Cyber Sessions with Joan Goodchild https://www.csoonline.com/videos/cyber-sessions-with-joan-goodchild/ en Cybersecurity is constantly evolving, and so are the leaders who shape it. Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Each episode cuts through the noise to explore the trends, challenges, and leadership insights that define the future of security. https://megaphone.imgix.net/podcasts/236ad03a-c00a-11f0-b8e9-bfca83d56252/image/5e5014283e8ba78b99d4a70b8e4d8432.jpg?ixlib=rails-4.3.1&max-w=3000&max-h=3000&fit=crop&auto=format,compress Cyber Sessions with Joan Goodchild https://www.csoonline.com/videos/cyber-sessions-with-joan-goodchild/ episodic Foundry Cybersecurity is constantly evolving, and so are the leaders who shape it. Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Each episode cuts through the noise to explore the trends, challenges, and leadership insights that define the future of security. Cybersecurity is constantly evolving, and so are the leaders who shape it. Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Each episode cuts through the noise to explore the trends, challenges, and leadership insights that define the future of security.

]]> Foundry podcasts@foundryco.com Identity Has Become the New Security Perimeter The traditional network perimeter has largely dissolved, replaced by a security landscape centered around identity, cloud access, machine interactions, and third-party connectivity. In this conversation, Dustin Wilcox examines why identity has become foundational to modern security architecture and why many organizations still struggle to govern it effectively at scale. The interview also explores executive communication, balancing usability with security controls, and the operational risks organizations continue creating in the pursuit of speed and convenience. https://www.linkedin.com/in/dustin-wilcox-4896614/ Thu, 08 Oct 2026 18:43:00 -0000 full Foundry The traditional network perimeter has largely dissolved, replaced by a security landscape centered around identity, cloud access, machine interactions, and third-party connectivity. In this conversation, Dustin Wilcox examines why identity has become foundational to modern security architecture and why many organizations still struggle to govern it effectively at scale. The interview also explores executive communication, balancing usability with security controls, and the operational risks organizations continue creating in the pursuit of speed and convenience. https://www.linkedin.com/in/dustin-wilcox-4896614/ The traditional network perimeter has largely dissolved, replaced by a security landscape centered around identity, cloud access, machine interactions, and third-party connectivity. In this conversation, Dustin Wilcox examines why identity has become foundational to modern security architecture and why many organizations still struggle to govern it effectively at scale. The interview also explores executive communication, balancing usability with security controls, and the operational risks organizations continue creating in the pursuit of speed and convenience.


https://www.linkedin.com/in/dustin-wilcox-4896614/

]]> 487 no Why Email Still Works for Attackers Despite years of awareness training and security investment, email remains one of the most effective attack vectors in cybersecurity. In this conversation, Ryan Toscano discusses why organizations continue struggling with phishing, impersonation, and social engineering at scale. The interview examines the tension between security, usability, and customer trust, the operational fatigue created by overwhelming security telemetry, and whether organizations are still treating email security too much as a technical problem instead of a human one. Wed, 30 Sep 2026 17:46:00 -0000 full Foundry Despite years of awareness training and security investment, email remains one of the most effective attack vectors in cybersecurity. In this conversation, Ryan Toscano discusses why organizations continue struggling with phishing, impersonation, and social engineering at scale. The interview examines the tension between security, usability, and customer trust, the operational fatigue created by overwhelming security telemetry, and whether organizations are still treating email security too much as a technical problem instead of a human one. Despite years of awareness training and security investment, email remains one of the most effective attack vectors in cybersecurity. In this conversation, Ryan Toscano discusses why organizations continue struggling with phishing, impersonation, and social engineering at scale. The interview examines the tension between security, usability, and customer trust, the operational fatigue created by overwhelming security telemetry, and whether organizations are still treating email security too much as a technical problem instead of a human one.

]]> 371 no The Evolving CISO: AI, Leadership and the Future of Cybersecurity Gary Harbison, CISO at Johnson & Johnson and CSO Hall of Fame inductee, joins CSO’s Joan Goodchild to discuss how the CISO role has evolved, the growing importance of cybersecurity in business decision-making, and how AI is reshaping the industry. He shares his perspective on using AI to strengthen security, address emerging threats, and help cybersecurity teams work more effectively while keeping human talent at the center. https://www.linkedin.com/in/garyharbison/ Thu, 24 Sep 2026 17:33:00 -0000 full Foundry Gary Harbison, CISO at Johnson & Johnson and CSO Hall of Fame inductee, joins CSO’s Joan Goodchild to discuss how the CISO role has evolved, the growing importance of cybersecurity in business decision-making, and how AI is reshaping the industry. He shares his perspective on using AI to strengthen security, address emerging threats, and help cybersecurity teams work more effectively while keeping human talent at the center. https://www.linkedin.com/in/garyharbison/ Gary Harbison, CISO at Johnson & Johnson and CSO Hall of Fame inductee, joins CSO’s Joan Goodchild to discuss how the CISO role has evolved, the growing importance of cybersecurity in business decision-making, and how AI is reshaping the industry. He shares his perspective on using AI to strengthen security, address emerging threats, and help cybersecurity teams work more effectively while keeping human talent at the center. https://www.linkedin.com/in/garyharbison/

]]> 386 no Why Security Debt May Be a Bigger Risk Than Security Spend Organizations continue investing heavily in cybersecurity, yet many are simultaneously increasing operational complexity and long-term security fragility. In this interview, Selim Aissi explains the concept of security debt and why it may be a more meaningful measure of cyber risk than security budget size alone. The conversation explores how organizations unintentionally create risk through tool sprawl and operational complexity, how boards should think about long-term cyber resilience, and why AI and cloud expansion are accelerating security debt faster than many enterprises can manage.Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference.Follow CSO for more Business IT and Web Security News! Thu, 10 Sep 2026 17:36:00 -0000 full Foundry Organizations continue investing heavily in cybersecurity, yet many are simultaneously increasing operational complexity and long-term security fragility. In this interview, Selim Aissi explains the concept of security debt and why it may be a more meaningful measure of cyber risk than security budget size alone. The conversation explores how organizations unintentionally create risk through tool sprawl and operational complexity, how boards should think about long-term cyber resilience, and why AI and cloud expansion are accelerating security debt faster than many enterprises can manage.Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference.Follow CSO for more Business IT and Web Security News! Organizations continue investing heavily in cybersecurity, yet many are simultaneously increasing operational complexity and long-term security fragility. In this interview, Selim Aissi explains the concept of security debt and why it may be a more meaningful measure of cyber risk than security budget size alone. The conversation explores how organizations unintentionally create risk through tool sprawl and operational complexity, how boards should think about long-term cyber resilience, and why AI and cloud expansion are accelerating security debt faster than many enterprises can manage.
Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference.
Follow CSO for more Business IT and Web Security News!

]]> 951 no Cybersecurity on the Front Lines of Critical Infrastructure Critical infrastructure operators are facing a rapidly evolving threat landscape where cyberattacks can create real-world operational disruption with national and economic consequences. In this conversation, Vaughn Hazen explores the growing convergence of cybercrime, geopolitics, and operational technology risk across transportation and logistics environments. The discussion examines the unique security challenges of protecting large-scale operational systems, the realities of resilience and incident response in critical infrastructure, and whether private industry is truly prepared for its expanding role in national cyber defense.Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonlineLearn more and submit a nomination today. 2026 CSO Conference: Awards Wed, 12 Aug 2026 13:58:00 -0000 full Foundry Critical infrastructure operators are facing a rapidly evolving threat landscape where cyberattacks can create real-world operational disruption with national and economic consequences. In this conversation, Vaughn Hazen explores the growing convergence of cybercrime, geopolitics, and operational technology risk across transportation and logistics environments. The discussion examines the unique security challenges of protecting large-scale operational systems, the realities of resilience and incident response in critical infrastructure, and whether private industry is truly prepared for its expanding role in national cyber defense.Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonlineLearn more and submit a nomination today. 2026 CSO Conference: Awards Critical infrastructure operators are facing a rapidly evolving threat landscape where cyberattacks can create real-world operational disruption with national and economic consequences. In this conversation, Vaughn Hazen explores the growing convergence of cybercrime, geopolitics, and operational technology risk across transportation and logistics environments. The discussion examines the unique security challenges of protecting large-scale operational systems, the realities of resilience and incident response in critical infrastructure, and whether private industry is truly prepared for its expanding role in national cyber defense.
Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline
Learn more and submit a nomination today. 2026 CSO Conference: Awards

]]> 582 no Cloud Security at a Breaking Point: AI, Complexity, and the Future of Trust As enterprises race to integrate AI, SaaS, APIs, and multi-cloud environments, cloud security complexity is accelerating faster than many organizations can realistically govern. In this conversation, Jim Reavis discusses where enterprise cloud strategy continues to break down, why shared responsibility models still create dangerous accountability gaps, and how AI adoption is exposing weaknesses in identity, trust, and risk management. The discussion also explores the long-term implications of increasingly interconnected cloud ecosystems and the security debt organizations may be unknowingly accumulating. Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline Thu, 06 Aug 2026 17:13:00 -0000 full Foundry As enterprises race to integrate AI, SaaS, APIs, and multi-cloud environments, cloud security complexity is accelerating faster than many organizations can realistically govern. In this conversation, Jim Reavis discusses where enterprise cloud strategy continues to break down, why shared responsibility models still create dangerous accountability gaps, and how AI adoption is exposing weaknesses in identity, trust, and risk management. The discussion also explores the long-term implications of increasingly interconnected cloud ecosystems and the security debt organizations may be unknowingly accumulating. Nominate the companies setting the standard for innovation, resilience, and leadership in security. Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline As enterprises race to integrate AI, SaaS, APIs, and multi-cloud environments, cloud security complexity is accelerating faster than many organizations can realistically govern. In this conversation, Jim Reavis discusses where enterprise cloud strategy continues to break down, why shared responsibility models still create dangerous accountability gaps, and how AI adoption is exposing weaknesses in identity, trust, and risk management. The discussion also explores the long-term implications of increasingly interconnected cloud ecosystems and the security debt organizations may be unknowingly accumulating. Nominate the companies setting the standard for innovation, resilience, and leadership in security.
Submit your CSO Awards nominations by September 16 and celebrate the organizations shaping the future of cybersecurity at the 2026 CSO Cybersecurity Awards & Conference. #CSOconference #cybersecurity #csoonline

]]> 1041 no Moving Beyond the Checkbox in Human Risk Management Security awareness programs are evolving beyond compliance exercises into broader human risk management strategies designed to change behavior and reduce organizational exposure. In this conversation, Jason Harper discusses the goals behind Uber’s Beyond the Checkbox program, the problems the organization was trying to solve, and the lessons learned during implementation. The interview also explores leadership feedback, employee engagement, and how organizations can rethink security awareness as a measurable business risk reduction strategy. Thu, 30 Jul 2026 15:09:00 -0000 full Foundry Security awareness programs are evolving beyond compliance exercises into broader human risk management strategies designed to change behavior and reduce organizational exposure. In this conversation, Jason Harper discusses the goals behind Uber’s Beyond the Checkbox program, the problems the organization was trying to solve, and the lessons learned during implementation. The interview also explores leadership feedback, employee engagement, and how organizations can rethink security awareness as a measurable business risk reduction strategy. Security awareness programs are evolving beyond compliance exercises into broader human risk management strategies designed to change behavior and reduce organizational exposure. In this conversation, Jason Harper discusses the goals behind Uber’s Beyond the Checkbox program, the problems the organization was trying to solve, and the lessons learned during implementation. The interview also explores leadership feedback, employee engagement, and how organizations can rethink security awareness as a measurable business risk reduction strategy.

]]> 516 no The Security Debt Crisis Inside AI-Generated Code AI coding assistants are rapidly changing how software is built, but they are also introducing new forms of application risk and technical debt. In this interview, John Strait examines how organizations are adopting AI-generated code, the impact on software quality and vulnerability management, and the growing challenge of balancing development speed with secure coding practices. The conversation also explores governance gaps, remediation limitations, and the blind spots many CISOs still have around application security in the age of AI-assisted development. Mon, 20 Jul 2026 18:25:00 -0000 full Foundry AI coding assistants are rapidly changing how software is built, but they are also introducing new forms of application risk and technical debt. In this interview, John Strait examines how organizations are adopting AI-generated code, the impact on software quality and vulnerability management, and the growing challenge of balancing development speed with secure coding practices. The conversation also explores governance gaps, remediation limitations, and the blind spots many CISOs still have around application security in the age of AI-assisted development. AI coding assistants are rapidly changing how software is built, but they are also introducing new forms of application risk and technical debt. In this interview, John Strait examines how organizations are adopting AI-generated code, the impact on software quality and vulnerability management, and the growing challenge of balancing development speed with secure coding practices. The conversation also explores governance gaps, remediation limitations, and the blind spots many CISOs still have around application security in the age of AI-assisted development.

]]> 468 no AI-Generated Code and the Expanding Application Security Challenge Development teams are increasingly relying on AI coding tools to accelerate software delivery, but many organizations still lack visibility into the risks introduced by AI-assisted development. In this conversation, Sohail Iqbal discusses how AI-generated code is changing software quality, vulnerability detection, and application security governance. The interview also explores remediation challenges, growing security debt, and the leadership decisions CISOs must make to prevent application risk from compounding over time. Wed, 15 Jul 2026 20:17:00 -0000 full Foundry Development teams are increasingly relying on AI coding tools to accelerate software delivery, but many organizations still lack visibility into the risks introduced by AI-assisted development. In this conversation, Sohail Iqbal discusses how AI-generated code is changing software quality, vulnerability detection, and application security governance. The interview also explores remediation challenges, growing security debt, and the leadership decisions CISOs must make to prevent application risk from compounding over time. Development teams are increasingly relying on AI coding tools to accelerate software delivery, but many organizations still lack visibility into the risks introduced by AI-assisted development. In this conversation, Sohail Iqbal discusses how AI-generated code is changing software quality, vulnerability detection, and application security governance. The interview also explores remediation challenges, growing security debt, and the leadership decisions CISOs must make to prevent application risk from compounding over time.

]]> 881 no The AI Security Problem Most Organizations Still Aren’t Talking About AI adoption is accelerating inside enterprises, but many organizations are still struggling to define what a mature AI security program actually looks like. Lamont Orange discusses the foundational principles of AI security, the risks hiding in plain sight, and the governance decisions organizations need to make now to reduce exposure before AI risk compounds. The conversation also examines practical controls, organizational accountability, and how CISOs can prioritize action when time and resources are limited. Thu, 02 Jul 2026 16:24:00 -0000 full Foundry AI adoption is accelerating inside enterprises, but many organizations are still struggling to define what a mature AI security program actually looks like. Lamont Orange discusses the foundational principles of AI security, the risks hiding in plain sight, and the governance decisions organizations need to make now to reduce exposure before AI risk compounds. The conversation also examines practical controls, organizational accountability, and how CISOs can prioritize action when time and resources are limited. AI adoption is accelerating inside enterprises, but many organizations are still struggling to define what a mature AI security program actually looks like. Lamont Orange discusses the foundational principles of AI security, the risks hiding in plain sight, and the governance decisions organizations need to make now to reduce exposure before AI risk compounds. The conversation also examines practical controls, organizational accountability, and how CISOs can prioritize action when time and resources are limited.

]]> 463 no Defining Trustworthy AI Before AI Scales Beyond Control As enterprises move rapidly toward AI and agentic systems, questions around governance, trust, and accountability are becoming increasingly urgent. In this interview, Malcolm Harkins explores what trustworthy AI actually means, what organizations need to achieve it, and how existing cybersecurity and compliance frameworks are struggling to address the realities of AI model security. The discussion also examines the gaps emerging around governance, risk management, and accountability as organizations deploy increasingly autonomous systems. Thu, 18 Jun 2026 15:38:00 -0000 full Foundry As enterprises move rapidly toward AI and agentic systems, questions around governance, trust, and accountability are becoming increasingly urgent. In this interview, Malcolm Harkins explores what trustworthy AI actually means, what organizations need to achieve it, and how existing cybersecurity and compliance frameworks are struggling to address the realities of AI model security. The discussion also examines the gaps emerging around governance, risk management, and accountability as organizations deploy increasingly autonomous systems. As enterprises move rapidly toward AI and agentic systems, questions around governance, trust, and accountability are becoming increasingly urgent. In this interview, Malcolm Harkins explores what trustworthy AI actually means, what organizations need to achieve it, and how existing cybersecurity and compliance frameworks are struggling to address the realities of AI model security. The discussion also examines the gaps emerging around governance, risk management, and accountability as organizations deploy increasingly autonomous systems.

]]> 837 no Rethinking Security Awareness Through Human Risk Management Traditional security awareness programs often struggle to create lasting behavioral change inside organizations. In this interview, Missy Bentzen discusses how Docusign approached security awareness and human risk management through its partnership with Hoxhunt. The conversation explores the organizational challenges the program was designed to address, the results that stood out most during implementation, and how leadership and employees responded to a more behavior-focused approach to cybersecurity education. Thu, 11 Jun 2026 19:23:00 -0000 full Foundry Traditional security awareness programs often struggle to create lasting behavioral change inside organizations. In this interview, Missy Bentzen discusses how Docusign approached security awareness and human risk management through its partnership with Hoxhunt. The conversation explores the organizational challenges the program was designed to address, the results that stood out most during implementation, and how leadership and employees responded to a more behavior-focused approach to cybersecurity education. Traditional security awareness programs often struggle to create lasting behavioral change inside organizations. In this interview, Missy Bentzen discusses how Docusign approached security awareness and human risk management through its partnership with Hoxhunt. The conversation explores the organizational challenges the program was designed to address, the results that stood out most during implementation, and how leadership and employees responded to a more behavior-focused approach to cybersecurity education.

]]> 491 no Why AI Is Forcing a Rethink of Data Security Traditional security models were not designed for environments where AI systems continuously access, process, and learn from enterprise data. In this interview, Todd Moore explains why organizations are shifting toward more data-centric security strategies and what that change means in practice. The conversation explores unified data awareness, the growing importance of crypto-agility, and why organizations need to prepare now for both AI-driven risk and the coming realities of post-quantum security. Thu, 04 Jun 2026 19:17:00 -0000 full Foundry Traditional security models were not designed for environments where AI systems continuously access, process, and learn from enterprise data. In this interview, Todd Moore explains why organizations are shifting toward more data-centric security strategies and what that change means in practice. The conversation explores unified data awareness, the growing importance of crypto-agility, and why organizations need to prepare now for both AI-driven risk and the coming realities of post-quantum security. Traditional security models were not designed for environments where AI systems continuously access, process, and learn from enterprise data. In this interview, Todd Moore explains why organizations are shifting toward more data-centric security strategies and what that change means in practice. The conversation explores unified data awareness, the growing importance of crypto-agility, and why organizations need to prepare now for both AI-driven risk and the coming realities of post-quantum security.

]]> 416 no Security Blind Spots: What the Louvre Heist Reveals About Your Organization What happens when the risks you ignore become the ones that hurt you most? In this episode of Cyber Sessions, Foundry’s Joan Goodchild is joined by Colin Zick, partner at Foley Hoag, to unpack two headline-making examples of security blind spots: The Louvre museum heist, including the now-infamous “Louvre” password The rise of AI note-takers inside sensitive corporate meetings Together, they explore how convenience, default settings, and overlooked fundamentals create security liabilities for organizations of every size. Colin explains why these incidents were predictable, preventable, and rooted in leadership decisions, culture gaps, and under-prioritized investments. What You’ll Learn in This Episode: - Why attackers always target your slowest control - How “kicking the can down the road” creates cumulative security failures - The cost of treating security as a “cost center” instead of loss prevention - Why AI note-takers are a litigation and confidentiality minefield How management blind spots—not technology—cause the biggest breaches Practical guidance on MFA adoption, accountability, and security culture How to redesign processes for hybrid/remote work so nothing “falls through the cracks” If you’re a CISO, CSO, security leader, or IT decision maker, this episode delivers actionable lessons on strengthening organizational resilience before the next attack. Like, comment, and subscribe for future episodes of Cyber Sessions, where we break down the technologies, trends, and threats shaping today’s security landscape. Follow CSO for more Business IT and Web Security News! Thu, 21 May 2026 17:04:00 -0000 full Foundry What happens when the risks you ignore become the ones that hurt you most? In this episode of Cyber Sessions, Foundry’s Joan Goodchild is joined by Colin Zick, partner at Foley Hoag, to unpack two headline-making examples of security blind spots: The Louvre museum heist, including the now-infamous “Louvre” password The rise of AI note-takers inside sensitive corporate meetings Together, they explore how convenience, default settings, and overlooked fundamentals create security liabilities for organizations of every size. Colin explains why these incidents were predictable, preventable, and rooted in leadership decisions, culture gaps, and under-prioritized investments. What You’ll Learn in This Episode: - Why attackers always target your slowest control - How “kicking the can down the road” creates cumulative security failures - The cost of treating security as a “cost center” instead of loss prevention - Why AI note-takers are a litigation and confidentiality minefield How management blind spots—not technology—cause the biggest breaches Practical guidance on MFA adoption, accountability, and security culture How to redesign processes for hybrid/remote work so nothing “falls through the cracks” If you’re a CISO, CSO, security leader, or IT decision maker, this episode delivers actionable lessons on strengthening organizational resilience before the next attack. Like, comment, and subscribe for future episodes of Cyber Sessions, where we break down the technologies, trends, and threats shaping today’s security landscape. Follow CSO for more Business IT and Web Security News! What happens when the risks you ignore become the ones that hurt you most? In this episode of Cyber Sessions, Foundry’s Joan Goodchild is joined by Colin Zick, partner at Foley Hoag, to unpack two headline-making examples of security blind spots: The Louvre museum heist, including the now-infamous “Louvre” password The rise of AI note-takers inside sensitive corporate meetings Together, they explore how convenience, default settings, and overlooked fundamentals create security liabilities for organizations of every size. Colin explains why these incidents were predictable, preventable, and rooted in leadership decisions, culture gaps, and under-prioritized investments. What You’ll Learn in This Episode: - Why attackers always target your slowest control - How “kicking the can down the road” creates cumulative security failures - The cost of treating security as a “cost center” instead of loss prevention - Why AI note-takers are a litigation and confidentiality minefield How management blind spots—not technology—cause the biggest breaches Practical guidance on MFA adoption, accountability, and security culture How to redesign processes for hybrid/remote work so nothing “falls through the cracks” If you’re a CISO, CSO, security leader, or IT decision maker, this episode delivers actionable lessons on strengthening organizational resilience before the next attack. Like, comment, and subscribe for future episodes of Cyber Sessions, where we break down the technologies, trends, and threats shaping today’s security landscape. Follow CSO for more Business IT and Web Security News!


]]> 2026 no How Intelligence and AI Are Changing Cyber Defense | Erin Whitmore, Former CIA What if you could stop cyberattacks before they happen? In this episode of Cyber Sessions, host Joan Goodchild sits down with Erin Whitmore, former CIA case officer and current Head of The Cipher division at Cynturion Group, to discuss how her team uses intelligence and AI to anticipate and prevent attacks before adversaries strike. Whitmore reveals how proactive cybersecurity is blending human intuition, artificial intelligence, and offensive tactics to predict threats — while balancing the line between privacy and protection. Wed, 04 Feb 2026 16:13:00 -0000 full Foundry What if you could stop cyberattacks before they happen? In this episode of Cyber Sessions, host Joan Goodchild sits down with Erin Whitmore, former CIA case officer and current Head of The Cipher division at Cynturion Group, to discuss how her team uses intelligence and AI to anticipate and prevent attacks before adversaries strike. Whitmore reveals how proactive cybersecurity is blending human intuition, artificial intelligence, and offensive tactics to predict threats — while balancing the line between privacy and protection. What if you could stop cyberattacks before they happen? In this episode of Cyber Sessions, host Joan Goodchild sits down with Erin Whitmore, former CIA case officer and current Head of The Cipher division at Cynturion Group, to discuss how her team uses intelligence and AI to anticipate and prevent attacks before adversaries strike.


Whitmore reveals how proactive cybersecurity is blending human intuition, artificial intelligence, and offensive tactics to predict threats — while balancing the line between privacy and protection.

]]> 1650 no Inside the SMB Threat Landscape: AT&T’s Senthil Ramakrishnan on Why Small Businesses Are Cybercrime’s Favorite Target In this episode of Cyber Sessions, Senthil Ramakrishnan, Head of Cyber Product Strategy at AT&T, talks about why small and midsize businesses have become prime - and often unprepared - targets for cyberattacks and what they can do to improve their security posture. Tue, 13 Jan 2026 20:10:00 -0000 full Foundry In this episode of Cyber Sessions, Senthil Ramakrishnan, Head of Cyber Product Strategy at AT&T, talks about why small and midsize businesses have become prime - and often unprepared - targets for cyberattacks and what they can do to improve their security posture. In this episode of Cyber Sessions, Senthil Ramakrishnan, Head of Cyber Product Strategy at AT&T, talks about why small and midsize businesses have become prime - and often unprepared - targets for cyberattacks and what they can do to improve their security posture.

]]> 1361 no Inside Visa’s Cyber Defense: CISO Subra Kumaraswamy on blending AI and Human Defense In this episode of Cyber Sessions, Visa CISO Subra Kumaraswamy takes us inside the company’s 24/7 Cyber Fusion Centers, where AI-driven defenses block 90 million attacks and 11 million phishing emails each month. He shares how his team achieves “zero breach, zero disruption” across 200+ countries—and what lessons other security leaders can learn from Visa’s global Mon, 15 Dec 2025 18:23:00 -0000 full Foundry In this episode of Cyber Sessions, Visa CISO Subra Kumaraswamy takes us inside the company’s 24/7 Cyber Fusion Centers, where AI-driven defenses block 90 million attacks and 11 million phishing emails each month. He shares how his team achieves “zero breach, zero disruption” across 200+ countries—and what lessons other security leaders can learn from Visa’s global In this episode of Cyber Sessions, Visa CISO Subra Kumaraswamy takes us inside the company’s 24/7 Cyber Fusion Centers, where AI-driven defenses block 90 million attacks and 11 million phishing emails each month. He shares how his team achieves “zero breach, zero disruption” across 200+ countries—and what lessons other security leaders can learn from Visa’s global

]]> 1532 no CISO Reality: Record Pay, Rising Pressure, and Retention Risk In this edition of Cyber Sessions, host Joan Goodchild talks with IANS researcher Nick Kakolowski about why midmarket CISOs now earn record-high pay but are still are stretched thin by expanding responsibilities and limited resources. Wed, 10 Dec 2025 20:37:00 -0000 full Foundry In this edition of Cyber Sessions, host Joan Goodchild talks with IANS researcher Nick Kakolowski about why midmarket CISOs now earn record-high pay but are still are stretched thin by expanding responsibilities and limited resources. In this edition of Cyber Sessions, host Joan Goodchild talks with IANS researcher Nick Kakolowski about why midmarket CISOs now earn record-high pay but are still are stretched thin by expanding responsibilities and limited resources.

]]> 1592 no Ep. 2: The Future of Cybersecurity Leadership: AI, Governance & Education | Kevin Powers, Boston College How is cybersecurity education changing — and what skills do tomorrow’s security leaders really need? In this episode of Security Sessions, host Joan Goodchild talks with Kevin Powers, Faculty Director and Lecturer at Boston College Law School, about how cybersecurity has evolved from a technical problem to a core business and legal function. Wed, 19 Nov 2025 20:47:00 -0000 full Foundry How is cybersecurity education changing — and what skills do tomorrow’s security leaders really need? In this episode of Security Sessions, host Joan Goodchild talks with Kevin Powers, Faculty Director and Lecturer at Boston College Law School, about how cybersecurity has evolved from a technical problem to a core business and legal function. How is cybersecurity education changing — and what skills do tomorrow’s security leaders really need? In this episode of Security Sessions, host Joan Goodchild talks with Kevin Powers, Faculty Director and Lecturer at Boston College Law School, about how cybersecurity has evolved from a technical problem to a core business and legal function.


]]> 1358 no Ep. 1: Inside Black Hat: Andy Ellis on vendor buzzwords, AI hype, and the future of the CISO role In this debut episode of Cyber Sessions, host Joan Goodchild sits down with Andy Ellis, veteran CSO and member of the CSO Hall of Fame, to learn about his State of the Security Vendor report from the Black Hat show floor. From AI flooding vendor taglines to the real challenges of code security and identity, Ellis shares sharp insights on what’s hype, what matters, and where the CISO role is headed next. Wed, 12 Nov 2025 21:27:00 -0000 full Foundry In this debut episode of Cyber Sessions, host Joan Goodchild sits down with Andy Ellis, veteran CSO and member of the CSO Hall of Fame, to learn about his State of the Security Vendor report from the Black Hat show floor. From AI flooding vendor taglines to the real challenges of code security and identity, Ellis shares sharp insights on what’s hype, what matters, and where the CISO role is headed next. In this debut episode of Cyber Sessions, host Joan Goodchild sits down with Andy Ellis, veteran CSO and member of the CSO Hall of Fame, to learn about his State of the Security Vendor report from the Black Hat show floor. From AI flooding vendor taglines to the real challenges of code security and identity, Ellis shares sharp insights on what’s hype, what matters, and where the CISO role is headed next.

]]> 1829 no