Show Notes
Itamar Apelblat was called back to reserve duty with Unit 8200 and spent hours waiting on access approvals. Then he remembered a service account his old team had set up seven years earlier. The password was a funny one, which is why he still knew it. He typed it in and became an admin on one of the most secure networks in the world. Nobody had changed that password. They hadn't forgotten about it. They were scared to touch it, because no one knew what would break. Now put that same fear in ...
More from Resilient Cyber
Matt Hartley, co-founder and Chief Product Officer of BreachRx, on why the once-a-year tabletop no longer matches the incidents organizations will actually face, and how AI-accelerated micro tabletops let teams train like they fight. In this episode I sit down with Matt Hartley, co-founder and Chief Product Officer of BreachRx. Matt has spent 28 years in cybersecurity. He started in government offensive security, then moved to the cyber threat intel startup iSight Partners, where he ran prod...
James Berthoty of Latio on why the endpoint is now the center of AI security, and why most of the real agent risk traces back to blind spots we already had. I sit down with James Berthoty, who started Latio as an engineer frustrated by how hard it was to figure out what security tools actually did. That turned into a practitioner-focused, buyer-oriented analyst firm. We dig into Latio's second AI security market report. Last year the story was browsers and proxies. This year it's the endpoin...
Zack Korman on why the AI safety debate has been captured by an extinction narrative, and why the incident everyone is calling a watershed moment looks a lot more like a preventable security failure. In this episode I sit down with Zack Korman, co-founder of Embroidery, where he uses AI to monitor AI agents, and former CTO of the cybersecurity company Pistachio. I first came across Zack on X during the controversy over fake SOC 2 reports, and he has since become one of the sharpest critics o...
Jonathan Rende of Checkmarx on why the model writing your code cannot also be the control that validates it, and why rules-based and AI-driven scanning turn out to find almost entirely different bugs. In this episode I sit down with Jonathan Rende of Checkmarx. Jonathan worked with Fortify and SPI Dynamics back in the day, spent most of the last decade leading product teams in developer and DevOps tooling, and came back to security eighteen months ago because, as he puts it, this is the hear...
Rock Lambros, Co-Lead of the 2026 OWASP Top 10 for LLM Applications, on why prompt injection would have fallen out of the top 10 based on incident data alone, and why the community kept it at number one anyway. In this episode I sit down with Rock Lambros, longtime security leader, former CISO, core team member of the OWASP GenAI Security Project, and Co-Lead of the 2026 OWASP Top 10 for LLM Applications, to dig into the new list and the harder questions underneath it. We get into the lette...