CYBR.SEC.CAST

In this episode Michael and Sam sit down with cybersecurity legend Chris Wysopal, Veracode co-founder and Chief Security Evangelist, to discuss the evolution of software security, and why awareness alone is not enough to solve today’s cybersecurity challenges. Chris shares his perspective on secure software, vendor accountability, liability, and the role government may need to play in protecting critical infrastructure. The conversation offers a thoughtful look at where cybersecurity has been, where it still falls short, and what meaningful progress could look like.
Things Mentioned:
L0pht - https://en.wikipedia.org/wiki/L0pht
Cult of the Dead Cow - https://en.wikipedia.org/wiki/Cult_of_the_Dead_Cow
Hacker BBS’s - https://computerhackerscourse.nd.edu/course-calendar/bbs-early-hacker-social-networks/
ShinyHunter Article – https://www.cybrsecmedia.com/shinyhunters-charter-breach-exposes-the-identity-to-saas-gap/
Secure Resilient Future Foundation - https://secure-resilient.org
CYBR.SEC.CON. Agenda - https://www.xcdsystem.com/cybrseccommunity/program/Wh1YEUW/index.cfm?pgid=760
CYBR.SEC.CON. Tickets - https://www.xcdsystem.com/cybrseccommunity/attendee/index.cfm?ID=iV8mb8T
Crew Member Application - https://www.cybrseccon.com/jointhecrew
CYBR.SEC.CON. Sponsorship - https://www.xcdsystem.com/cybrseccommunity/exhibitor/index.cfm?ID=7nYn7df
Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com 
In this episode:
Host: Michael Farnum
Host: Sam Van Ryder
Guest: Chris Wysopal
Director: Bill Brenner
Producer: Lauren Andrus
Music by: August Honey
 Keep up with our Conferences and Events:
LinkedIn
X
Facebook
Instagram
TikTok
CYBR.SEC.CON.
OT.SEC.CON.
CYBR.HAK.CON.
Keep up with CYBR.SEC.Media:
LinkedIn
X
Facebook
Instagram
TikTok
YouTube
Learn About CYBR.SEC.Careers Non-Profit Efforts
CYBR.SEC.Careers
Subscribe to the podcast: 
Apple
Spotify
Listen to our other shows:
CYBR.HAK.CAST
CYBR.Minded
CYBR.Signal 
Thank you to our Media Partners:
CYBR.SEC.CON. and OT.SEC.CON. 
OGGN (Oil & Gas Global Network)
UtilSec
Packet Pushers
CYBR.SEC.CON. and CYBR.HAK.CON. 
BarCode Podcast
Cyber Distortion Podcast
Kill Chain Radio
The Phillip Wylie Show
Vulnerable U

In this episode of CYBR.SEC.CAST, hosts Michael and Sam sit down with Alastair Patterson, CEO of Harmonic Security, to discuss the rapid evolution of AI in the enterprise. They explore the shift from chatbots to autonomous agents, the challenges CISOs face in governing AI adoption, and how security teams can enable innovation without becoming blockers. Alastair also shares his founder journey, lessons from Digital Shadows, and how Harmonic is helping organizations gain visibility and control over AI usage.
Sponsored by Harmonic Security
Things Mentioned:
Harmonic Security – https://www.harmonic.security
CYBR.SEC.CON. Tickets - https://www.xcdsystem.com/cybrseccommunity/attendee/index.cfm?ID=iV8mb8T
Crew Member Application - https://www.cybrseccon.com/jointhecrew
CYBR.SEC.CON. Speakers (Partial List) - https://www.xcdsystem.com/cybrseccommunity/program/Wh1YEUW/index.cfm?pgid=761
CYBR.SEC.CON. Lightning Talk CFP - https://www.cybrseccon.com/callforpapers
CYBR.SEC.CON. Sponsorship - https://www.xcdsystem.com/cybrseccommunity/exhibitor/index.cfm?ID=7nYn7df 
Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com 
In this episode:
Host: Michael Farnum
Host: Sam Van Ryder
Guest: Alastair Paterson
Producer: Bill Brenner
Music by: August Honey
Keep up with our Conferences and Events:
LinkedIn
X
Facebook
Instagram
TikTok
CYBR.SEC.CON.
OT.SEC.CON.
CYBR.HAK.CON.
Keep up with CYBR.SEC.Media:
LinkedIn
X
Facebook
Instagram
TikTok
YouTube
Support CYBR.SEC.Careers Non-Profit Efforts
CYBR.SEC.Careers
 Subscribe to the podcast: 
Apple
Spotify
Listen to our other shows:
CYBR.HAK.CAST
CYBR.Minded
Thank you to our Media Partners:
CYBR.SEC.CON. and OT.SEC.CON. 
OGGN (Oil & Gas Global Network)
UtilSec
Packet Pushers
CYBR.SEC.CON. and CYBR.HAK.CON. 
BarCode Podcast
Cyber Distortion Podcast
Kill Chain Radio
The Phillip Wylie Show
Vulnerable U

In Episode 69 of CYBR.SEC.CAST, hosts Michael Farnum and Sam Van Ryder sit down with Crush Security CEO Joshua Jones, CTO Josh Johnson, and JB Poindexter & Co. CISO John Barrow to explore a growing problem facing security leaders: the inability to effectively evaluate, compare, and manage cybersecurity products at scale. 
SHOW NOTES:
Things Mentioned:
Crush Security website: https://www.crushsecurity.com/
Upcoming CYBR.SEC.Community events: https://www.cybrsecmedia.com/conference/
CYBR.SEC.Careers: https://www.linkedin.com/company/cybr-sec-careers/about/ fundraisers:Cards for a Cause: https://www.linkedin.com/posts/cybr-sec-careers_cybrseccareers-nonprofit-cybersecurity-activity-7436794892787359744-v4Cz
Proceeds support CYBR.SEC.Careers mission is to build a strong, diverse workforce by providing career exposure, access to education and certifications, and mentorship for students and veterans pursuing careers in cybersecurity.

EPISODE 69 Timestamps:
00:00 – Introduction and Sponsor Disclosure
Michael Farnum introduces Crush Security as the episode sponsor and frames the discussion around real-world CISO challenges involving cybersecurity purchasing and vendor management.
05:00 – Joshua Jones' Cybersecurity Journey
Jones recounts entering cybersecurity during the early days of MFA, building global sales and consulting organizations, and eventually identifying inefficiencies in the reseller ecosystem that inspired Crush Security.
09:15 – Josh Johnson's Path from Digital Forensics to AI
Johnson discusses his background in computer forensics, incident response, consulting, and cybersecurity leadership before co-founding Crush Security.
11:45 – John Barrow's Evolution from Military Intelligence to CISO
Barrow explains how his nontraditional background became a leadership advantage, helping him bridge communication gaps between security teams and executive leadership.
17:00 – The Hidden Cost of Security Tool Sprawl
The group examines how organizations accumulate overlapping technologies, duplicate capabilities, and unnecessary spending while struggling to understand what they actually own.
21:30 – Why Traditional VAR Models Fall Short
Jones argues that too many reseller relationships remain transactional and fail to provide the strategic guidance security leaders need.
24:30 – Using AI to Evaluate Security Products
Johnson explains how Crush maps cybersecurity products, controls, compliance frameworks, and capabilities to help organizations identify gaps, overlaps, and alternatives.
29:00 – The Coming Explosion of Security Categories
The panel discusses how AI is enabling vendors to rapidly expand into adjacent markets, creating even more confusion for buyers evaluating security platforms.
33:30 – Crush Security's Vision for a 'Super VAR'
Jones outlines the company's vision of combining AI, security architecture, contract intelligence, and procurement guidance into a unified platform for security leaders.
35:20 – Final Thoughts
The panel closes by reflecting on why cybersecurity procurement remains largely unsolved and why data-driven decision making may finally change that reality.
Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com 
Keep up with CYBR.SEC.CON.:
LinkedIn
X
Facebook
Instagram
Keep up with CYBR.SEC.Media:
LinkedIn
X
Facebook
Instagram
Check out our Conferences and Events:
CYBR.SEC.CON.
OT.SEC.CON.
CYBR.HAK.CON.
EXEC.SEC.CON.
CSC User Group
Support or apply to our Scholarship Program:
TAB Cyber Foundation
Subscribe to the podcast: 
Apple
Spotify
In this episode:
Host: Michael Farnum
Host: Sam Van Ryder
Guests: Josh Jones, Josh Johnson, John Barrow
Production and editing: Bill Brenner
Music by: August Honey

Cybersecurity has built its learning model around breaches, but as Wendy Nather explains, the real value lies in the incidents that almost happened. In this CYBR.SEC.CAST episode with hosts Michael Farnum and Sam Van Ryder, she makes the case for shifting focus to near-misses: the attacks stopped by a single decision, control, or moment of awareness. These unseen saves reveal how defenses actually work in real time, yet they rarely get shared due to trust, legal, and cultural barriers. Until the industry starts capturing and learning from these quieter wins, it will continue optimizing for failure instead of understanding success.
SHOW NOTES:
Things Mentioned:
The Security Poverty Line: https://www.scrut.io/post/risk-grustlers-ep-20-the-security-poverty-line
1Password talks and expo activity during RSAC 2026: https://1password.com/blog/rsa-2026-leading-the-way-to-secure-agentic-ai
Upcoming CYBR.SEC.Community events: https://www.cybrsecmedia.com/conference/
CYBR.SEC.Careers: https://www.linkedin.com/company/cybr-sec-careers/about/ fundraisers:Cards for a Cause: https://www.linkedin.com/posts/cybr-sec-careers_cybrseccareers-nonprofit-cybersecurity-activity-7436794892787359744-v4Cz
CYBR CLAY SHOOT: https://www.linkedin.com/posts/cybr-sec-careers_cybrclayshoot-cybersecurity-cybercareers-activity-7435353518951084033-1iw9
Proceeds support CYBR.SEC.Careers mission is to build a strong, diverse workforce by providing career exposure, access to education and certifications, and mentorship for students and veterans pursuing careers in cybersecurity.

EPISODE 66 Timestamps:
00:00 – 01:30 – Intro, guest setup, and Wendy Nather background
01:30 – 07:00 – CyberSecCon announcements and community initiatives
07:00 – 09:30 – Wendy’s early career: liberal arts → sysadmin → Switzerland
09:30 – 12:30 – Transition into cybersecurity and global security leadership
12:30 – 15:30 – Analyst career, Duo Security, Cisco, and 1Password
15:30 – 18:30 – Career philosophy: ditching the ladder, focusing on impact
18:30 – 22:00 – Current role: advising, speaking, training, and strategy work
22:00 – 25:30 – RSA talk intro: “Less Blood, More Bits” concept
25:30 – 31:00 – The power of near-miss stories and why they matter
31:00 – 36:00 – Real-world near-miss examples and lessons learned
36:00 – 41:00 – Threat intelligence sharing challenges and trust barriers
41:00 – 45:00 – ISACs vs. informal “steak and ale” intelligence sharing
45:00 – 49:00 – Why scaling trust and sharing remains unsolved
49:00 – End – Wrap-up and closing thoughts
Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com

In this episode, hosts Michael Farnum and Sam Van Ryder sit down with Valerie Moon, Executive Director of the Institute for Critical Infrastructure Technology (ICIT) for a wide-ranging discussion about cybersecurity policy, workforce development, and the growing threats facing critical infrastructure.
Things Mentioned:
Website for ICIT: https://www.icitech.org/
Upcoming CYBR.SEC.Community events: https://www.cybrsecmedia.com/conference/
CYBR.SEC.Careers: https://www.linkedin.com/company/cybr-sec-careers/about/ fundraisers:
Cards for a Cause: https://www.linkedin.com/posts/cybr-sec-careers_cybrseccareers-nonprofit-cybersecurity-activity-7436794892787359744-v4Cz
CYBR CLAY SHOOT: https://www.linkedin.com/posts/cybr-sec-careers_cybrclayshoot-cybersecurity-cybercareers-activity-7435353518951084033-1iw9
Proceeds support CYBR.SEC.Careers mission is to build a strong, diverse workforce by providing career exposure, access to education and certifications, and mentorship for students and veterans pursuing careers in cybersecurity.
Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com 
Keep up with CYBR.SEC.CON.:
LinkedIn
X
Facebook
Instagram
Keep up with CYBR.SEC.Media:
LinkedIn
X
Facebook
Instagram
Check out our Conferences and Events:
CYBR.SEC.CON.
OT.SEC.CON.
CYBR.HAK.CON.
EXEC.SEC.CON.
CSC User Group
Support CYBR.SEC.Careers Non-Profit Efforts
CYBR.SEC.Careers
Apply to the CYBR.SEC.Careers Scholarship
Taylor Austin Broussard Memorial Scholarship
Listen to our other show:
CYBR.HAK.CAST
Thank you to our Media Partners:
CYBR.SEC.CON. and OT.SEC.CON. 
OGGN (Oil & Gas Global Network)
UtilSec
CYBR.SEC.CON. and CYBR.HAK.CON. 
BarCode Podcast
Cyber Distortion Podcast