Cybersecurity Awareness Month 2023

CyCognito’s CEO on keeping people and endpoints secure

Screen Shot 2021-11-02 at 1.37.53 PM

Freddie Mac CISO on the evolving cyber threat targeting financial services

Screen Shot 2021-10-26 at 6.25.22 PM

Zoom Deputy CISO on adapting to newfound customer requirements

Security Staff Acquisition & Development

Paper note with words Welcome Aboard and computer keyboard on wooden table, closeup

Paper note with words Welcome Aboard and computer keyboard on wo

Security Operations

Security Strategy, Plan, Budget

Leadership

Training

SIEM

Perspective

Building security from zero: Lessons from the first security hire

Close up of ServiceNow logo at their headquarters in Silicon Valley; ServiceNow, Inc. is an American cloud computing company

September 6, 2019 Santa Clara / CA / USA – Close up of ServiceNo

Acquisition

AI benefits/risks

Brief

ServiceNow makes $7.75B bet on Armis for AI security

Screenshot of Founder Stories host Matt Alderman speaking with Adaptive Security COE and Co-Founder Brian Long.

adaptive-founder-stories-long-grab

Venture capital

AI/ML

Identity

Phishing

Resource

A serial entrepreneur’s journey from marketing to cybersecurity: Founder Stories

<body>Join Business Security Weekly for a roundtable-style year-in-review. The BSW hosts share the most surprising, inspiring, and humbling moments of 2025 in business security, culture, and personal growth. And a few of us might be dressed for the upcoming holiday season...</body>

<body>Join Business Security Weekly for a roundtable-style year-in-review. The BSW hosts share the most surprising, inspiring, and humbling moments of 2025 in business security, culture, and personal growth. And a few of us might be dressed for the upcoming holiday season...</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14419″} podcast from PPWorks

The CISO Holiday Party 2025: Leadership Lessons from the Year That Was – BSW #427

CISA – Cybersecurity and Infrastructure Security Agency displaye

Critical Infrastructure Security

Senate delay leaves CISA without confirmed leader

Portrait of a financial consultant conducting a video conference

Four business metrics security pros can offer that C-Suite execs understand

<body>Using OWASP SAMM to assess and improve compliance with the Cyber Resilience Act (CRA) is an excellent strategy, as SAMM provides a framework for secure development practices such as secure by design principles and handling vulns.</body>

<body>Using OWASP SAMM to assess and improve compliance with the Cyber Resilience Act (CRA) is an excellent strategy, as SAMM provides a framework for secure development practices such as secure by design principles and handling vulns.</body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://owaspsamm.org/">https://owaspsamm.org/</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://cybersecuritycoalition.be/resource/a-strategic-approach-to-product-security-with-owasp-samm/">https://cybersecuritycoalition.be/resource/a-strategic-approach-to-product-security-with-owasp-samm/</a></li></ul></body>

<body>As genAI becomes a more popular tool in software engineering, the definition of “secure coding” is changing. This session explores how artificial intelligence is reshaping the way developers learn, apply, and scale secure coding practices — and how new risks emerge when machines start generating the code themselves. We’ll dive into the dual challenge of securing both human-written and AI-assisted code, discuss how enterprises can validate AI outputs against existing security standards, and highlight practical steps teams can take to build resilience into the entire development pipeline. Join us as we look ahead to the convergence of secure software engineering and AI security — where trust, transparency, and tooling will define the future of code safety.</body>

<body>As genAI becomes a more popular tool in software engineering, the definition of “secure coding” is changing. This session explores how artificial intelligence is reshaping the way developers learn, apply, and scale secure coding practices — and how new risks emerge when machines start generating the code themselves. We’ll dive into the dual challenge of securing both human-written and AI-assisted code, discuss how enterprises can validate AI outputs against existing security standards, and highlight practical steps teams can take to build resilience into the entire development pipeline. Join us as we look ahead to the convergence of secure software engineering and AI security — where trust, transparency, and tooling will define the future of code safety.</body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://manicode.com/ai/">https://manicode.com/ai/</a></li></ul></body>

<body>Understand the history of threat modeling with Adam Shostack. Learn how threat modeling has evolved with the Four Question Framework and can work in your organizations in the wake of the AI revolution.</body>

<body>Understand the history of threat modeling with Adam Shostack. Learn how threat modeling has evolved with the Four Question Framework and can work in your organizations in the wake of the AI revolution.</body>

<body>Whether you're launching a formal Security Champions program or still figuring out where to start, there's one truth every security leader needs to hear: You already have allies in your org -- they're just waiting to be activated. In this session, we’ll explore how identifying and empowering your internal advocates is the fastest, most sustainable way to drive security culture change. These are your early adopters: the developers, engineers, and team leads who already “get it,” even if their title doesn’t say “security.”</body>

<body>Whether you're launching a formal Security Champions program or still figuring out where to start, there's one truth every security leader needs to hear: You already have allies in your org -- they're just waiting to be activated. In this session, we’ll explore how identifying and empowering your internal advocates is the fastest, most sustainable way to drive security culture change. These are your early adopters: the developers, engineers, and team leads who already “get it,” even if their title doesn’t say “security.”</body>

<body><ul><li>Why you need help from people outside the security org to actually be effective</li><li>Where to find your natural allies (hint: it starts with listening, not preaching)</li><li>How to support and energize those allies so they influence the majority</li><li>What behavioral science tells us about spreading change across an organization</li></ul></body>

<body><ul><li>Security Champion Success Guide: <a rel="noreferrer noopener" target="_blank" href="https://securitychampionsuccessguide.org/">https://securitychampionsuccessguide.org/</a></li><li>Related interviews/podcasts: <a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/playlist?list=PLPb14P8f4T1ITv3p3Y3XtKsyEAA8W526h">https://www.youtube.com/playlist?list=PLPb14P8f4T1ITv3p3Y3XtKsyEAA8W526h</a></li><li>How to measure success and impact of culture change and champions: <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/pulse/from-soft-skills-hard-data-measuring-success-security-yhmse/">https://www.linkedin.com/pulse/from-soft-skills-hard-data-measuring-success-security-yhmse/</a></li><li>Global Community of Champions sign up: <a rel="noreferrer noopener" target="_blank" href="https://docs.google.com/forms/d/e/1FAIpQLScyXPAMf9M8idpDMwO4p2h5Ng8I0ffofZuY70BbmgCZNPUS5Q/viewform">https://docs.google.com/forms/d/e/1FAIpQLScyXPAMf9M8idpDMwO4p2h5Ng8I0ffofZuY70BbmgCZNPUS5Q/viewform</a></li></ul></body>

<body>This interview is sponsored by the OWASP GenAI Security Project. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/owaspappsec">https://securityweekly.com/owaspappsec</a> to watch all of CyberRisk TV's interviews from the OWASP 2025 Global AppSec Conference!</body>

<body>This interview is sponsored by the OWASP GenAI Security Project. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/owaspappsec">https://securityweekly.com/owaspappsec</a> to watch all of CyberRisk TV's interviews from the OWASP 2025 Global AppSec Conference!</body>

Security Staff Acquisition & Development

Related Videos

CyCognito’s CEO on keeping people and endpoints secure

Freddie Mac CISO on the evolving cyber threat targeting financial services

Zoom Deputy CISO on adapting to newfound customer requirements

Building security from zero: Lessons from the first security hire

ServiceNow makes $7.75B bet on Armis for AI security

A serial entrepreneur’s journey from marketing to cybersecurity: Founder Stories

The CISO Holiday Party 2025: Leadership Lessons from the Year That Was – BSW #427

Senate delay leaves CISA without confirmed leader

Four business metrics security pros can offer that C-Suite execs understand

Modern AppSec: OWASP SAMM, AI Secure Coding, Threat Modeling & Champions – Sebastian Deleersnyder, James Manico, Adam Shostack, Dustin Lehr – ASW #362

Why leadership at CISA matters – now more than ever

Fast Five

Selected by the SC Media Editorial team every Tuesday.