Episodes

Inner Circle Podcast Episode 037 My friend Michael Farnum is my guest for this episode of the Inner Circle podcast for an insightful discussion on increased threats against industrial control systems (ICS) and the need for ICS security. Michael and I have known each other for years after meeting at a Security Blogger's Meetup at RSA many years ago. We both live in the Houston area, and every once in awhile the Venn diagram of our kids' extracurricular activities overlap and we run into one anoth...

Inner Circle Podcast Episode 036 The name Alan Shimel is fairly ubiquitous and well known throughout cybersecurity circles. As one of the founders and ringleaders of the annual Security Blogger's Meetup at the RSA Conference, he is certainly a household name in the world of cybersecurity bloggers and journalists. Alan has also been a good friend of mine for years, and I have had the privilege of working with him as a contributing editor / writer for DevOps.com, ContainerJournal, and SecurityBoul...

Inner Circle Podcast Episode 035 I've been a fan of Georgia Weidman for years, so it was an honor and a privilege to have her join me on the Inner Circle podcast. She is the author of Penetration Testing: A Hands-On Introduction to Hacking, and she is the founder and CEO of both Bulb Security and Shevirah. She is also one of the cybersecurity professionals featured in the Tribe of Hackers book that Marcus Carey and I discussed in a previous episode. To be honest, one of the reasons I first becam...

Inner Circle Podcast Episode 034 Wolf Goerlich joins me for this episode of the Inner Circle podcast to talk about the state of cybersecurity today and his new role on the CISO Advisory Board for Duo Security. Wolf talks about his focus on zero trust--and somehow that segued into a conversation about the disruptive technology that led to the original jersey for the Toronto Raptors and other NBA teams during the mid 90s as we discussed technological tipping points and the impact it can have on en...

Inner Circle Podcast Episode 033 Jeremiah Grossman, founder and CEO of Bit Discovery, joins me for this episode of the Inner Circle podcast. We talk about the focus of Bit Discovery and the importance of having an accurate inventory of assets on the network for an organization--as well as some of the challenges that make it difficult to maintain an accurate inventory. We also talk about the core team of people that Jeremiah has worked with as he has founded multiple cybersecurity companies and m...

Inner Circle Podcast Episode 032 My guest for this episode of the Inner Circle podcast is Phil Dunkelberger, President and CEO of Nok Nok Labs. We chat about the history and current state of secure authentication and the role the FIDO (Fast ID Online) standard can play in streamlining and simplifying secure access. Authentication is an integral part of technology. Whether you are connecting to a company email server, shopping on Amazon, chatting with your cousin over Facebook Messenger, or loggi...

Inner Circle Podcast Episode 031 Andrew Hay, COO of Lares, is my guest for this episode of the Inner Circle podcast. Andrew and I talk about the concept of part-time or "fractional" executives and the tremendous potential of allowing and hiring remote workers that many organizations miss out on. Companies need executive leadership--but not all companies necessarily need all of the executive roles to be there 40 hours a week. You might not want a part-time CEO, but Andrew has worked with a variet...

Inner Circle Podcast Episode 030 My guest for this episode of the Inner Circle podcast is Jamil Jaffer, Vice President for Strategy & Business Development at IronNet Cybersecurity. We discuss a recent report from IronNet--Collective Offense Calls for a Collective Defense: A Reality Check for Cybersecurity Decision Makers--which focuses on the value of sharing threat intelligence and the challenges organizations face when it comes to cooperating with others on threat intelligence. Have you ever d...

Inner Circle Podcast Episode 029 Armorblox is a sponsor of TechSpective My guest for this episode of the Inner Circle podcast is DJ Sampath--co-founder and CEO of Armorblox. We have a very interesting chat about the state of cybersecurity and the sense that we've been fighting the same battles for decades with little forward progress, as well as how AI, ML and NLU represent a fundamental shift in cybersecurity. From our discussion, it seems like we are at a pivotal point in terms of technology a...

Inner Circle Podcast Episode 028 Brook Schoenfield, Master Security Architect and Director of Advisory Services for IOActive, joins me for this week's episode of the Inner Circle podcast. We talk about the focus of the cybersecurity industry on vulnerability management and incident response, and why that reactive approach may not be the most effective way to address security issues. Brook talks about the importance of threat modeling and secure design to build better, more secure, more resilient...

Inner Circle Podcast Episode 027 My guest for this episode of the Inner Circle podcast is Ron Gula, co-founder of Gula Tech Adventures--a venture capital firm focused on investing in cutting edge cybersecurity startups. Prior to launching Gula Tech Adventures, though, Ron had established himself as a cybersecurity leader and visionary, most notably as co-founder and CEO of Tenable. I've known Ron for years and had even interviewed for various roles at Tenable over the years before finally being ...

Inner Circle Podcast Episode 026 This week I am joined on the Inner Circle podcast by Jack Danahy, Senior Vice President of Security for Alert Logic. As most of you know, I also work for Alert Logic by day as Senior Manager of Content Marketing. Many of you may already be familiar with Jack. He is an innovative security technology leader with proven success creating, delivering, and promoting new security technologies and practices to address critical needs. He has founded and co-founded three s...

Inner Circle Podcast Episode 025 This week I have the privilege of speaking with Jeff Man. Jeff and I have known each other for a few years--since our days together at Tenable. Neither of us is at Tenable any longer and we've gone our separate ways, but I caught up with him recently during RSA and I appreciate that he was willing to take the time to join me for the Inner Circle podcast. Jeff is a respected voice in cybersecurity. As a contributor to the book Tribe of Hackers, co-host of Paul's S...

Inner Circle Podcast Episode 024 There are few individuals in the cybersecurity world as immediately recognizable as Jack Daniel. His height and his iconic beard distinguish him from the crowd just about anywhere. But, what really makes Jack stand out is his kindness and generosity. Jack is known to be a bit of a curmudgeon--but beneath a very thin shell of "curmudgery", Jack has a huge heart. I've known Jack for years and I have the utmost respect for him--both as a cybersecurity professional a...

Inner Circle Podcast Episode 023 My guest for this episode of the Inner Circle podcast is Richard Stiennon. Richard has been waist-deep in cybersecurity for decades. He is a former Gartner analyst, who went on to be a VP of Threat Research at Webroot, and the Chief Marketing Officer of Fortinet, before launching his own analyst firm. Along the way, he has also authored a few books--including the recently launched 'Secure Cloud Transformation: The CIO's Journey'. He is also a fellow Detroiter. Ye...

Inner Circle Podcast Episode 022 My guest for this episode of the Inner Circle podcast is Marcus Carey--founder and CEO of Threatcare. Carey is also co-author of the book Tribe of Hackers, which was released just a couple weeks ago and has amassed a ton of positive reviews and feedback. One of the things I like--and respect--about Carey is his willingness and desire to give back. If you follow his Twitter feed for a day or two, you will see message after message of positivity, authenticity and s...

Inner Circle Podcast Episode 021 I was honored to have Wendy Nather, head of advisory CISOs for Duo Security--now part of Cisco, join me as my guest for this episode of the Inner Circle podcast. Wendy is one of the most respected voices in cybersecurity today--which also explains why Marcus Carey and Jennifer Jin invited her to contribute on the recently released book Tribe of Hackers. She and I discuss the book some during the podcast--but I had not yet received the book when we were recording....

Inner Circle Podcast Episode 020 An application is no longer a product. In the world of cloud, and DevOps, and containers, an application is a process. There is no distinct beginning or end to development. The application is a living thing that cycles through a feedback loop--constantly identifying and resolving issues and consistently improving and evolving. When you have continuous development and continuous deployment, though, you also need continuous testing and continuous security that can ...

Inner Circle Podcast Episode 019 Cybersecurity is generally an all or nothing game. Attackers are adept at finding and exploiting the weak link, so letting your guard down in any area is unwise. Kamal Shah, CEO of StackRox, joins me for this episode of the Inner Circle Podcast and we discuss the importance of protecting applications and data in containers, and why that means ensuring that you have secured all three phases of the container lifecycle: Build, Deploy, and Run. There are container se...

Inner Circle Podcast Episode 018 ...and vice versa. That should be part of the title too, but it was already quite lengthy. On this episode of The Inner Circle, I am joined by Kevin Livelli, Director of Threat Intelligence at Cylance, to talk about some interesting research and trends in cyber attacks. There are two recent reports from Cylance that highlight opposite ends of a spectrum, more or less. On the one hand, there seems to be a trend by nation state attackers to leverage the same open s...

Inner Circle Podcast Episode 017 Who can you trust? More importantly, how far should that trust extend? Andy Smith, VP of Product Marketing for Centrify, joins me on this episode of the Inner Circle podcast to talk about zero trust privilege. We talk about the reality of the threat landscape and the fact that attackers generally log in with compromised or stolen credentials. From a traditional authentication perspective, the attacker appears as "legitimate", and--without additional protection--w...

Inner Circle Podcast Episode 016 John Kinsella--co-founder and head of product for Layered Insight--is my guest for this episode of the Inner Circle podcast. Layered Insight is focused on container security, so that is a primary focus of our discussion, but we also diverge into a number of interesting tangents. Containers are hot. Since Docker skyrocketed onto the scene, organizations have been eagerly adopting container technology and changing the way applications are developed and deployed to ...

Inner Circle Podcast Episode 015 Dr. Galina Datskovsky--an expert in the fields of compliance and information governance, and CEO of Vaporstream--joins me to talk about secure messaging. More specifically, we discuss the fixation on encryption and the ways that encrypted email still falls short of the goal of secure messaging. There is a lot of focus on encryption--as there should be. Encryption is fine. Effective encryption is important to secure and protect data and email communications as the...

Inner Circle Podcast Episode 014 My guest for this episode of the Inner Circle podcast is John Sawyer, Associate Director of Services at IOActive. Are you secure? Sure, you've invested a lot of time, money and effort to security and you've implemented firewalls, spam filters, antimalware solutions, intrusion detection and other security tools, and you've developed and implemented security policies--but are you sure they're effective? Are you confident that you can detect or block an attack right...