Safe Mode Podcast

Safe Mode Podcast
  • 4,9 (8)
  • NOTÍCIAS
  • SEMANAL

Podcast by Safe Mode Podcast

  1. What's it like to go through the FedRAMP process?

    HÁ 5 DIAS

    What's it like to go through the FedRAMP process?

    This week on Safe Mode, we talk with Scott Montgomery, VP of Federal at Island, about the realities of achieving FedRAMP authorization. Scott demystifies the often daunting FedRAMP process, shares lessons learned from real-world experience, and reveals the biggest pitfalls organizations face. From data sensitivity requirements to the growing importance of automation in security compliance, this episode is essential listening for anyone navigating federal cloud standards or considering a move into the government tech space. In our reporter chat, Greg talks with Matt Kapko about a whirlwind week around Clop's targeting of Oracle.

    31min
  2. Andesite's Brian Carbaugh on how lessons from the CIA can power an AI-powered SOC

    2 DE OUT.

    Andesite's Brian Carbaugh on how lessons from the CIA can power an AI-powered SOC

    In this week's episode of Safe Mode, Greg Otto talks with Brian Carbaugh, CEO of Andesite, who reveals how lessons learned in the CIA are transforming Andesite’s unique, human-first approach to AI-driven cybersecurity. Carbaugh shares behind-the-scenes stories about building a “bionic SOC,” where cutting-edge artificial intelligence works seamlessly with analysts, amplifying their skills, streamlining investigations, and making security operations not just more efficient but genuinely exciting. In our reporter chat, Greg and Matt Kapko dive into a week's worth of critical vulnerabilities and government emergency directives, and how enterprises have responded in kind.

    27min
  3. Censys’ Silas Cutler on how adversaries chain vulns together for big attacks

    25 DE SET.

    Censys’ Silas Cutler on how adversaries chain vulns together for big attacks

    In this episode of Safe Mode, Greg talks with Silas Cutler, principal security researcher at Census, how ransomware attackers chain together overlooked vulnerabilities, especially in platforms like SharePoint, and why patch fatigue leaves defenders at risk. Silas breaks down advanced ways criminals maintain access even after patches, and explains what makes government and critical sectors prime targets. We discuss the real challenges of incident response, threat intelligence, and preventing long-term damage—especially in complex cloud and hybrid environments. In our reporter chat, Greg talks with Tim Starks about two marquee stories this week: a look at how the government information sharing law renewal has sputtered, and a new China-linked espionage campaign has researchers sounding the alarms. https://cyberscoop.com/cyber-threat-information-law-hurtles-toward-expiration-with-poor-prospects-for-renewal/

    27min
  4. Veracode’s Chris Wysopal on the security issues with AI code development

    18 DE SET.

    Veracode’s Chris Wysopal on the security issues with AI code development

    On this episode of Safe Mode, we’re joined by a renowned cybersecurity expert and CyberScoop 50 winner, Veracode co-founder and CTO Chris Wysopal, to discuss the fast-evolving landscape of AI-assisted software development. Chris shares insights from a recent study examining over 100 large language models and their tendency to introduce security vulnerabilities in generated code. The conversation delves into why a staggering 45% of AI-generated code samples contained vulnerabilities and why improvements in AI reasoning haven’t translated to more secure outputs. Chris emphasizes the critical need for enhanced security testing and better quality training data, discussing both the challenges and opportunities ahead as AI adoption accelerates. Tune in for a thoughtful exploration of the intersection between AI, secure coding, and what the future holds for developers and enterprises alike. In our reporter chat, Greg talks with Derek Johnson about work that OpenAI and Anthropic have done with the U.S. and U.K. government to secure their models.

    32min
  5. Phosphorus’ Sonu Shankar on IoT Vulnerabilities and Salt Typhoon Tactics

    11 DE SET.

    Phosphorus’ Sonu Shankar on IoT Vulnerabilities and Salt Typhoon Tactics

    In this episode, Greg Otto talks with Sonu Shankar, President at Phosphorus, to discuss the unique security challenges facing today’s rapidly expanding Internet of Things landscape, where traditional endpoint protections are ineffective. The episode explores how everyday devices with default passwords and outdated firmware open organizations up to significant risk. Shankar highlights the tactics of groups like Salt Typhoon, who exploit these weak spots to infiltrate and persist within networks. The conversation underscores the pressing need for deeper asset inventory and active discovery in critical environments. In our reporter chat, Greg talks with Matt Kapko about a supply-chain attack on npm that turned out to be pretty close to a false alarm.

    24min
  6. Halcyon’s Cynthia Kaiser on the state of ransomware

    4 DE SET.

    Halcyon’s Cynthia Kaiser on the state of ransomware

    In this episode, Greg Otto talks with Cynthia Kaiser Sr. Vice President of Halcyon’s Ransomware Research Center, discussing the latest ransomware operations and exploring the latest shifts in the cyber threat landscape. Greg and Cynthia discuss the rise of new groups like DragonForce, SafePay, and Fog, and the decline of once-dominant names such as LockBit and BlackBasta. They also discuss unique tactics and tools employed by emerging players, discuss the impact of law enforcement and internal group dynamics, and examine why certain industries are now prime targets. Learn how attackers choose their victims, the early warning signs organizations should watch for, and the most frequent pitfalls in ransomware defense. In our reporter chat, Greg talks with Matt Kapko about the deep drive into an accused ransomware affiliate that has been given a long leash by law enforcement while he awaits trial.

    29min
  7. What happens if CISA 2015 lapses?

    28 DE AGO.

    What happens if CISA 2015 lapses?

    In this episode of Safe Mode, host Greg Otto talks with Tim Starks about what would happen if the nation’s information sharing law – known as CISA 2015 – expires at the end of September. In our interview segment, Greg talks with Kevin Hanes, CEO of Reveal Security, exploring the critical and often overlooked world of machine identity security. From the blind spots in privileged access management that focus too heavily on human users while machines hold increasingly sensitive roles, to the operational challenges of securing identities in cloud-native, containerized, and AI-powered environments, Kevin shares practical insights on scaling visibility and maintaining accountability across fragmented teams.

    25min

  8. 21 DE AGO.

    Dave DeWalt on how to get a board to buy in on cybersecurity

    In this episode of Safe Mode, host Greg Otto talks with Dave DeWalt, founder and CEO of NightDragon, about advising boards and portfolio companies on making cyber a first-order business issue, not an afterthought. We’ll explore how emerging technologies and remote work reshape risk profiles, when a CISO belongs in the board conversation—or even in a board seat—and what training and metrics actually move the needle across non-technical teams. We’ll also unpack how to motivate leaders outside of IT to own cyber risk, the structures that drive enterprise-wide accountability, and what information boards should demand to ensure the right risks are being prioritized. From calibrating cyber risk appetite in shifting threat environments to staying ahead of evolving regulations across sectors like power and aviation, we’ll get practical on governance and disclosure. In our reporter chat, Greg talks with Derek Johnson about the president’s possible push to end mail-in voting, and why the efforts are dead on arrival.

    31min
Ver tudo (107)

Classificações e avaliações

4,9
de 5
8 avaliações

Sobre

Podcast by Safe Mode Podcast

Informações

  • Criado por
    Safe Mode Podcast
  • Anos de atividade
    2023 - 2025
  • Episódios
    107
  • Classificação
    Livre
  • Copyright
    © All rights reserved
  • Site do podcast
    Safe Mode Podcast

Você também pode gostar de