Ahead of the Breach

Welcome to a special edition of Ahead of the Breach, where our host Casey Cammilleri answers the top questions our listeners have asked us. In today's episode, Casey addresses how to prepare for the future of pentesting.  Would you like to have Casey answer one of your questions in a future episode? Email podcast@sprocketsecurity.com with your question and a short summary of why you're looking for...

The shift from annual compliance-driven security testing to continuous validation represents one of the most critical evolutions in modern cybersecurity practice. Vivek Menon , CISO & Head of Data at Digital Turbine , discovered this firsthand when his team's focus on modern cloud applications nearly missed a critical legacy system that could have triggered cascading failures across their enti...

Welcome to a special edition of Ahead of the Breach, where our host Casey Cammilleri answers the top questions our listeners have asked us. In today's episode, Casey addresses what is broken about legacy pentesting.  Would you like to have Casey answer one of your questions in a future episode? Email podcast@sprocketsecurity.com with your question and a short summary of why you're looking for an a...

From a casual gaming project at NASA's JPL to powering 700+ cybersecurity vendors, WhoisXML API has become the foundation of modern threat intelligence. In this episode of Ahead of the Breach, recorded at RSA Conference 2025, Casey sits down with Vice President Alex Ronquillo to explore how domain registration data has become critical infrastructure for security tools and how penetration testers c...

Welcome to a special edition of Ahead of the Breach, where our host Casey Cammilleri answers the top questions our listeners have asked us. In today’s episode, Casey addresses “Why does continuous penetration testing outperform bug bounties?” Would you like to have Casey answer one of your questions in a future episode? Email  podcast@sprocketsecurity.com  with your question and a short summary of...

How do you effectively measure security operations in a world where vulnerabilities never stop coming? Cody Florek , Director of Information Security Operations at Sentry , brings a refreshing approach that combines agile methodology with practical security execution. In this episode of Ahead of the Breach, he tells Casey how his journey from computer repair technician to security leader shaped hi...

From intercepting key fob signals with HackRF devices to setting up rogue cellular networks with USRP transceivers, Ayyappan Rajesh , Offensive Security Engineer at Block Harbor Cybersecurity , takes Casey deep into the technical underbelly of wireless security testing in this illuminating episode of Ahead of the Breach.  As an offensive security engineer with Block Harbor's VCL team, Ayyappan spe...

Implementing effective DevSecOps requires balancing security controls with developer experience — a challenge Eyal Paz , VP of Research at OX Security , tackles with practical strategies drawn from his network security background. In this episode of Ahead of the Breach, Eyal explains to Casey how organizations can gradually build shift-left security programs without disrupting development workflow...

"It's kind of like homeowners’ insurance," says Joshua Brown , Founder of Digital Defense Consulting & CISO at Spektrum Labs , about security programs — they’re helping to mitigate risks, not remove them entirely. “If you have homeowners insurance and your house never burns down, it doesn't mean you wasted money. You were there to mitigate the impact of that potentially catastrophic event.” On...

In this episode of Ahead of the Breach, Donika Mirdita , Security Researcher at Fraunhofer Institute for Secure Information Technology , details the technical discovery and exploitation of RPKI manifest file vulnerabilities in BGP routing infrastructure. Through precise manipulation of relay party processing patterns and repository query timing, her "Stellaris downgrade attack" exploits manifest f...

From testing critical infrastructure and IoT devices to leading application security at NerdWallet , DK Koran , BISO, draws from his experience finding vulnerabilities in police cruisers and SCADA systems to discuss his transition to building and managing proactive security teams. On this episode of Ahead of the Breach, he and Casey explore the challenges of implementing security guardrails, runni...

What can a controversial cyber weapon teach us about everyday security? From chemistry labs to cyber weapons development, Rapyd ’s CISO/CIO, Nir Rothenberg ’s, journey is anything but conventional. In his conversation with Casey on Ahead of the Breach, he cuts through the headlines about Pegasus to get down to the complex realities of intelligence operations and why most companies are focusing on...

What if vulnerability management was less about filling backlogs with findings and more about strategic risk reduction? Sean Finley , Director of Application & Product Security at Eptura , brings a refreshing perspective to application security to his conversation with Casey on this episode of Ahead of the Breach.  Shaped by years of experience as both a software analyst and security leader, h...

From a friendly gaming challenge to uncovering critical vulnerabilities, Vladimir Tokarev 's journey showcases the power of curiosity in cybersecurity. As a Senior Security Researcher at Microsoft , Tokarev recently unveiled four significant vulnerabilities in OpenVPN's Windows implementation at Black Hat 2024, which he tells Casey all about in this episode of Ahead of the Breach.  Vladimir’s disc...

From executing his first SQL injection at age 14 to contributing to the Linux kernel, Keiran Smith ’s path to becoming Lead Pentest Engineer at N-able is anything but conventional, as he tells Casey in this episode of Ahead of the Breach. His journey weaves through roles as a senior developer, architect, and DevOps engineer — experiences that transformed him into a security leader who speaks both...

In this episode of Ahead of the Breach, Casey speaks with Lorenzo Pedroncelli , Senior Manager at RSA , who shares his insights on the evolving landscape of cybersecurity, emphasizing the critical role of identity security. He discusses the importance of fostering a security culture within organizations, where employees feel empowered to report suspicious activities.  Lorenzo also highlights the c...

In this episode of Ahead of the Breach, Casey speaks with Bindi Davé , Deputy CISO at DigiCert , who shares her extensive experience in cybersecurity, focusing on the critical importance of digital trust in today’s interconnected world. She discusses how organizations can establish trust in digital communications and the role of zero trust principles in enhancing security.    Bindi also explores t...

In this episode of Ahead of the Breach, Casey speaks with cybersecurity leader and expert, Arif Basha . Arif offers his insights on the critical importance of attack surface management in today’s cybersecurity landscape. Arif highlights how the dissolution of traditional network perimeters has shifted the focus to identity as the new perimeter, emphasizing the need for proactive security measures....

In this episode of Ahead of the Breach, Casey speaks with Joe Mariscal , Director of Cybersecurity and Compliance at Ryerson . Joe brings his extensive experience in the cybersecurity field to discuss topics such as the critical issue of burnout among cybersecurity professionals. He emphasizes the importance of leadership in fostering a supportive work environment.    Joe also highlights strategie...

In this episode of Ahead of the Breach, Casey speaks with Konrad Fellmann , VP of IT Infrastructure and CISO at Cubic . Konrad explores critical topics in cybersecurity, including privacy implications of data collection in the automotive industry, for example car manufacturers are reportedly selling consumer data.    Konrad also discusses the evolving role of the CISO, emphasizing the importance o...

In this episode of Ahead of the Breach, Casey speaks with Al Imran Husain , CISO & VP of Global Infrastructure at MillerKnoll . Al Imran shares his journey into cybersecurity and discusses the unique challenges faced by manufacturing companies, particularly the convergence of IT and OT systems.    He emphasizes the importance of implementing robust security measures, such as network segmentati...

In this episode of Ahead of the Breach, Casey speaks with Jack Leidecker , CISO at Gong , who shares his extensive experience in cybersecurity, emphasizing the importance of proactive measures to enhance organizational security. He discusses the value of hiring offensive security professionals to identify vulnerabilities and strengthen defenses.    Jack also highlights the need to balance rapid in...

In this episode of Ahead of the Breach, Casey speaks with Dan Creed , CISO of Allegiant Travel Company , who shares his expertise on the evolving landscape of cybersecurity. They discuss the alarming rise of deepfake technology and its implications for corporate security, including a compelling example of its use in social engineering.    Dan emphasizes the importance of building strong relationsh...

In this episode of Ahead of the Breach, Casey speaks with Mario DiNatale , CISO at Odyssey Group . Mario shares his insights on the importance of understanding your organization's attack surface and the necessity of hiring skilled professionals to address modern cyber threats.  He emphasizes the value of staying informed about the latest trends and tactics used by threat actors to effectively miti...

In this episode of Ahead of the Breach, Casey chats with Nicholas Anastasi , Director of Technical Operations; Nate Fair , Penetration Tester & Cyber Security Consultant; Juan Pablo “JP” Gomez Postigo , Penetration Tester; and Willis Vandevanter , Senior Staff Security Researcher — all of whom are members of the Sprocket team! They met up at the Black Hat conference to share their expertise in...