Cybersecurity News & Analysis by Cyber Sidekicks - Your Weekly Update’
Cybersecurity News & Analysis by Cyber Sidekicks is a weekly podcast covering the cybersecurity market, industry trends, and the practical challenges of protecting organizations. Hosted by cybersecurity experts Christina Richmond and Rory Duncan, it provides updates and analysis for security professionals. The show helps listeners understand evolving threats and defensive strategies. It is produced by Richmond Advisory Group.
Episodes
Cloudsmith on Software Supply Chains and "Don't Make Me Think" Security
Hosts Christina Richmond and Rory Duncan are joined this week by Glenn Weinstein, CEO of Cloudsmith to discuss building high-performing company cultures, navigating software supply chain risks, and securing modern development workflows. To counter machine-speed AI threats, Glenn proposes that organizations must embed automated "don't make me think" security guardrails directly into workflows so de
Intruder on Continuous AI Pen Testing and the White-Box Advantage
This week, Andy Hornegold, Chief Security Technologist and Head of Product at Intruder joins hosts Christina Richmond and Rory Duncan to discuss offensive security, the economics of defensive AI, and how organizations can stay ahead of modern threat actors.
The trio conclude that, to navigate rapid threat evolution and the rising costs and guardrails of commercial frontier models, defenders must p
The AI Resilience Loop: ISMS Online on Bridging the Governance Gap
Chris Newton-Smith, CEO of ISMS Online returns as a guest on this week's episode, discussing with Christina and Rory about how organizations can bridge the gap between perceived readiness and actual operational resilience given the challenges of both fair and foul uses of AI and AI Agents. Chris argues that to bridge the gap between perceived AI readiness and actual operational capability, organiz
The Telepathic Adversary: TrendAI outlines AI's C2 Threat
In this week's episode, Christina & Rory talk with Tom Kellermann, VP of AI Security & Threat Intelligence at TrendAI about how rogue nation-states and AI-driven offensive tactics are disrupting traditional cybersecurity defenses. Tom outlines how four rogue nation-states—Russia, China, North Korea, and Iran—are collaborating and sharing command-and-control (C2) capabilities and exploits a
Why Containment Matters: Illumio On Attack Physics & Cyber Resilience
This week, host Rory Duncan speaks with guest Raghu Nandakumara, VP of Industry Strategy at Illumio, discussing why traditional security controls are failing against modern threats and why enterprises must prioritize containment and business-led resilience. Raghu emphasizes that while foundational security hygiene is frequently neglected for attractive new technologies, containment must serve as t
The Open-Weight Liability Trap: Who Pays When AI Fails?
This week, Christina & Rory are joined by Fractional CISO, Risk & Governance expert, - and soon to be author - Kayne McGladrey as he returns to the show to discuss the complex and rapidly evolving legal and financial realities of AI liability. Who takes the fall when AI systems make critical errors, violate copyrights, or leak data? The discussion delves into the pros and cons of open-wei
The Missing "R": Semperis On Identity, Resilience & Recovery
In this week's episode, Simon Hodgkinson - strategic advisor for Semperis - returns for his third appearance on the show to discuss why the cybersecurity industry needs to completely re-evaluate how it handles identity resilience. Is ITDR missing it's "R", because it fails to include "Recovery"? Christina, Rory & Simon discuss how a true response to an identity platform compromise cannot be se
Beyond the AI Hype: Billion-Dollar Infrastructure and the Reality of Cyber M&A
Another Special Episode this week! Christina and Rory review the state of the cybersecurity M&A landscape in 2026, and discuss how AI is causing a significant shift in strategic positioning, driven by a mixture of time-to-market desire, infrastructure build-outs, and a continuing approach by major telecommunications companies to spin-out their security services divisions.
Fortinet Acquires AI
The High-Fidelity Future of AI Impersonation, with ZeroFox
In this week's episode, Christina are Rory are joined by Russ Bentley, EVP Product Management at ZeroFox to discuss the alarming ease with which AI can now be used to create ultra-realistic and convincing impersonations and the resulting challenges for executive protection. Some great points by Russ, including the need for a return to foundational social engineering awareness. Recommendations: foc
Why AI is not the (only) answer in Cybersecurity
SPECIAL EPISODE: this week, Christina & Rory take the plunge and debate the merits of AI and AI Agents in cybersecurity strategy. What are the pros & cons? How can AI benefit those managing cyber defence vs. the cyber criminals, nation state actors and other attackers pushing on the offensive side? It's often been called an "arms race", so where will it end - if it can? What are the lesson
The Server in the Corner: Securing the Forgotten AI Attack Surface
In this week's episode, Jim LaRoe, CEO of Symphion, discusses the critical security risks associated with printers and IoT devices, which he argues are the most overlooked endpoints in the modern AI-enabled threat landscape. LaRoe emphasizes that while printers are often treated as "dumb appliances," they have evolved into sophisticated servers that reside inside the organizational network. Printe
The Pentest Renaissance: Synack on Offensive Security & AI Agents
Paul Mote, VP Solutions Architect at Synack, chats with Christina & Rory about how artificial intelligence is forcing a radical shift in offensive security and vulnerability management, including why the increasing number of autonomous attacks requires much more robust autonomous defenses. The solution? Organizations must move toward continuous automated patching or blocking to avoid falling h
When Bots Go Rogue: Sysdig and the Agentic Threat Actors
This week we follow-up on a story from last week's episode about the rise of Agentic Threat Actors (ATAs). Christina & Rory chat with Michael Clark, Senior Director of Threat Research at Sysdig about their discovery of JADEPUFFER, an ATA considered to be the first instance of agentic ransomware - an attack where a Large Language Model (LLM) is on the other end of the connection rather than a h
Putting Humpty Dumpty Back Together: Fenix24 On The Reality of Cyber Recovery
In this week's episode, Christina & Rory talk with guest Heath Renfrow, co-founder of breach recovery specialist Fenix24. Warning: It's a sobering look at the "cleanup" side of cybersecurity, emphasizing that most organizations are fundamentally unprepared for the complexity of full system restoration after a major attack. From the failure of backups and the hidden cost of business interruptio
AI-native AppSec: IBM on the Importance of Context, Agent Verification & Secure By Design
In this week's episode, guest Jayesh Kamat, Global Competency Leader in Application Security at IBM, chats with Christina about the profound impact of AI frontier models on cybersecurity and the necessity of shifting toward an "AI-native" security posture.
With machines now generating code at an exponential rate through agents like "IBM Bob," traditional application security (AppSec) methods are
Supply Chain Security: SecurityScorecard On Why Traditional Risk Management Is Failing
In this week's show, Brandon Dobrec, VP of Product at SecurityScorecard, chats with Christina & Rory about the escalating challenges of supply chain security and why traditional risk management is failing in the face of modern complexity.
NEWS
SailPoint to Acquire Entro in Reported $200 Million Deal
“FortiBleed”: Sweeping Credential-Harvesting Heist Compromises 30K+ Fortinet Devices
Leave us a
Identity & AI: A Strategic Guide for Cybersecurity Professionals
It's another special episode this week!
Hosts Christina Richmond and Rory Duncan examine the evolution of the identity market from a back-office IT function to a central pillar of modern business risk management. The discussion traces the shift from simple human credential management to a complex landscape dominated by non-human identities (NHIs), such as service accounts, APIs, and emerging AI a
The CISO's Efficiency Paradox: Securonix on AI & Bad Choices
This week, we chat with Simon Hunt, Chief Product Officer at Securonix about the intersection of human intelligence and AI in cybersecurity, and the current hype and "anthropomorphizing" of large language models (LLMs).
Christina also gives us an update on her visit to Cisco Live! She's also written a great blog that includes her thoughts and insights from the event.
We also cover a couple of new
AI & Pre-emptive Threat Hunting: who are the 'early movers' and what's next?
This week, another in our series of Special Episodes - this one dedicated to an analysis of the state of the Threat Hunting market, the key players and the early movers in pre-emptive cybersecurity. Richmond Advisory Group's Principal Analysts Christina Richmond & Rory Duncan outline the evolution of threat hunting from reactive, through proactive, to pre-emptive, debating the use of AI agents
Browser Security & Agentic Automation: with Neon Cyber's Cody Pierce
Cody Pierce, Co-Founder & CEO of Neon Cyber chat with Rory this week about visibility, context, and the importance of decentralized security as he proposes that the browser will become the operating system for most people's daily work.
NEWS
Christina & Rory discuss healthcare and data confidentiality this week - outlining the alarming increase in cyber-attacks in this sector: 118 large-sc
Kill Switches & Governance: Singulr AI Discusses Protecting the Agentic Frontier
How do you differentiate between a scenario where agents are getting smarter and working for you versus getting smarter and working against you? This week, Christina & Rory chat with Shiv Agarwal, Co-Founder & CEO at Singulr AI, discussing the advancements in detective and preventive technologies and the importance of modelling out the Good vs. the Bad
NEWS
Google Detects First AI-Generate
AI, Trust & Securing the Software Supply Chain - with Manifest's Daniel Bardenstein
The critical topic of securing the software supply chain is discussed this week with Daniel Bardenstein, CEO & Co-Founder of Manifest Cyber. Rory, Christina & Daniel talk about the critical intersection of AI, supply chain security, and the erosion of trust in technology.
Christina also shares her thoughts about her visit to IBM Think 2026, including why specific solutions for orchestratio
Defense, Culture, Risk & AI: LevelBlue's take on the seismic shifts in cybersecurity
In this week's episode, Kory Daniels, Chief Security & Trust Officer at LevelBlue describes how the rapid advancement of AI is fundamentally altering the cybersecurity landscape, necessitating a shift in how organizations approach defense, culture, and risk management. In discussion with Christina and Rory, Kory argues that the speed of AI agentic capabilities—specifically citing models like A
GRC 101: The Past, Present & Future of Governance with IBM & CyberSaint
This week's mega-episode is the second in our series of deep-dives into industry topics, this time looking at Governance, Risk & Compliance (GRC). Christina and Rory chat about the history of GRC, its "facelift" more!
Two guests join the show this week to discuss the topic: Fabio Campos, Managing Partner, Global Cyber Strategy & Risk Leader at IBM Consulting, and Matt Alderman, Chief Prod
IBM Autonomous Security announced // Securing the AI lifecycle with Straiker
A bumper episode this week: Christina & Rory discuss the announcement of IBM Autonomous Security & cybersecurity assessment services. Does this fulfill the goal of using agents to autonomously handle repetitive security tasks - aka the "boring bits" - that humans often struggle to maintain?
This week's guest is Co-Founder & CEO of Straiker, Ankur Shah, and we have an interesting discus
Finance for CISOs: How to Spend Smarter with Ross Young
Former CIA officer and seasoned cybersecurity leader - and co-host of CISO Tradecraft, creator of the OWASP Threat and Safeguard Matrix (TaSM) - Ross Young joins the show this week to discuss his latest book - Cybersecurity's Dirty Secret: Why Most Budgets Go To Waste - and chat about the importance of strategy & workflow when it comes to Agentic AI.
Leave us a message!
Want to leave some f
RSAC 2026 Day 4 - with Dave Merkel of Expel
No Day 3 podcast, but we saved a great discussion for Day 4 - with Dave Merkel, Co-Founder and CEO of Expel. During the chat, we looked at the past, present and potential future of cybersecurity, including AI, the Agentic SOC and the restorative power of a burger washed down with a pint of ale!
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email?
RSAC 2026 Day 2 - with John Velisaris of IBM Security Services
"It's a new cyber war of digital escalation" - Day 2 at #RSAC2026, and in the second of our Cyber Sidekicks podcasts, hosts Christina Richmond and Rory Duncan chat with #IBM's Associate Partner of Security Services John Velisaris about "the art of the possible" for enterprise security protection.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an emai
RSAC 2026 Day 1 - with Josh Brown, CISO at Spektrum Labs
It's Day 1 of RSAC 2026! Principal Analysts Christina Richmond and Rory Duncan chat with Spektrum Labs' CISO Josh Brown about cybersecurity resilience, safeguards, posture validation and insurance readiness
This is the first of our RSAC 2026 podcasts. You can see the video version on our YouTube Channel.
Day 2 and Day 4 podcasts and videos to follow!
Richmond Advisory Group
Leave us a message!
Wa
The Paradigm Shift of Agency: with Zenity's Chris Hughes
It's RSAC 2026 Week! In the run-up to the show, Christina and Rory chat with Zenity's VP of Security Strategy, Chris Hughes. The discussion centers on the transformative and "double-edged" nature of AI in cybersecurity - simultaneously breaking traditional security paradigms and offering new promise for areas like GRC, AppSec, and SecOps.
RSAC 2026 Preview
Christina & Rory highlight some of th
The Future of MDR: Dark Horses & Agentic SOCs
As the cybersecurity community descends upon the Moscone Center for RSAC, there is a palpable "exhaustion of choice." We are currently navigating a sea of over 600 Managed Detection and Response (MDR) providers, each promising to be the definitive shield for your enterprise. For the modern CISO, this isn't just noise; it’s a signal-to-noise crisis. In a market where every player claims the same hi
Physical & Cyber Security Threats Combined: The Repercussions of Conflict in the Middle East
Serious discussions this week as Christina & Rory look more closely at how a combination of physical and digital threats are bringing the effects of the conflict in the Middle East home to people across a wide region. Datacenter outages, AI-powered targeting and large-scale hacktivist attacks outline the heightened vulnerability of critical infrastructure.
AWS UAE data center hit by outage f
RSAC 2026 Innovation Sandbox Finalists: Our Hot Picks!
This week we discuss some of the trends, new directions and common approaches of some of this year's RSAC 2026 Innovation Sandbox Finalists! We also cover the latest M&A News: Palo Alto Networks announcing their intention to buy AI endpoint security platform Koi; the pitfalls of using an AI-generated random password (hint: they're not actually unique or necessarily secure...), and; the latest
AI Agent Governance 101 - with RSAC Innovation Sandbox Top 10 Finalist Geordie.ai
In the run-up to RSAC 2026 we have the first of a series of shows highlighting some of the new and innovative cybersecurity firms in the event's Innovation Sandbox Top 10 Final. This week, Christina & Rory chat with Hanah-Marie Darley, Chief AI Officer at Geordie.ai about how to govern AI agents by deeply understanding what they are capable of, their behaviour, and how to manage and govern the
More M&A! Sophos to buy Arco Cyber for channel-delivered cyber strategy & GRC move
Another week, another acquisition? This time, Sophos is front-and-centre with the announcement that it intends to purchase UK-based Arco Cyber in a move that the company says will help customers by combining agentic AI, integrated platforms, and trusted human expertise delivered in partnership with managed service providers (MSPs) and managed security service providers (MSSPs).
We also have a grea
Moltbook: a social network for AI Agents - what could possibly go wrong??
This week, Christina & Rory discuss Moltbook: the social network built for AI agents - but what are the security implications, and how could attackers take advantage of potential vulnerabilities? Also, more AI-fuelled attacks on AWS' S3 public buckets make credential finding much quicker, and an update on how Poland's cybersecurity police are cracking down on the increase in domestic hacking a
LevelBlue inks a strategic alliance with Fortra: acquires its MDR, XDR & WAF services
Another big announcement this week as LevelBlue signs a strategic alliance with Fortra, marking a partnership that will benefit from a combined product + services play. As part of the deal, LevelBlue will acquire Fortra's managed services - including those of the former Alert Logic acquisition - covering MDR, XDR & WAF.
NEWS
LevelBlue and Fortra Launch Strategic Managed Services Partnership to
Digital Executive Protection 101 - with Nisos’ CEO, Ryan LaSalle
This week we have an extended discussion with Ryan LaSalle, CEO of Nisos on the topic of digital executive protection and "exhaust" management. Ryan also joins our chat about the announcement of ChatGPT Health and what the security implications of sharing personal, medical information might be....
NEWS
Analysis of 6 Billion Passwords Shows Stagnant User Behavior
ChatGPT Health Raises Big Security,
CrowdStrike to acquire Seraphic Security and SGNL in January M&A splurge
An M&A focused episode this week as CrowdStrike announces it intends to purchase identity security vendor SGNL, as well as browser runtime security vendor Seraphic Security - moves designed to beef-up it's Falcon platform, enhancing its capabilities for continuous authorization, and protecting in-session browser activity for both human and autonomous identities. Christina & Rory discuss th
Why a "whitelist" approach to data protection is critical, with Protegrity's James Rice
In this episode, Christina and Rory highlight alarming news regarding cybersecurity professionals who pleaded guilty to participating in ransomware-as-a-service schemes. They also examine shifts in cyber insurance, noting a rise in phishing-related claims even as third-party outage risks appear to decline. AI security remains a primary focus, and a discussion around analyzing the potential for aut
2025 Cybersecurity Market Re-cap Part #2: Cyber Offense, Platform Wars, and the "boring bits"
We conclude our 2025 Cybersecurity Market re-cap with a look at the defensive and offensive moves brought in by AI tools - in particular through the use of autonomous AI agents. We also cover the implications of the ongoing "platform wars" between major vendors and service providers. Oh, and some of the boring bits...
We also nominate our Heroes of the Year, as well as the Zeros and some of the th
2025 Cybersecurity Market Recap Part #1: More M&A as Deal Sizes Increase!
In the first of our recap of the 2025 cybersecurity market, Christina & I delve into the continuing boom in M&A that has fuelled consolidation since the low-point of 2023, with Alphabet/Google, Palo Alto Networks and others playing a significant role.
We also chat with Alex Holland, Principal Threat Researcher at the HP Security Lab who explains how the quality of social engineering has dr
2026 Cybersecurity Predictions: Agents, Defence Perimeters & Quantum Resistance
Our first, annual predictions special episode! We delve into what we believe 2026 will mean for the cybersecurity industry, including what trends, technologies and external factors will be prominent over the next 12 months.
Expect a lively discussion covering threat actors, defensive AI agents, post-quantum cryptography, device-level protection, and geopolitical instability.
Products/vendors we me
Palo Alto Networks snaps up Chronosphere: is it $3.35B well spent?
This week we discuss the under-the-radar purchase by Palo Alto Networks of observability specialist Chronosphere for $3.35 billion: what does it mean for both companies and for the wider industry? Rory also has a great chat with Alex Berger, Head of Marketing at Ontinue about the latest developments in MDR.
NEWS
Palo Alto Networks to Acquire Chronosphere, “Next-Gen Observability Leader”, for the
Identities for AI Agents? Cybersecurity expert Harold Moss discusses bots, visibility & why skills matter
We had a wide-ranging chat with renowned cybersecurity researcher, innovator and author Harold Moss, looking at why we need to treat AI Agents like people - with their own identities - so that we can better manage any potential risk around their increasingly autonomous actions.
NEWS
Bridging the Skills Gap: How Military Veterans Are Strengthening Cybersecurity
Wiz and Microsoft alumni launch Mate
Exploring Cybersecurity Complexity: Data Lakehouses & Digital Risk with Fortra's Cary Hudgins
Cary Hudgins, VP of Product Management for Fortra's Cyber Portfolio joins us this week to chaqt about the increasing complexity of cybersecurity, particularly on the data storage side of things: data lakes, data warehouses and now data lakehouses. Rory also tries telepathy with Christina, with predictable results....
NEWS
5 Plead Guilty in US to Helping North Korean IT Workers
Chinese spies told C
AI & Incident Readiness: Deepfakes & Tabletop Cybersecurity Exercises with Ekco's Mike Perez
This week, Mike Perez, a Director at managed IT and security services provider Ekco chats to us about Digital Loss Prevention (DLP), incident readiness, how they use deepfakes for customer tabletop cybersecurity training exercises and more!
NEWS
Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth
Vulnerability management vendor Intruder publishes its 2025 Expo
AI Agents, Bots & Identity: A State of the Market with Andy Ash, CISO at Netacea
Oh boy, we had a wide-ranging and detailed discussion this week with Andy Ash (aka "Andy Two"), CISO at Netacea about the role of AI agents and bots in identity management and threat intelligence. How much risk do we trade off against convenience, and how does this affect our security?
NEWS
CISO Burnout – Epidemic, Endemic, or Simply Inevitable?
CrowdStrike releases its 2025 European Threat Landsc
Security: a multi-layered, programmatic approach - with Charles Henderson of Coalfire
This week, Christina has a great chat with Charles Henderson, EVP & Head of DivisionHex at Coalfire. The discussion covers offensive and defensive security, and managed security services as well as the ins-and-outs of cyber insurance and risk dynamics....
NEWS
MITRE Unveils ATT&CK v18 With Updates to Detections, Mobile, ICS
Cybersecurity Firms See Surge in AI-Powered Attacks Across Africa
"... it was DNS": AWS outage chat with Sean Deuby, Principal Technologist at Semperis
Lots to talk about this week as we dissect the AWS outage, what the implications are for resiliency, and AWS' own advice about how to mitigate dependencies on partitional services - with Sean Deuby, Principal Technologist at Semperis.
NEWS
Amazon fixes huge AWS outage that broke much of the internet – here's what happened
Concerns over UK (and European) reliance on AWS and US services
White Paper:
LevelBlue to acquire Cybereason as autumn M&A activity kicks off!
Big M&A news of the week as we discuss the announcement that LevelBlue will be acquiring Cybereason!
We also have a great discussion about security, website blocking and threat protection services with this week's guest TK Keanini, CTO at DNSFilter.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 secon
Post-Quantum Cryptography Management: with IBM's Chaitanya Challa
Our guest this week is Chaitanya Challa, Product Leader, IBM Data Security & Quantum Safe.
Having just released the IBM Guardium Cryptography Manager, Chaitanya gives us some great insights into what it's like to create and develop a new software product - involving 100 people over 6 months - including the many time zones involved and the lack of sleep that entailed!
NEWS
Google DeepMind’s New
Finding the Evidence: Digital Forensics, AI & Incident Response with CyXcel's Danny Howett
Lots to discuss this week!
We find out about what's happening in the world of AI, Digital Forensics & Incident Response (DFIR) with Danny Howett, Technical Director at CyXcel.
NEWS
M&A: CyberBit Acquires RangeForce to Create Combined Cyber Range Platform
Cybersecurity Awareness Month 2025: Prioritizing Identity to Safeguard Critical Infrastructure
New AI term of the week – Workslop: In an
AI & Policy Management: the customer perspective with Kyle Wickert, Field CTO at AlgoSec
In this episode we have an in-depth chat with Kyle Wickert, Field CTO at AlgoSec about Cloud 2.0 / Network 2.0 and what his customers are saying to him about the use of AI/AI Agents, policy management, application recertification and much more!
No News this week but Christina talks to us about her impressions of Lumen Technologies, following her attendance at last week's Analyst Summit.
Leave us
API vulnerabilities & AI: Cequence Security's Randolph Barr tells us why we should care!
This week's episode sees us in discussion with the globetrotting CISO of Cequence Security, Randolph Barr about everything to do with AI, preventing API vulnerabilities, security hygiene and the dream of a fully agentic AI vulnerability management lifecycle...
Cybersecurity Society of the Philippines
IN THE NEWS
Programmers Using AI Create Way More Glaring Security Issues, Data Shows
SentinelOne
Agentic AI: Why your SecOps is at risk and what to do about it - with Rock Lambros
Rock Lambros, CEO & Founder of Rock Cyber joins us again this week to delve deeper into the emerging opportunities, risks and challenges of using agentic AI in your SecOps - and what you can do to minimize potential exposure and risk.
OWASP GenAI / Agentic AI resources
In the news:
Personal Liability, Security Become Bigger Issues for CISOs
Varonis Acquires Email Security Provider SlashNext to
AI Compliance & Governance: why it matters - with ISMS Online's Chris Newton-Smith
This week we chat with Chris Newton-Smith, CEO of ISMS Online about AI compliance, governance and the regulatory requirements relating to ISO 42001, the EU AI Act and more!
In the news:
US, Allies Push for SBOMs to Bolster Cybersecurity
US Offers $10 Million for Three Russian Energy Firm Hackers
Rewards for Justice (RFJ)
Leave us a message!
Want to leave some feedback and suggestions but would p
OWASP Agentic AI SecOps deep dive: Solutions & Framework!
This week we delve into OWASP's recently-released OWASP Agentic AI SecOps Framework and Market Landscape report:
https://genai.owasp.org/resource/ai-security-solutions-landscape-for-agentic-ai-q3-2025/
This week's guest is Paul Farrington, Chief Product Officer at Glasswall. Paul, Christina & I talk about the evolution of Zero Trust and where the industry is headed....
Leave us a message!
Wan
Why Business Fundamentals Matter: a Cybersecurity 101 with Simon Hodgkinson, Strategic Advisor to Semperis.
This week's guest is Simon Hodgkinson, Strategic Advisor to security firm Semperis. We chat about the importance of business fundamentals, the data and infrastructure hygiene required for effective cybersecurity, and what keeps him up at night!
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We
AI, Agents & Cybersecurity: Managing the Challenges & Risks with IBM's Mark Hughes
In this week's special 30th Episode (woot!) we have a great discussion with IBM's Global Managing Partner of Cybersecurity Services, Mark Hughes around the adoption of AI, AI Agents and how to prepare for and manage the cybersecurity challenges and risks to the enterprise.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a vo
SentinelOne acquires Prompt Security; Cyber warfare tabletops with Nate Case!
This week: more M&A news as SentinelOne announces its plan to acquire Prompt Security. Also, special guest Nate Case of Clarity talks about cyber warfare tabletop exercises, scenario gaming and AI!
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in
Summer of Cyber M&A: Palo Alto Networks drops a hot $25 billion on CyberArk!
In this week's episode we cover the latest hot cybersecurity M&A deal of the year, as Palo Alto Network announces it intent to acquire identity specialist CyberArk!
We also chat with Rock Lambros, Founder & CEO of Rock Cyber
Check out Rock's collaboration on OWASP's latest GenAI / LLM reports & guides
Leave us a message!
Want to leave some feedback and suggestions but would prefer n
AI in cybersecurity: too many alerts? Erik Bloch of Illumio explains why...
This week, Erik Bloch, VP of Security at Illumio outlines why he believes that 90%+ of AI-generated alerts are trivial or benign, and what affect this is starting to have on security analysts.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the followi
Agentic AI & Security - with Zenity's Kayla Underkoffler
This week it's all about AI Agents as we chat with Kayla Underkoffler, Lead Security Engineer in the Office of the CTO at Zenity -
LI profile: linkedin.com/in/kayla-underkoffler-7400673a
Website: https://zenity.io/
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not to
Post Quantum Cryptography, AI & Sovereignty: Insights from Utimaco's Nils Gerhardt
This week we have an in-depth discussion about post quantum cryptography (PQC), AI & digital sovereignty with Utimaco's CTO, Nils Gerhardt
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the following episode.
SpeakPipe link - https://www.speakpip
LevelBlue to acquire Trustwave / API Security discussion with Wallarm
In this episode we deep-dive into LevelBlue's announced plan to acquire Trustwave. We also have a great discussion with Wallarm's Tim Erlin about what's coming next in API Security.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the following episode.
AI, Identity & Trust: a chat with GitLab's Julie Davila
This week's guest is GitLab's VP of Product Security Julie Davila
We chat about AI, identity, trust in the context of the latest cybersecurity trends, as well as the best route into learning ice hockey!
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in
AI, Business Risk & Threat Management: a CISO’s guide
This week’s special guest Kayne McGladrey, (blog: kaynemcgladrey.com ), CISO-in-Residence at Hyperproof, outlines the business challenges that CISO's face, as we discuss new types of risk in daily threat management.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not t
AI Cybersecurity Podcast Takeover!
Rory is off this week due to illness, so this episode is brought to you by two AI hosts who discuss some of our latest research and what services Richmond Advisory Group offers.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the following episode.
Sp
The Human Threats in Cybersecurity - Insights from Nisos’ Ryan LaSalle
This week's guest - Ryan LaSalle, CEO of Human Threat Management solutions vendor Nisos - discusses how to identify human exposure, behavioral patterns, and adversarial intent, and protect your cybersecurity infrastructure.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that a
AI & the Future of Pentesting - Insights from NetSPI’s Kurtis Shelton
This week we discuss the future of penetration testing and AI in cybersecurity with NetSPI’s Principal AI Researcher Kurtis Shelton.
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the following episode.
SpeakPipe link - https://www.speakpipe.com/Cybe
The State of Incident Response with Trustwave’s Damian Archer
This week:
The challenges of talent & recruitment in the security services sector and the state of the incident response market with Trustwave's Damian Archer.
News about how AI Agents and Assistants are affecting Google, and Gitlab via Indirect Prompt Injection (IPI) attacks!
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can lea
AI Agents & Threat Intelligence - Insights from Verizon DBIR with Alex Pinto'
THIS WEEK
Verizon DBIR, AI Agents and the Future of Threat Intelligence with Special Guest Alex Pinto, Associate Director of Threat Intelligence at Verizon!
NEWS
EU Cybersecurity Agency ENISA Launches European Vulnerability Database
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share an
RSAC 2025 Recap - Identity Hygiene & AI Insights
Show Notes
In an extended episode this week, we recap on who we met and what we saw at RSAC 2025!
We also talk identity hygiene and AI Agents with Rosario Mastrogiacomo of SPHERE Technology Solutions
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the f
Live from RSAC 2025 - Cybersecurity Insights with IBM
LIVE FROM RSAC 2025
This week's episode was recorded live at RSAC 2025! For the first time we recorded using video: https://youtu.be/1LcUnxaJOaI
We discuss some of our takeaways from the show - including trends, acquisition news, Agentic AI, and more.
This week's special guests are: Mark Hughes, Global Managing Partner, Cybersecurity Services at IBM, and Jake Paulson, Deputy Head of IBM X-Force (H
Chatting with Microsoft's Ed Martin about cybersecurity - Cyber Sidekicks EP#14
SHOW NOTES
This week's Special Guest
Our special guest this week is veteran cybersecurity expert Ed Martin, who leads the Product Management function for Microsoft Threat Intelligence.
RSAC & Security Tinkerers
Information on Pitch For Charity - pitchforcharityinfo@okta.com
Sponsor Okta’s website = https://www.okta.com
Leave us a message!
Want to leave some feedback and suggestions but would p
IBM X-Force 2025 Threat Intelligence Index - Cyber Sidekicks EP13
NEWS
IBM X-Force 2025 Threat Intelligence Index
AI Hallucinations Create a New Software Supply Chain Threat
RSA & Security Tinkerers
Information on Pitch For Charity - pitchforcharityinfo@okta.com
Sponsors websites:
Okta - https://www.okta.com
SentinelOne - https://www.sentinelone.com
Leave us a message!
Want to leave some feedback and suggestions but would prefer not to write an email?
Google Unified Security announcement, Cyber Sidekicks EP#12
Episode Notes
NEWS
Google announces Google Unified Security (GUS)
Oracle Faces Mounting Criticism as It Notifies Customers of Hack
RSA & Security Tinkerers
Further Information regarding Pitch For Charity - pitchforcharityinfo@okta.com
https://www.okta.com
Leave us a message!
Do you want to leave some feedback and suggestions? You can leave us a voicemail (90 seconds max). We will share any tha
AI Security Survey Results Preview, Cyber Sidekicks EP#11, 8 March 2025
Episode Notes
AI SECURITY SURVEY RESULTS PREVIEW
Richmond Advisory Group has surveyed 300 US-based security professionals regarding their use and planned adoption of AI Security tools. We preview some of the results in this episode...
If you would like to learn more, please contact either Christina or Rory via the links below!
NEWS
Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses
Crypto hunting rats? Cyber Sidekicks Ep#10, 1 April 2025
S1 EPISODE#10 - SHOW NOTES
SEND US A MESSAGE!
Want to leave some feedback and suggestions but would prefer not to write an email? You can leave us a voicemail (90 seconds max). We will share any that are not too spicy in the following episode.
SpeakPipe link
NEWS
Microsoft Warns of New StilachiRAT Malware
Legacy Medical Devices Remain Easy Targets for Ransomware
THIS WEEK'S GUEST
This week’s speci
Recommended
English with Olivia | Slow Conversations & Vocabulary
Stand In The Circle
SLOW ENGLISH PODCAST (A1-A2) With Subtitles | Daily Videos | English With Us Podcast
Learn English A2 with Daily News | Simple English Listening Practice
پلی لیست | PlayList
Conspiracy Files with Paige Carter
Bad Friends
Learn 50 English Phrases While You Sleep | Everyday English Phrases & Vocabulary
This Past Weekend w/ Theo Von
Dateline NBC
Back to the 80s Radio
Crime Stories with Nancy Grace
