The Security Strategist

“People love the idea that an agent can go out, learn how to do something, and just do it,” Jeff Hickman, Head of Customer Engineering, Ory , said. “But that means we need to rethink authorization from the ground up. It’s not just about who can log in; it’s about who can act, on whose behalf, and under what circumstances.” In the latest episode of  The Security Strategist Podcast , Ory’s Head...

With more and more organisations adopting AI as part of their operations, a new layer of data risk has begun to emerge.  In the recent episode of  The Security Strategist Podcast , guest Gidi Cohen, CEO and Co-Founder of  Bonfy. AI , sat down with host Richard Stiennon, Chief Research Analyst at IT Harvest. They discussed the reasons traditional  data loss prevention (DLP) syst...

In this episode of  The Security Strategist podcast , host  Jonathan Care, Lead Analyst at KuppingerCole Analysts , speaks with  Sudhir Reddy, the Chief Technology Officer (CTO)  of  Esper , about how to build trust in ‘Zero Trust.’. They explore this paradox in Zero Trust systems, where human trust is essential for the system to function effectively.  Reddy emphasise...

Can your organization truly trust every identity, human, machine, and AI? The traditional security perimeter is no longer a reliable boundary. As enterprises adopt hybrid infrastructures, cloud services, and autonomous AI systems, identity has emerged as the central element of effective cybersecurity. In the latest episode of  The Security Strategist Podcast ,  Richard Stiennon  spe...

In today’s cybersecurity industry, Managed Service Providers (MSPs) who do not adapt risk falling behind.  In the recent episode of  The Security Strategist podcast , host  Richard Stiennon, Chief Research Analyst at IT-Harvest , talks with  Stefanie Hammond, Head Nerd at N-able , and  Jim Waggoner, Vice President of Product Management at N-able . They discuss how MSPs can...

"You have to think about how the online world really operates and how we make sure that data is secure. How can we trust each other in the digital world?" Robert Rogenmoser, the CEO of Securosys, asks. The answer is "encryption and digital signature." According to Robert Rogenmoser, the CEO of  Securosys , storing keys insecurely creates immediate risk. This makes it crucial to maintain stron...

"With any new technology, there's always a turning point: we need something new to solve the old problems,” states  Jeffrey Hickman, Head of Customer Engineering at ORY , setting the stage for this episode of The Security Strategist podcast. The key challenge enterprises face today, pertaining to identity and security, particularly, is the quick rise of AI agents. Many organisations are...

"The harsh reality is the site wasn't real. The ad was fake. The reality is you've clicked through to a steward ad that's taken you to a fake site. That fake site then has taken your details, your credit card,” articulated  Lisa Deegan, Senior Director, UK and International Growth at EBRAND , in the recent episode of  The Security Strategist podcast . Host  Richard Steinnon, Chief R...

Identity fabric, a contemporary, flexible  identity and access management (IAM)  architecture, should “be involved at every stage of authentication and authorisation,” says  Stephen McDermid , CSO, EMEA at  Okta Security .  According to CISCO’s VP , 94 per cent of CISOs believe that complexity in identity infrastructure decreases their overall security.  In this episo...

Enterprises can no longer afford the old trade-off between speed and safety. Developers are under constant pressure to release code faster. At the same time, security teams face an endless stream of new threats. The middle ground is clear, and that is software must be secure and resilient from the start, without slowing innovation. This is the philosophy  Ian Amit , CEO of  Gomboc AI , s...

In an era of AI, it’s no longer a question of whether we should use it, but instead, we need to understand how it should be used effectively, conveys Sam Curry, the Chief Information Security Officer (CISO) at Zscaler. He believes that the growth of agentic AI is not meant to replace human security teams; rather, it aims to improve the industry as a whole. In this episode of  The Security Str...

It has been eight years since the  NIST Special Publication 800-190 : Application Container Security Guide was published, and its recommendations remain central to container security today. As cloud-native applications have become the foundation of modern enterprise IT, securing containers has shifted from an afterthought to a critical priority. In this episode,  Richard Stiennon , Chief...

AI is rapidly changing how cybercriminals operate. Social engineering, once easy to spot, has entered a new era. Phishing emails that used to be riddled with spelling mistakes and clumsy language are now polished, persuasive, and tailored using data scraped from social media and other online sources. The result? Messages that look legitimate enough to trick even the most security-aware employees....

"What we're seeing as a response to coding agents is one of the biggest risks in security vulnerabilities to date,” said Jaime Jorge, Founder and CEO of Codacy. “It's almost like a game to see how fast we can exploit vulnerabilities in some of these applications that are created so quickly." In this episode of  The Security Strategist Podcast , Richard Stiennon, Chief Research Analyst at IT-H...

"When you're encrypting the traffic and giving the keys only to the owner of the traffic, it provides a specific door for attackers to walk right in,” stated Eva Abergel, the Senior Solution Expert at Radware. In this episode of  The Security Strategist Podcast , Richard Stiennon, the Chief Research Analyst at IT-Harvest, an author and a trusted cybersecurity advisor, speaks with Abergel abou...

“For a long time, we focused on defending the perimeter and thought that was enough to keep businesses safe,” stated Ram Varadarajan, CEO and Co-founder of  Acalvio . “It’s like putting locks on doors. The problem is that more people are finding ways to cross those boundaries and enter your business at an alarming rate.” In the recent episode of  The Security Strategist podcast , Chris S...

Passwords remain one of the weakest links in enterprise security. Despite advances in multi-factor authentication (MFA), recent data breaches show that attackers continue to bypass traditional protections. In this episode of  The Security Strategist , host  Trisha Pillay  speaks with  Nic Sarginson , senior solutions engineer at Yubico. Together, they explore the vulnerabilitie...

"With every technological wave, technology weaponises very quickly. You can create targeted attacks at an unprecedented scale, a human-centric attack at a scale that's never been before humanly possible,” states Sage Wohns, CEO and Founder of Jericho Security.  In this episode of The Security Strategist podcast, host Richard Stiennon, Chief Research Analyst at IT-Harvest, speaks with Wohns ab...

When cybercriminals breach an organization, they're not just after one piece of data - they're hunting for the keys that unlock everything. "Think of Hardware Security Modules (HSMs) like a master vault in a bank for an entire organization's digital security," said David Close, Chief Solutions Architect at Futurex. More than just an analogy, this is the reality of how modern enterprises are secure...

"In this technology-centric world, where we see new advantages, new paths, new adventures, at the end of the day, the other side of the screen is always a human being,”  Bartosz Skwarczek , Founder & President at G2A Capital Group, reflectively said.  The quote sets the tone of the recent episode of  The Security Strategist podcast . In this episode,  Shubhangi Dua , Podcas...

Artificial intelligence (AI) is on everyone’s mind, and its impact doesn't escape the cybersecurity industry. The industry experts acknowledge not just the benefits but also the cybersecurity threats of AI integrations. As  Pascal Geenens, Director of Threat Intelligence at Radware , puts it, "It's AI, so everything is changing weekly. What I talked about two weeks ago has already changed aga...

"The thing to challenge is the fact that fraud prevention is a vertical by itself," says Guido Ronchetti, CTO at XTN Cognitive Security. He stresses that recent fraudulent trends exhibit "no real separation between fraud, cybersecurity, and AML.” In this episode of  The Security Strategist podcast , Jonathan Care discusses fraud prevention with Ronchetti and Paolo Carmassi, Head of Sales at X...

"What we're seeing now is a lot of the vendors that were traditionally one of the identity pillars are kind of expanding into other pillars,” says Kevin Converse, Vice President, Identity and Access Management, GuidePoint Security.  In this episode of  The Security Strategist podcast , Richard Stiennon speaks with Converse, VP at GuidePoint Security. They discuss identity management, foc...

In this episode of  The Security Strategist  podcast, host Richard Stiennon, industry analyst and author, speaks to Craig Roberts, Principal Software Engineer at Rapid7, about digital exposure and the increasing challenges of Attack Surface Management (ASM). The conversation peels back the layers of hidden vulnerabilities and misconfigurations that plague today’s digital world. The speak...

Infosecurity Europe , Europe's leading cybersecurity event, is celebrating its 30th anniversary from June 3rd to 5th at ExCeL London. This year's conference is setting the stage for major moments in the enterprise tech space. The event aims to foster collaboration and promises to showcase the top cutting-edge cybersecurity solutions. In this episode of the Security Strategist podcast, host Shubhan...