyber skills gap and increasingly aggressive attacks have led to workloads growing massively. This is on top of long-standing worries like workplace bullying, long hours spent in front of screens, and the expectation to be available to work ‘whenever and wherever’. Cyril Noel-Tagoe invites security awareness cons...

Cyber-criminals are relentless, and the number of attacks is growing. Businesses are increasingly turning to ethical hackers to find bugs and exploits before attackers do, offering financial incentives for their efforts. As a security researcher, our host Cyril Noel-Tagoe is always on the hunt for new vulnerabilities. He’s joined for this episode by ethical hacking enthusiast and Daily Swig report...