Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI hype & the future of SecOps, what's changed in 30 years? With Erik Bloch from Illumio [271]

On this episode of The Cybersecurity Defenders Podcast we speak with Erik Bloch, VP of Security at Illumio, about better tools to combat burnout rate and discuss the reality of AI in security. Erik Bloch has 30+ years of information and cyber security experience, both as an IC and as a leader of teams. “People first” has always been his approach. He has led entire security and IT functions at smaller companies, and been the CISOs leading big teams at larger orgs.

Why doesn't point-in-time compliance work? #cybersecurity #compliance #podcast

PCI compliance has never been about passing a single audit and forgetting about it until next year. In our recent PCI DSS 4.0 session, author Branden R. Williams explained why point-in-time assessments create a false sense of security. Passing a compliance report doesn't mean you'll still be compliant two days later if something changes. Configuration drift happens. Systems change. Sometimes it's accidental. Other times, organizations deliberately configure things to pass an assessment, then revert to their old ways afterward.

How Computer Security Has Evolved and What You Can Do Now

You may not often think about how far computer security has come over the last 30 years; the evolution is remarkable. Early attacks, such as viruses, passed around on floppy disks, worms spreading for notoriety, and hacktivism done for a cause felt more punk rock than organized crime. Today, according to Canalys, ransomware is the top concern for small businesses. But will it stay that way?

The Efficiency Shift: How AI Turns Noise into Clarity

Artificial intelligence (AI) is everywhere in cybersecurity marketing. Real AI is not about detecting more. It is about making decisions faster and more precisely, so that humans can spend their time on what truly matters. Endpoint security efficiency is the ability to deliver maximum protection with minimum operational effort, turning noise into clarity and alerts into meaningful incidents. AI is the engine that makes this possible.

OWASP Top 10 2025 Edition - The 443 Podcast - Episode 350

This week on the podcast, we cover OWASP’s update to the top 10 web application security weaknesses and its changes from the 2021 list. We also cover a recently uncovered adversary-in-the-middle campaign that’s pushing malicious software updates to targeted systems. We conclude with our opinions on Microsoft’s latest AI features, which are coming to Windows.
Featured Post

My Black Friday Cybersecurity Wishlist

Black Friday and Cyber Monday always bring bargain buys as consumers hunt for deals to make the upcoming festive season special, but they are also a bonanza for cybercriminals. Attacks spike during the holiday season as cybercriminals take advantage of workers being out of their usual routine and less vigilant than normal. This makes for far from happy holidays for the businesses affected. However, what many organizations don't realize is that often they already have the tools to protect themselves in their security armory; they just haven't activated them.

The Evolution of Zero Trust: Toward More Tangible Cybersecurity

It seems as though we’ve been talking about the zero trust model for years. Although it isn’t a new concept, only now has it really managed to transition from theory to practice. This cybersecurity framework ‒ based on implicit distrust ‒ used to seem somewhat abstract, more like a strategic idea than an actual strategy. Today, however, we’re witnessing a paradigm shift that’s making it possible to implement zero trust effectively.

Are we on the path to AI defenders vs. AI attackers?

Swarms of AI bots are now being used to continuously test security perimeters. In this episode, Michael Baker, VP and Global CISO at DXC Technology, discusses the shift to AI-driven security operations. He recently met with startups working on agentic pentesting to find vulnerabilities before bad guys do. The advantage? You control these bots and get immediate feedback. The threat? Adversaries are building the exact same capabilities right now.

Device provisioning struggles due to M&As, high staff turnovers, and Epic go-lives

Two primary trends are reshaping the healthcare industry: First, healthcare experiences a high number of mergers and acquisitions (M&As), with affiliates frequently joining and exiting as contracts evolve. Second, staff turnover remains persistently high, largely driven by burnout among healthcare practitioners.