Down the Security Rabbithole Podcast (DtSR)

TL;DR: Sitting atop the Moscone Center North, I met up with Mark Simos and we talked through his impressions and our overall analysis of RSA Conference 2024. Some interesting observations, particularly about the "3 conferences" Mark observed.  Sorry, no video this time, but you do get the eloquent "caw!" of a crow that sat overhead and yelled at us for about half the show. Enjo...

TL;DR:  This episode is a recap (my recap) of RSA Conference 2024. I wrote up a brief post on LinkedIn on my way out of town (linked here: https://www.linkedin.com/feed/update/urn:li:activity:7194698322790547456/ ), and now I'm doing a full episode of thoughts and interviews from the show. You get some commentary, and then interviews with Adam Cullin , Kristin Demoranville , Ray Canzanese , a...

TL;DR:  -> 2hr party-line episode This feels surreal, as I write this, that DtSR is pushing episode  600 out to your ears right now. I couldn't possibly have imagined when I started 14 years ago, that this would be real. This episode is the culmination of a lot of hard work, so many amazing guests throughout the years, and  YOU , my listeners! Without you all, I wouldn't keep publishi...

Tl;DR: On the last episode before the big 600th extravaganza, James and I have a conversation about the types of conversations we've had on this show so far, reminisce about some of the favorite guests, and rehash some of the topics that (unfortunately) we could simply re-air today and it would make perfect sense. I know, a little depressing, eh? YouTube: https://youtube.com/live/4GsMSsuyjk8...

Tl;DR:  This week on episode 598 as we are 1 episode away from the Big 600, Adam Meyers joins the podcast to provide an update on the interesting things happening in the world of ransomware, threat actors, and general cyber criminals. Adam regales us with some interesting stories and always has that witty insight we expect from Adam. YouTube Video: https://youtube.com/live/5EBanXzfdtQ Have somethi...

TL;DR: On this episode of the DtSR Podcast, Shawn Tuma joins James & I to talk over what's changed, what's new, and what's not going well at the intersection of cyber and legal. Spoiler Alert: Nothing's that much better, and things are worse. YouTube video: https://youtube.com/live/VDqxohnvpXs Have something to say? Let's hear it. Support the show >>> Please co...

TL;DR:  On this installment of the podcast, David Monnier joins Rafal & special guest Jim TIller to talk about hunting bad actors in cyberspace. What it's like chasing down villains, challenges, and related discussion. David is a recognizable industry expert and someone who can dispense some great discussion and advice. Listen up! YouTube Video: https://youtube.com/live/t53yK6zkikE Have s...

TL;DR:  This week on the podcast, the conversation with Phil Beyer goes all over the map. We start with the interesting (but short) story of how Phil got into cyber, to vCISO vs CISO, and how we really feel about the CISOs opportunity to "win". Short answer - there isn't a win here. It's a very fast-paced episode you'll want to listen at normal speed because, frankly, it&a...

TL;DR: On today's episode of the podcast, Jessica Hoffman joins James and I to talk about Emotional Intelligence . What is it? Why is it desperately important to cybersecurity professionals in  leadership role? All these questions and more are addressed as we parse out the ins and outs of emotional intelligence. YouTube video: https://youtube.com/live/DUBX9r22zEs Have something to say? Let&#3...

TL;DR: This week Episode 593 features Jeff Reich of the Identity Defined Security Alliance as we talk about some of the big-picture challenges of identity, interoperability, and security of identity and identity security (yes those are different). YouTube video: https://youtube.com/live/oTWJEVTzTlY Have something to say? Let's hear it. Support the show >>> Please consider clicking the...

TL;DR:   On this episode, James and I welcome CEO Patrick Dennis , CISOs Jack Korzeniowski and Sam Masiello , former CISO and vCISO, and industry veteran Jim Tiller onto a panel to discuss ransomware . Ransomware is catastrophic for some businesses, and in this episode, we talk through some of the key topics that CEOs and CISOs lose sleep over. Huge thank you to all of these fine gentlemen who gav...

TL;DR:  *Warning: This episode is ranty, and potentially offensive to overly sensitive types*. That said, in this episode Jim Tiller and I sit down, drink in hand, and have a good old rant about the state of the industry right now. We talk through the "people problem", and the tech problem, and lay plenty of blame. At some point, I think we even suggested a solution. Maybe. Enjoy! YouTub...

TL;DR:  On this week's episode, James Beeson once again joins Rafal & James, with guest-host Tom Venables to talk about procurement's involvement in the security of an enterprise. What does procurement have to do with security? How can the two functions work together to improve the security of the enterprise both today and into the future? Listen as we discuss this vital topic. YouTu...

TL;DR:    This week's episode features one of the all-time greats. Joe Dibiase was the first CISO I worked under when I joined GE Power Systems back in the early 2000s and he's had a rather amazing career spanning many different industries. We chat about life, CISO'ing, and what he's up to now. Spoiler alert - Joe sports a Braves World Championship ring! YouTube Video: https://...

TL;DR: This week's episode has the one and only Jeremiah Grossman on the show to talk about liability in software, some of the fundamental problems with cyber security, the market forces that move (or could move) things in the positive direction - and where it could all potentially go. It's a fascinating discussion you'll not want to miss. YouTube Video: (coming soon) Have something...

Tl;DR: Part 3 of 3 : This episode is the big reveal with details and a how-to, in a 3-part series presented by Bo Birdwell , on how to build a defensible security program using compliance to drive greater security improvement. The accompanying video is a must-watch because it has the slides Bo is talking through, and you're not going to want to miss that. YouTube Video: https://youtube.com/li...

Tl;DR: Part 2 of 3 : This episode is the set-up, the problem statement, and overview of Bo's approach, in a 3-part series presented by Bo Birdwell , on how to build a defensible security program using compliance to drive greater security improvement. The accompanying video is a must-watch because it has the slides Bo is talking through, and you're not going to want to miss that. YouTube...

Tl;DR: Part 1 of 3 : This episode is the introduction of a 3-part series presented by Bo Birdwell , on how to build a defensible security program using compliance to drive greater security improvement. The accompanying video is a must-watch because it has the slides Bo is talking through, and you're not going to want to miss that. YouTube Video: https://youtu.be/MJNwn6sbxcM Have something to...

TL;DR: This week Joel Scambray joins James and I to talk about the trends and observations from the world of professional services. Joel is a long-time leader in the professional services delivery space in cybersecurity, and he has some interesting insights to share about where we are and where we could potentially be going. YouTube Video: https://youtube.com/live/LtDgSlnJyik Have something to say...

TL;DR: This episode is part of the Leadership series of episodes, with the one and only  James Beeson . James is one of the quintessential CISOs who is successful in both his craft and business world. I had the pleasure to work with James and his team many years ago and I can't wait for you to hear his insights and lessons learned. If you can get either some coaching or insights from James -...

TL;DR:  This week, I virtually sat down 1 on 1 with my long-time friend, cyber security veteran,  and fellow smartass Christopher Davis to talk about the state of pre-sales (sales engineering) in our industry. We've both done it, being both seller and buyer of security products and services -- and we can complain about the state of things. Chris offers some solid advice, so take notes! Have s...

TL;DR:   As we talked about last year, Jim Tiller is joining us as a regular guest on an episode that looks forward (uncomfortably) to 2024 with all the mayhem and disappointment it will no doubt bring to the cybersecurity industry. What's coming? Let's talk about it... and we're not holding back. YouTube video: https://youtube.com/live/B5K4WQg0S7A Link James referenced: https://www...

TL;DR: On this first episode of 2024, what better way to ring in the new year than to discuss the evolution of (knowledge) work? For this show, my friend Bill Pelletier joins as the Statler to my Waldorf as we discuss where knowledge work was a decade ago, where it is today (post-Covid), and what it could be if we thread the needle just right. In the end, one thing is for certain - the "futur...

TL;DR:   This week, our good friend Jeff Collins joins Rafal & James to talk about the "everything" being on the Internet now. Whether it's presents for the kids, connected devices in the kitchen, or stuff at the office - everything seems to be on the Internet and could be a potential exposure for you, your family, or your company. How do we deal with all of this? YouTube video...

TL;DR: Your favorite podcast is back, after a short break, and bringing you another packed episode with Brandon Dunlap & Jim "All Tiller, no filler" Tiller where we discuss Kelly Shortridge's column " Security Isn't Special ". Some things we agree with, some things we don't, but we talk through it thoroughly. That's part of the fun! Join the pod, and see...