In this week's episode of the Future of Cyber Risk podcast, David speaks to Craig Jones, Director of Cybercrime at INTERPOL. They discuss the mission and purpose of INTERPOL to reduce cybercrime worldwide, and how they go about doing that on a daily basis through data aggregation, creating frameworks, and sharing intel with nations and locales worldwide. They also discuss the hurdles of varied cybercrime legislation, how criminals may use AI to exploit, and advice for law enforcement and...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Bob Carver, Principal Cybersecurity Threat Intelligence and Analytics at Verizon. They discuss the importance of looking for subtle issues no one else may see, why security practitioners should gain more awareness in network and sysadmin activities, and how to build a culture of security. They also talk about how to train staff about phishing and social engineering, what the future of cyber will look like, and advice...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Evan Blicker, Sr. Cyber Threat Investigator - Dark Web Lead at LinkedIn. They discuss what the dark web is, what you can find there, and the biggest misconceptions about the dark web — like why it should be viewed more as a community of people rather than a dangerous arena. They also talk about how to get started with dark web investigations securely, why the biggest challenge is communicating about dark web threats,...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Miranda Bruce, Postdoctoral Fellow at the University of Oxford, and Steve Santorelli, Chief of Staff at Team Cymru, about the RISE and Underground Economy conferences. A RISE scholarship recipient, Miranda talks about her experience attending the Underground Economy conference, the value of meeting individuals in the industry, and how it helped further her research. Together, they discuss the benefits the conference...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Carolyn Kissane, Associate Dean of the MS in Global Affairs and MS in Global Security, Conflict, and Cyber Crime at the NYU Center for Global Affairs. They discuss how the Center for Global Affairs prepares students for how cyber security will play a bigger role in geopolitics, energy resource management, and global conflict. They also talk about the rise of cyber attacks being used by governments against other...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Assaf Kipnis, Owner and Head Consultant/Advisor at ASK Integrity Solutions, which conducts adversarial network analysis, risk assessment, and counter-threat intel. They discuss the day-to-day activities of threat intelligence and hunting down adversaries, what adversary accounts typically look like on social media, and how digging deeper into those accounts can reveal connections leading to large-scale takedowns. They...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Dr. Eugene H. Spafford, Professor of Computer Sciences at Purdue University, Dr. Leigh Metcalf, Senior Network Security Research Analyst at CERT, and Dr. Josiah Dykstra, Technical Director, Critical Networks & Systems at NSA, authors of the book Cybersecurity Myths and Misconceptions: Avoiding the Hazards and Pitfalls that Derail Us. They discuss the various myths and misconceptions that can hamper security, how...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Andy Piazza, Global Head of Threat Intelligence at IBM X-Force, a threat intelligence sharing platform. They discuss the day-to-day responsibilities of IBM's threat intelligence team in creating strategy and overseeing threat collection, the ways in which threat actors are leveraging ransomware today, and why businesses should lean into their security vendors to help them stay protected. They also discuss the best...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Jordan Howell, Assistant Professor and Cybersecurity Researcher at University of South Florida. They discuss how Jordan works with his students each day, how there needs to be a shift in academia to focus on more holistic training, and the variety of skills that students need to have to be successful security practitioners. They also talk about how AI can be a tool to either close or expand gaps in security, how...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Erik Rasmussen, Global Head of Cybersecurity and Risk Management at Grobstein Teeple LLP, a leading consulting firm offering cybersecurity and business consulting services. They discuss what it means to be a leader in the cybersecurity world, how Erik's secret service and social sciences background contribute to his consulting, and how he works with clients on a daily basis. They also discuss what security...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Brian Stack, VP of Engineering & Dark Web Intelligence at Experian Consumer Services, which offers online credit reports, scores, and monitoring products. They discuss what Brian's dark web team does in order to protect customer identities, the hurdles they've had to overcome to be effective globally, and the biggest challenges to security today in general. They also talk about practical ways businesses can reduce...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Selena Larson, Senior Threat Intelligence Analyst at Proofpoint, a company that offers compliance and cybersecurity solutions. They discuss how Selena's background in journalism informs what she does today, what a day in the life of a threat intelligence analyst looks like, and the best skills to have in security, which include empathy and critical thinking. They also discuss how ransomware is surfacing opportunities...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Philipp Amann, Head of Strategy, European Cybercrime Centre at Europol. They discuss the need for collaboration between industry and law enforcement to help combat cybercrime, and how to go about fostering trust and information exchange in more effective and sustainable ways. They also talk about the major risks to organizations today, like legacy systems, ransomware, and AI, and how to better manage complexity to...

In this week's special episode of the Future of Cyber Risk podcast, David speaks to Team Cymu's Josh Picolet, Director of S2 Threat Analysis Unit, and Wassim Tawbi, Head of Product Management, about their new product, Pure Signal Scout. They discuss the customer needs that Scout was created to meet, the collaboration behind how the product was developed, and the elements of Scout's design and interface. They also talk about the benefits Pure Signal Scout offers in terms of speed, ease of use,...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Mark Lanterman, Founder & CTO of Computer Forensic Services, a provider of electronic discovery, forensic analysis, litigation support, and advisory and consultation services. They discuss the role of digital forensics, especially in criminal cases where it can help bring justice. They also discuss how to prepare your organization for a cyber event, how forensics has changed in the era of cloud, what the future of...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Troels Oerting, Chairman of the Board at BullWall. They discuss the insights Troels has learned across his long career in global cybersecurity leadership, which include how to build bridges of cooperation and communication between public and private entities, industries, and countries to better combat cybercrime. They also discuss the gaps in today’s cybersecurity landscape, the importance of running exercises to...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Renee Dudley, reporter at ProPublica and co-author of The Ransomware Hunting Team: A Band of Misfits' Improbable Crusade to Save the World from Cybercrime. Renee tells about how her investigative reporting focus took her to cybercrime and ransomware, and how in her research she met a "ransomware hunting team" of a dozen individuals who crack ransomware for victims and rarely ask for anything in return. She also talks...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Brian Kime, Associate Director of Threat Intelligence and Hunt Lead at Carrier, a global leader in intelligent climate and energy solutions. They discuss the biggest cyber risks to manufacturing companies and how to keep OT environments safe — and why the biggest threat to production is a ransomware attack that impacts the IT systems. They also discuss the need for implementing zero trust and segmenting identities,...

In this week's episode of the Future of Cyber Risk podcast, David speaks to Julie Chickillo, VP, Head of Security at Guild Education, a platform where workers can gain the skills and support they need to grow in their careers. They discuss current trends around cyber risk management, including the rising need to integrate more data privacy into security practices. They also talk about how security teams can better understand how risk impacts business decisions, how to weed out "dark patterns"...

Lewis Heuermann, Lead Associate of Cyber Risk Management at Booz Allen Hamilton, and Tom Cross, Independent Security Consultant, speak with David about the complexities threat hunters and their organizations face when dealing with cyber risk management and how to cultivate a holistic cybersecurity ecosystem for sustainable business success.  In this episode, the conversation focuses on striking a balance between proactive risk management and maintaining day-to-day cybersecurity operations....

In this episode, David speaks with Kodjo Hogan, the Director of Information Security and Governance Risk and Compliance at Chainalysis, to discuss the operational and managerial tasks in risk management for blockchain companies, the risks of AI and quantum computing to blockchain, and Kodjo provides actionable advice for security practitioners.  Topics discussed: Kodjo’s experience transitioning from an accounting background to an information technology role The benefits of having an...

In this episode, David speaks to Bronwyn Boyle, who has over 20 years of experience as a director, head of security, and CISO working in technology and security in financial services and supporting a range of organizations.  During the episode, they discuss how risk management needs to evolve with today's tech changes, the advantages and challenges of AI, and advice for security leaders — and women who want to get involved in the industry. Topics discussed: The evolution of Bronwyn's career...

In this episode, David speaks to Aman Raheja, Chief Information Security Officer at Humana. During the episode, they discuss what life and leadership is like for a CISO at a Fortune 500 healthcare company, the necessity of risk management and having a risk appetite statement, and what lies ahead for the future of cybersecurity. Topics discussed: A day in the life of a modern CISO at a Fortune 500 healthcare company, and the biggest challenges of moving from a hands-on role to an executive...

In this episode, David speaks to Norman Levine, Senior Manager of Cyber Risk Management at Omnicom. During the episode, they discuss the evolution of security since the 1990s, new technology security practitioners should be paying attention to, and key skills needed to be a successful security practitioner. Topics discussed: Norman's history in cybersecurity, from purchasing a book written about the internet in 1994, to starting a website that sold the first HTML editor, to being the senior...

In this episode, David Monnier speaks to Cassio Goldschmidt, Chief Information Security Officer at ServiceTitan. During the episode, they discuss strategies and challenges of being a CISO for a modern company. Topics discussed: ServiceTitan is a vertical SaaS B2B company. David asks Cassio to share what a day in the life of a CISO looks like for him. Cassio explains that security must come before compliance, but, in the end, business success should be the priority. He shares his views on...