What Defenders Are Still Getting Wrong About Identity - #208
Reimagining Cyber - real world perspectives on cybersecurityShow Notes
For years, cybersecurity assumed attackers had to break into organizations. Today, they increasingly just log in. Valid credentials, stolen browser sessions, OAuth tokens, help desk social engineering,and underground marketplaces have fundamentally changed how attacks unfold. So why are organizations still thinking about identity the same way they did five years ago? In this episode, Tyler Moffitt discusses the biggest misconceptions around identity security, why trust has become a commodity,...
More from Reimagining Cyber - real world perspectives on cybersecurity
What if the best way to improve cybersecurity awareness is to stop punishing people for getting it wrong? In this episode of Reimagining Cyber, Keelin Conant revisits a conversation with Craig Taylor, co-founder CEO of CyberHoot, who argues that fear and shame don’t change behaviour — positive reinforcement does. Craig explains why traditional phishing simulations can give a misleading picture of risk, how organisations can better measure employee progress, and why teaching people to recogn...
Think your security tools are keeping you safe? Think again. Ryan Basden, Head of Offensive Security at Xora, has spent more than a decade thinking like an attacker. And what he finds inside organisations often has little to do with the tools they’ve bought — and everything to do with the gaps they’ve overlooked. In this episode of Reimagining Cyber, Ryan shares what red-team exercises reveal about real-world security, from supposedly segmented networks and default passwords to exposed develo...
What really goes through a hacker’s mind? Samy Kamkar, creator of the infamous MySpace worm, takes us inside the hacker mindset — from curiosity and experimentation to the human weaknesses that still leave businesses exposed. We explore how hackers see technology, why people remain the easiest way in, how AI is changing the game, and what defenders can learn by thinking like an attacker. As featured on Million Podcasts' Best 100 Cybersecurity Podcasts Top 50 Chief Information S...
AI is changing application security at breakneck speed — and it’s not just about generating code faster. In this episode, Keelin Conant's guest is Diogo Rispoli, an application security leader, architect, and longtime industry expert. They explore what happens when AI agents start writing, testing and fixing code, and even talking to each other. The episode also digs into rogue agents, exploitability, AI-powered testing, the limits of auto-remediation, and why security teams need to look beyo...
In this episode of Reimagining Cyber, Keelin Conant welcomes Kurtis Minder, author of Cyber Recon, former founder of GroupSense, and one of the industry's most experienced ransomware negotiators. Together they discuss the evolution of ransomware, what organizations get wrong about cyber risk, how AI is changing the threat landscape, and the critical actions leaders can take today to protect their businesses. Plus, Kurtis shares insights from years spent communicating directly with the people ...