TechSpective Podcast

Inner Circle Podcast Episode 020 An application is no longer a product. In the world of cloud, and DevOps, and containers, an application is a process. There is no distinct beginning or end to development. The application is a living thing that cycles through a feedback loop--constantly identifying and resolving issues and consistently improving and evolving. When you have continuous development a...

Inner Circle Podcast Episode 019 Cybersecurity is generally an all or nothing game. Attackers are adept at finding and exploiting the weak link, so letting your guard down in any area is unwise. Kamal Shah, CEO of StackRox, joins me for this episode of the Inner Circle Podcast and we discuss the importance of protecting applications and data in containers, and why that means ensuring that you have...

Inner Circle Podcast Episode 018 ...and vice versa. That should be part of the title too, but it was already quite lengthy. On this episode of The Inner Circle, I am joined by Kevin Livelli, Director of Threat Intelligence at Cylance, to talk about some interesting research and trends in cyber attacks. There are two recent reports from Cylance that highlight opposite ends of a spectrum, more or le...

Inner Circle Podcast Episode 017 Who can you trust? More importantly, how far should that trust extend? Andy Smith, VP of Product Marketing for Centrify, joins me on this episode of the Inner Circle podcast to talk about zero trust privilege. We talk about the reality of the threat landscape and the fact that attackers generally log in with compromised or stolen credentials. From a traditional aut...

Inner Circle Podcast Episode 016 John Kinsella--co-founder and head of product for Layered Insight--is my guest for this episode of the Inner Circle podcast. Layered Insight is focused on container security, so that is a primary focus of our discussion, but we also diverge into a number of interesting tangents. Containers are hot. Since Docker skyrocketed onto the scene, organizations have been ea...

Inner Circle Podcast Episode 015 Dr. Galina Datskovsky--an expert in the fields of compliance and information governance, and CEO of Vaporstream--joins me to talk about secure messaging. More specifically, we discuss the fixation on encryption and the ways that encrypted email still falls short of the goal of secure messaging. There is a lot of focus on encryption--as there should be. Encryption i...

Inner Circle Podcast Episode 014 My guest for this episode of the Inner Circle podcast is John Sawyer, Associate Director of Services at IOActive. Are you secure? Sure, you've invested a lot of time, money and effort to security and you've implemented firewalls, spam filters, antimalware solutions, intrusion detection and other security tools, and you've developed and implemented security policies...

Inner Circle Podcast Episode 013 When attackers can consistently crack or compromise the credentials of legitimate users to gain access to your network, it is less and less feasible to trust a user based solely on that initial authentication. For this episode of the Inner Circle podcast, I am joined by Den Jones, director of enterprise security for Adobe, to talk about Project ZEN -- Adobe's imple...

Inner Circle Podcast: Episode 012 Chris Bray, senior vice president and general manager for consumer products at Cylance, is my guest for this episode of the Inner Circle podcast. Chris joins me to talk about the new offering Cylance has for the consumer market, and what sets Cylance Smart Antivirus apart from competitors in the consumer antimalware space. Antimalware is primarily reactive--attack...

Inner Circle Podcast: Episode 011 My guest on the Inner Circle podcast this week is Mike Armistead, co-founder and CEO of Respond Software. We talked about artificial intelligence (AI) and the increasingly important role that AI and machine learning (ML) play--particularly when it comes to cybersecurity and the security operations center (SOC). We all know that robot overlords powered by artificia...

Inner Circle Podcast: Episode 010 My guest on this episode of the Inner Circle podcast is Bill Mann, Chief Product Officer for Centrify. We talk about what Centrify is doing to secure and protect DevOps environments, and then also discuss the Secure the Vote initiative that Centrify is driving in the months leading up to a crucial election this November. The mantra at Centrify is "Never trust, alw...

Inner Circle Podcast: Episode 009 Scott Scheferman, a Senior Director of Global Services for Cylance, is my guest on this episode of the Inner Circle podcast. Scott and I discuss what predictive advantage is and why it matters in the context of defending networks and systems against emerging malware threats and exploits. I've been a CISSP since 2002 and I used to work as a security analyst and sec...

Inner Circle Podcast: Episode 008 On this episode of the Inner Circle podcast, I am joined by Matt Alderman, Chief Strategy and Marketing Officer for Layered Insight. We’re both thankful that we’ve moved on to greener pastures, but I worked under Matt not long ago when we were both at Tenable—prior to the Great Marketing Purge of 2017. At Layered Insight, Matt is focused on effective container sec...

Inner Circle Podcast: Episode 007 My guest for this episode of the Inner Circle podcast is Daniel Miessler, Director of Advisory Services for IOActive. Daniel presented a session at IOAsis a few weeks ago while we were in San Francisco attending the RSA Conference. I was not able to attend, but the session title--"Machine Learning Demystified: Separating the Magic from Marketing"--piqued my intere...

Inner Circle Podcast: Episode 006 My guest on this episode of the Inner Circle podcast is Corey Williams, Senior Director of Product Management at Centrify. The focus of our chat is next-gen access, and how the principle of zero trust security is a better approach for identity and access management. I think we can all agree at this point that the perimeter is gone--at least what we traditionally c...

Inner Circle Podcast: Episode 005 Chad Skipper, VP of Competitive Intelligence and Product Testing at Cylance, is my guest for this episode of the Inner Circle podcast. We talk about the importance of anti-malware testing, and how and why you should do the testing yourself. Does your anti-malware solution work? If you are looking at the available options and trying to choose a new anti-malware too...

Inner Circle Podcast: Episode 004 My guest on the Inner Circle podcast this week is Cesar Cerrudo, CTO of IOActive. Our topic revolves around ransomware--but with a twist that involves robots. I think we can all agree that ransomware is annoying. When it comes to the standard ransomware business model of encrypting data and holding it hostage, though, there's a simple solution. As long as you have...

Inner Circle Podcast: Episode 003 Brandon Board, Senior Director of Corporate Security, IT Compliance and Audit at Alert Logic, is my guest for the Inner Circle podcast this week. Alert Logic is a security company and helps customers achieve and maintain compliance with various regulations and frameworks. First and foremost, though, Alert Logic is itself a company--which means it must also comply...

Inner Circle Podcast: Episode 002 In this episode of the Inner Circle podcast, my guest is Christer Edwards from Adobe Security, Christer is a developer and a member of the team that developed HubbleStack--an open source security compliance tool. Christer and I discuss the origin of HubbleStack and why they decided to create it in the first place. We also talk about what it does, why they chose to...

Inner Circle Podcast: Episode 001 Welcome to the inaugural episode of our new Inner Circle podcast. We wanted to find a way to simultaneously spotlight interesting products and knowledgeable experts, while also providing additional value for the TechSpective audience--so the Inner Circle podcast was born. Each week we will invite a guest or guests to join us to chat. We might talk about breaking n...

Prevention is always better than a cure. With IT environments continuing to become more and more complex, even the most sophisticated cyber security teams find it hard to fully prepare, and they constantly need tools at their disposal to strengthen their security postures. Simulation software, while helpful, often doesn’t cut it in reproducing real-world environments and their vulnerabilities. Tha...