THREATCON1

Recorded live at RSA Conference, THREATCON1 hosts Patrick Garrity (Security Researcher at VulnCheck) and Kimber Duke (Director of Product at VulnCheck) sit down with Piotr Kijewski, CEO of The Shadowserver Foundation, to explore the evolving landscape of cyber threats, vulnerability exploitation, and global threat intelligence. As one of the most respected nonprofit organizations in cybersecurity,...

In this special live episode recorded at RSA Conference, ThreatCon1 hosts Patrick Garrity and Kimber Duke sit down with Cynthia Kaiser, SVP of Ransomware Research at Halcyon and former FBI Cyber Executive, alongside Johnny Collins, Director of Intelligence Operations at Halcyon. The discussion explores how ransomware has evolved from financial crime into a growing national security threat. Cynthia...

Recorded live at the RSA Conference, this episode of the THREATCON1 Podcast features a deep-dive conversation with Joe Slowik — one of the cybersecurity industry’s leading voices in cyber threat intelligence, detection engineering, and adversary operations. Hosted by Patrick Garrity and Kimber Duke from VulnCheck, the discussion explores how modern threat actors operate, why most organizations sti...

Recorded live at the RSA Conference, this episode of THREATCON1 features a deep dive into the evolving world of cybersecurity with Casey Ellis, Founder of Bugcrowd. Joined by Patrick Garrity (Security Researcher) and Kimber Duke (Director of Product at VulnCheck), the conversation explores how the industry is changing—and why many of the core problems remain the same. From the rise of AI-powered c...

In this live episode recorded at RSA Conference, the THREATCON1 team sits down with Joe Silva, Founder & CEO of Spektion, for a deep dive into the evolving reality of enterprise cybersecurity in the age of AI and explosive software complexity. Joe shares his unique journey from military intelligence and government service, through roles at iSight Partners, Symantec, TransUnion, and JLL as CISO...

Recorded live at RSA Conference in San Francisco , Patrick Garrity and Kimber Duke from VulnCheck sit down with Saeed Abbasi , Senior Manager of Security Research at the Qualys Threat Research Unit , for a deep dive into one of the most overlooked attack surfaces in cybersecurity: network edge devices . From firewalls and VPN gateways to home routers, edge devices sit at the intersection of the in...

In this episode of the THREATCON1 Podcast , Patrick Garrity is joined by Ryan Dewhurst , Head of Threat Intelligence at WatchTowr , for a deep dive into the rapidly evolving world of vulnerabilities, threat intelligence, and real-world exploitation. Ryan shares the story of his journey through cybersecurity — from creating the widely used Damn Vulnerable Web Application (DVWA) and the WPScan vulne...

In this episode of the THREATCON1 Podcast, Tom Bain and Patrick Garrity sit down with Lillian Lang, Senior Manager of Cyber Threat Intelligence at Chevron , to explore how modern cyber threats are evolving—and what defenders must do to stay ahead. Lillian shares her journey from federal intelligence work after 9/11 to protecting critical infrastructure in the private sector, offering a rare inside...

In this episode of the THREATCON 1 Podcast, hosts Tom Bain and Patrick Garrity sit down with Cynthia Kaiser, SVP at Halcyon and former FBI cyber executive, to explore the rapidly evolving world of ransomware, AI-driven threats, and national-security-level cyber defense. Drawing on two decades inside the FBI—including briefing the President’s Daily Intelligence Brief—Cynthia shares frontline insigh...

Tom and Patrick chat with Neil Robinson, Head of Security Engineering and Cybersecurity, Virgin Money. Neil shares his perspectives on tracking and managing emerging cyber threats in the financial services industry, gives us an alternate role or the CISO - The Chief "Translation" Officer, and provides some ways in which he focuses in on reducing noise, creating more effective signal, and how he se...

In this episode of THREATCON1 , hosts Tom Bain and Patrick Garrity sit down with Nathan Rollings , Field CISO at Zafran , and Yonatan Keller , Analyst Team Lead at Zafran , for a deep, practitioner-focused conversation on the realities of modern vulnerability management. Together, they explore why patching alone can’t keep up with today’s threat landscape — and how security teams can dramatically...

In this episode of the Threatcon1 Podcast , Tom and Patrick sit down with Tyler Shields , Cybersecurity Strategy Analyst at Omdia , for a wide-ranging conversation on where cybersecurity is heading — and what actually matters to practitioners right now. Tyler brings a rare perspective shaped by years spent across research, offensive security, vendor strategy, and analyst work. Together, they unpac...

In this episode of THREATCON1, Tom and Patrick sit down with Nabil Hannan, Field CISO at NetSPI, AI-focused startup advisor, and host of the Agent of Influence podcast. Nabil shares his unique perspective on today’s most pressing cybersecurity challenges, including: Insecure software and why vulnerabilities are becoming increasingly dangerous in our hyper-connected world. The human factor in cyber...

Tom and Patrick sit down with Christine Fignar, Cybersecurity Analyst at the Federal Reserve Bank of Minneapolis, to unpack one of the most misunderstood areas of security: insider threats and human-driven risk. Christine’s background spanning aviation, HR, communications, and counterterrorism gives her a rare perspective on stress, behavior patterns, and the subtle signals that often precede inci...

Tom and Patrick welcomed Simon Goldsmith, CISO, Ovo Energy to the show, to chat about the emerging threat landscape across different industries he’s served in - from the CISO’s perspective. We dig into some of his cyber experiences throughout his career, talk rugby, debate Oasis vs Blur and even drill down into how to counter coordinated nation-state attacks!

Tom and Patrick host Mike Privette, Founder, Return on Security, to get a sense of Mike's perspectives on how he's used his operational background in cyber as a former multi-time CISO to pivot into something entirely different in the cyber market today! Mike brings insights on how he tracks and slices data on all cyber funding and M&A activity with his broad-ranging dataset and his leadin...

Tom and Patrick sit down with VP of Security Research, Tod Beardsley. We talk to Tod about his current role leading cyber research at RunZero, his time at CISA, emerging cyber threats he's currently engaged in researching, his perspective on the CVE program and its future - and finally, horror movies, of which Tod is an aficionado and active podcast host himself of Podsothoth: A Lovecraft Book Clu...

In this episode, Tom and Patrick chat with Jen Easterly, former Director of CISA, for the U.S. government. Topics covered range from public-private collaboration efforts to better protect our national security, to her perspectives on defending against threat actors targeting U.S. interests as well as the impact AI is having on cyber today, with a sneak peak into a few of her upcoming key initiativ...

In this episode, Tom and Patrick chat with former Director of the CIA’s Center for Cyber Intelligence, Andrew Boyd, about the root of today’s emerging cyber threats to both business and to citizens. They dive into his experience in offensive cybersecurity across multiple former government roles, how he grew his skillset into cyber and experiences in serving the U.S. in many innovation-led cyber ca...