Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense

Episode 30 of Cybersecurity Business with Fexingo dives into how enterprises are adopting zero-trust architectures to defend against software supply chain attacks. Lucas and Luna examine the SolarWinds breach as a case study, then explore how companies like Google and Microsoft are implementing zero-trust principles — from verifying every identity to micro-segmenting networks. They discuss the rol...

Lucas and Luna explore the shift from network-centric security to identity-centric defense. They discuss how the 2020 SolarWinds breach accelerated the adoption of zero-trust identity models, why Microsoft estimates identity attacks have risen by over 200 percent year-over-year, and how companies like Okta, Ping Identity, and Microsoft are competing in the identity security space. The episode dril...

Episode 28 of Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense. Lucas and Luna dig into security debt — the accumulated vulnerabilities and outdated controls that plague enterprise environments — and how threat modeling is emerging as a structured approach to pay it down. They examine a real-world case: how one global bank used attack trees and data-flow di...

Phishing remains the number one attack vector, but a growing number of enterprises are adopting a radical approach: browser isolation. Instead of trying to detect malicious links, these systems run all web content in a remote container, so nothing dangerous ever reaches the endpoint. In this episode, Lucas and Luna break down how Cloudflare, Menlo Security, and Zscaler are competing in this space,...

Episode 26 of Cybersecurity Business with Fexingo. Lucas and Luna explore how the cyber insurance market is driving significant changes in enterprise security practices. They examine the hardening of underwriting standards after the 2021 ransomware surge, with premiums rising 50-100% annually in 2022 and 2023 before stabilizing. The conversation focuses on how insurers now require specific control...

Episode 25 of Cybersecurity Business with Fexingo examines the shifting dynamics of cybersecurity insurance. Lucas and Luna explore how rising premiums and stricter underwriting requirements are forcing enterprises to adopt stronger security controls. They discuss the case of a midsize logistics company that saw its cyber insurance premium triple after a ransomware attack, and how insurers now man...

Episode 24 of Cybersecurity Business with Fexingo examines the shift from manual patching to automated patch management in the race against zero-day exploits. Lucas and Luna break down the economics of patching: the average enterprise has 200,000+ endpoints and takes 97 days to patch a critical vulnerability, while attackers can weaponize a flaw in 15 days. They explore how companies like CrowdStr...

Episode 23 of Cybersecurity Business with Fexingo dives into the rise of virtual CISO (vCISO) services — why mid-sized companies are outsourcing their security leadership to firms like Coalfire and SecurityScorecard. Lucas and Luna break down how the vCISO market grew to over $1.5 billion in 2025, the economics of fractional security executives, and what this means for enterprise defense. They als...

Episode 22 of Cybersecurity Business with Fexingo explores why operational technology (OT) security has become the most urgent priority for enterprise CISOs. Lucas and Luna examine the Colonial Pipeline ransomware attack as a turning point, then drill into a specific case: a 2025 water-treatment facility breach in Florida where attackers manipulated chemical controls via the same network as the HV...

Endpoint Detection and Response (EDR) is rapidly replacing traditional antivirus in enterprise security. In this episode, Lucas and Luna break down why the shift is happening, using CrowdStrike's Falcon platform as a case study. They discuss how EDR differs from signature-based antivirus, the role of AI in detecting novel threats, and the financial calculus behind the transition. Lucas shares a sp...

Episode 20 of Cybersecurity Business with Fexingo explores how security teams are turning to dark web marketplaces—sites like Russian Market and Genesis—as a legitimate source of threat intelligence. Lucas and Luna unpack a concrete case: how a Fortune 500 retail company detected a credential dump on a dark web forum before it was used in an attack, saving an estimated $4 million in potential dama...

Most cybersecurity spending goes toward keeping attackers out — but what if you invited them in and watched what they did? This episode explores deception technology, a strategy where security teams plant fake credentials, decoy servers, and honeytokens to catch intruders already inside the network. Lucas walks through a real 2025 deployment at a Fortune 500 retailer that detected a ransomware cre...

Open source intelligence, or OSINT, is a powerful tool for both security researchers and cybercriminals. In this episode, Lucas and Luna explore how thieves use publicly available data — from social media to corporate websites — to plan targeted attacks. They walk through a real example: how a mid-sized healthcare firm was breached after an OSINT probe revealed an employee's vacation photos and a...

Lucas and Luna explore the business behind cyber threat intelligence feeds—the data products that power enterprise defense. They break down how companies like Recorded Future, Mandiant, and CrowdStrike collect, analyze, and sell threat data, with a specific look at Recorded Future's $1.9 billion sale in 2025. The episode also touches on the rise of open-source alternatives like MISP and how smalle...

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore the growing threat of AI-powered social engineering attacks. Unlike traditional phishing that relies on spelling errors and generic messages, attackers now use generative AI to craft personalized, grammatically perfect emails that mimic trusted contacts. Lucas breaks down a real case from early 2026 where an employee at...

Episode 15 of Cybersecurity Business with Fexingo explores security orchestration, automation, and response (SOAR) — a technology stack that connects disparate security tools into a single workflow. Lucas and Luna break down how SOAR platforms like Splunk Phantom and Palo Alto Networks' Demisto are helping overstretched security operations centers (SOCs) triage alerts faster, reduce mean-time-to-r...

Lucas and Luna explore the under-discussed role of data brokers in the cybersecurity landscape. They focus on the 2023 breach of a major data broker that exposed the personal information of hundreds of millions of people, and how the aggregation of data by these companies creates a single point of failure for enterprises. The hosts discuss how security teams are now auditing their data-sharing pra...

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how nation-state hackers are increasingly targeting critical infrastructure—power grids, water systems, and hospitals. They break down the recent Colonial Pipeline attack, the rise of state-sponsored groups like APT29 and APT33, and how companies are fighting back with new defense strategies. Specific numbers and cases...

In this episode of Cybersecurity Business, Lucas and Luna explore the consolidation wave reshaping the cybersecurity industry through mergers and acquisitions. They focus on a specific case: Palo Alto Networks' acquisition of Cato Networks in late 2025 for $2.8 billion, a deal that signaled the convergence of network security and secure access service edge (SASE). Lucas explains the strategic rati...

Lucas and Luna explore the rise of bug bounty programs, from their hacker origins to a $1.2 billion industry. They break down how companies like Google and Microsoft pay ethical hackers to find flaws before criminals do, the economics of payouts, and the tension between researchers and corporations. With specific examples like the $100,000 Tesla bounty and the platform wars between HackerOne and B...

Episode 10 of Cybersecurity Business with Fexingo dives into the surge of data breaches caused by cloud misconfigurations, not sophisticated hacking. Lucas and Luna break down a specific case: a healthcare startup that exposed 1.2 million patient records through an unsecured Amazon S3 bucket. They explore why cloud security is often an afterthought for fast-moving engineering teams, how misconfigu...

Episode 9 of Cybersecurity Business with Fexingo explores the chronic shortage of cybersecurity talent and how AI-powered tools are helping enterprise teams do more with fewer people. Lucas and Luna examine a real case: how a mid-sized financial services firm used an AI-driven security orchestration platform to slash incident response time from 45 minutes to under 60 seconds, without hiring a sing...

In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how ransomware groups have evolved from scrappy hackers into professional, venture-capital-backed-like organizations. They examine the case of LockBit — which operated with a PR team, a bug bounty program, and an affiliate model resembling a SaaS sales channel. The hosts break down the economics: how ransomware-as-a-ser...

Episode 7 of Cybersecurity Business examines the fastest-growing threat category in enterprise defense: software supply chain attacks. Lucas and Luna break down the 2024 SolarWinds follow-up and the 2025 MOVEit breach to explain why attackers target third-party code rather than front doors. They walk through the economics of software dependency reuse, the SEC's new disclosure rules for compromised...

Cybersecurity faces a looming paradigm shift: quantum computers could break public-key encryption within a decade. In this episode, Lucas and Luna examine the ‘Q-Day’ timeline, starting with a concrete 2025 incident where a Chinese quantum team decrypted RSA-2048 in simulation. They explore why enterprises must start migrating to post-quantum cryptography now, despite high costs and uncertainty. T...