Redefining CyberSecurity
by Sean Martin, ITSPmagazine
Latest episode
Phishing Training Looks the Same Under Three Mindsets |…
Phishing Training Looks the Same Under Three Mindsets |…
About this podcast
Redefining CyberSecurity Podcast
Hosted by Sean Martin, CISSP
Have you ever thought that we are selling cybersecurity insincerely, buying it indiscriminately, and deploying it ineffectively?
For cybersecurity to be genuinely effective, we must make it consumable and usable. We must also bring transparency and honesty to the conversations surrounding the methods, services, and technologies upon which businesses rely. If we are going to protect what matters and bring value to our companies, our communities, and our society, in a secure and safe way, we must begin by operationalizing security.
Executives are recognizing the importance of their investments in information security and the value it can have on business growth, brand value, partner trust, and customer loyalty.
Together with executives, lines of business owners, and practitioners, we are Redefining CyberSecurity.
Episodes
The newest 50 of 622 episodes
- Phishing Training Looks the Same Under Three Mindsets | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Verena Zimmermann | Redefining CyberSecurity with Sean Martin · 35 min · Episode 622Sean Martin and co-host Julie Haney talk with ETH Zürich's Verena Zimmermann about why one phishing training program can serve a constraining, considering or enabling mindset…
- Using AI to Cut GRC Busywork Without Cutting Out the Human | A Redefining CyberSecurity Podcast Conversation with Princess Okoro, Manager, Security Governance, Risk and Compliance of Trainline · 33 min · Episode 621Princess Okoro, Manager, Security Governance, Risk and Compliance at Trainline, makes the case that adding AI to a broken process only makes the process worse. She shows how her…
- The ESET PROTECT Launch Brings 24/7 Monitoring, AI Security, and a Cyber Warranty to Small and Midsize Businesses | A Brand Story Conversation with Ryan Grant, Country Manager & GM, North America at ESET | Hosted by Sean Martin · 35 min · Episode 620ESET PROTECT combines AI security, 24/7 monitoring, and a cyber warranty in three packages, and Ryan Grant says ESET took it down to 10 seats. Ryan Grant also covers treating an…
- When Everyone Can Build Their Own Tools, What Holds Security Together? | A Redefining CyberSecurity Podcast Conversation with John Linford, Security Portfolio Director of The Open Group · 28 min · Episode 619Organizations are tearing apart their workflows and rebuilding them with AI-assisted tooling, which means the shelf life of a security architecture is now measured in months…
- Marketing Volume Held Steady. Scrutiny Went Up. | Lens Four by Sean Martin | Read by TAPE9 · 22 min · Episode 618Black Hat USA 2026 was not the year AI arrived, it was the year the industry stopped asking whether to adopt AI and started grinding through the four questions that come after…
- The Flood Made Everything Free. So Now We Pay for Proof. | Lens Four by Sean Martin | Read by TAPE9 · 16 min · Episode 617On July 15, Tidal stops paying royalties on fully AI-generated music, and the same move is spreading through publishing, film, science, software, and hiring at the same time…
- We Made Everything Faster. We Never Defined Better. | Lens Four by Sean Martin | Read by TAPE9 · 16 min · Episode 616At Infosecurity Europe 2026, the whole floor agreed on the vocabulary: outcomes, resilience, sovereignty, human-in-the-loop, while almost none of it could define what success…
- The Quantum Threat Is Already a Business Decision You're Making Today | An On Location Conversation at Infosecurity Europe 2026 with Rik Ferguson, Vice President of Security Intelligence · 15 min · Episode 615Rik Ferguson argues that the most consequential decision an organization will make about quantum computing is not a future one, it is the procurement choice sitting in front of…
- Redefining Cyber Resilience | An On Location Conversation at Infosecurity Europe 2026 with James Morris, Former UK Member of Parliament · 17 min · Episode 614Cyber resilience has outgrown the IT department, and policy is racing to catch up. At Infosecurity Europe 2026, Sean Martin and James Morris dig into the UK's Cyber Security and…
- Cybersecurity Leadership Is a People Problem, Not a Technology Problem | A Redefining CyberSecurity Podcast Conversation with Tera Ladner, Deputy Global Chief Information Security Officer of Aflac · 32 min · Episode 613A deputy global CISO who came up through information governance and law school makes the case that the strongest security leaders lead with risk, relationships, and storytelling…
- Proof of Impact | Lens Four by Sean Martin | Read by TAPE9 · 11 min · Episode 612Heads of state, Fortune 500 CEOs, Adam Lambert, Ayra Starr, and Hugh Jackman shared the stage at Global Citizen NOW 2026 — but the real story was the discipline: almost nothing…
- When Patient Records, Powerlines, and Prompts All Lead to the Same Risk | A Redefining CyberSecurity Podcast Conversation with Gil Bashe, Chair, Global Health and Purpose of FINN Partners · 32 min · Episode 611Healthcare is one of the most attacked systems in cybersecurity, and the people defending it are saving lives just as surely as the EMT racing through traffic. Sean Martin sits…
- The Vendor You Cannot Name | Lens Four by Sean Martin | Read by TAPE9 · 12 min · Episode 610Two U.S. banks disclosed a breach at the same unnamed third-party vendor in April 2026, with six class action lawsuits in two weeks. A regulatory clock about to start at…
- Who's Managing Your Agent Workforce? (And Whose Budget Are They On?) | Lens Four by Sean Martin | Read by TAPE9 · 31 min · Episode 609HR hires humans. Procurement buys software. AI agents are both — and the collision between those two functions creates something new on the org chart, while exposing a bigger…
- DriveThru Hacking: When Your Dashcam Becomes the Attack Vector | A Redefining CyberSecurity Podcast Conversation with Alina Tan and George Chen · 31 min · Episode 608Your dashcam is capturing far more than accidents -- and researchers Alina Tan and George Chen have built an automated tool to prove it, compromising dashcams in under six…
- You're Still Reading the Advisory. The Attacker Already Left. | Lens Four by Sean Martin | Read by TAPE9 · 16 min · Episode 607Project Glasswing gave 12 elite technology and financial organizations direct access to Anthropic's Claude Mythos Preview — an AI model that autonomously found thousands of…
- You Shot the Arrow. The Bow Went With It. | Lens Four by Sean Martin | Read by TAPE9 · 15 min · Episode 606The cybersecurity industry is spending down the one asset it can't buy back — and the cost isn't measured in lost deals. It's measured in security programs that fail, decisions…
- Order of Operations: The Foundation Risk Healthcare AI Is Running Past | Lens Four by Sean Martin | Read by TAPE9 · 20 min · Episode 605Healthcare is deploying AI on a foundation it knows is incomplete — and the patient is sitting in the gap between the ambition and the infrastructure it requires. This analysis…
- When AI Touches Everything: Operationalizing the Five Most Dangerous New Attack Techniques at RSAC 2026 | A Redefining CyberSecurity Podcast Conversation with Ed Skoudis, President of SANS Technology Institute and Founder & CEO of Counter Hack · 25 min · Episode 604Every year, the SANS "Five Most Dangerous New Attack Techniques" session at RSA Conference draws standing-room-only crowds -- and every year, Ed Skoudis and his panel raise the…
- When Cyber Meets Physical: Building Executive and Employee Protection Programs That Actually Work | A Redefining CyberSecurity Podcast Conversation with Roland Cloutier, Principal of The Business Protection Group · 25 min · Episode 603Most organizations treat security as a technology problem -- but when executives are threatened, employees are caught in disasters, or physical and cyber risks collide, the gaps…
- Adapting to the Speed of Risk: Why GRC Programs Must Move with the Business | A Brand Highlight Conversation with Steve Schlarman, Senior Director of Archer · 7 min · Episode 602Traditional GRC cycles were never designed to keep pace with the speed of modern business, and that gap is quietly creating risk exposure across organizations everywhere. Steve…
- Task by Task: The Workflows We're Handing to AI — One Decision at a Time | Lens Four by Sean Martin | Read by TAPE9 · 29 min · Episode 601Nobody decided to build a human-optional workflow — they just kept making reasonable procurement decisions, task by task, until the human became optional across hiring…
- The 72-Minute Gap: What the Breaches, the Vendors, and the Messaging Are Actually Telling Us | Lens Four by Sean Martin | Read by TAPE9 · 14 min · Episode 600AI-driven cyberattacks now move from breach to exfiltration in just 72 minutes, yet most security programs still operate on human timelines. Sean Martin examines what the latest…
- SOC Automation and the AI-Driven Future of Cybersecurity Defense | A Redefining CyberSecurity Podcast Conversation with Richard Stiennon, Chief Research Analyst of IT-Harvest · 26 min · Episode 599As AI models grow more capable by an order of magnitude each year, a new category of SOC automation vendors is replacing manual alert triage with autonomous, around-the-clock…
- Speaking Security with a Business Accent: Why Being Right Isn't Enough If Nobody Listens | A Redefining CyberSecurity Podcast Conversation with Josh Mason · 32 min · Episode 598Cybersecurity professionals are often technically right but strategically ignored, and the gap between security knowledge and business impact comes down to how the story is told…
- The Autonomous SOC Is No Longer a Dream | A Brand Highlight Conversation with Subo Guha, Senior Vice President of Product Management of Stellar Cyber · 8 min · Episode 597The autonomous SOC has moved from aspiration to reality, and the security operations teams that embrace agentic AI stand to transform how they detect, triage, and respond to…
- The New Identity Risk AI Agents Bring to the Enterprise | A Brand Highlight Conversation with Ido Shlomo, Co-Founder & CTO of Token Security · 7 min · Episode 596As AI agents gain access to critical systems and data, a new class of identity risk is quietly outpacing the governance models built for human users. Discover why visibility…
- KEVology: How Exploit Scores and Timelines Shape Real Security Decisions | A Brand Highlight Conversation with Tod Beardsley, Vice President of Security Research of runZero · 8 min · Episode 595Not every vulnerability on the CISA KEV catalog demands the same level of urgency, and treating them equally can overwhelm security teams with false priorities. Discover how…
- Semantic Chaining: A New Image-Based Jailbreak Targeting Multimodal AI | A Brand Highlight Conversation with Alessandro Pignati, AI Security Researcher of NeuralTrust · 7 min · Episode 594A newly discovered jailbreak technique called semantic chaining bypasses safety filters in leading image-generation models by exploiting how AI handles content modification…
- Building Community Around the AI SOC Revolution | A Brand Spotlight Conversation with Monzy Merza, Co-Founder and CEO of Crogl | AI SOC Summit 2026 · 18 min · Episode 593Security teams face a new reality where threat actors operate at agentic speed and the cost of launching sophisticated attacks continues to drop. The AI SOC Summit brings…
- It's Not a Technology Problem, It's an Organizational Opportunity -- Building a Culture of Cybersecurity | Human-Centered Cybersecurity Series with Co-Host Julie Haney and Guest Dr. Keri Pearlson | Redefining CyberSecurity with Sean Martin · 47 min · Episode 592Organizations continue to invest heavily in cybersecurity technology, yet breaches persist at alarming rates. This conversation explores why building a culture of cybersecurity…
- It Fractured, Then Rebuilt Itself: The CISO Role Changed More in Five Years Than Ever Before, Setting the Stage for 2026 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 16 min · Episode 591The CISO role has shifted from technical defense to business risk leadership, demanding judgment, communication, and trust as core capabilities. This conversation explores how…
- Five Patterns From 152 Episodes That Reshaped How I Think About Security, Technology, and Work Heading into 2026 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 13 min · Episode 590After 152 conversations across security, technology, and creative disciplines, five recurring patterns emerge that challenge how organizations think about visibility…
- The Hidden Risk Inside Your Build Pipeline: When Open Source Becomes an Attack Vector | A Conversation with Paul McCarty | Redefining CyberSecurity with Sean Martin · 40 min · Episode 589Malicious open source packages are no longer edge cases. They are deliberate, scalable attack paths targeting developers, CI pipelines, and the software supply chain itself.
- Rethinking Public Health Workflows Through Automation and Governance: Why Data Modernization May Be The Key | A Conversation with Jim St. Clair | Redefining CyberSecurity with Sean Martin · 44 min · Episode 588AI is transforming how public health agencies collect, interpret, and act on data, but the benefits depend on strong interoperability, governance, and security foundations. This…
- AI, Quantum, and the Changing Role of Cybersecurity | ISC2 Security Congress 2025 Coverage with Jon France, Chief Information Security Officer at ISC2 | On Location with Sean Martin and Marco Ciappelli · 26 min · Episode 587This episode explores the themes, technologies, and community conversations shaping ISC2 Security Congress, with Jon France offering a forward-looking view of what matters most…
- A Practical Look at Incident Handling: How a Sunday Night Bug Bounty Email Triggered a Full Investigation | A Screenly Brand Spotlight Conversation with Co-founder of Screenly, Viktor Petersson · 18 min · Episode 586A routine bug bounty submission triggered a deep investigation at a digital signage company and revealed how strong processes guide fast, measured incident response. The…
- Inside the Economics That Shape Modern Cybersecurity Innovations: How the Cybersecurity Startup Engine Really Works | A Conversation with Investor and Author, Ross Haleliuk | Redefining CyberSecurity with Sean Martin · 47 min · Episode 585This episode explores how cybersecurity startups form, why the market produces so many tools, and how security buyers should evaluate both emerging and established vendors. Sean…
- Beg Bounty: The New Wave of Unrequested Bug Claims and What They Mean | A Conversation with Casey Ellis | Redefining CyberSecurity with Sean Martin · 36 min · Episode 584This episode breaks down the rise of “beg bounties” and examines how unsolicited vulnerability claims create confusion, noise, and operational overhead for security teams. Sean…
- Building a Real Security Culture: Why Most AppSec Champion Programs Fall Short | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 5 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 2 min · Episode 583Security champions were meant to bridge dev and AppSec—but most programs measure attendance, not outcomes. In this episode of AppSec Contradictions, Sean Martin explains why…
- Bridging the Cybersecurity Divide Between the Haves and Have-Nots: Lessons from Australia’s CISO Community | A Conversation with Andrew Morgan | Redefining CyberSecurity with Sean Martin · 52 min · Episode 582Andrew Morgan joins Sean Martin to unpack the widening cybersecurity gap between large enterprises and resource-strapped organizations. He shares how collaboration, cultural…
- How to Stay Resilient When Cybercrime Becomes Your Competition | A Conversation with Author and Former FBI Agent, Eric O'Niell | Redefining CyberSecurity with Sean Martin · 40 min · Episode 581Cybercrime has become a full-scale global economy, forcing legitimate businesses to compete with criminals for survival. Former FBI operative and NeXasure National Security…
- CI/CD Pipeline Security: Why Attackers Breach Your Software Pipeline and Own Your Build Before Production | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 4 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 4 min · Episode 580Attackers don’t need to breach production—they’re owning the CI/CD pipeline long before code goes live. Sean Martin unpacks why cloud and build systems remain the weakest links…
- The Silent Risk in AI-Powered Business Automation: Why No-Code Needs Serious Oversight | A Conversation with Walter Haydock | Redefining CyberSecurity with Sean Martin · 38 min · Episode 579AI-driven automation with no-code tools is empowering business teams to move fast—but at what risk? In this episode, Walter Haydock, founder of StackAware, joins Sean Martin to…
- Beyond the Title: What It Really Takes to Be a CISO Today — Insights Following A Conversation with Solarwinds CISO, Tim Brown | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 8 min · Episode 578Being a strong CISO requires more than technical expertise — it takes context, perspective, and trusted relationships built long before a crisis hits. This article explores what…
- First CISO Charged by SEC: Tim Brown on Trust, Context, and Leading Through Crisis - Interview with Tim Brown | AISA CyberCon Melbourne 2025 Coverage | On Location with Sean Martin and Marco Ciappelli · 27 min · Episode 577Tim Brown's job changed overnight. December 11th, he was the CISO at SolarWinds managing security operations. December 12th, he was leading the response to one of the most…
- The Once and Future Rules of Cybersecurity | A Black Hat SecTor 2025 Conversation with HD Moore | On Location Coverage with Sean Martin and Marco Ciappelli · 24 min · Episode 576Security pioneer HD Moore joins ITSPmagazine at SecTor 2025 to break down which cybersecurity “rules” still matter—and which are dangerously outdated. From password policies to…
- When the Coders Don’t Code: What Happens When AI Coding Tools Go Dark? | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 10 min · Episode 575What happens when systems are built by AI coding tools—but no one fully understands how they work, or what to do when something breaks? This article explores the growing reliance…
- The Hidden Cost of Too Many Cybersecurity Tools (Most CISOs Get This Wrong) | A Conversation with Pieter VanIperen | Redefining CyberSecurity with Sean Martin · 52 min · Episode 574Pieter VanIperen, Chief Information Security and Technology Officer at AlphaSense, shares what it really means to simplify security by focusing on context, value, and…
- SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9 · 3 min · Episode 573SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer…
