Home
Podcasts
Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense
Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense
Lucas and Luna examine the business side of cybersecurity, looking at the companies that build defenses, the breaches that expose their weaknesses, and the enterprise strategies that decide who survives a digital siege. Each episode dissects a security vendor's financial filings, contract wins, and R&D spending, comparing players like CrowdStrike, Palo Alto Networks, Okta, and SentinelOne. They also walk through real breach post-mortems such as Colonial Pipeline, SolarWinds, and MOVEit, asking how insurance payouts, executive blame, and stock prices played out. The show is aimed at investors tracking cybersecurity ETFs, CISOs benchmarking vendor spend, and product managers translating boardroom risk appetite into budgets. Discussions stay grounded in market caps, contract sizes, and patch-cycle economics rather than fear-mongering or vendor marketing.
Episodes
The Security Vendor Lock-In Trap
Most enterprises believe they are buying modular security tools, but the reality is a web of proprietary integrations that make switching costs prohibitive. This episode examines how major platform vendors use data gravity and complex API dependencies to lock buyers into multi-year contracts. We look at the hidden financials of exit strategies and why CISOs are finding it harder to leave than to s
How Supply Chain Attacks Are Rewiring Enterprise Defense
In this episode, we examine the shift from direct enterprise breaches to sophisticated supply chain compromises. Lucas and Luna discuss how attackers are targeting smaller vendors to gain access to larger networks, using the concept of trust as a vulnerability. They analyze specific strategies for auditing third-party risk, the role of software bills of materials in transparency, and why tradition
Why Enterprise Security Fails On Paper
We break down why board-approved security strategies routinely fail in execution, using the recent CISA and FBI warnings about credential stuffing as a lens. Lucas and Luna examine the gap between policy and practice, focusing on how legacy identity systems create blind spots that automated defenses can't see. We discuss specific friction points in multi-factor authentication rollouts and why 'sec
The Security ROI Trap In Enterprise Defense
We dissect the financial mechanics of modern cybersecurity spending, focusing on the concept of 'security debt' and why Chief Information Security Officers are struggling to prove return on investment. Using a hypothetical mid-market manufacturing firm as our anchor case, we explore how teams quantify risk reduction when breaches rarely happen. We examine the tension between preventive controls an
How Cyber Resilience Shifts From Prevention To Recovery
Most enterprises spend millions on tools to stop breaches, yet they remain vulnerable because their recovery plans are outdated. This episode examines how leading firms like Microsoft and Cisco are pivoting from pure prevention to cyber resilience—focusing on rapid data restoration and business continuity after an attack. We look at the concrete shift in capital expenditure, the role of immutable
Why Security Operations Are Losing The War On Noise
Enterprise security teams are drowning in alerts, but the real crisis isn't volume—it's context. We look at how leading firms are shifting from reactive triage to proactive threat hunting by focusing on high-fidelity signals. Lucas and Luna break down why buying more tools is failing, citing specific metrics on alert fatigue and the rising cost of false positives. This episode explores the operati
Why Your Cybersecurity Team Is Chasing Ghosts
Most security teams spend more time investigating false alarms than actual threats. This episode looks at why alert fatigue is costing enterprises millions in wasted engineer hours and how the shift toward risk-based prioritization is changing daily operations. We examine a specific case where reducing noise by eighty percent freed up critical response capacity, exploring what it means for CISOs w
How AI Agents Are Rewiring Enterprise Security
The shift from static rules to autonomous AI agents is changing how enterprises defend against threats. Lucas and Luna explore how companies are deploying intelligent software that can detect, analyze, and respond to cyber incidents without human intervention. They examine the operational risks of giving software the keys to the kingdom and the new metrics CISOs must track. This episode dives into
The Security Debt Trap In Modern Enterprise
We are looking at the concept of security debt and why it is quietly bankrupting enterprise defense strategies in October 2026. Lucas and Luna explore how fragmented tooling, legacy integration failures, and the sheer volume of unpatched endpoints create a hidden liability that auditors cannot see until it is too late. We break down the specific mechanics of how this debt accumulates during rapid
Why Security Teams Are Burning Cash on Alerts
In October two thousand twenty-six, the average enterprise security operations center still fields thousands of alerts daily, yet true incident response remains bottlenecked by alert fatigue. This episode examines how Microsoft and CrowdStrike are shifting from reactive monitoring to autonomous threat hunting using AI-driven context. We break down why simply adding more tools is failing, the hidde
Why Security Teams Are Betting On Autonomous Response
Lucas and Luna explore the shift from alert fatigue to autonomous security response, using a specific case where an enterprise automated containment for ransomware indicators. They break down the mechanics of SOAR platforms, the risks of over-automation, and how CISOs are measuring success beyond headcount. The conversation anchors on the operational reality of October 2026, where manual triage is
The Human Firewall Gap in Enterprise Security
Most enterprises spend millions on AI-driven threat detection, yet the most persistent breaches still exploit human psychology. This episode examines how behavioral biometrics and continuous authentication are replacing static passwords as the primary defense layer. We look at why traditional training fails to change behavior and how companies like Okta and Microsoft are shifting from compliance c
Why Your Cybersecurity Team Is Burning Cash on Alerts
Enterprise security teams are drowning in alert fatigue, spending more time triaging false positives than hunting real threats. This episode examines how major organizations like JPMorgan and Microsoft have restructured their incident response workflows to cut noise by half. We look at the specific shift from volume-based monitoring to signal-to-noise ratio, and why the human element remains the m
How Shadow IT Is Costing Enterprises Millions
Most security breaches don't start with a sophisticated hack. They start when an employee, frustrated by slow internal tools, signs up for a third-party app on their own dime. This episode examines the hidden volume of unauthorized software in modern enterprises, why traditional perimeter defenses miss it entirely, and how CIOs are shifting from blocking to visibility. We look at specific data poi
Why Your Security Tools Are Creating More Work
Lucas and Luna dissect the paradox of alert fatigue in enterprise cybersecurity, using a specific look at how major financial institutions are drowning in noise from their own defense stacks. They explore why adding more tools isn't fixing the problem and what CISOs are actually doing to cut through the clutter.
#Cybersecurity #SecurityOperations #AlertFatigue #SOCManagement #EnterpriseSecurity #
The Hidden Cost of Cybersecurity Debt
Cybersecurity debt is the accumulated interest on past security decisions, and it is quietly bankrupting enterprise defense strategies. In this episode, Lucas and Luna dissect how technical debt in code translates directly to risk exposure, using the recent CrowdStrike outage as a case study in single points of failure. They explore why patching latency has become a boardroom metric, how CISOs are
The Zero Trust Myth That Is Costing Enterprises Millions
Most CISOs believe zero trust is a finished architecture, but the reality is a fragmented patchwork of vendor tools that create new blind spots. We examine how misconfigured identity gateways and over-reliance on single-vendor security stacks are actually expanding the attack surface rather than shrinking it. By looking at specific failure modes in multi-cloud environments and the hidden latency c
Why Cyber Insurance Is Breaking The Security Market
The cyber insurance market is undergoing a violent correction as insurers retreat from covering low-hanging-risk enterprises. Lucas and Luna examine how this shift is forcing companies to abandon reliance on policy payouts and invest in verifiable security controls like multi-factor authentication and immutable backups. We look at the specific mechanics of why premiums have spiked, what underwrite
How Cyber Resilience Is Rewiring Corporate Strategy
Most companies treat cybersecurity as a cost center, but the real shift is toward cyber resilience. We look at how major firms are integrating insurance, incident response, and business continuity into their core operations rather than viewing security as an IT problem. Using recent market data from September twenty twenty six, we explore why boards are demanding measurable recovery metrics over s
How Quantum Computing Is Reshaping Cybersecurity Strategy
Quantum computing is no longer science fiction, it is a tangible threat to the encryption standards protecting your financial data and enterprise secrets. In this episode, Lucas and Luna explore how organizations are preparing for the 'Q-Day' scenario where current RSA and ECC encryption protocols could be broken in minutes. We examine the specific shift toward post-quantum cryptography, why compa
Why Security Firms Are Betting On The Cloud
We look at why major cybersecurity vendors are shifting their revenue models from on-premise hardware to cloud-native platforms. Lucas and Luna break down the strategic pivot that is reshaping enterprise defense budgets as of September twenty twenty six, focusing on how companies like CrowdStrike and Palo Alto Networks are redefining what it means to protect a digital infrastructure.
#Cybersecuri
Why Your Cyber Insurance Premiums Are Spiking
Cyber insurance premiums have jumped sharply in the third quarter of twenty twenty six, driven by a surge in ransomware payouts and regulatory fines. Lucas and Luna break down why carriers are pulling back coverage for mid-market companies and what that means for your balance sheet. They examine the specific mechanics of cyber risk modeling, the role of mandatory reporting laws in driving up costs
How Attack Surface Management Rewires Cyber Defense
Most security teams still treat their digital perimeter like a castle wall, but attackers have long stopped knocking on the front door. In this episode, we explore Attack Surface Management, or ASM, and why it is replacing traditional vulnerability scanning as the primary defense for modern enterprises. We look at how companies are now mapping every exposed asset from shadow servers to forgotten A
How Supply Chain Trust Is Rewiring Enterprise Security
We examine why traditional vendor audits are failing to prevent modern breaches, focusing on the shift toward continuous trust verification. Lucas and Luna discuss how companies like CrowdStrike and Microsoft are redefining third-party risk management by moving beyond static questionnaires to real-time data validation. With the rise of AI-driven attacks targeting software dependencies, we explore
How Identity Supply Chains Are Rewiring Enterprise Security
We look at the quiet crisis in identity management. When a single vendor’s software update breaks authentication for thousands of enterprises, the fallout is immediate. This episode examines how identity supply chain failures are forcing CISOs to rethink trust. We use specific examples of recent authentication outages and analyze the shift from perimeter defense to identity-centric verification. Y
How Hardware Roots Stop Deepfake Fraud
We examine how physical hardware roots are becoming the primary defense against deepfake fraud in enterprise finance. With identity verification failing under synthetic media pressure, companies like Microsoft and Amazon are pivoting to attested devices. This episode breaks down the technical shift from software-based checks to hardware-backed proofs, analyzing why digital signatures can no longer
The Hidden Cost of Digital Identity Theft
We examine how synthetic identity fraud has evolved from a niche criminal activity into a systemic threat costing enterprises billions annually. Lucas and Luna break down the mechanics of synthetic identities, why traditional verification fails against them, and what leading financial institutions are doing to close the gap. We look at specific cases where AI-driven fraud rings exploit weak data s
Why Your Security Budget Is Broken
Most enterprises spend millions on cybersecurity tools yet remain vulnerable to sophisticated social engineering. In this episode, Lucas and Luna dissect why the 'buy more software' strategy is failing and how the real threat has shifted from perimeter defense to identity verification. They examine the rise of behavioral biometrics and the economic incentives driving phishing kits, offering a conc
Why Your Password Policy Is Costing You Security
Most enterprises still force password rotations every ninety days, yet recent data shows this habit increases weak passwords and boosts phishing success rates. We look at how the NIST guidelines shifted from arbitrary time limits to risk-based authentication, and why companies like Microsoft and Google dropped mandatory resets. Lucas and Luna break down the psychology of 'password fatigue' and the
How Hardware Roots Are Stopping Deepfake Fraud
In this episode, Lucas and Luna explore the rising threat of real-time voice deepfakes targeting enterprise finance teams, using a specific case where AI-generated audio bypassed two-factor authentication. They examine how hardware-backed identity verification is becoming the new frontline defense against synthetic media fraud. The discussion covers the technical limitations of software-based chec
How Cybersecurity Metrics Are Rewiring Boardroom Strategy
We break down why traditional security metrics like mean time to detect are failing executives, using the recent Deloitte survey of two thousand CISOs as our anchor. Lucas and Luna explore how boards are shifting toward business-impact metrics and what this means for your next budget cycle in September twenty twenty six.
#CyberSecurityMetrics #CISOStrategy #BoardroomRisk #DeloitteSurvey #MeanTime
How Third-Party Risk Management Protects Your Supply Chain
Most enterprise breaches don't start with a hacker picking the lock; they start with a vendor handing over the keys. In this episode, Lucas and Luna break down why traditional security questionnaires are failing in September 2026. We examine the specific mechanics of third-party risk management, focusing on how organizations like the global logistics firm Maersk are shifting from reactive audits t
How Zero Trust Architecture Fixes Enterprise Security
We break down why the perimeter is dead and how Zero Trust architecture forces enterprises to verify every request. Using a recent major supply chain compromise as our anchor, we examine the specific shift from network-bound security to identity-centric verification. Lucas and Luna discuss the operational friction of implementing least-privilege access across legacy systems and why this model is b
How Supply Chain Attacks Are Rewiring Enterprise Security
The SolarWinds breach of late twenty twenty still haunts enterprise security teams, but the playbook has evolved. In this episode, we look at how attackers now target trusted software vendors to compromise thousands of customers simultaneously. We break down the mechanics of the attack vector, why traditional perimeter defenses fail against trusted updates, and how CISOs are shifting from reactive
Why Security Teams Are Failing at Post-Breach Recovery
Most security frameworks obsess over preventing the initial breach, but they ignore the chaotic weeks that follow. In this episode, we examine the 'recovery gap' — the critical window where ransomware groups hold data hostage and enterprises scramble to restore operations without paying ransoms or triggering regulatory fines. We look at how major financial institutions are now treating data restor
The Rise of Shadow AI in Enterprise Security
As enterprises rush to adopt generative AI, a parallel crisis is emerging: unauthorized AI tools being used by employees without IT oversight. This episode examines the specific risks of 'Shadow AI' — from data leakage to compliance failures — and how security teams are adapting their strategies to monitor and govern these invisible workflows. We look at recent case studies where unvetted AI agent
How AI Agents Are Rewiring Enterprise Security
As artificial intelligence agents move from experimental prototypes to autonomous operators in enterprise networks, security teams are facing a fundamental shift in threat modeling. In this episode, we examine how these self-directed software programs bypass traditional perimeter defenses by mimicking legitimate user behavior and executing complex tasks without human intervention. We look at the s
The Rise of Security Orchestration in Enterprise Defense
We examine how security orchestration, automation, and response platforms are transforming incident response from manual chaos into coordinated action. Using a recent case where automated playbooks reduced breach containment time by forty percent, we explore the operational shifts CISOs face as they move beyond alert fatigue. Lucas and Luna discuss the critical balance between human oversight and
Why Security Posture Is The New Stock Price
Most enterprises treat cybersecurity as a cost center, but leading boards are beginning to view it as a direct driver of valuation. We explore how security posture management is shifting from technical compliance to financial signaling. By looking at the gap between reported metrics and actual risk exposure, we uncover why investors now demand transparent, real-time security data. This episode bre
How AI Agents Are Breaking Enterprise Security Models
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how autonomous AI agents are fundamentally reshaping enterprise defense. With major tech firms like Microsoft and CrowdStrike expanding their AI-driven security offerings in September 2026, the conversation shifts from reactive threat detection to proactive agent orchestration. The hosts examine a specific case where an
How Shadow IT Is Rewiring Enterprise Security
We drill into the specific mechanics of shadow IT and why traditional perimeter defense fails when employees bypass IT controls for SaaS tools. Using a concrete example of a mid-market retailer adopting unauthorized collaboration platforms, we explore how data exfiltration happens not through malware but through legitimate user behavior. We discuss the shift from blocking access to monitoring iden
The Hidden Cost of Shadow IT in Enterprise Security
Most enterprises don't lose data because their perimeter was breached. They lose it because employees bypassed security controls to get work done faster. In this episode, we examine the specific mechanics of shadow IT — the unauthorized software and cloud services that CISOs can't see and can't protect. We look at why traditional network monitoring fails against encrypted SaaS traffic, how Microso
How AI Security Starts With Data Provenance
AI models are the new crown jewels for enterprises — and the attack surface is wider than most CISOs think. In episode 173 of Cybersecurity Business with Fexingo, Lucas and Luna drill into the emerging discipline of AI security, focusing on the overlooked foundation: data provenance. They unpack how a poisoned training dataset can corrupt a model's decisions, why supply chain attacks now extend to
Why Cyber Insurance Exclusions Are Rewriting Security Budgets
In this episode of Cybersecurity Business, Lucas and Luna explore a quiet but powerful shift: insurers are starting to exclude coverage for state-backed attacks, and that one policy change is reshaping how enterprises spend on defense. They dig into the recent proposal by a major European insurer, the rise of cyber reinsurance, and how security teams are now mapping budgets to insurer requirements
How Security Teams Turn Breach Intel Into Boardroom Strategy
In this episode of Cybersecurity Business, Lucas and Luna dig into the surprisingly fuzzy line between 'security' and 'business' in the modern CISO role. With data from the latest IBM Cost of a Data Breach report — now averaging $4.9 million per incident — they explore how forward-looking security leaders are moving beyond technical fixes to translate breach intelligence into the language of risk,
How Cyber Insurers Are Quietly Reshaping Enterprise Defense
Enterprise security teams are used to thinking about attackers, patches, and controls. But in 2026, the real pressure to change behavior is coming from an unlikely source: the cyber insurance underwriter. In Episode 170 of Cybersecurity Business, Lucas and Luna unpack how insurers are moving beyond premiums and starting to dictate security architecture itself. They drill into the rise of 'pre-bind
How CISOs Are Building Cyber Resilience Teams
In this episode of Cybersecurity Business, Lucas and Luna explore the rise of dedicated cyber resilience teams inside enterprises. They break down how companies like JPMorgan and Maersk have shifted from pure prevention to recovery-focused planning, and the new CISO-level roles emerging to lead these efforts. The conversation drills into the concept of resilience exercises, the hard numbers around
How Cyber Insurance Is Reshaping the Ransomware Decision
In this episode, Lucas and Luna explore how the escalating cost of cyber insurance is changing the calculus for enterprises facing ransomware demands. They break down the 'ransomware dilemma': whether to pay or not, and how insurers' evolving policies—like refusing to cover ransom payments or capping payouts—are pushing companies toward more proactive defense. With a recent case where a company's
How Cyber Insurance Is Rethinking the Ransomware Decision
In episode 167 of Cybersecurity Business, Lucas and Luna dive into the hidden calculus behind ransom payments. When a breach hits, the decision to pay or not isn't just a security call — it's a financial one, shaped by insurance terms, stock-market reactions, and the cost of downtime. They unpack how the 2023 Change Healthcare attack changed the conversation, why some companies quietly build ranso
How Cloud Security Posture Management Stops Cloud Misconfigurations
Cloud misconfigurations remain a leading cause of data breaches, yet many security teams still struggle to identify and fix them before attackers strike. In this episode, Lucas and Luna explore Cloud Security Posture Management (CSPM) and how it helps enterprises automate the detection and remediation of risky cloud settings. They anchor the conversation around the Capital One breach, where a misc
The Price of Ransomware: Payouts and Negotiation Tactics
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna examine the high-stakes world of ransomware negotiations. They break down the evolving tactics of cybercriminals, the role of professional negotiators, and the ethical and financial dilemmas faced by companies that decide to pay or not. Using the real-world example of a mid-sized logistics firm that faced a seven-figure demand,
How Quantum-Safe Encryption Is Becoming an Enterprise Imperative
As quantum computers edge closer to breaking today's encryption, forward-looking CISOs are already migrating to post-quantum cryptography. In this episode, Lucas and Luna drill into the real-world logistics of that shift: the National Institute of Standards and Technology's finalized post-quantum standards, the hard problem of upgrading PKI and TLS at scale, and the specific industries that face t
How CISOs Are Using Cyber Reinsurance to Cap Catastrophic Loss
When a single ransomware event can cost an enterprise tens of millions, traditional cyber insurance leaves gaps. In this episode, Lucas and Luna explore how CISOs are turning to cyber reinsurance — insurance for insurers — to cap catastrophic losses. They unpack the mechanics of how a primary carrier's exposure gets transferred to reinsurers, the role of the Federal Insurance Office's 2026 report
Supply Chain Security Feeds on the Shared Responsibility Model
In this episode, Lucas and Luna dive into the shared responsibility model in cloud security, focusing on how CISOs and security teams are navigating the blurred lines between cloud providers and enterprises in 2026. With the rise of complex multi-cloud environments and serverless computing, the episode explores a real-world case study of a company that thought its cloud provider was securing its d
How CISOs Prioritize Vulnerabilities with Exposure Management
Episode 161 of Cybersecurity Business digs into exposure management, the discipline replacing patch-everything security. Lucas and Luna break down why the average enterprise juggles tens of thousands of open vulnerabilities but can only fix a fraction, and how CISOs now focus on 'exploitability' first. They walk through a concrete example: a critical-rated flaw in a less-accessed system versus a m
How CISOs Are Using Attack Path Management
In episode 160 of Cybersecurity Business with Fexingo, Lucas and Luna dig into attack path management — the practice of mapping how an attacker could move from initial compromise to crown-jewel data. They explore a 2025 report showing that 74 percent of breach paths used known, unpatched vulnerabilities, and walk through how a mid-sized healthcare firm used graph-based analysis to cut its exposure
How CISOs Buy Cyber Insurance for Cloud Native Stacks
As enterprises move workloads to the cloud, cyber insurance underwriting is struggling to keep up. In this episode, Lucas and Luna explore how cloud-native architectures are forcing insurers to rethink risk models, and how CISOs are adapting their buying strategies. They break down the rise of cloud-specific insurance products, the role of automated security assessments, and the growing gap betwee
How Security Teams Are Adopting Passwordless Authentication
Passwords are the weakest link in enterprise security, yet most firms still rely on them. In this episode, Lucas and Luna explore the shift to passwordless authentication—why it's gaining traction, how it works, and what it means for security teams. They break down the move from passwords to passkeys, the role of standards like FIDO2, and the challenges of rolling out passwordless across a large o
How Cyber Insurance Is Priced After a Breach
In this episode of Cybersecurity Business, Lucas and Luna dive into the hidden mechanics of how cyber insurance premiums are set after a breach. They break down the role of loss-run reports, the shift from per-incident to aggregate coverage, and why a single breach can double your premium even if your security posture improves. They also explore how insurers are now using real-time threat telemetr
How Breach Disclosure Timelines Shape Cyber Insurance Payouts
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how the speed and accuracy of breach disclosure can influence cyber insurance payouts, using the 2024 Change Healthcare ransomware attack as a case study. They unpack the insurer's perspective, the role of forensic investigators, and the delicate dance between legal obligations and policy requirements. With cyber premiu
How CISOs Use AI to Triage Alerts and Beat Alert Fatigue
Security teams drown in alerts—some estimates put the volume at thousands per day. In this episode, Lucas and Luna explore how CISOs are using AI-powered triage to separate real threats from noise. They dig into the math behind false positives, why traditional rules-based systems are failing, and what it means for security analysts' jobs. With a concrete example from a mid-sized fintech, they show
How Cyber Insurance Premiums Are Priced After a Breach
In this episode of Cybersecurity Business, Lucas and Luna dive into the gritty mechanics of how cyber insurance premiums are calculated after a company suffers a breach. They explore the role of security questionnaires, loss history, and remediation efforts, using a concrete example of a mid-sized logistics firm that saw its premium double after a ransomware incident. The conversation unpacks how
How Zero-Knowledge Proofs Can Prove a Breach Without Revealing Secrets
Enterprises have long struggled to prove to auditors, regulators, and business partners that they've been breached without exposing the very vulnerabilities that allowed it. Zero-knowledge proofs, a cryptographic technique that lets one party prove a fact without revealing the underlying data, are emerging as a practical solution. In this episode, Lucas and Luna explore how firms are using zero-kn
Why Security Teams Are Switching to On-Prem SIEM
In this episode of Cybersecurity Business, Lucas and Luna look at a quiet but significant shift in enterprise security: on-premise security information and event management, or SIEM. After more than a decade of 'cloud first' messaging, a growing number of security teams are pulling their log data back in-house. Lucas walks through the math that's driving the change—data ingestion costs, egress fee
How Security Teams Use Threat Hunting to Find Hidden Attackers
Episode 151 of Cybersecurity Business with Fexingo looks inside the world of proactive threat hunting. Lucas and Luna examine how enterprise security teams move beyond automated alerts to actively search for signs of intrusion that slipped past their defenses. They break down the difference between reactive monitoring and hunting, the role of the MITRE ATT&CK framework as a roadmap, and the human
How Zero Trust Is Rewriting Network Security
In this special 150th episode, Lucas and Luna explore how the zero trust model is fundamentally changing enterprise network security. They trace the shift from perimeter-based defenses to a verify-everything approach, using the 2023 Okta breach as a case study to show how even identity providers can fall victim to credential theft. The conversation covers the rise of identity-centric security, the
How CISOs Are Using Threat Intelligence Sharing to Stop Attacks
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore the rise of threat intelligence sharing among enterprises. They dive into how companies are moving from siloed security to collaborative defense, using platforms like the Cyber Threat Alliance and industry-specific ISACs. The conversation centers on a concrete example: the 2021 Kaseya supply-chain attack, where shared i
How CISOs Use Tabletop Exercises to Stress Test Their Plans
Episode 148 of Cybersecurity Business with Fexingo looks at how CISOs use tabletop exercises to stress-test their incident response plans before a real breach hits. Lucas and Luna walk through a realistic ransomware scenario, showing how a well-run exercise can expose gaps in communication, decision-making, and technical readiness. They discuss why many exercises fail because they're too scripted,
How Cyber Insurance is Reshaping Enterprise Defense Strategies
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the evolving role of cyber insurance in enterprise security. With premiums rising sharply and carriers demanding stronger security controls, insurers are becoming de facto regulators of corporate cybersecurity. Lucas breaks down how underwriting now involves technical assessments, how policy terms are tightening aroun
How AI Agents Are Reshaping Enterprise Security Operations
In this episode, Lucas and Luna dive into how AI agents are transforming security operations centers. They explore a real-world example: a major financial institution that deployed autonomous agents to triage thousands of daily alerts, cutting response times by 60 percent. The conversation covers what AI agents actually do, where they still struggle, and how human analysts are shifting from firefi
How CISOs Are Using Cyber Range Training to Prepare for Real Attacks
Cyber ranges are the flight simulators of the cybersecurity world, letting security teams rehearse their response to a live attack in a simulated environment. In this episode, Lucas and Luna explore how leading enterprises are using cyber ranges to move beyond tabletop exercises and build hands-on muscle memory for incident response. They break down the anatomy of a typical range exercise, from re
How Security Teams Use Cyber Deception to Trap Attackers
In this episode, Lucas and Luna explore how enterprises are deploying cyber deception—honeypots, decoys, and fake credentials—to outsmart attackers. They dive into a real case involving a financial services firm that used a fake database to catch a persistent intruder, and discuss the shift from passive detection to active engagement. With insights on realistic honeypots, the role of deception in
How CISOs Turn Incident Postmortems Into Strategic Assets
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are transforming incident postmortems from after-the-fact reports into strategic assets that reshape security programs. The discussion centers on a 2025 study showing that companies with structured post-incident review processes cut repeat incidents by 40 percent. They break down why traditional postmort
Why CISOs Are Cutting Their Security Vendor Count
Episode 142 of Cybersecurity Business with Fexingo dives into the growing trend of security vendor consolidation. Lucas and Luna unpack why the average enterprise now juggles over 45 security tools—and why many CISOs are aggressively cutting that number. They explore the business case for consolidation, from reducing alert fatigue to lowering total cost of ownership, and cite examples like Palo Al
How Bug Bounty Programs Find Vulnerabilities Before Attackers
Bug bounty programs have become a cornerstone of enterprise security. In 2025 alone, HackerOne's community reported over 100,000 unique vulnerabilities. This episode explores how companies like Google and Microsoft leverage crowd-sourced testing to catch flaws internal teams miss. We break down the economics: payouts versus breach costs, the choice between running an in-house program or using a pl
How Software Bill of Materials Improves Supply Chain Security
In episode 140 of Cybersecurity Business, Lucas and Luna dive into how enterprises are adopting Software Bill of Materials (SBOM) to manage supply chain risk. Starting with the Log4j vulnerability as a cautionary tale, they explain what an SBOM is—an ingredient list for software—and how it helps organizations know exactly what components are in their code. They discuss adoption drivers like the 20
How Cloud Misconfigurations Cause Most Breaches
Episode 139 dives into cloud security posture management (CSPM). Lucas and Luna break down a shocking stat: over 60% of cloud breaches stem from customer misconfigurations, citing Azure's latest report. They explore how tools like CSPM automatically discover and remediate risky settings, share a case study of a Fortune 500 retailer that closed 90% of critical gaps in three months, and debate wheth
How XDR Is Reshaping Enterprise Incident Response
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how Extended Detection and Response (XDR) platforms are changing the way security teams investigate and respond to threats. They break down how XDR aggregates telemetry from endpoints, networks, and cloud workloads to reduce alert fatigue and accelerate containment. Lucas cites an IDC survey showing nearly 40% of large
How CISOs Fight Deepfake Social Engineering Threats
In 2025, a deepfake voice clone of a CEO tricked a multinational firm into wiring $25 million. As generative AI tools make voice and video synthesis cheap and convincing, enterprises are scrambling to update their social engineering defenses. This episode drills into how security teams verify identity on calls, the state-of-the-art in liveness detection, and why old-school callback protocols are m
How SEC Disclosure Rules Are Reshaping Incident Response Plans
On July 27, 2026, a mid-sized healthcare company suffered a ransomware attack and filed an SEC 8-K within 48 hours. Lucas and Luna explore how the SEC's cybersecurity disclosure rule, effective since late 2023, has fundamentally changed how enterprises prepare for and respond to breaches. They discuss the pressure on CISOs to assess materiality quickly, the rise of disclosure committees, and why t
Recommended
The Swerve Podcast: Obscure Topics | Conspiracy Theories
The Bread and Banter Podcast
The Church of What's Happening Now: The New Testament
Busted Open
Deadline: White House
Crickets Corner
History of the Earthquake and Fire in San Francisco
Fox news
K-Drama Obsessed Mamas | Beyond “Just One More Episode!”
True Crime Classics
The Healer Revolution
Becoming: HER with Nikki Spoelstra
