Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

Episode 105 of Cybersecurity Business with Fexingo. Lucas and Luna examine the growing trend of cyber insurance policies excluding coverage for 'acts of war' and 'state-backed attacks.' They discuss how a 2025 Merck court case reinforced insurers' ability to deny claims tied to nation-state hacking, leaving enterprises to self-insure against advanced threats. The hosts explore the practical fallou...

In this episode, Lucas and Luna explore how enterprise security teams are adopting cyber range platforms to train staff and test defenses in realistic, simulated environments. They discuss the shift from traditional tabletop exercises to immersive, hands-on training using platforms like RangeForce and Cyberbit. The hosts walk through a real example: how a regional bank in the Midwest used a cyber...

Lucas and Luna drill into the practice of digital forensics and incident response — DFIR — as it's practiced in mid-2026. They walk through a real incident timeline: a healthcare company's ransomware attack detected on a Tuesday afternoon, the initial containment, evidence preservation, root-cause analysis, and the choice between paying the ransom and restoring from backups. They discuss why DFIR...

Episode 102 of Cybersecurity Business with Fexingo dives into SaaS Security Posture Management (SSPM). Lucas and Luna explore how enterprises are using SSPM tools to detect misconfigurations in apps like Salesforce, Slack, and Google Workspace. They break down the 2025 Cloud Security Alliance report finding that 68% of organizations experienced a SaaS-related security incident. The hosts discuss h...

Episode 101 dives into the growing use of cyber insurance audits as a tool for enterprise security teams to validate their defenses. Lucas and Luna discuss how carriers like Lloyd's and Chubb now require detailed security questionnaires, penetration tests, and incident response plans before issuing policies. They explore specific examples, including the 2024 ransomware claim that reshaped underwri...

In episode 100 of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprise security teams are using adversary emulation — structured, intelligence-driven attack simulations — to validate their defenses. They break down why traditional penetration testing is no longer enough, how frameworks like MITRE ATT&CK shape modern emulation, and a specific case where a Fortune 500 company u...

Episode 99 of Cybersecurity Business with Fexingo dives into an emerging angle in enterprise defense: using blockchain to secure software and hardware supply chains. Lucas and Luna break down how the approach works—anchoring tamper-proof manifests on a distributed ledger to verify integrity from code commit to deployment. They discuss a concrete example from the 2025 compromise of a major open-sou...

When a ransomware attack hits, who actually talks to the criminals? In this episode, Lucas and Luna dive into the controversial but increasingly common practice of hiring professional ransomware negotiators. They explore how firms like Coveware and Kivu Consulting act as intermediaries between victims and attackers, using data from past incidents to drive down ransom demands. Lucas explains the ty...

Episode 97 of Cybersecurity Business with Fexingo dives into remote browser isolation (RBI), a technology that runs web sessions on a remote server to keep malware off endpoints. Lucas and Luna discuss how the approach flips the traditional security model: instead of trying to detect malicious code, it simply never lets code reach the user's device. They walk through a real example from a 2025 bre...

Episode 96 of Cybersecurity Business with Fexingo explores how open-source threat modeling frameworks like OWASP Threat Dragon and MITRE ATT&CK are changing enterprise security. Lucas and Luna discuss why companies like Netflix, Spotify, and JPMorgan are ditching proprietary tools for community-driven models, how STRIDE and PASTA methodologies fit into modern DevSecOps, and what this shift means f...

Episode 95 dives into the rise of Cloud Workload Protection Platforms (CWPPs), a security category that has quietly become essential for enterprises running hybrid and multi-cloud infrastructure. Lucas and Luna unpack the specific shift from legacy antivirus and host-based security to agent-based workload protection that spans AWS, Azure, and GCP. They focus on a concrete example: how a Fortune 50...

In Episode 94 of Cybersecurity Business with Fexingo, Lucas and Luna explore the growing threat of Living-Off-the-Land (LOL) binaries — a technique where attackers use legitimate system tools like PowerShell, WMI, and Certutil to evade detection. They break down real-world cases, including the 2021 Kaseya supply-chain attack where REvil used LOLbins to move laterally, and the 2020 SolarWinds breac...

Episode 93 of Cybersecurity Business with Fexingo dives into how organizations are consolidating their threat intelligence feeds into unified platforms. Lucas and Luna examine the shift from dozens of point solutions to a single TIP, using the example of a global bank that cut alert noise by 40%. They discuss how platforms like Recorded Future and Anomali are evolving, the role of STIX/TAXII stand...

Episode 92 of Cybersecurity Business with Fexingo dives into the rapidly growing market for breach and attack simulation (BAS) tools. Lucas explains how BAS platforms continuously probe an organization's defenses — from firewalls to endpoint detection — to find gaps before real attackers do. He cites Gartner's projection that by 2027, 40% of enterprises will use BAS, up from under 10% in 2024. Lun...

Episode 91 of Cybersecurity Business explores the Cyber Threat Hunting Maturity Model (HMM), a framework developed by the cybersecurity firm Sqrrl (acquired by AWS) to measure and improve an organization's threat-hunting capabilities. Lucas and Luna discuss the five levels, from Level 0 (initial, reactive) to Level 4 (leading, automated), and walk through a specific case study of a Fortune 500 fin...

Episode 90 of Cybersecurity Business with Fexingo dives into a fresh intelligence frontier: AI-powered translation of dark web and encrypted chat logs. Lucas and Luna explore how security teams are leveraging large language models to parse jargon, slang, and coded language from threat actor communications in real time. The episode centers on a specific case: a mid-2026 ransomware group — tracked a...

In this episode, Lucas and Luna explore how enterprises are moving away from manual firewall rule reviews and access control list updates toward automated policy enforcement. They discuss the challenges of maintaining security policies across hybrid cloud environments, the role of infrastructure-as-code tools like Terraform and Open Policy Agent, and a specific case where a Fortune 500 company red...

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the world of cyber deception — how security teams are deploying fake assets, decoys, and lures to detect and misdirect attackers in real time. They explore a real case: a mid-sized financial services firm that deployed a network of 500 decoy endpoints and caught an advanced persistent threat within 48 hours, something...

Episode 87 of Cybersecurity Business with Fexingo dives into the shift away from passwords. Lucas and Luna examine why major enterprises like Microsoft and Google are accelerating passkey adoption, how phishing-resistant authentication changes the attacker calculus, and what a real-world deployment at a mid-size bank looked like. They break down the FIDO2 standard, the role of biometrics, and the...

Episode 86 of Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense. Hosts Lucas and Luna explore how security teams are adopting external attack surface management (EASM) to discover unknown internet-facing assets. They discuss a 2024 Gartner report predicting that EASM spending will reach $1.2 billion by 2026, and examine the case of a Fortune 500 retailer tha...

Episode 85 of Cybersecurity Business with Fexingo explores digital twin security — using virtual replicas of networks, applications, and critical infrastructure to simulate cyberattacks before they happen. Lucas and Luna discuss how Boeing and the energy sector are deploying digital twins to test defenses against ransomware and supply chain compromises without risking real systems. They break down...

Episode 84 of Cybersecurity Business with Fexingo examines the growing adoption of large-scale cyber deception. Lucas and Luna discuss how organizations are deploying decoys, honeypots, and breadcrumbs at scale to detect adversaries early. They look at a recent deployment at a Fortune 500 retailer that caught a hands-on-keyboard attacker within 13 minutes. The hosts explore the economics: costs as...

Episode 83 of Cybersecurity Business with Fexingo explores the rise of cyber fraud fusion centers—dedicated teams that combine threat intelligence, fraud detection, and incident response under one roof. Lucas and Luna break down how companies like JPMorgan Chase are merging silos to stop credential stuffing, account takeovers, and payment fraud faster. They discuss why traditional separation betwe...

Fileless malware has become one of the most dangerous threats in cybersecurity, exploiting legitimate system tools like PowerShell and WMI to evade traditional signature-based defenses. In this episode, Lucas and Luna examine how security teams are deploying in-memory scanning techniques to detect and block attacks that never touch the disk. They discuss the technical challenge of scanning volatil...

Episode 81 of Cybersecurity Business with Fexingo dives into graph-based threat hunting — a technique that maps relationships between users, devices, and network flows to uncover hidden attack paths. Lucas and Luna break down how a mid-sized financial firm used graph analytics to detect a credential-stuffing campaign that traditional SIEM tools missed, saving an estimated $4 million in potential f...