Future of Threat Intelligence (FoTI) Podcast
Weekly on Thursday
Go beyond the headlines with the people shaping what comes next in cybersecurity. Each week, Team Cymru sits down with threat intelligence leaders, security practitioners, researchers, and industry experts to explore emerging threats, evolving attacker behavior, and the ideas changing how defenders work. New episodes every Thursday.
Financial services’ Amanda Lerner, Ph.D. on Why Russian Is Still the Lingua Franca of Cybercrime
Team Cymru Podcast
Watch & Listen to stay ahead of cyber threats...
Financial services’ Amanda Lerner, Ph.D. on Why Russian Is Still the Lingua Franca of Cybercrime
Amanda Lerner, Ph.D.
Amanda Lerner, Ph.D., explains why threat intelligence on Russian-speaking cybercrime forums still needs cultural fluency that LLM translation can't supply.
Dark Web & Cybercrime Intelligence
126
Dark Web Monitoring
Proactive Threat Intelligence
Finished Intelligence Limitations
Threat Intelligence Analyst
Director of Threat Intelligence
Financial Services
AI Agent Or Info Stealer?
Alex Hurtado
Nebulock's Alex Hurtado on how AI is reshaping threat detection and response, why vendor rules drive 60%+ of false positives, and the AI agent blind spot.
Threat Hunting & Detection Engineering
125
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
SOC Manager
Threat Hunter
All Verticals
Efani's Mark Kreitzman on the SIM swap that cost Marks and Spencer 350 million euros
Mark Kreitzman, Chief Cyber Evangelist at Efani
Join Mark Kreitzman on the Future of Threat Intelligence podcast to explore how threat actors use AI for SIM swaps and boost your cyber risk intelligence.
Fraud, Phishing & Supply Chain Risk
124
Third-Party Risk
Data Exfiltration
Chief Fraud Officer
CISO
Financial Services
Telecommunications
Ironbridge CISO Consulting's Jim Almerico on the end of AI euphoria and the flaws emerging
Jim Almerico, CISO at Ironbridge CISO Consulting
Discover how AI threat intelligence and identity access management are shaping the future of cybersecurity. Tune in to our latest podcast episode.
Securing AI & Limits of Machine Learning
123
Proactive Threat Intelligence
Visibility Gaps
Preemptive Defense
Real-Time Intelligence
Finished Intelligence Limitations
CISO
Security Architect
Government
Technology
Coalition's Daniel Woods on the attorney-client privilege tactic shaping every IR investigation
Daniel Woods,, Principal Security Researcher at Coalition
Discover how cyber insurance shapes your cyber incident response. Daniel Woods explains legal privilege, forensic reports, and risk in our latest episode.
Incident Response & Preemptive Defense
122
Preemptive Defense
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Real-Time Intelligence
Incident Responder
CISO
Insurance
.png)
Why the old phishing training is obsolete after deepfake attacks
Randy Rose, VP of Security Operations and Intelligence, Center for Internet Security
Discover how threat actors are using AI and deepfakes to bypass traditional phishing training. Explore practical cyber security solutions for local government!
Fraud, Phishing & Supply Chain Risk
121
Phishing
Supply Chain Attacks
Third-Party Risk
Malicious Infrastructure
Botnets
Chief Fraud Officer
Chief Risk Officer
Government
How Akira hits thousands of SMBs with $50K-$150K ransoms undetected | Alex Bovicelli
Alex Bovicelli
Discover how ransomware threat actors target SMBs. Learn why cyber security solutions for small business must shift from CVSS to criminal exploitability.
Malware & Ransomware Analysis
121
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
All Verticals
The CVSS problem: why severity scores don't predict what gets exploited | Patrick Garrity (VulnCheck)
Patrick Garrity, Security Researcher at VulnCheck
CVSS scores won't save you. Learn why threat actors launch a zero day attack before patches drop, and how to fix your security triage logic. Listen now.
Cloud & Application Security
120
Zero-Day
Exploitation
Supply Chain Attacks
Compromised Hosts
Visibility Gaps
Security Architect
All Verticals
Trend AI's Robert McArdle on Criminal Business Models Surviving Tech Revolutions
Robert McArdle
Discover how agentic AI alters cybercrime economics. Learn strategies to adapt your cyber security threat intelligence and preempt automated threats.
AI-Driven Threats & Autonomous Security
118
Dark Web Monitoring
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Threat Intelligence Analyst
Security Architect
All Verticals
DTCC’s Scott Scher on Why CTI Teams Forecast Instead of Predict
Learn how to build a cyber threat intelligence framework that drives decisions. Scott Scher discusses CTI metrics, AI, and strategic threat intelligence.
Executive Strategy, Risk & ROI
117
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
Threat Intelligence Analyst
CISO
All Verticals
.png)
You Can't Trust Your Zoom Call Anymore — Deepfakes, DPRK & the New Attack Surface
Tom Cross, Head of Threat Research at GetReal
Discover how DPRK threat actors use deepfakes to exploit your cyber attack surface. Tom Cross unpacks HR risks and threat analysis in our latest podcast. (Length: 156 characters / ~850 pixels, safely under the 920-pixel desktop limit to avoid truncation).
Threat Actor, Campaign & Infrastructure Intelligence
114
Exploitation
Threat Actor Infrastructure
Malicious Infrastructure
APT
Proactive Threat Intelligence
Threat Intelligence Analyst
Threat Hunter
All Verticals
Two Minds. One Reframe. A Shift That Won't Wait.
Vincent Passaro, Engineering Manager of Security at Stripe
Discover how AI shifts security analysts into product owners. Vincent Passaro shares expert cybersecurity solutions and open source threat intelligence workflows.
AI-Driven Threats & Autonomous Security
114
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Threat Intelligence Analyst
Security Architect
All Verticals
TIG Risk Services' Duaine Labno on How Remote Hiring Became an Opening for Infiltration
Duaine Labno, Director of Special Investigations & Threat Intelligence at TIG Risk Services
Learn how TIG Risk Services tracked a DPRK IT worker operation. Why digital & physical investigations must run in parallel to stop hiring fraud.
Threat Actor, Campaign & Infrastructure Intelligence
113
Threat Actor Infrastructure
Malicious Infrastructure
APT
Proactive Threat Intelligence
Real-Time Intelligence
Chief Fraud Officer
Threat Intelligence Analyst
All Verticals
Thermo Fisher's Matt McKnew on the Evolution of Ransomware as a Service
Matt McKnew joins the podcast to discuss the shift from disruptive worms to RaaS business models and modern incident response strategies for global teams.
Malware & Ransomware Analysis
112
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Incident Responder
Malware Researcher
Healthcare
Tokio Marine HCC's Alex Bovicelli on the SMB Ransomware Wave the Industry Isn't Talking About
Alex Bovicelli, Senior Director of Threat Intelligence at Tokio Marine HCC
Alex Bovicelli (Tokio Marine HCC) joins the podcast to discuss eradicating initial access vectors, Akira ransomware trends, and why CVSS scores fail SMBs.
Malware & Ransomware Analysis
111
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
Insurance
Coalition's Daniel Woods on What Cyber Insurance Claims Reveal About Security Controls
Daniel Woods
Daniel Woods of Coalition explains how cyber insurance claims data reveals real attack patterns, ransomware risk, and what actually reduces cyber loss.
Malware & Ransomware Analysis
110
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
Insurance
.png)
Stripe's Vincent Passaro on Fraud Taxonomies & Generating Red Team Testing Roadmaps
Vincent Passaro, Engineering Manager at Stripe Security
Discover how Stripe’s Vince Passaro uses the FT3 framework to scale fraud intelligence, automate millisecond decisions, and build infrastructure packages for law enforcement prosecution.
Fraud, Phishing & Supply Chain Risk
109
Malicious Infrastructure
Phishing
Supply Chain Attacks
Third-Party Risk
Botnets
Chief Fraud Officer
Chief Risk Officer
All Verticals
Fortinet's Aamir Lakhani on Mapping Business Pain Points Attackers Exploit
Aamir Lakhani, Global Director of Threat Intelligence & Adversarial AI Research at Fortinet
Hear Fortinet’s Aamir Lakhani explain the role of AI in cybersecurity and how AI-driven threat detection is reshaping modern threat intelligence.
Real-Time Threat Detection & Signals
108
Exploitation
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Malicious Infrastructure
Threat Intelligence Analyst
All Verticals
PayPal's Blake Butler on Finding Fraud Signals in Uncleaned Data
Blake Butler, Senior Manager & Head of Fraud Threat Intelligence at Paypal
Discover how PayPal’s fraud team uses infrastructure analysis and raw, uncleaned data to detect credential stuffing and real-time OTP theft before money moves. Learn why standard data normalization might be hiding your most critical fraud indicators.
Fraud, Phishing & Supply Chain Risk
107
Real-Time Intelligence
Malicious Infrastructure
Phishing
Supply Chain Attacks
Third-Party Risk
Chief Fraud Officer
Chief Risk Officer
All Verticals
.png)
Tidal Cyber's Scott Small on Operationalizing MITRE from Intel to Validation
Scott Small, Director of Cyber Threat Intelligence at Tidal Cyber's
Learn why 100% MITRE ATT&CK coverage is a myth. Tidal Cyber’s Scott Small discusses tracking 25k procedures, TTP-to-vulnerability mapping, and AI in CTI workflows.
SOC Enablement & Intelligence Enrichment
106
Exploitation
Real-Time Intelligence
Compromised Hosts
C2 Infrastructure
Visibility Gaps
SOC Manager
Security Architect
All Verticals
Marsh McLennan's Casey Beaumont on Vendor Breach Assessments That Cut through Legal Games
Casey Beaumont
Explore CTI leadership with Casey Beaumont of Marsh McLennan. Topics: strategic threat intelligence, private intel networks, vendor risk, and team efficiency.
Executive Strategy, Risk & ROI
105
Compromised Hosts
Third-Party Risk
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Threat Intelligence Analyst
CISO
Financial Services
Insurance
State CISOs on Why Cyberattacks Against 1 State Attack All of America
Michael Moore and Ryan Murray
Arizona CISOs Michael Moore and Ryan Murray join Dragon News Bytes to discuss election security, vCISO models, and the "Cybersecurity Trinity for AI" framework.
Threat Reports & Intelligence Briefings
104
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
CyberHoot's Craig Taylor on Why Fear-Based Phishing Training Fails
Craig Taylor
CyberHoot CEO Craig Taylor explains why fear-based phishing training fails and how positive reinforcement builds a stronger human firewall.
Fraud, Phishing & Supply Chain Risk
102
Phishing
Supply Chain Attacks
Third-Party Risk
Malicious Infrastructure
Botnets
Chief Fraud Officer
Chief Risk Officer
All Verticals
The Futurum Group's Fernando Montenegro on the OODA Loop Approach to Security Strategy
Fernando Montenegro
The Futurum Group's Fernando Montenegro applies economics and the OODA loop to security strategy, from cloud decisions to cutting through AI hype.
Executive Strategy, Risk & ROI
97
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
T. Rowe Price’s PJ Asghari’s "What, So What, Now What" Framework for Threat Intel
PJ Asghari
T. Rowe Price's PJ Asghari shares the "what, so what, now what" framework that turned an event-driven SOC into an intelligence-driven program.
Threat Reports & Intelligence Briefings
96
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
Transcend's Aimee Cardwell on Turning Security into a Growth Driver
Aimee Cardwell
Aimee Cardwell, CISO in Residence at Transcend, explains how to balance risk so security accelerates business growth instead of blocking it.
Threat Reports & Intelligence Briefings
95
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
.png)
Digital Asset Redemption's Steve Baer on Criminal Business Models
Steve Baer
Steve Baer of Digital Asset Redemption unpacks ransomware's criminal business models and how dark web human intelligence gives defenders early warning.
Executive Strategy, Risk & ROI
94
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
McAfee's Manisha Agarwal-Shah on Testing Ransomware Plans Before You Need Them
Manisha Agarwal-Shah
McAfee Deputy CISO Manisha Agarwal-Shah on testing ransomware plans before a crisis as attackers shift to data exfiltration and extortion.
Malware & Ransomware Analysis
93
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
All Verticals
Lemonade's Jonathan Jaffe on Trading Feedback for Security Technology
Jonathan Jaffe
Lemonade CISO Jonathan Jaffe on partnering with security startups and using AI agents to automate vulnerability management and cut false positives.
Threat Reports & Intelligence Briefings
92
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
Financial Services
Technology
Digital Turbine's Vivek Menon on AI Acceleration vs Attack Expansion
Vivek Menon
Digital Turbine CISO Vivek Menon weighs AI acceleration against attack surface expansion and how lean security teams can put AI automation to work.
AI-Driven Threats & Autonomous Security
90
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
All Verticals
Digital Asset Redemption's Steve Baer on Why Half of Ransomware Victims Shouldn't Pay
Steve Baer
Steve Baer of Digital Asset Redemption explains why half of ransomware victims shouldn't pay and what skilled negotiation reveals about attacker claims.
Malware & Ransomware Analysis
89
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
All Verticals
Cybermindz’s Mark Alba on Military PTSD Protocols to Treat Security Burnout
Mark Alba
Cybermindz's Mark Alba explains how military PTSD protocols are being used to measure and treat burnout in security operations centers.
Threat Reports & Intelligence Briefings
88
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
Government
GigaOm’s Howard Holton on Why AI Will Be the OS of Security Work
Howard Holton
GigaOm CTO Howard Holton explains why AI will become the operating system of security work, not just another tool in the stack.
AI-Driven Threats & Autonomous Security
87
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
All Verticals
Online Business Systems' Jeff Man on PCI 4.0's Impact
Jeff Man
Jeff Man of Online Business Systems on PCI DSS 4.0's real impact and the gap between security marketing and day-to-day compliance work.
Executive Strategy, Risk & ROI
86
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Payment systems
Trellix's John Fokker on Why Ransomware Groups Are Fragmenting
Trellix's John Fokker explains why big ransomware operations are fragmenting into smaller crews and why the mid-market is now the real target.
Malware & Ransomware Analysis
85
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
All Verticals
Frost & Sullivan's Martin Naydenov on AI's Cybersecurity Trust Gap
Frost & Sullivan's Martin Naydenov on AI's cybersecurity trust gap: why defenders hesitate to use AI features while threat actors scale with them.
AI-Driven Threats & Autonomous Security
84
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
All Verticals
Unspoken Security’s AJ Nash on Protecting Against AI Model Poisoning
Unspoken Security founder AJ Nash on protecting against AI model poisoning and the risk of losing critical skills in a post-knowledge world.
Securing AI & Limits of Machine Learning
83
Zero-Day
Exploitation
Supply Chain Attacks
Visibility Gaps
Malicious Infrastructure
Security Architect
CISO
All Verticals
.png)
Cyware’s Jawahar Sivasankaran on Automating Threat-Centric Operations
Jawahar Sivasankaran
Cyware President Jawahar Sivasankaran on automating threat-centric operations and how Cyware and Team Cymru help teams stand up CTI programs faster.
SOC Enablement & Intelligence Enrichment
82
Real-Time Intelligence
Compromised Hosts
C2 Infrastructure
Visibility Gaps
Proactive Threat Intelligence
SOC Manager
Security Architect
Technology
Rapid7’s Lonnie Best on Measuring SOC Success Beyond Alert Closures
Lonnie Best
Rapid7's Lonnie Best on measuring SOC success beyond alert closures, why weak MFA still drives incidents, and how to avoid analyst burnout.
SOC Enablement & Intelligence Enrichment
81
Real-Time Intelligence
Compromised Hosts
C2 Infrastructure
Visibility Gaps
Proactive Threat Intelligence
SOC Manager
Security Architect
All Verticals
Rapyd’s Nir Rothenberg on Breaking the CISO Burnout Cycle Through Focused Priorities
Nir Rothenberg
Rapyd CISO Nir Rothenberg shares a prioritization framework for breaking the CISO burnout cycle by focusing only on the threats that matter.
Executive Strategy, Risk & ROI
80
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Option Care’s Jill Rhodes on Uniting Legal Expertise and Cybersecurity in Healthcare
Jill Rhodes
Option Care Health CISO Jill Rhodes on uniting legal expertise and cybersecurity to build a healthcare security program from the ground up.
Threat Reports & Intelligence Briefings
79
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
Healthcare
Silverado Policy Accelerator’s Dmitri Alperovitch on Hunting Intruders After They're Already In
Dmitri Alperovitch
Dmitri Alperovitch on hunting intruders who are already inside, Volt Typhoon's preparation of the battlefield, and the cyber rivalry with China.
Executive Strategy, Risk & ROI
78
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Direction on Microsoft’s Wes Miller on Harmonizing Microsoft's Security & Identity Tools
Wes Miller
Wes Miller of Directions on Microsoft on harmonizing Microsoft security and identity tools, Entra ID misconceptions, and legacy attack vectors.
Threat Reports & Intelligence Briefings
77
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
Technology
Rapid7’s Deral Heiland on Why Your Network Segmentation Strategy Overlooks IoT Risk
Deral Heiland
Rapid7's Deral Heiland explains why network segmentation overlooks IoT risk and how to test devices, firmware, and cloud APIs as one ecosystem.
Executive Strategy, Risk & ROI
76
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
IDC's Frank Dickson on Moving from Reactive to Proactive Security Strategy
Frank Dickson
IDC's Frank Dickson on moving from reactive to proactive security strategy, building better metrics, and communicating risk to business leaders.
Executive Strategy, Risk & ROI
75
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
ISG's Jeff Orr on Moving Beyond Perimeter Defense to Dynamic Security
Jeff Orr
ISG's Jeff Orr on moving beyond perimeter defense to security programs built for detection and recovery, not just protection.
Threat Reports & Intelligence Briefings
74
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
Meta's Oded Anderman on Preventing Unauthorized Data Collection
Oded Anderman
Meta Privacy Lead Oded Anderman on preventing unauthorized data collection and scraping while keeping essential business functions running.
Data Protection & Exposure Risk
73
Data Exfiltration
Compromised Hosts
Third-Party Risk
Visibility Gaps
Preemptive Defense
Chief Risk Officer
CISO
Technology
Maltego's Ben April on Using Commander's Intent for Remote Team Success
Ben April
Maltego CTO Ben April on using commander's intent to lead remote security teams, prevent burnout, and build culture across time zones.
Threat Reports & Intelligence Briefings
72
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
The Cyber Hut's Simon Moffatt on Transforming Identity Security from Static to Dynamic Defense
Simon Moffatt
Simon Moffatt of The Cyber Hut on moving identity security from static directories to dynamic, threat-informed access control.
Threat Reports & Intelligence Briefings
72
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
Zoom's Lee Ramsey on Transforming Customer Service Skills into Cybersecurity Success
Lee Ramsey
Zoom's Lee Ramsey on how customer service skills sharpen incident response, digital forensics, and critical thinking in an AI-driven SOC.
Threat Reports & Intelligence Briefings
71
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
Google’s James Brodsky on Securing AI and Building Security Ecosystems
James Brodsky
Google's James Brodsky on securing AI applications and infrastructure, getting basic hygiene right, and building security ecosystems through partnerships.
AI-Driven Threats & Autonomous Security
70
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
Technology
.avif)
Justin Jettòn: Balancing Human Analysis and Automation in Threat Intel
Justin Jettòn
Justin explores how AI is transforming both offensive and defensive capabilities in cybersecurity.
AI-Driven Threats & Autonomous Security
69
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
All Verticals
.avif)
Inside the Mind of a Threat Hunter Roundtable
Ryan Chapman and Matthew Winters
Threat hunters Ryan Chapman and Matthew Winters break down Team Cymru's Voice of a Threat Hunter report and why nearly 50% faced a major breach.
Threat Hunting & Detection Engineering
68
Threat Actor Infrastructure
Malicious Infrastructure
C2 Infrastructure
Proactive Threat Intelligence
Real-Time Intelligence
Threat Hunter
Threat Intelligence Analyst
All Verticals
.avif)
GigaOm’s Howard Holton on Cyber Threats Facing Small Businesses
Howard Holton
Howard emphasizes the importance of understanding the business-like nature of cybercriminals and their strategies. He also explores the role of AI and large language models in enhancing threat intelligence, highlighting how these tools can help organizations prioritize their security efforts effectively.
Executive Strategy, Risk & ROI
66
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
Threat Intelligence Analyst
CISO
All Verticals
.avif)
Ryan Link: Building a Culture of Continuous Learning
Ryan Link
Ryan shares his decade-long journey in cybersecurity, emphasizing the importance of thinking like an attacker to enhance threat detection capabilities.
Executive Strategy, Risk & ROI
65
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Deb Radcliff: Intersection of Fiction and Cybersecurity
Deb Radcliff
She discusses the importance of understanding hacker culture and the human side of cybercrime, emphasizing that many hackers are driven by curiosity rather than malice.
Executive Strategy, Risk & ROI
64
Dark Web Monitoring
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
CISO
Chief Risk Officer
All Verticals
Threat Hunter Ryan Chapman on Critical Security Mistakes Against Ransomware
Ryan Chapman
They explore the alarming evolution of ransomware tactics, including the rise of multi-extortion strategies where attackers not only encrypt data but also threaten to leak sensitive information.
Threat Hunting & Detection Engineering
63
Ransomware
Threat Actor Infrastructure
Malicious Infrastructure
C2 Infrastructure
Proactive Threat Intelligence
Threat Hunter
Threat Intelligence Analyst
All Verticals
T. Rowe Price’s Matthew Winters on Threat Hunting as the Scientific Method
Matthew Winters
Matthew shares his unconventional journey into cybersecurity, highlighting the importance of soft skills and creativity in threat hunting that he has picked up along the way.
Threat Hunting & Detection Engineering
62
Proactive Threat Intelligence
Threat Actor Infrastructure
Malicious Infrastructure
C2 Infrastructure
Real-Time Intelligence
Threat Hunter
Threat Intelligence Analyst
All Verticals
Marsh’s Gregory Van den Top on Understanding Cyber Risk in Business Strategy
Gregory Van den Top
They explore the critical importance of understanding cyber risk as an integral part of business strategy, rather than a technical afterthought.
Executive Strategy, Risk & ROI
61
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Financial Services
Insurance
Splunk’s David Bianco on Differentiating Threat Hunting and Red Teaming
Splunk’s David Bianco on Differentiating Threat Hunting and Red Teaming
David introduces the PEAK threat hunting framework, emphasizing its role in enhancing security measures.
Threat Hunting & Detection Engineering
60
Proactive Threat Intelligence
Threat Actor Infrastructure
Malicious Infrastructure
C2 Infrastructure
Real-Time Intelligence
Threat Hunter
Threat Intelligence Analyst
All Verticals
S&P Global’s Eric Hanselman on Integrating Threat Intelligence into Business Strategy
Eric Hanselman
Eric emphasizes the need for organizations to integrate threat intelligence operationally, moving beyond mere threat feeds to develop comprehensive threat models.
Executive Strategy, Risk & ROI
59
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
Threat Intelligence Analyst
CISO
All Verticals
Church & Dwight’s David Ortiz on Building Effective Cyber Risk Management Strategies
David Ortiz
David shares insights from his extensive career in information technology and cybersecurity, emphasizing the importance of understanding the evolving threat landscape.
Executive Strategy, Risk & ROI
58
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Technology
Rackspace Technology’s Kristof Riecke on Navigating Cloud Security Challenges
Kristof Riecke
Kristof Riecke, Field CISO at Rackspace Technology, shares his journey in cybersecurity and highlights the evolution of the industry over the past decade.
Cloud & Application Security
57
Zero-Day
Exploitation
Supply Chain Attacks
Compromised Hosts
Visibility Gaps
CISO
Security Architect
Technology
Venable LLP’s David Patariu on Building Trust Through Effective Privacy Policies
David Patariu
David shares his unique journey from engineering to law, highlighting the critical intersection of technology and legal frameworks.
Data Protection & Exposure Risk
56
Data Exfiltration
Compromised Hosts
Third-Party Risk
Visibility Gaps
Preemptive Defense
Chief Risk Officer
CISO
Technology
CyberBellum’s Jim Tiller on Mastering the Role of a Fractional CISO
Jim Tiller
Jim Tiller, CISO at CyberBellum and a veteran in the cybersecurity industry with over 25 years of experience joins us to explore the intricacies of working as a fractional CISO.
Executive Strategy, Risk & ROI
55
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
ExtraHop’s Rafal Los on Avoiding Strategic Advisement Mistakes
Rafal Los
Rafal discusses his journey from curiosity-driven exploration to a professional career in cybersecurity and the lessons he’s learned along the way.
Executive Strategy, Risk & ROI
54
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
The Futurum Group’s Krista Case on the Importance of Resilience in Cybersecurity (Black Hat Edition)
Krista Case
Krista shares insights from recent research revealing that 50% of organizations plan to adopt new cybersecurity vendors in 2024, highlighting the evolving threat landscape and the expanding attack surface that organizations face today.
Attack Surface & Exposure Visibility
53
Visibility Gaps
Malicious Infrastructure
Third-Party Risk
Proactive Threat Intelligence
Real-Time Intelligence
Security Architect
CISO
All Verticals
ZScaler’s Brett Stone-Gross on the Tactics of the Dark Angels Ransomware Group (Black Hat Edition)
Brett Stone-Gross
Brett shares their uncovering of the largest ransomware payment in history — $75 million — made by a Fortune 50 company to the Dark Angels group.
Malware & Ransomware Analysis
52
Ransomware
Malware
Botnets
C2 Infrastructure
Compromised Hosts
Malware Researcher
Incident Responder
Payment systems
.jpeg)
Online Business Systems’ Jeff Man on Demystifying Cybersecurity Solutions (Black Hat Edition)
Jeff Man
Jeff is the Sr. Information Security Consultant at Online Business Systems, and he shares his extensive insights on the evolving landscape of cybersecurity and the importance of fundamental security practices to protect sensitive data.
Executive Strategy, Risk & ROI
51
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Black Kite’s Jeffrey Wheatman on How Cybersecurity Is Not A Technical Problem But A Business Problem (Black Hat Edition)
Jeffrey Wheatman
Jeffrey highlights the importance of aligning cybersecurity strategies with business objectives and understanding risk appetite.
Executive Strategy, Risk & ROI
50
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
EMA’s Christopher Steffen on the Importance of Open Source Solutions in Threat Intelligence (Black Hat Edition)
Christopher Steffen
David catches Christopher Steffen, VP of Research, Information Security at Enterprise Management Associates, at the Black Hat conference.
Events, Conferences & Community Engagement
49
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Actor Infrastructure
Threat Intelligence Analyst
Broader Security Audience
All Verticals
Cybersecurity Threat Detection Engineer & Expert Wade Wells on Innovative Deception Strategies for Blue Teams (Black Hat Edition)
Wade Wells
Wade Wells, Cybersecurity Threat Detection Engineer & Expert at a Fortune 50 company, shares his insights from the Black Hat conference.
Events, Conferences & Community Engagement
48
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Threat Actor Infrastructure
Broader Security Audience
All Audiences
All Verticals
Juniper Networks’ Drew Simonis on Empathy and Leadership in Cybersecurity
Drew Simonis
Drew Simonis, Chief Information Security Officer at Juniper Networks. Drew shares his insights into the evolving landscape of cybersecurity, emphasizing the crucial role of empathy and humility in effective leadership.
Executive Strategy, Risk & ROI
47
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Telecommunications
Andrew Gontarczyk on Avoiding Common Pitfalls in Cybersecurity Leadership
Andrew Gontarczyk
Andrew Gontarczyk, CISO at Pure Storage, dives into the world of cybersecurity leadership.
Executive Strategy, Risk & ROI
46
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Ryerson’s Joe Mariscal on Navigating Cyber Risks in the Metals Industry
Joe Mariscal
Joe Mariscal, Director of Cybersecurity and Compliance at Ryerson, shares his expertise in building hybrid cybersecurity teams and managing metals-industry-specific cyber risks.
Threat Reports & Intelligence Briefings
45
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
ADT’s Rick DeLoach on Essential Skills for Future Security Professionals
Rick DeLoach
Rick DeLoach, Deputy CISO at ADT, explores the transformative impact of AI on cybersecurity.
Executive Strategy, Risk & ROI
44
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Ventas Inc.’s Brian Palmer on Managing Cybersecurity Challenges in Real Estate
Brian Palmer
Brian Palmer, Director of IT Security and Infrastructure at Ventas, Inc. highlights the critical importance of translating cyber risk into business language, making it comprehensible and actionable for executives and board members.
Executive Strategy, Risk & ROI
43
Malicious Infrastructure
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Board
CISO
All Verticals
WithSecure’s Mikko Hypponen on Ethical Challenges for AI in Cybersecurity
Mikko Hypponen
Mikko Hypponen, Chief Research Officer at WithSecure, explores the transformative role of AI in cybersecurity.
AI-Driven Threats & Autonomous Security
42
Real-Time Intelligence
Proactive Threat Intelligence
Malicious Infrastructure
Threat Actor Infrastructure
Preemptive Defense
Security Architect
Threat Intelligence Analyst
All Verticals
Elanco’s Matthew Bull on Navigating Cybersecurity Challenges and Opportunities in the Life Sciences Field
Matthew Bull
Matthew Bull, CTO and CISO at Elanco, shares insights on the unique challenges and opportunities of the life sciences industry, as well as those Elanco faced following its separation from Eli Lilly.
Executive Strategy, Risk & ROI
41
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Sentry’s Cody Florek on Enabling Business Processes through Making Them More Secure
Cody Florek
Cody Florek, Director of Information Security Operations at Sentry, offers his insights into the intricacies of building robust cybersecurity programs run by robust teams.
Executive Strategy, Risk & ROI
40
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
EQT's João Pedro Gonçalves on the Importance of Establishing Cybersecurity Steering Committees
João Pedro Gonçalves
João Pedro Gonçalves, Global Chief Information Security Officer at EQT Group, about risk-based cybersecurity approaches, building security departments from the ground up, and the critical role of cybersecurity steering committees
Threat Reports & Intelligence Briefings
39
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
.jpeg)
Ingersoll Rand’s Noah Davis on Mastering Security Meetings with the BBG Approach
Noah Davis
Noah Davis, VP & Chief Information Security Officer at Ingersoll Rand, shared his insights on the importance of business acumen in cybersecurity. He discussed his experience in various leadership and security roles, highlighting the need for communication, empathy, and continuous learning in the industry.
Executive Strategy, Risk & ROI
38
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Manufacturing
H&R Block's Joshua Brown on Addressing Underlying Policy and Cultural Issues in Cybersecurity
Joshua Brown
Joshua Brown, VP and Global CISO at H&R Block, who explains the importance of not being alarmist when raising risk concerns and avoiding leading a conversation with "no."
Executive Strategy, Risk & ROI
37
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Financial Services
PENN Entertainment's David Lingenfelter on How Changing Regulations Have Affected the Gaming Industry's Risk Appetite
David Lingenfelter
David Lingenfelter, Chief Information Security Officer at PENN Entertainment. They discuss the challenge of securing assets that you did not create yourself and how evolving regulations have affected the gaming industry's risk appetite.
Threat Reports & Intelligence Briefings
36
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
.png)
Tarleton State University's Chris Copeland on Raising Awareness on Cybercrime Through Education
Chris Copeland
Chris Copeland, Associate Professor & Director of the Institute of Homeland Security and Cybercrime at Tarleton State University. They discuss misconceptions of cybersecurity and how he prepares his students for a full career of learning.
Executive Strategy, Risk & ROI
35
Dark Web Monitoring
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
CISO
Chief Risk Officer
All Verticals
Eric Adams of Federal Cyber Defense Solutions on Controls, Context, and Compliance
Eric Adams
Eric Adams, CEO/CISO at Federal Cyber Defense Solutions. They discuss what FedRAMP and FISMA are, how to use NIST as a roadmap to federal compliance, and what controls you need to implement for those requirements.
Executive Strategy, Risk & ROI
34
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
CEO
Government
Cyberbit's Nat Prakongpan on Building Systems for Security Resilience and Recovery
Nat Prakongpan
Nat Prakongpan, VP of Product at Cyberbit (formerly of IBM at the time of recording). They discuss the need for business resiliency in security programs, and why you shouldn't just focus on preventing an attack but on recovery after an attack as well.
Executive Strategy, Risk & ROI
33
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
Technology
The Council of Europe's Alexander Seger on Building Cybercrime Capacity Around the Globe
Alexander Seger
Alexander Seger, Head of Cybercrime Division at the Council of Europe. They discuss how the Council of Europe is building capacity worldwide around cybercrime awareness, legislation, and enforcement, and how they're doing that through increased training.
Dark Web & Cybercrime Intelligence
32
Dark Web Monitoring
Threat Actor Infrastructure
Malicious Infrastructure
Phishing
Botnets
Threat Intelligence Analyst
Chief Fraud Officer
All Verticals
Postman's Joshua Scott on How Security Protects APIs and Builds Customer Trust
Joshua Scott
Joshua Scott, Head of Information Security & IT at Postman. They discuss the importance of security as more companies use APIs, and how better security improves reputation and trust with customers.
Threat Reports & Intelligence Briefings
31
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
INTERPOL's Craig Jones on How to Reduce the Impact of Cybercrime Worldwide
Craig Jones
Craig Jones, Director of Cybercrime at INTERPOL. They discuss the mission and purpose of INTERPOL to reduce cybercrime worldwide, and how they go about doing that on a daily basis through data aggregation, creating frameworks, and sharing intel with nations and locales worldwide.
Dark Web & Cybercrime Intelligence
30
Dark Web Monitoring
Threat Actor Infrastructure
Malicious Infrastructure
Phishing
Botnets
Threat Intelligence Analyst
Chief Fraud Officer
Government
Verizon's Bob Carver on Building a Culture of Security
Bob Carver
Bob Carver, Principal Cybersecurity Threat Intelligence and Analytics at Verizon. They discuss the importance of looking for subtle issues no one else may see, why security practitioners should gain more awareness in network and sysadmin activities, and how to build a culture of security.
Executive Strategy, Risk & ROI
29
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
Threat Intelligence Analyst
CISO
All Verticals
LinkedIn's Evan Blicker on Understanding and Developing Your Approach to the Dark Web
Evan Blicker
Evan Blicker, Sr. Cyber Threat Investigator - Dark Web Lead at LinkedIn. They discuss what the dark web is, what you can find there, and the biggest misconceptions about the dark web — like why it should be viewed more as a community of people rather than a dangerous arena.
Dark Web & Cybercrime Intelligence
28
Dark Web Monitoring
Threat Actor Infrastructure
Malicious Infrastructure
Phishing
Botnets
Threat Intelligence Analyst
Chief Fraud Officer
Technology
The Benefits of Sponsoring RISE and the Underground Economy: A Conversation with Miranda Bruce and Steve Santorelli
Miranda Bruce
Miranda Bruce, Postdoctoral Fellow at the University of Oxford, and Steve Santorelli, Chief of Staff at Team Cymru, about the RISE and Underground Economy conferences.
Events, Conferences & Community Engagement
27
Dark Web Monitoring
Real-Time Intelligence
Proactive Threat Intelligence
Preemptive Defense
Visibility Gaps
Broader Security Audience
All Audiences
All Verticals
NYU's Carolyn Kissane on Preparing for the Future of Cyber Risk in Global Affairs
Carolyn Kissane
Carolyn Kissane, Associate Dean of the MS in Global Affairs and MS in Global Security, Conflict, and Cyber Crime at the NYU Center for Global Affairs.
Threat Reports & Intelligence Briefings
26
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
ASK Integrity Solutions's Assaf Kipnis on Standing Up to Adversaries with Better Threat Intelligence
Assaf Kipnis
Assaf Kipnis, Owner and Head Consultant/Advisor at ASK Integrity Solutions, which conducts adversarial network analysis, risk assessment, and counter-threat intel
Threat Reports & Intelligence Briefings
25
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Threat Intelligence Analyst
CISO
All Verticals
Cybersecurity Myths and Misconceptions Author Roundtable with Dr. Eugene H. Spafford, Dr. Leigh Metcalf, and Dr. Josiah Dykstra
Cybersecurity Myths and Misconceptions Author Roundtable
Dr. Eugene H. Spafford, Professor of Computer Sciences at Purdue University, Dr. Leigh Metcalf, Senior Network Security Research Analyst at CERT, and Dr. Josiah Dykstra, Technical Director, Critical Networks & Systems at NSA, authors of the book Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us.
Threat Reports & Intelligence Briefings
24
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
IBM's Andy Piazza on the Importance of Integrating Security into Business Operations
Andy Piazza
Andy Piazza, Global Head of Threat Intelligence at IBM X-Force, a threat intelligence sharing platform.
Executive Strategy, Risk & ROI
23
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
Director of Threat Intelligence
Threat Intelligence Analyst
Technology
USF's Jordan Howell on How to Train Well-Rounded Practitioners for the Future of Cybersecurity
Jordan Howell
Jordan Howell, Assistant Professor and Cybersecurity Researcher at University of South Florida. They discuss how Jordan works with his students each day, how there needs to be a shift in academia to focus on more holistic training, and the variety of skills that students need to have to be successful security practitioners.
Threat Reports & Intelligence Briefings
22
Real-Time Intelligence
Proactive Threat Intelligence
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
CISO
Broader Security Audience
All Verticals
Grobstein Teeple's Erik Rasmussen on How to Improve Your Security Consulting, Client Relationships, and Leadership
Erik Rasmussen
Erik Rasmussen, Global Head of Cybersecurity and Risk Management at Grobstein Teeple LLP, a leading consulting firm offering cybersecurity and business consulting services.
Executive Strategy, Risk & ROI
21
Visibility Gaps
Finished Intelligence Limitations
Preemptive Defense
Proactive Threat Intelligence
Real-Time Intelligence
CISO
Chief Risk Officer
All Verticals
Experian's Brian Stack on How to Protect Customers Through Dark Web Intelligence
Brian Stack
Brian Stack, VP of Engineering & Dark Web Intelligence at Experian Consumer Services, which offers online credit reports, scores, and monitoring products.
Dark Web & Cybercrime Intelligence
20
Dark Web Monitoring
Threat Actor Infrastructure
Malicious Infrastructure
Phishing
Botnets
Threat Intelligence Analyst
Chief Fraud Officer
All Verticals