Zero Signal

Conor Sherman
  • 5.0 (4)
  • Business
  • Updated Weekly

Zero Signal is a podcast for CISOs and senior security leaders who are expected to have answers about AI risk before the industry has standards. We go after the strategic questions that don't yet have clean answers — the ones your board is asking and the industry is still debating. Each episode is an honest conversation with someone navigating that pressure — not with perfect answers but with principles, frameworks, and lived experience. We host guests who've had to make real calls under uncertainty and are willing to talk about what worked, what didn't, and what they're still figuring out

  1. 1d ago

    Cheryl Martin: The CISO Who Says No Is "Toast"

    Welcome back to Zero Signal! In this episode, Conor Sherman and Stuart Mitchell sit down with Cheryl Martin, cybersecurity executive at C86 and former Vice President and Head of Cybersecurity at Capgemini in the UK, where she led over 350 cyber specialists across regulated sectors. Cheryl is a recognized voice on cyber leadership and was named in the 2026 most inspiring women in cyber awards. In this deep dive into modern risk operating models, Cheryl reveals how security leaders can safely navigate massive technological transformation without becoming the corporate bottleneck. Drawing from her extensive background—including her time as the global head of IT risk at HSBC managing 45 distinct global business lines—she unpacks her famous "yellow duck" analogy for scaling risk management, breaking down how to build an approval framework that turns shadow adoption into governed enablement. Conor, Stu, and Cheryl also challenge the outdated stereotype of the CISO who simply says no, tracing the critical shift toward becoming a business evangelist who establishes proactive guardrails. The conversation covers the rise of unstructured "cottage industries" of shadow AI among employees, the threat landscape shifts bringing exploitation windows down to mere seconds, and why executive humility—including the power of black box thinking and reverse mentoring from younger engineers—is a CISO's ultimate weapon for surviving the ongoing AI revolution. C86 Cybersecurity Executive Insights: https://c86.com/cyber-executive-intelligence International Cyber Expo Leadership Panel: https://www.internationalcyberexpo.com/cyber-leadership-technical-environments NIST Artificial Intelligence Risk Management Framework: https://www.nist.gov/itl/ai-risk-management-framework UK Cyber Resiliency Bill Overview: https://www.gov.uk/government/collections/cyber-resiliency-digital-working-legislation Cloud Security Alliance Open-Source Playbooks: https://cloudsecurityalliance.org/research/artifacts/open-source-frameworks-mythos-response Cheryl Martin is a cybersecurity executive at C86 and a highly accomplished cyber transformation leader. She previously served as the Vice President and Head of Cybersecurity at Capgemini in the UK, managing a team of over 350 cyber specialists across heavily regulated sectors. Prior to that, Cheryl was the global head of IT risk at HSBC, directing risk postures across 45 global business entities. She is a recurring speaker at the International Cyber Expo and a recipient of the 2026 Most Inspiring Women in Cyber Award. 01:11 Navigating AI Transformation Without Becoming the Bottleneck 02:48 The Yellow Duck Analogy: Scaling Risk Postures Across 45 Global Businesses 05:47 The Threat of Shadow AI and Employee "Cottage Industries" 09:53 Flipping the Model: From "CISO Says No" to Governed Guardrails 11:11 The Sysdig Vibe Coding Stat: Why You Can't Put Brakes on Devs 17:39 The 5 Major AI Risk Vectors: Data, Models, Security, Supply Chain, and Regulation 21:48 Exploits in 27 Seconds: Tracking Mean Time to Adapt Over Mean Time to Detect 23:15 The Chameleon CISO: Shifting From Infrastructure Defense to Thought Leadership 26:43 Black Box Thinking: Adopting Aviation Industry Models for Cybersecurity Near Misses 28:31 Rising Personal Liability Under NIST2, DORA, and the SEC 31:43 Balancing Soft Skills and Team Burnout Against Complex AI Trajectories 42:41 The Power of Reverse Mentoring: Learning AI Red Teaming From Your Own Engineers Hampton North is the premier US based cybersecurity search firm. Start building your security team with Hampton North: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal

    47 min

  2. Jun 5

    Ayoub Fandi: Why Your Audit Program is Lying to You

    Welcome back to Zero Signal! In this episode, Conor Sherman and Stuart Mitchell sit down with Ayoub Fandi, the creator of the GRC Engineering Movement and author of the GRC Engineering Newsletter, read by thousands of security and compliance practitioners. Ayoub drops a truth bomb on the industry, exposing how typical SOC 2 audits rely on antiquated methodologies that sample a measly 25 pull requests out of thousands, slapping a 100% coverage certification on what amounts to 0.07% of actual infrastructure. He breaks down how this "abusal of trust signals" leaves organizations blind to systemic risk at a time when automated threat actors are moving faster than ever. The conversation dives deep into why 86% of GRC teams are still stuck relying on spreadsheets, how to weaponize compliance rules to win security infrastructure battles against development teams, and why the next generation of GRC platforms won't be SaaS tools but foundational AI models with real-time data wrappers. Finally, Ayoub outlines the future of Third-Party Risk Management (TPRM) through his open-source project, Corsair, moving the industry away from static PDFs and toward cryptographic, automated continuous assurance. The GRC Engineering Newsletter: https://grcengineering.com/newsletter Corsair Open-Source Trust Infrastructure: https://github.com/grcengineering/corsair Ayoub's State of the GRC 2026 Report: https://grcengineering.com/state-of-grc-2026/ Death By Claude Tracker: https://deathbyclaude.com/ Ayoub Fandi is the founder and principal pioneer of the GRC Engineering Movement. A former leading GRC engineer at GitLab, where he built custom cloud compliance infrastructure from scratch, Ayoub specializes in treating compliance and risk modeling as data engineering problems. He is an international speaker who recently presented his findings at RSA Conference 2026. 01:08 Transforming GRC from an Audit Prep Machine into an Engineering Program 01:54 The 25 PR Fallacy: Why Your SOC 2 Audit is Lying to You 02:23 Financial Auditing Legacies: Copy-Pasting Methods from the Enron Era 04:14 The Abuse of Trust Signals in Third-Party Risk Management 06:33 CISOs as Cynics: GRC Relegated to a Sales Enablement Tool 08:32 Compliance is Latin for Cash: Procurement vs. Real Security 09:16 CYA Mode: Why Standard Questionnaires Provide Zero Vendor Assurance 11:00 Building Corsair: Leveraging Open Protocols for Continuous Assurance Data 13:40 The Critical Sweet Spot: Auditing High-Risk, Low-Headcount AI Vendors 16:13 Replacing the GRC Acronym with a Trust and Assurance Framework 20:05 Deterministic Checkboxes vs. Probabilistic Risk Postures 21:08 Turning Compliance into Real-Time Observability Engine Metrics 22:56 The 2026 Survey: Why 86% of Security Programs Are Trapped in Excel 24:32 Relational Spreadsheets vs. Unified Graph Data Models 27:51 Excel Pivot Tables vs. Modern Prompt Engineering Roles 31:00 Node Hallucinations: What Happens When AI Drafts and Reviews Audit PDFs 35:28 The Notion and Cloudcore Shift: The Next GRC Platform is a Foundation Model 37:10 Leveraging Model Context Protocol (MCP) to Connect Direct Sources of Truth 41:42 The Lagging Indicator: Why Fortune 500s are Hiring Technical GRC Engineers 45:44 Parkinson’s Law: How Audit Calendars Expand to Destroy Security Innovation 47:34 Weaponizing Standards: Using Compliance to Win Hardening Battles with Devs 49:15 Control Planes and Telemetry: Who Will Own Future Assurance Programs? Hampton North is the premier US based cybersecurity search firm. Start building your security team with Hampton North: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Continued Reading & Resources:About the Guest:Key Topics:Meet our Sponsors:

    53 min

  3. May 29

    Loris Degioanni: Headless Security and the Coding CISO

    Welcome back to Zero Signal! In this episode, Conor Sherman and Stuart Mitchell are joined by cybersecurity royalty: Loris Degioanni, the co-founder of Wireshark, founder and CTO of Sysdig, and the creator of Falco, the open-source standard for cloud-native runtime threat detection. Loris steps up to break down a revolutionary new architectural paradigm: Headless Cloud Security. Following the release of Sysdig's brand new model for agentic defense, Loris explains why the era of security teams staring at dashboards and clicking through complex UIs is dead. With exploit windows rapidly collapsing down to mere minutes, the interface must entirely disappear into the environment where coding agents live. In this conversation, Conor, Stu, and Loris discuss the shift toward flattening security organizations and the rise of the "Coding CISO". They challenge the failing legacy strategy of baking checklists into standalone agents, arguing instead for injecting security and hard-coded expertise directly into the substrate of development tools via open-source communities, MCPs, and plugins. Sysdig Cloud Native Security and Usage Report (2026): https://sysdig.com/resources/papers/2026-cloud-native-security-and-usage-report/ Falco Open Source Project: https://falco.org/ Wireshark Foundation: https://www.wireshark.org/ Loris Degioanni’s Headless Security Founder's Letter: https://sysdig.com/blog/headless-security/ Loris Degioanni is a foundational pillar of modern computer networking and cloud security. He is the co-founder of Wireshark, the world's most widely used network protocol analyzer, and the founder and CTO of Sysdig. An open-source pioneer, Loris also created Falco, the CNCF graduated standard for cloud-native runtime threat detection. He holds a PhD in Computer Engineering from Politecnico di Torino and actively contributes to re-architecting cybersecurity for the agentic era. 01:17 Rebuilding the Operating Model Around Coding Agents 01:54 Defining Headless Security: Moving Beyond Dashboards 03:34 The Disappearing UI: Consuming Software Inside the Agent 06:53 Prioritizing Outcomes Over Problems: The Death of Point-and-Click 08:18 Shifting Beyond Traditional Vulnerability Prioritization 09:55 Tech Layoffs and Flattening Organizations: Everyone Becomes a Contributor 11:31 Rise of the "Coding CISO": Why Executives Must Get Hands-On 12:38 Building GRC and Security Tooling in Hours with Claude Code 13:46 Blending Architectural Vision with Agent Management Skills 15:21 The Defensive Paradox: Why AI Will Increase Cyber Headcount 18:04 The Three Technical Pillars of 2026 Tech Stacks 20:32 Rediscovering the "Love of the Game" Through Prompt-Driven Creativity 24:12 The Timeline of Failing Strategies: Trying to Bake Security Into the Agent 25:34 The Evolution of Substrate Security: From AutoGPT to 4.6 Models 28:44 The Friction of Tool Fragmentation vs. Centralized Ecosystems 31:37 Private Enterprise LLMs: The Safe Way to Handle Token Costs 34:11 Democratizing Software Development: The Marginal Cost of Code Hits Zero 37:40 Overcoming the Enterprise Fear of Open-Source Foundation Integration 40:20 Defining "Skills" in the Headless Architecture (Integrations, Skills, Facilitation) 41:38 Encoding True Engineering Expertise into AI Plugins Hampton North is the premier US based cybersecurity search firm. Start building your security team with Hampton North: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Continued Reading & Resources:About the Guest:Key Topics:Meet our Sponsors:

    50 min

  4. May 22

    Sounil Yu: How to Solve Problems & Manage Predicaments

    Welcome back to Zero Signal! In this solo episode, Conor Sherman sits down with Sounil Yu—Cybersecurity Hall of Fame inductee, SANS Lifetime Achievement Award recipient, and Chief AI Safety Officer at Knostic. Sounil delivers a masterclass on navigating shifting security landscapes. He breaks down the difference between a "problem" (technologically fixable) and a "predicament" (a systemic risk to manage), such as collapsing exploitation timeframes following the release of "Mythos". Conor and Sounil also unpack why traditional TPRM questionnaires fail, how AI coding agents help teams replace "sick legacy pets" with "cattle" architectures, the Zero Trust renaissance, and why 10x-ing individual cognition will trigger organizational chaos without proper structural reorgs. Continued Reading & Resources: Knostic AI Infrastructure Security: https://knostic.ai The Cyber Defense Matrix Hub: https://cyberdefensematrix.com/ Cyber Defense Matrix Book Guide: https://cyberdefensematrix.com/book/ Thinking, Fast and Slow by Daniel Kahneman: https://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374533555 The Cynefin Framework overview via Dave Snowden: https://thecynefin.co/about-us/about-cynefin-framework/ Sounil’s Piece on Predicaments (2022): https://threatpost.com/security-problems-vs-predicaments/179267/ The AI Vulnerability Storm Whitepaper: https://labs.cloudsecurityalliance.org/research/ai-vulnerability-storm-mythos-ready-security-program/ Unprompted and Seasides Conferences: https://unprompted.co/ and https://seasides.io/ Crab Trap Open-Source Project by Brex: https://github.com/brex/crabtrap Key Topics: 01:13 Meet Sounil Yu: Hall of Fame Thinker & Chief AI Safety Officer 03:54 Breaking Down the Cyber Defense Matrix: A 10-Year Retrospective 04:32 Applying the Cynefin Model: Chaotic, Complex, Complicated, Clear 05:50 The Ultimate Advice for Chaos: Don't Stand Still, Move 08:15 Problems vs. Predicaments: The Crucial Boardroom Distinction 09:21 Why Third-Party Risk Management (TPRM) Questionnaires Solve Nothing 12:54 Playing Bingo vs. Playing Blackout: Managing Cost Calculus 14:23 Facing the AI Vulnerability Tsunami: When Patches Fail 16:17 Legacy Systems as Sick Pets: The Case for Code Refactoring Agents 17:58 Moving from CIA to DIE: Distributed, Immutable, and Ephemeral 20:38 The Zero Trust Renaissance: Assembling the Bricks You Already Bought 23:08 The Three Little Pigs of AI Architecture: Building a Resilient Straw House 25:00 Mythos vs. Scaffolding: Exponential Trajectory in Vulnerability Disclosures 30:41 Inbound vs. Outbound Controls: The Criticality of Egress Filtering 33:24 Open Source Egress: Leveraging Tools Like Crab Trap 35:07 The Strategy of Allergic Reactions: Calibrating for Fast Environments 39:45 AI Convergence: What Happens When Everyone Becomes a Developer? 41:40 Individual Contributors as Task Masters: Assigning Agentic Workloads 42:52 System 1 vs. System 2 Thinking in Cybersecurity Risk 44:11 The Organizational Efficiency Mirage: Why You Haven't Seen the AI Payoff 46:12 Reorg Patterns: Borrowing Scaled Leadership Architecture from the Military Meet our Sponsors: Hampton North: Premier US-based cybersecurity search firm. Build your security team: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig: The leader in AI-powered real-time cloud defense. Stop watching, start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal

    50 min

  5. May 15

    Matt Peters on the AI “Captain America Serum” and Rebuilding the Broken Enterprise Foundation

    Welcome back to Zero Signal! In this special solo-host episode, Conor Sherman sits down with Matt Peters, co-founder and CEO of Fixify. With a powerhouse pedigree as the former Chief Product Officer at Expel and VP of Worldwide Operations at Mandiant during the height of the APT era, Matt brings a unique perspective on the intersection of cybersecurity heritage and IT transformation. Matt breaks down the reality behind the "AI productivity" hype, unpacking Fixify’s 2026 Benchmark Report. While AI allows organizations to resolve tickets 16 times faster, first response times remain identical—highlighting a critical gap in human expectations versus machine efficiency. They discuss why 95% of GenAI pilots fail not because of the technology, but due to a "poverty of vision" and misaligned organizational incentives. In this conversation, Conor and Matt explore how AI acts as a "Captain America serum" for businesses, the collapse of the zero-day patching clock to under 24 hours, and why the next era of leadership requires "systems thinking" over simple domain expertise. Continued Reading: The Enterprise AI Playbook (Stanford Digital Economy Lab) Fixify — 2026 IT Help Desk Benchmark Report Fixify 2026 Benchmark Report  Sysdig 2025 Cloud-Native Security and Usage Report Sysdig 555 Benchmark for Cloud Detection and Response  Sysdig Threat Research: LLM-assisted cloud attack MIT NANDA: The GenAI Divide: State of AI in Business 2025 Prophet Security  Prediction Machines by Agrawal, Gans, and Goldfarb The Myths of Innovation by Scott Berkun About the Guest: Matt Peters is the co-founder and CEO of Fixify, an AI-powered IT platform. Before Fixify, he served as the Chief Product Officer at Expel, a leading MDR provider, and spent years at Mandiant managing worldwide operations during the most significant state-sponsored cyberattacks in history. Matt is a recognized expert in incident response, product strategy, and leveraging AI to solve complex organizational friction.⁠ Matt Peters LinkedinKey Topics: 01:14 Why AI is a "Captain America Serum" for Organizations 02:13 The 16x Resolution Speed Gap: Why First Response Times Haven't Moved 04:20 Trimming the "Slop": How AI Handles the Tier 2 Long Tail 06:58 The Average Enterprise Has 150+ Apps (and IT Doesn't Know Half of Them) 09:00 Why 95% of GenAI Pilots Fail: Lessons from MIT & Stanford 12:02 Solutions vs. Problems: The Importance of Problem Definition 15:03 The Productivity Dip: Why You Shouldn't Fire Your Staff the Day AI Arrives 16:25 Shipping Containers & Unit Economics: Reworking the Whole Business Around AI 19:28 From "Get It Right" to "Generate and Judge": The New Dev Cycle 21:39 The "Infinite People" Mental Model: Reimagining Constraints 26:21 The CMDB Myth: Building AI on Brittle Technology Foundations 32:17 Threat Actors Using LLMs to Own Cloud Accounts in Under 10 Minutes 35:28 The "What Now?" Problem in Incident Response 38:54 The Collapse of the Patching Clock: From Two Years to One Day 42:48 Decision Points: Who Makes the Call When the CEO is Asleep? 47:23 Intent-Based Leadership: "Turn the Ship Around" for AI Agents 51:08 The Three Traits of Durable Leaders: Systems Thinking, Curiosity, and Clarity Meet our Sponsors: Hampton North is the premier US based cybersecurity search firm. Start building your security team with Hampton North: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal

    54 min

  6. May 8

    Matt Stamper: The 4 Classic Failures AI Just Made Existential

    Welcome back to Zero Signal! In this episode, Conor and Stuart are joined by Matt Stamper, co-author of the CISO Desk Reference Guide and chair of the FBI InfraGard CISO Cross-Sectional Council. With experience spanning Gartner research and national critical infrastructure, Matt dives into the "four persistent failures" that AI is rapidly turning into existential risks: identity governance, data governance, third-party risk, and vulnerability management. Matt explains why the "Hustle Hard" era of manual triage is fundamentally broken. As attack timescales collapse from weeks to seconds—evidenced by AI-driven compromises occurring in under eight minutes—security leaders must shift from a "secure-first" mindset to one of radical resiliency and "continuous zero-day" preparedness. In this conversation, Conor, Stuart, and Matt discuss the necessity of "autopilot" for security operations, the legal and geopolitical fallout of "Glasswing" and "Mythos" level capabilities, and why boards must move past the "single slide" and lean into the technical details of enterprise risk. Continued Reading: CISO Desk Reference Guide: https://www.cisodesk.com/ FBI InfraGard: https://www.infragard.org/ Cloud Security Alliance (CSA) Analysis on Glasswing/Mythos: https://cloudsecurityalliance.org/ VulnCheck State of Exploitation 2026: https://www.vulncheck.com/blog/state-of-exploitation-2026  Securing AI agents: the defining cybersecurity challenge of 2026: https://www.bvp.com/atlas/securing-ai-agents-the-defining-cybersecurity-challenge-of-2026  The State of AI Cybersecurity 2026: Unveiling insights from over 1,500 security leaders: https://www.darktrace.com/blog/the-state-of-ai-cybersecurity-2026  About the Guest: Matt Stamper is a globally recognized security leader, executive advisor, and the co-author of the CISO Desk Reference Guide. A former Gartner Research Director covering incident response architecture, Matt currently serves as the chair of the FBI InfraGard CISO Cross-Sector Council, where he represents nearly a thousand CISOs across critical infrastructure sectors. His work focuses on transforming technical security into business-aligned risk management and building resilient enterprise architectures. Key Topics: 01:11 Meet Matt Stamper: The Voice of Critical Infrastructure 01:50 The Four Persistent Failures AI Just Accelerated 03:26 The Collapse of the Zero-Day Clock: From Weeks to Seconds 04:31 Why Security is a "Whole of Enterprise" Problem 05:41 Customized Daisy-Chained Exploits (The Glasswing Effect) 08:24 Leaning In: How Security Leaders Become the Hero 11:47 Why 15 Minutes for Security in the Boardroom is "Borderline Negligence" 13:01 The Business Impact Analysis (BIA) as a Risk Vehicle 15:52 Incident Response in the Age of Agents 17:15 Hands-Off Keyboard: Trusting the System to Counter Swarms 20:41 The Advantage Shifts: Why Attackers Aren't Waiting for Budget Sign-Off 22:52 Crossing the "Four-Minute Mile" of AI Capabilities 25:10 A Manhattan Project Moment for Critical Infrastructure 31:54 Resilience vs. Protection: Designing for Failure 38:34 Geopolitical, Climatic, and Technical Risk Concurrency 42:05 The Strategic Move to Open Source for Transparency 46:00 The Autopilot Mindset: Continuous Preparedness 50:24 Why the Airline Safety Model is the Future of Cyber Metrics Meet our Sponsors: Hampton North is the premier US based cybersecurity search firm.Start building your security team with Hampton North: https://hamptonnorth.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending: https://www.sysdig.com/?utm_source=website&utm_medium=podcast&utm_campaign=aware_global_swsd_all&utm_content=zero-signal

    53 min
  7. “The Hustle Hard Era is Over”: Crystal Morin on How to Move Beyond the Human Ceiling

    May 1

    “The Hustle Hard Era is Over”: Crystal Morin on How to Move Beyond the Human Ceiling

    Welcome back to Zero Signal! On this episode, Crystal Morin, Chief Cybersecurity Strategist at Sysdig and author of the Sysdig Cloud Native Security and Usage Reports, discusses findings showing vulnerability management has hit a “human ceiling,” with about 5.5% of workloads still running critical/high vulnerabilities year over year despite better tooling.  Morin explains why backlog volume and faster exploitation push organizations toward automation and agentic AI, highlights a major drop in exploitable vulnerabilities in production (to under 0.2%), and notes reduced image bloat (unused packages under 1%) as both cost and risk reduction.  In this conversation, Crystal, Conor, and Stu discuss how threat actors use AI to exploit CVEs within hours, identity trends and new messy identity governance concerns, and growing autonomous response actions like a 140% increase in “kill process.” They also discuss LLM jacking, regional AI package adoption led by EMEA, and McKinsey’s takers/shapers/makers framework. Read the 2026 Sysdig Cloud Native Security and Usage Report here. Continued Reading: The NVD Just Threw In The Towel - Now What? NIST Updates NVD Operations to Address Record CVE Growth About the Guest: Crystal Morin is a former Air Force Intelligence analyst and current Senior Cybersecurity Strategist at SYSDIG. Morin has authored four of the nine annual SYSDIG Cloud Native Security and Usage Reports, which serve as the industry's primary source for real customer data on Cloud Native Security trends. These influential reports are published on sysdig.com and cited across Dark Reading, Security magazine, and SANS webinars. Key Topics: 01:37 Hustle Hard Era Ends 05:43 Case for Agentic Remediation 08:09 Image Bloat Drops 11:10 Threat Actors Move Faster 14:40 Humans vs Machine Identities 19:32 Who Owns Identity Risk 22:09 Machine Identity Risk Stats 23:48 Breach Math Explained 24:25 Tokens and Agents 26:02 Europe Leads AI Packages 28:20 Compliance Drives Confidence 30:52 Makers Takers Shapers 33:02 AI Adoption by Sector 36:01 Rise of Agentic Defense 40:20 LLM Jacking and Costs 45:09 Autonomous Response Ladder Meet our Sponsors: Hampton North is the premier US based cybersecurity search firm. Start building your security team with Hampton North. Sysdig is the leader in AI-powered real-time cloud defense; stop watching and start defending.

    51 min
  8. The Future of Threat Detection is here -ft Founders of Embed Security

    Mar 13

    The Future of Threat Detection is here -ft Founders of Embed Security

    On the Zero Signal Podcast, the hosts preview RSA micro-events and then interview Embed Security co-founders Seth Summersett (CEO) and Jeffrey Johns (CTO), who launched the company in 2024 after careers at NSA, FireEye/Mandiant, Google, Meta, and others. They discuss the SOC’s operational crisis—thousands of daily alerts, manual triage, burnout, and uninvestigated incidents—and how Embed aims to reduce investigation time and alert noise using agentic AI with human oversight, transparency, and a “chain of evidence” that shows its reasoning. They argue the analyst role will shift toward validating AI-driven investigations, that organizational context and feedback are key, and that investigation, detection engineering, and threat hunting will converge. They cite customer results such as ~90% reduction in false positives and ~155 hours saved per month, predict major disruption to MDR/MSP economics, and emphasize domain-specific models and trust-building metrics. Sponsors Thank you to our sponsors who make this show possible. → https://hamptonnorth.com/. Hampton North is the premium US-based cybersecurity search firm. → https://www.sysdig.com/. Leader in real-time AI-powered cloud security. 00:00 Podcast Welcome00:41 RSA Micro Events01:54 AI SOC Alert Crisis02:47 Meet Embed Security06:17 Why Tackle Investigation07:50 State of Detection Today10:43 Future SOC Analyst Role14:35 Skills That Stand Out19:06 Human in the Loop22:43 Building Modern Detections24:58 Convergence Ahead26:26 AI Arms Race Reality27:38 Defenders Gain New Tools28:33 False Positives Economics30:56 Proactive Analyst Work31:51 MDR Market Disruption35:03 Build Versus Buy AI36:17 Domain Specific Models41:46 Trust And Transparency46:19 Measuring Trust Metrics49:19 Customer Win Story50:51 Lightning Round Threats53:20 Closing Thanks

    49 min
See All (37)

5
out of 5
4 Ratings

About

Zero Signal is a podcast for CISOs and senior security leaders who are expected to have answers about AI risk before the industry has standards. We go after the strategic questions that don't yet have clean answers — the ones your board is asking and the industry is still debating. Each episode is an honest conversation with someone navigating that pressure — not with perfect answers but with principles, frameworks, and lived experience. We host guests who've had to make real calls under uncertainty and are willing to talk about what worked, what didn't, and what they're still figuring out

Information

  • Creator
    Conor Sherman
  • Years Active
    2025 - 2026
  • Episodes
    37
  • Rating
    Clean
  • Copyright
    © Conor Sherman
  • Show Website
    Zero Signal