Cybersecurity Awareness Month 2023

CyCognito’s CEO on keeping people and endpoints secure

Screen Shot 2021-11-02 at 1.37.53 PM

Freddie Mac CISO on the evolving cyber threat targeting financial services

Screen Shot 2021-10-26 at 6.25.22 PM

Zoom Deputy CISO on adapting to newfound customer requirements

Security Staff Acquisition & Development

Futuristic china map outline with glowing flag colors.

Futuristic china map outline with glowing flag colors

Security Operations

Threat Intelligence

Critical Infrastructure Security

Leadership

Security Strategy, Plan, Budget

Brief

China emerges as ‘peer competitor in cyberspace,’ UK NCSC head warns

<body>Why have security awareness training programs failed? Maybe we need to understand human psychology. Humans don't like tricks, or to be shamed, or negative emotions. Humans want to be rewarded, but yet our training and phishing programs are not built for reward. Maybe it's time to rethink cyber literacy.</body>

<body>Why have security awareness training programs failed? Maybe we need to understand human psychology. Humans don't like tricks, or to be shamed, or negative emotions. Humans want to be rewarded, but yet our training and phishing programs are not built for reward. Maybe it's time to rethink cyber literacy.</body>

<body>Craig Taylor, CEO and Co-founder at CyberHoot, joins Business Security Weekly to discuss why we need to shift our Cyber Literacy industry from shame and punishment towards gamification, positive reinforcement, and small rewards. If we truly aspire to change behaviors, then we need a different approach. Craig will discuss how a multi-disciplinary approach rooted in science is the future of training and phishing programs.</body>

<body>Craig Taylor, CEO and Co-founder at CyberHoot, joins Business Security Weekly to discuss why we need to shift our Cyber Literacy industry from shame and punishment towards gamification, positive reinforcement, and small rewards. If we truly aspire to change behaviors, then we need a different approach. Craig will discuss how a multi-disciplinary approach rooted in science is the future of training and phishing programs.</body>

<body>Individual Registration (Free Personal Training for Life): <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/individuals/">https://cyberhoot.com/individuals/</a>
Newsletter Registration: <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/newsletters/">https://cyberhoot.com/newsletters/</a>
Blog Articles: <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/blog/">https://cyberhoot.com/blog/</a>
Cybrary (Library of 1000+ Cybersecurity Terms in non-technical language): <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/cybrary/">https://cyberhoot.com/cybrary/</a>
Special Podcast Offer: 20% off CyberHoot for 1 year using the podcast’s unique coupon code: "Business Security Weekly"</body>

<body>Individual Registration (Free Personal Training for Life): <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/individuals/">https://cyberhoot.com/individuals/</a>
Newsletter Registration: <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/newsletters/">https://cyberhoot.com/newsletters/</a>
Blog Articles: <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/blog/">https://cyberhoot.com/blog/</a>
Cybrary (Library of 1000+ Cybersecurity Terms in non-technical language): <a rel="noreferrer noopener" target="_blank" href="https://cyberhoot.com/cybrary/">https://cyberhoot.com/cybrary/</a>
Special Podcast Offer: 20% off CyberHoot for 1 year using the podcast’s unique coupon code: "Business Security Weekly"</body>

<body>From Reactive to Autonomous: Real-Time Endpoint Intelligence in the Age of AI
As organizations experiment with agentic AI and autonomous security operations, many are discovering a difficult reality: AI is only as effective as the data and visibility behind it. Yet most enterprises still struggle to answer basic questions about their endpoints in real time.</body>

<body>From Reactive to Autonomous: Real-Time Endpoint Intelligence in the Age of AI
As organizations experiment with agentic AI and autonomous security operations, many are discovering a difficult reality: AI is only as effective as the data and visibility behind it. Yet most enterprises still struggle to answer basic questions about their endpoints in real time. </body>

<body>In this conversation, we’ll explore how IT and security teams are evolving from reactive operations toward proactive, preventative, and ultimately autonomous models. The journey begins with real-time endpoint intelligence—the ability to see, understand, and act across every endpoint in seconds.</body>

<body>In this conversation, we’ll explore how IT and security teams are evolving from reactive operations toward proactive, preventative, and ultimately autonomous models. The journey begins with real-time endpoint intelligence—the ability to see, understand, and act across every endpoint in seconds. </body>

<body>This segment is sponsored by Tanium. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/taniumrsac">https://securityweekly.com/taniumrsac</a> to learn more about them!</body>

<body>This segment is sponsored by Tanium. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/taniumrsac">https://securityweekly.com/taniumrsac</a> to learn more about them!</body>

<body>Hard Truths: The Lies We Keep Buying in Cybersecurity
Cybersecurity isn’t broken because of a lack of technology—it’s broken because the industry avoids hard truths. Fear still drives budgets. AI is oversold as a cure‑all while foundations remain weak, and CISOs are held accountable without the authority to change outcomes. In this conversation, Illumio CEO and founder Andrew Rubin breaks down what must change to build real resilience—because the next breach won’t just impact the business, it could end a career.</body>

<body>Hard Truths: The Lies We Keep Buying in Cybersecurity
Cybersecurity isn’t broken because of a lack of technology—it’s broken because the industry avoids hard truths. Fear still drives budgets. AI is oversold as a cure‑all while foundations remain weak, and CISOs are held accountable without the authority to change outcomes. In this conversation, Illumio CEO and founder Andrew Rubin breaks down what must change to build real resilience—because the next breach won’t just impact the business, it could end a career. </body>

<body>For more information about Illumio, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/illumiorsac">https://securityweekly.com/illumiorsac</a></body>

<body>For more information about Illumio, please visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/illumiorsac">https://securityweekly.com/illumiorsac</a></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14860″} podcast from PPWorks

Training

Endpoint/Device Security

From Shame to Fame: Changing Behaviors and RSAC Interviews from Tanium and Illumio – Craig Taylor, Tim Morris, Andrew Rubin – BSW #444

Interface of security system software and silhouettes of business people in office

Interface of security system software and silhouettes of busines

Perspective

The CISO role has always been brutal. Here is what makes some survive it.

<body>So you want to be a CISO? Do you know what that role entails? It depends on a number of factors, including industry, country location, technical vs. business, and more. Each position is more different than you think.</body>

<body>So you want to be a CISO? Do you know what that role entails? It depends on a number of factors, including industry, country location, technical vs. business, and more. Each position is more different than you think.</body>

<body>Joanna Chen, Chief Information Security Officer at Dashlane, joins Business Security Weekly to discuss why not all CISO gigs are created equal. As a "technical" CISO in a foreign country, Joanna realized that not all of her peers came from a technical background, like herself. It's a broad world and the CISO role varies a lot. Joanna will discuss how to understand the various CISO roles and discuss the skills that are makers and breakers.</body>

<body>Joanna Chen, Chief Information Security Officer at Dashlane, joins Business Security Weekly to discuss why not all CISO gigs are created equal. As a "technical" CISO in a foreign country, Joanna realized that not all of her peers came from a technical background, like herself. It's a broad world and the CISO role varies a lot. Joanna will discuss how to understand the various CISO roles and discuss the skills that are makers and breakers.</body>

<body>Managing Cyber Risk as Financially Motivated Attacks Grow
The ransomware and eCrime landscape continue to evolve at a rapid pace. ESET’s global research team has been closely following ransomware gang disruptions and their use of EDR Killers to disable cybersecurity tools. In this interview, Tony Anscombe will take a look into recent research, and explore how the industry and businesses are responding to combat financial risk and mitigate threats.</body>

<body>Managing Cyber Risk as Financially Motivated Attacks Grow
The ransomware and eCrime landscape continue to evolve at a rapid pace. ESET’s global research team has been closely following ransomware gang disruptions and their use of EDR Killers to disable cybersecurity tools. In this interview, Tony Anscombe will take a look into recent research, and explore how the industry and businesses are responding to combat financial risk and mitigate threats.</body>

<body>This segment is sponsored by ESET. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/esetrsac">https://securityweekly.com/esetrsac</a> to learn more about them!</body>

<body>This segment is sponsored by ESET. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/esetrsac">https://securityweekly.com/esetrsac</a> to learn more about them!</body>

<body>Attack Surface Just Got a Copilot
AI adoption is accelerating faster than most organizations can secure it — and the consequences are showing up in email inboxes, collaboration platforms, and the shadow tools employees use every day. According to Mimecast's State of Human Risk 2026, 80% of organizations are concerned about sensitive data exposure through generative AI tools, yet 60% still lack strategies to address AI-driven threats. The result is a growing gap between the security investments organizations are making and the protection they're actually getting. In this conversation, Rob Juncker will explore why human behavior has become the defining variable in enterprise cybersecurity, how shadow AI is creating new data exposure and insider risk vectors, and what it takes for security architectures to adapt in real time — without slowing down the business.</body>

<body>Attack Surface Just Got a Copilot
AI adoption is accelerating faster than most organizations can secure it — and the consequences are showing up in email inboxes, collaboration platforms, and the shadow tools employees use every day. According to Mimecast's State of Human Risk 2026, 80% of organizations are concerned about sensitive data exposure through generative AI tools, yet 60% still lack strategies to address AI-driven threats. The result is a growing gap between the security investments organizations are making and the protection they're actually getting. In this conversation, Rob Juncker will explore why human behavior has become the defining variable in enterprise cybersecurity, how shadow AI is creating new data exposure and insider risk vectors, and what it takes for security architectures to adapt in real time — without slowing down the business.</body>

<body>This segment is sponsored by Mimecast. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecastrsac">https://securityweekly.com/mimecastrsac</a> to learn more about them!</body>

<body>This segment is sponsored by Mimecast. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecastrsac">https://securityweekly.com/mimecastrsac</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14451″} podcast from PPWorks

Ransomware

Not All CISO Gigs Are Created Equal and RSAC Interviews from ESET and Mimecast – Joanna Chen, Tony Anscombe, Rob Juncker – BSW #443

Outsourcing hiring outside worker to perform service, pass or transfer work to other team, remote work or telework concept, businessman boss pass or relay baton to outsource team to work, Generative A

Government security

US Tech Force leveraged by OPM for cybersecurity hiring

Claude, an artificial intelligence chatbot developed by Anthropic, based on a large language model LLM. Icon and logo isolated on a dark surface, 3D rendering

AI/ML

Generative AI

AI benefits/risks

Application security

News

CISOs: Revamp security programs in the wake of Claude Mythos

sam-sawalhi

Security Management

Feature

JSOC IT’s Sam Sawalhi: Telling the room what it needs to hear

Red padlocks floating in a digital environment representing cybersecurity breach and data protection concept in futuristic cyber space interface. 3D Rendering