Cybersecurity Awareness Month 2023

CyCognito’s CEO on keeping people and endpoints secure

Screen Shot 2021-11-02 at 1.37.53 PM

Freddie Mac CISO on the evolving cyber threat targeting financial services

Screen Shot 2021-10-26 at 6.25.22 PM

Zoom Deputy CISO on adapting to newfound customer requirements

Security Staff Acquisition & Development

Outsourcing hiring outside worker to perform service, pass or transfer work to other team, remote work or telework concept, businessman boss pass or relay baton to outsource team to work, Generative A

Government security

Brief

US Tech Force leveraged by OPM for cybersecurity hiring

Claude, an artificial intelligence chatbot developed by Anthropic, based on a large language model LLM. Icon and logo isolated on a dark surface, 3D rendering

Security Operations

AI/ML

Generative AI

AI benefits/risks

Leadership

Application security

News

CISOs: Revamp security programs in the wake of Claude Mythos

sam-sawalhi

Security Management

Feature

JSOC IT’s Sam Sawalhi: Telling the room what it needs to hear

Red padlocks floating in a digital environment representing cybersecurity breach and data protection concept in futuristic cyber space interface. 3D Rendering

Threat Intelligence

Feds grade themselves high despite legacy gaps

Autonomous AI agents are creating a new attack surface for enterprise security teams, particularly as organizations deploy agents for operational tasks such as customer support automation, data analysis, and incident response.  How can we align our Zero Trust initiatives to also address the emerging Agentic AI risks?

Autonomous AI agents are creating a new attack surface for enterprise security teams, particularly as organizations deploy agents for operational tasks such as customer support automation, data analysis, and incident response. How can we align our Zero Trust initiatives to also address the emerging Agentic AI risks?

John Bruggeman, Consulting CISO at CBTS, joins Business Security Weekly to discuss how your Zero Trust readiness can also prepare you for Agentic AI deployments.  Organizations are granting agents access to sensitive systems without the security controls typically required for other Zero Trust initiatives.  John will help educate CISOs on what they should be doing now to get ahead of the risk, including:

John Bruggeman, Consulting CISO at CBTS, joins Business Security Weekly to discuss how your Zero Trust readiness can also prepare you for Agentic AI deployments. Organizations are granting agents access to sensitive systems without the security controls typically required for other Zero Trust initiatives. John will help educate CISOs on what they should be doing now to get ahead of the risk, including:

<ul class="wp-block-list">
<li>Agent inventory</li>


<li>Data security controls, including data model poisoning</li>


<li>Agent identity controls, including authorization and access levels</li>


<li>Infrastructure security controls, including MCP servers</li>
</ul>

<ul><li>Agent inventory</li><li>Data security controls, including data model poisoning</li><li>Agent identity controls, including authorization and access levels</li><li>Infrastructure security controls, including MCP servers</li></ul>

Why More Technology Hasn’t Made Us More Secure
Despite massive investment in cybersecurity tools, organizations remain vulnerable because their existing technologies are often misconfigured, poorly integrated, and disconnected from real operational risk. This keynote argues that complexity, human decision‑making, and gaps in execution—not a lack of products—are what truly empower attackers, especially as modern environments like cloud and SaaS expand the attack surface. Real security comes from simplifying, aligning, and expertly orchestrating what organizations already own, shifting the focus from buying tools to achieving disciplined, resilient outcomes grounded in breach reality.

Why More Technology Hasn’t Made Us More Secure
Despite massive investment in cybersecurity tools, organizations remain vulnerable because their existing technologies are often misconfigured, poorly integrated, and disconnected from real operational risk. This keynote argues that complexity, human decision‑making, and gaps in execution—not a lack of products—are what truly empower attackers, especially as modern environments like cloud and SaaS expand the attack surface. Real security comes from simplifying, aligning, and expertly orchestrating what organizations already own, shifting the focus from buying tools to achieving disciplined, resilient outcomes grounded in breach reality.

This segment is sponsored by Fenix24. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/fenix24rsac">https://securityweekly.com/fenix24rsac</a> to learn more about them!

This segment is sponsored by Fenix24. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/fenix24rsac">https://securityweekly.com/fenix24rsac</a> to learn more about them!

Downtime: The New Economic Threat
Downtime is costing global enterprises hundreds of billions of dollars in losses annually. Caused by cyber incidents and software failures, enterprise CISOs are searching for strategies and solutions that will accelerate recovery and restoration of business operations after cyber disruptions render systems inoperable.

Downtime: The New Economic Threat
Downtime is costing global enterprises hundreds of billions of dollars in losses annually. Caused by cyber incidents and software failures, enterprise CISOs are searching for strategies and solutions that will accelerate recovery and restoration of business operations after cyber disruptions render systems inoperable.

This segment is sponsored by Absolute Security. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/absolutersac">https://securityweekly.com/absolutersac</a> to join The Resilient CISO Inner Circle!

This segment is sponsored by Absolute Security. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/absolutersac">https://securityweekly.com/absolutersac</a> to join The Resilient CISO Inner Circle!

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14449″} podcast from PPWorks

Zero trust

Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security – John Bruggeman, John Anthony Smith, Christy Wyatt – BSW #442

Glowing red AI shield in a digital landscape, representing advanced technology and cybersecurity

Training

ISC2 integrates AI security into cybersecurity certifications

Most organizations don’t fail because of technology. They fail because decision authority is unclear in the first critical minutes.  “Being careful” is often interpreted as waiting for certainty, but that delay creates exposure.  How should executives make decisions under pressure?

Most organizations don’t fail because of technology. They fail because decision authority is unclear in the first critical minutes. “Being careful” is often interpreted as waiting for certainty, but that delay creates exposure. How should executives make decisions under pressure?

Ann Marie van den Hurk, Founder at Mind The Gap Advisory, joins Business Security Weekly to discuss how executive paralysis leads to business damage.  Ann Marie will discuss:

Ann Marie van den Hurk, Founder at Mind The Gap Advisory, joins Business Security Weekly to discuss how executive paralysis leads to business damage. Ann Marie will discuss:

<ul class="wp-block-list">
<li>Where Paralysis Actually Comes From</li>


<li>What “Being Careful” Looks Like in Practice</li>


<li>Why the First 20 Minutes Matter</li>


<li>How Paralysis Becomes Business Damage</li>


<li>Why Existing Plans Don’t Hold</li>


<li>What Actually Fixes It</li>
</ul>

<ul><li>Where Paralysis Actually Comes From</li><li>What “Being Careful” Looks Like in Practice</li><li>Why the First 20 Minutes Matter</li><li>How Paralysis Becomes Business Damage</li><li>Why Existing Plans Don’t Hold</li><li>What Actually Fixes It</li></ul>

Then, we rebroadcast two interviews from RSAC 2026.

Then, we rebroadcast two interviews from RSAC 2026.

Autonomous Intelligence and the Future of Digital Trust
AI agents are no longer experimental tools — they are becoming autonomous participants in enterprise infrastructure. Acting independently, making decisions at machine speed, and interacting directly with sensitive systems, these agents fundamentally reshape the trust model that underpins modern organizations. 
As AI becomes embedded across operations, security must evolve from perimeter defense to continuous, identity-driven trust. This conversation explores what it means to build a resilient trust architecture for autonomous systems — one that ensures verifiable identity, constrained authority, accountability, and governance at scale. 
We’ll examine how enterprises can balance innovation with control, prevent misuse or spoofed agents, and prepare for a future defined by machine-to-machine interactions. At stake is not just cybersecurity, but the integrity of digital trust itself.

Autonomous Intelligence and the Future of Digital Trust
AI agents are no longer experimental tools — they are becoming autonomous participants in enterprise infrastructure. Acting independently, making decisions at machine speed, and interacting directly with sensitive systems, these agents fundamentally reshape the trust model that underpins modern organizations. 
As AI becomes embedded across operations, security must evolve from perimeter defense to continuous, identity-driven trust. This conversation explores what it means to build a resilient trust architecture for autonomous systems — one that ensures verifiable identity, constrained authority, accountability, and governance at scale. 
We’ll examine how enterprises can balance innovation with control, prevent misuse or spoofed agents, and prepare for a future defined by machine-to-machine interactions. At stake is not just cybersecurity, but the integrity of digital trust itself.

This segment is sponsored by DigiCert. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/digicertrsac">https://securityweekly.com/digicertrsac</a> to learn more about them!

This segment is sponsored by DigiCert. Visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/digicertrsac">https://securityweekly.com/digicertrsac</a> to learn more about them!

Know Your AI Agents Through Visibility, Control, and Accountability
AI agents are rapidly embedding into core enterprise workflows with broad access to sensitive systems and the ability to act autonomously, creating new challenges for security leaders tasked with enabling innovation while maintaining control. In this interview, Matt Immler will discuss why organizations must know about every agent operating in their environment and how to bring those agents under governance.