The Art of Security
Cybersecurity isn't an exact science. It's where art and science meet, informed by experience, tested in battle and reimagined to tackle evolving adversaries. In The Art of Security, Josh Davies and Tyler Reguly break down how security actually works in practice. From zero-day exploits and emerging threats to rethinking long-standing best practices, they explore what holds up — and what doesn't — in today's rapidly changing landscape. Each episode delivers practical insights, informed perspectives, and real-world context to help security professionals and tech enthusiasts stay ahead of evolving threats and build smarter, more resilient defenses.
Episodes
Who Really Holds the Cheese? Cat and Mouse, Reconsidered
In cybersecurity, attackers supposedly need to get lucky only once, while defenders must be right every time. But does that familiar idea give attackers too much credit? In this episode of The Art of Security podcast, co-hosts Tyler Reguly and Josh Davies rethink the cat-and-mouse dynamic between attackers and defenders, exploring how layered security, deception, active defense, preparation, and
Are You Making It Too Easy for Cyberattackers?
Most attacks do not succeed because the attacker developed a brilliant new technique. They succeed because exposed information, weak processes, insecure credentials, and avoidable shortcuts give attackers an easier path. For Cybersecurity Awareness Month, Josh Davies and Tyler Reguly examine how individuals, employees, security teams, leaders, and small businesses can introduce more friction into
Security Theater: Feeling Safe vs. Being Secure
What happens when cybersecurity programs prioritize visible activity over meaningful risk reduction? Security theater can reassure executives and end users, but that reassurance becomes dangerous when dashboards, checkbox compliance, and inflated metrics distract teams from the controls that actually reduce exposure. In this episode of The Art of Security, Josh Davies and Tyler Reguly examine the
CalPhishing: When Calendar Invites Become the Lure
Calendar invites have become part of the trusted infrastructure of daily life, and attackers are taking advantage. In this episode, the team examines the resurgence of CalPhishing, an attack technique that uses legitimate calendar workflows, HTML content, attachments, spoofed organizers, and trusted platforms to evade defenses and compromise accounts. Fortra security engineer and FIRE team member
AI-Powered Red Teaming: Where Automation Works and Where It Falls Short
AI can accelerate red team operations, but how much autonomy is too much when production systems and sensitive data are at stake? In Episode 13 of The Art of Security, co-host Josh Davies speaks with Pieter Ceelen of Fortra's Outflank and Cobalt Strike red teams about the opportunities and risks surrounding AI-powered red teaming. They examine where AI can strengthen adversary simulation, why full
Lights, Camera, Cyberattack: What Hollywood Gets Right and Wrong About Hacking
Hollywood can turn a cyberattack into glowing graphics, frantic typing, and total system control in seconds. But beneath the technical nonsense, hacker movies sometimes capture something real about cybersecurity. In this episode of The Art of Security, co-hosts Josh Davies and Tyler Reguly revisit hacker movies and shows including Hackers, WarGames, Sneakers, Mr. Robot, The Matrix Reloaded, and mo
AI Governance in Action: How to Secure AI Without Slowing Innovation
Your AI has access. But does It have too much? AI can help organizations move faster, automate work, and unlock new opportunities. But when AI systems can access sensitive data, connect to business tools, or take actions on a user's behalf, governance becomes an operational security priority. In this episode of The Art of Security, co-host Josh Davies speaks with Gina Cardelli, Principal Security
Not Curious? Cybersecurity Isn't the Career for You — A Student's Honest Take
Is cybersecurity really facing a skills shortage or are businesses just unwilling to train the next generation? In episode 10 of The Art of Security, Josh Davies and Tyler Reguly are joined by Dema Gorkun, cybersecurity student at MacEwan University, leader of the Student Ethical Hacking Club, and OWASP collaborator. Dema shares a candid student's-eye view of what today's cybersecurity education g
What Canada's Bill C-8 Means for Cybersecurity
Canada's Bill C-8 has received Royal Assent. But what does that actually mean for cybersecurity teams, critical infrastructure operators, telecommunications providers, and vendors selling into Canadian organizations? In this bonus episode of The Art of Security, Brent Arnold of INQ Law about the impact of Bill C-8, also known as An Act Respecting Cyber Security. They discuss the law's focus on tel
After the Breach: Ransomware, Data Loss, and the Legal Fallout
What really happens after a data breach? In this episode of The Art of Security, hosts Josh Davies and Tyler Reguly are joined by Brent Arnold of INQ Law to unpack the legal, operational, and business fallout that follows a breach. From ransomware negotiations and breach reporting obligations to data loss, regulatory risk, and recovery planning, Brent shares what organizations need to know when a
Learning Cybersecurity: Education, Experience, and AI
Cybersecurity is one of the few professions where the learning never stops. New technologies, evolving threats, and the rapid rise of AI constantly reshape what security professionals need to know. In this episode of The Art of Security, Josh Davies and Tyler Reguly sit down with Dr. Mansour Alqarni of Fanshawe College to explore the current state of cybersecurity education and what it takes to bu
Named Vulnerabilities, CVEs & the Problem With Security Hype
Why do vulnerabilities like Heartbleed, PrintNightmare, and Log4Shell get memorable names while thousands of other CVEs go unnoticed? In this episode of The Art of Security, Josh Davies and Tyler Reguly debate whether named vulnerabilities help cybersecurity awareness or create dangerous hype cycles. From CVE identifiers and responsible disclosure to media sensationalism and "boy who cried wolf" f
Supply Chain Compromise: Trust Is the Target
We're told to patch fast, trust updates, and rely on the software ecosystems that power modern business. But what happens when that trust becomes the attack vector itself? In this episode of The Art of Security, Josh Davies and Tyler Reguly dive into the growing world of software supply chain compromise — from malicious open source packages and compromised dependencies to sleeper-agent style attac
The Art of Collective Defense
When one organization gets breached, attackers don't just win — they get better. In this episode of The Art of Security, we explore a powerful idea: Cybersecurity isn't a solo fight but a shared one. And when defenders collaborate, everyone gets stronger. Josh Davies and Tyler Reguly are joined by Jennifer Quaid and Bob Gordon from the Canadian Cyber Threat Exchange (CCTX) to break down what effec
Stop Patching Everything: Rethinking Vulnerability Management with RSnake
In this episode of The Art of Security, Josh Davies and Tyler Reguly take a hard look at vulnerability management (VM) — one of the oldest and most widely adopted practices in cybersecurity — and ask a simple question: are we doing it wrong? Joined by special guest Robert "RSnake" Hansen, we unpack the critical differences between vulnerability management and patch management, and explore why trea
Trust No One (Especially on April Fools)
It's April 1st which means nothing can be taken at face value. In this special April Fools' episode of The Art of Security, Josh Davies and Tyler Reguly dive into the long history of pranks in tech and cybersecurity — from spaghetti trees and RFC jokes to Google's legendary gags. But this isn't just a nostalgia trip as Tyler and Josh discuss humor, history, and have a serious conversation about tr
The Art of the Adversary: Scripted Sparrow
Business email compromise is getting smarter, and Scripted Sparrow is proving it. Discover how the Scripted Sparrow threat group is running one of the most prolific BEC campaigns targeting organizations worldwide. In this episode of The Art of Security, we're joined by Fortra cybersecurity researcher John Wilson who breaks down how Scripted Sparrow executes highly targeted social engineering attac
Who Watches the Watchman?
In this episode, Tyler Reguly and Josh Davies dig into a tough but necessary question: Who's keeping an eye on the people who keep us secure? They break it down across three fronts — security vendors, internal security teams, and third-party providers — exploring what happens when the protectors themselves become the risk. From vendor breaches that ripple across customers to insider threat cases i
The Art of Cyber Hygiene: Building Security from the Ground Up
In our first episode, Josh Davies and Tyler Reguly dive into the foundational concept of cyber hygiene. What are the true "basics of the basics?" Is it vulnerability management and hardened configurations? Is it integrity monitoring as your digital smoke alarm? Or does modern resilience demand identity controls and layered monitoring from day one? Through sharp debate, real-world analogies (from L
The Art of Security with Tyler Reguly
After 10 years of asking, Tyler Reguly is finally stepping behind the mic for The Art of Security. Join Tyler and his cohost Josh Davies as they talk cybersecurity, creativity, and why protecting the digital world is as much an art as it is a science, plus a few laughs along the way. 🔔Don't forget to subscribe!
The Art of Security with Josh Davies
Mert Josh Davies, one half of The Art of Security. Join Josh and his co-host Tyler Reguly for fresh perspectives, healthy debate, and practical ideas you can actually apply to your cybersecurity strategy. 🔔Don't forget to subscribe!
Get to Know Josh and Tyler
In this pre-launch episode, hosts Josh Davies and Tyler Reguly pull back the curtain on their journeys into cybersecurity, sharing the experiences, pivots, and passion that shaped their careers and perspectives. Together, Josh and Tyler lay the groundwork for the podcast, establishing not just their credentials, but the real-world experiences that inform their perspectives. This episode sets the f
Why The Art of Security?
Is cybersecurity a science or an art? In this pre-episode of The Art of Security, hosts Josh Davies and Tyler Reguly dive straight into the debate that inspired the podcast's name and quickly realize it's not as black and white as it seems. What starts as a playful argument evolves into a thoughtful discussion about the balance between structured, methodical science and creative, experience-driven
Recommended
این نقطه
TED Business
Dark Night Tales with Brian King
Fantasy Flex
زن بودن
Medicine with Meaning
Yours Truly Johnny Dollar Collection
Take Back Your Health®
CBS Radio Mystery Theater | Old Time Radio
Solved Murders - True Crime Stories
紐約鳥｜New York Aperture
The Swerve Podcast: Obscure Topics | Conspiracy Theories
