Cybersecurity News & Analysis by Cyber Sidekicks - Your Weekly Update’

In this week's episode, guest Jayesh Kamat , Global Competency Leader in Application Security at IBM, chats with Christina about the profound impact of AI frontier models on cybersecurity and the necessity of shifting toward an "AI-native" security posture.  With machines now generating code at an exponential rate through agents like "IBM Bob," traditional application security (AppSec) methods are...

In this week's show, Brandon Dobrec , VP of Product at SecurityScorecard , chats with Christina & Rory about the escalating challenges of supply chain security and why traditional risk management is failing in the face of modern complexity. NEWS SailPoint to Acquire Entro in Reported $200 Million Deal “FortiBleed”: Sweeping Credential-Harvesting Heist Compromises 30K+ Fortinet Devices Leave us...

It's another special episode this week!  Hosts Christina Richmond and Rory Duncan examine the evolution of the identity market from a back-office IT function to a central pillar of modern business risk management. The discussion traces the shift from simple human credential management to a complex landscape dominated by non-human identities (NHIs), such as service accounts, APIs, and emerging AI a...

This week, we chat with Simon Hunt , Chief Product Officer at Securonix about the intersection of human intelligence and AI in cybersecurity, and the current hype and "anthropomorphizing" of large language models (LLMs).  Christina also gives us an update on her visit to Cisco Live! She's also written a great blog that includes her thoughts and insights from the event. We also cover a couple of ne...

This week, another in our series of Special Episodes - this one dedicated to an analysis of the state of the Threat Hunting market, the key players and the early movers in pre-emptive cybersecurity. Richmond Advisory Group's Principal Analysts Christina Richmond & Rory Duncan outline the evolution of threat hunting from reactive, through proactive, to pre-emptive, debating the use of AI agents...

Cody Pierce , Co-Founder & CEO of Neon Cyber chat with Rory this week about visibility, context, and the importance of decentralized security as he proposes that the browser will become the operating system for most people's daily work.  NEWS Christina & Rory discuss healthcare and data confidentiality this week - outlining the alarming increase in cyber-attacks in this sector: 118 large-s...

How do you differentiate between a scenario where agents are getting smarter and working for you versus getting smarter and working against you? This week, Christina & Rory chat with Shiv Agarwal , Co-Founder & CEO at Singulr AI , discussing the advancements in detective and preventive technologies and the importance of modelling out the Good vs. the Bad NEWS Google Detects First AI-Genera...

The critical topic of securing the software supply chain is discussed this week with Daniel Bardenstein , CEO & Co-Founder of Manifest Cyber . Rory, Christina & Daniel talk about the critical intersection of AI, supply chain security, and the erosion of trust in technology. Christina also shares her thoughts about her visit to IBM Think 2026 , including why specific solutions for orchestra...

In this week's episode, Kory Daniels , Chief Security & Trust Officer at LevelBlue describes how the rapid advancement of AI is fundamentally altering the cybersecurity landscape, necessitating a shift in how organizations approach defense, culture, and risk management. In discussion with Christina and Rory, Kory argues that the speed of AI agentic capabilities—specifically citing models like...

This week's mega-episode is the second in our series of deep-dives into industry topics, this time looking at Governance, Risk & Compliance (GRC). Christina and Rory chat about the history of GRC, its "facelift" more!  Two guests join the show this week to discuss the topic: Fabio Campos , Managing Partner, Global Cyber Strategy & Risk Leader at IBM Consulting , and Matt Alderman , Chief P...

A bumper episode this week: Christina & Rory discuss the announcement of IBM Autonomous Security & cybersecurity assessment services. Does this fulfill the goal of using agents to autonomously handle repetitive security tasks - aka the "boring bits" - that humans often struggle to maintain? This week's guest is Co-Founder & CEO of Straiker , Ankur Shah , and we have an interesting disc...

Former CIA officer and seasoned cybersecurity leader - and co-host of CISO Tradecraft , creator of the OWASP Threat and Safeguard Matrix (TaSM) - Ross Young joins the show this week to discuss his latest book - Cybersecurity's Dirty Secret: Why Most Budgets Go To Waste - and chat about the importance of strategy & workflow when it comes to Agentic AI.   Leave us a message! Want to leave some f...

No Day 3 podcast, but we saved a great discussion for Day 4 - with Dave Merkel , Co-Founder and CEO of Expel . During the chat, we looked at the past, present and potential future of cybersecurity, including AI, the Agentic SOC and the restorative power of a burger washed down with a pint of ale! Leave us a message! Want to leave some feedback and suggestions but would prefer not to write an email...

"It's a new cyber war of digital escalation" - Day 2 at #RSAC2026, and in the second of our Cyber Sidekicks podcasts, hosts Christina Richmond and Rory Duncan chat with #IBM's Associate Partner of Security Services John Velisaris about "the art of the possible" for enterprise security protection. Leave us a message! Want to leave some feedback and suggestions but would prefer not to write an email...

It's Day 1 of RSAC 2026! Principal Analysts Christina Richmond and Rory Duncan chat with Spektrum Labs ' CISO Josh Brown about cybersecurity resilience, safeguards, posture validation and insurance readiness This is the first of our RSAC 2026 podcasts. You can see the video version on our YouTube Channel. Day 2 and Day 4 podcasts and videos to follow! Richmond Advisory Group Leave us a message! Wa...

It's RSAC 2026 Week! In the run-up to the show, Christina and Rory chat with Zenity' s VP of Security Strategy, Chris Hughes . The discussion centers on the transformative and "double-edged" nature of AI in cybersecurity - simultaneously breaking traditional security paradigms and offering new promise for areas like GRC, AppSec, and SecOps. RSAC 2026 Preview Christina & Rory highlight some of...

As the cybersecurity community descends upon the Moscone Center for RSAC, there is a palpable "exhaustion of choice." We are currently navigating a sea of over 600 Managed Detection and Response (MDR) providers, each promising to be the definitive shield for your enterprise. For the modern CISO, this isn't just noise; it’s a signal-to-noise crisis. In a market where every player claims the same hi...

Serious discussions this week as Christina & Rory look more closely at how a combination of physical and digital threats are bringing the effects of the conflict in the Middle East home to people across a wide region. Datacenter outages, AI-powered targeting and large-scale hacktivist attacks outline the heightened vulnerability of critical infrastructure.   AWS UAE data center hit by outage f...

This week we discuss some of the trends, new directions and common approaches of some of this year's RSAC 2026 Innovation Sandbox Finalists! We also cover the latest M&A News: Palo Alto Networks announcing their intention to buy AI endpoint security platform Koi; the pitfalls of using an AI-generated random password (hint: they're not actually unique or necessarily secure...), and; the latest...

In the run-up to RSAC 2026 we have the first of a series of shows highlighting some of the new and innovative cybersecurity firms in the event's Innovation Sandbox Top 10 Final. This week, Christina & Rory chat with Hanah-Marie Darley , Chief AI Officer at Geordie.ai about how to govern AI agents by deeply understanding what they are capable of, their behaviour, and how to manage and govern th...

Another week, another acquisition? This time, Sophos is front-and-centre with the announcement that it intends to purchase UK-based Arco Cyber in a move that the company says will help customers by combining agentic AI, integrated platforms, and trusted human expertise delivered in partnership with managed service providers (MSPs) and managed security service providers (MSSPs). We also have a grea...

This week, Christina & Rory discuss Moltbook: the social network built for AI agents - but what are the security implications, and how could attackers take advantage of potential vulnerabilities? Also, more AI-fuelled attacks on AWS' S3 public buckets make credential finding much quicker, and an update on how Poland's cybersecurity police are cracking down on the increase in domestic hacking a...

Another big announcement this week as LevelBlue signs a strategic alliance with Fortra, marking a partnership that will benefit from a combined product + services play. As part of the deal, LevelBlue will acquire Fortra's managed services - including those of the former Alert Logic acquisition - covering MDR, XDR & WAF. NEWS LevelBlue and Fortra Launch Strategic Managed Services Partnership to...

This week we have an extended discussion with Ryan LaSalle , CEO of Nisos on the topic of digital executive protection and "exhaust" management. Ryan also joins our chat about the announcement of ChatGPT Health and what the security implications of sharing personal, medical information might be.... NEWS Analysis of 6 Billion Passwords Shows Stagnant User Behavior ChatGPT Health Raises Big Security...

An M&A focused episode this week as CrowdStrike announces it intends to purchase identity security vendor SGNL, as well as browser runtime security vendor Seraphic Security - moves designed to beef-up it's Falcon platform, enhancing its capabilities for continuous authorization, and protecting in-session browser activity for both human and autonomous identities. Christina & Rory discuss th...