This Kitecast episode features Chris Pogue, Director of Digital Forensics at CyberCX, a cybersecurity veteran with 25 years of experience. Chris brings unique insights from his extensive background spanning penetration testing, executive leadership, and military instruction. As an adjunct professor at Oklahoma State University, he teaches both international business and digital forensics, emphasizing the critical importance of communication between technical and non-technical stakeholders.

Chris introduces CyberCX as "the biggest cybersecurity company you've never heard of"—a pure-play security firm with 1,500 professionals globally. Founded in Australia through the acquisition of 24 boutique security firms, CyberCX stands apart by focusing exclusively on cybersecurity expertise without the distractions of hardware sales or software development. With specialized teams including 200 penetration testers and 40 incident responders, they offer comprehensive security solutions tailored to each client's unique risk profile.

The conversation reveals alarming trends in the threat landscape, including the surprising resurgence of SQL injection attacks targeting forgotten systems and unpatched vulnerabilities. Chris explains that once an exploit is announced, threat actors typically begin targeting it within 24 to 48 hours, yet organizations often take 60 to 90 days to implement patches. The podcast also explores how ransomware tactics are evolving from simple data encryption to targeting operational technology and critical infrastructure, creating more leverage by disrupting business continuity rather than just threatening data exposure.

Third-party risk management emerges as a critical concern, with Chris noting that the traditional "castle and moat" security model has become obsolete in today's interconnected business environment. He describes how Business Email Compromise attacks frequently move laterally across supply chains, with compromised trusted partners becoming vectors for invoice fraud and malware distribution. The conversation also touches on the emerging role of AI in creating more convincing phishing campaigns and voice synthesis attacks.

Drawing on decades of experience, Chris offers this compelling perspective on security investment: "In my career, I have yet to find an organization who under-invested in cybersecurity and was thankful that they did later." With data breach costs averaging $4.5 million globally and $9 million in the United States, the economic argument for proactive security becomes increasingly clear. Don't miss this eye-opening discussion on the frontlines of cybersecurity defense.

LinkedIn Profile: https://www.linkedin.com/in/christopher-pogue-msis-6148441/ 

CyberCX: https://cybercx.com/ 


Chris Pogue: Digital Forensics in the Modern Threat Landscape

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for June 13, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we look at the most recent events and trends related to data security and privacy. Today, we will examine a data event that has dominated the headlines for the last two weeks, its implications for consumers and why it highlights the importance of passkey adoption.  

You’ve probably heard the phrase “the future is now.” There is a debate over the origin of this term. Some say it was from the back cover of Alvin Toffler’s 1970 book “Future Shock.” Some think its origins may be older, stretching back to a speech given by Robert F. Kennedy in 1966 or a similar phrase from Sir Austen Chamberlain in 1936. Regardless of who coined the phrase, it is relevant to our conversation today, as it pertains to findings recently discovered by cybersecurity researcher Jeremiah Fowler.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter



The Weekly Breach Breakdown Podcast by ITRC: The Future is Now - S6E18

Welcome back to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown, supported by Sentilink. I’m James E. Lee, the ITRC’s President, and this is the episode for June 20, 2025. Happy first day of summer! Each week, we take a look at the latest news and trends related to data security and privacy. This week, we’re going to talk about a heads-up being issued by cyber threat researchers. However, we’re going to swerve into the rapidly changing cybersecurity policy landscape and ransomware group Scattered Spider – just for fun.

If you ask an artificial intelligence bot how many people in the U.S. are afraid of spiders, it will tell you that up to 50 million people suffer from arachnophobia. I’m not one of them, but I’m close. With that said, not all scary spiders are of the 8-legged freak.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC: Spiderwebs – S6E19

🚨Small biz owners, beware! In 2025, compliance is no longer optional—even for you. From HIPAA & PCI DSS to FTC rules, skipping security measures can cost 💸thousands or even your biz's rep. Stay ahead with risk assessments, staff training, and airtight data protection. Don't wait for fines—protect your future NOW!

The Compliance Blind Spot_ What You’re Missing Could Cost You Thousands

Welcome back to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown, supported by Sentilink. I’m James E. Lee, the ITRC’s President, and this is the episode for July 18, 2025. Each week, we take a look at the latest news and trends related to data security and privacy. This week, the ITRC released our H1 2025 Data Breach Analysis that looks at what happened in the first six months of 2025 when it comes to U.S. data compromises. Let’s talk about the trends, but first, some housekeeping with some numbers: 

A total of 1,732 data compromises were reported in the first half of 2025, resulting in a little more than 165.7 million breach notices. That’s about five percent ahead of where we were at this time last year in terms of compromises. It’s also more reported compromises than at the halfway point in 2023, when we set the current high-water mark for data compromises.  

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown: ITRC H1 2025 Data Breach Analysis – Key Findings & Takeaways – S6E22

Stay ahead with today’s top healthcare cybersecurity headlines. From stealthy Linux backdoors and widespread data theft by Vietnamese hackers, to critical printer vulnerabilities and phishing attacks targeting developers — we cover the latest threats that matter. Get quick, clear updates on malware, cyber risks, and innovations reshaping healthcare security. Perfect for professionals who need the facts fast.

Linux Backdoor Found, Vietnamese Hackers Strike, Fujifilm Printers at Risk, and More

This episode covers the latest in cybersecurity, from the CORNFLAKE.V3 backdoor and QR code phishing scams to hackers abusing the Internet Archive and cheap VPS services. We also look at Apple’s seventh zero-day patch of the year, new DripDropper malware tactics, and how AI crawler traffic is overwhelming websites.

Cyber Threats on the Rise: New Malware, Phishing Tactics, and AI Traffic Overload

Dr. Rick Goud brings a unique perspective to the data sovereignty conversation, combining medical informatics expertise with entrepreneurial technology innovation. As co-founder and Chief Innovation Officer of Zivver, a secure digital communications platform acquired by Kiteworks in 2025, Goud's journey began with an unexpected twist – missing out on medical school in the Netherlands' lottery system led him to medical informatics, where he discovered his passion for solving healthcare's data security challenges. His background as a strategy consultant in healthcare, where he witnessed firsthand the alarming frequency of sensitive patient data being shared through insecure channels, sparked his mission to create solutions that balance robust security with user-friendly functionality.

The podcast reveals a fundamental tension in European data sovereignty: While Europe boasts the world's strongest data protection laws like GDPR and the upcoming EU Data Act, organizations remain heavily dependent on foreign cloud infrastructure. Goud explains that the challenge extends beyond mere infrastructure – it's the absence of true European alternatives for essential software services that creates vulnerability. He highlights recent incidents, including a French Microsoft executive's court admission that Microsoft cannot prevent U.S. government access to data without customer notification, and the shocking case of a Dutch criminal court judge whose email was blocked by Microsoft at the behest of American authorities. These examples underscore how data sovereignty encompasses not just data protection, but also continuity of service and freedom from foreign interference.

When addressing the economic realities of data sovereignty, Goud advocates for a pragmatic, risk-based approach rather than wholesale abandonment of U.S. cloud services. He emphasizes that organizations should start by identifying their specific risks – whether it's human error (the leading cause of data breaches), email interception, weak passwords, or phishing attacks. The solution often lies in implementing encryption layers where organizations maintain control of their own keys, effectively rendering data unreadable even if accessed by unauthorized parties. This approach allows organizations to continue using familiar tools like Microsoft 365 and Gmail while adding crucial security layers for sensitive information, avoiding the massive costs and behavioral changes required by complete infrastructure migration.

The conversation concludes with practical advice for organizations beginning their data sovereignty journey. Goud recommends starting with "low-hanging fruit" – simple security measures that can be implemented quickly, such as activating DANE (DNS-based Authentication of Named Entities) for email encryption, which despite being available for a decade, sees adoption rates of only 15% to 20%. He stresses the importance of email and file security as the primary risk points where data leaves organizational boundaries. Rather than embarking on multi-year infrastructure overhauls, organizations should focus on immediate, achievable improvements while building partnerships with trusted vendors and peer organizations facing similar challenges. This collaborative approach ensures organizations aren't navigating the complex data sovereignty landscape alone.

LinkedIn: https://www.linkedin.com/in/rickgoud/

Rick Goud: Navigating Europe’s Data Sovereignty Challenges

In this episode of Bulletproof Your Marketplace, Jeremy Gottschalk sits down with seasoned legal counsel Krishan Thakker to unpack how user contracts and robust privacy practices can act as liability shields for digital platforms.

Drawing on over 15 years advising global technology, e-commerce, and social media companies, Krish shares his expertise at the intersection of data privacy, regulatory compliance, AI governance, and trust & safety. 

Together, they explore why privacy can no longer be an afterthought, the dangers of conflating terms of use with privacy policies, and the financial and reputational fallout from neglecting compliance—illustrated through high-profile failure.

Krish also outlines practical steps for platform operators, including conducting a data audit, adopting a “less is more” approach to PII collection, and drafting clear, standalone user agreements.

Whether you’re a founder, legal counsel, or trust & safety leader, this episode delivers actionable strategies to protect your platform, build user trust, and stay ahead of evolving regulations.

Data Privacy and Data Security — Policies and Practices

Cybersecurity experts Heather Noggle and Dr. Arun DeSouza discussed Kiteworks' Data Security and Compliance Risk: 2025 Annual Survey Report, which introduces the industry's first quantitative risk scoring algorithm. The comprehensive study of 461 organizations reveals that 46% now operate in high- to critical-risk territory, with the median enterprise scoring 4.84 on a 10-point scale—dangerously close to the high-risk threshold of 5.0.

The experts analyzed a counterintuitive finding about third-party risk management: Organizations managing 1,001-5,000 external partners face the highest security risk (average score 5.19), surpassing enterprises with over 5,000 third-party relationships. These larger enterprises can monitor risks in real time, while mid-sized partner ecosystems struggle with enterprise-level complexity on mid-market budgets—resulting in 24% experiencing 7+ annual security incidents.

Industry-specific findings revealed surprising risk disparities. Energy topped the risk charts due to legacy IoT devices and 30-year-old technologies vulnerable to exploitation. Technology ranked second, which Noggle attributed to the "overconfidence factor" and rapid employee turnover. "Tech companies are losing people so fast, they want to implement things so fast. That to me is a perfect storm," DeSouza noted. Conversely, heavily regulated sectors like life sciences demonstrated lower risk scores due to compliance-driven security investments.

The report exposed a dangerous "confidence paradox" where organizations claiming to be "somewhat confident" in data governance showed 19% higher risk scores than those acknowledging uncertainty.

AI governance emerged as a critical vulnerability. While 64% of enterprises track AI-generated content (up from 28% in 2024), only 17% have deployed technical governance frameworks. The stakes are high—the IBM Cost of a Data Breach Report found that 97% of AI-related breaches lacked proper controls, with AI breaches costing $670,000 more than average. 

Poor data visibility creates cascading failures: Organizations unable to count their third parties showed 46% correlation with unknown breach frequency, while 31% of those with 5,000+ partners take over 90 days to detect breaches.

Heather Noggle: https://www.linkedin.com/in/heathernoggle/ 
Arun DeSouza: https://www.linkedin.com/in/arundesouza/ 


2025 Annual Survey Report: AI and Third-Party Security Danger Zone

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #DataSecurity