In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. 

He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. 

The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. 



Takeaways
•	The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering.
•	Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface.
•	Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach.
•	Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it.
•	Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well.
•	Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability.
•	The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience.
•	Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic.
•	Ranch dressing is a popular staple in Midwest cuisine.
•	Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Human Element in Cybersecurity with Nick Mullen

We hosted a live conversation with cybersecurity expert Gina Yacone at Black Hat 2024. 

The discussion covered a range of critical topics, including the transformative impact of Zero Trust and AI, the challenges of burnout in the industry, and the importance of fostering cyber awareness. 

Gina, John, and Jaye also explored how events like Black Hat contribute to the cybersecurity community and offered insights on maximizing their benefits.

There may have also been a discussion on 'Does pineapple belong on pizza'.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Live at Black Hat with Gina Yacone

In today’s episode of the 'HEAL Security Dispatch Daily Digest,' Richard Simmons brings you a comprehensive update on critical developments in healthcare cybersecurity. Kicking off the discussion, Microsoft’s recent security lapse—where customer security logs were lost due to a data retention configuration issue—raises concerns about organizational vulnerability to cybersecurity incidents. This episode also covers Intel's denial of backdoor allegations from China, highlighting the heightened tensions over global technology security. Richard also reports on the First Nations Health Authority's May breach in British Columbia, which exposed sensitive personal information, and the growing importance of zero-trust architectures and advanced data encryption in healthcare.

Additionally, Richard discusses a ransomware attack on tech giant Nidec, further emphasizing the importance of proactive cybersecurity measures. Listeners are informed about new research identifying cybersecurity risks in extended reality (XR) technologies used in healthcare, with experts urging stronger protective frameworks. Finally, the episode wraps up with insights into Veeam’s new threat analysis tools for bolstering data resilience and the discovery of a vulnerability in Intel and AMD CPUs, which reopens concerns about Spectre attack protections.
https://healsecurity.com

From Lost Security Logs to Ransomware Breaches: Examining the Latest Cybersecurity Incidents

The HEAL Security podcast provides an informative roundup of the latest developments in technology, cybersecurity, and data protection. In this episode, topics include Microsoft's Windows 11 update challenges, particularly compatibility issues with older hardware, and a report underscoring the growing cybersecurity risks posed by third-party identities, which are implicated in a significant portion of breaches. Google’s investment in neutral atom quantum technology marks a major leap in quantum computing, while cybersecurity threats from groups like Evasive Panda show the ongoing risks to cloud data. The episode also covers the data breach at French ISP Free, criminal activity involving stolen credit card data on Meta's Threads platform, and the arrest of several individuals in Italy for unauthorized access to sensitive data, illustrating the persistent threat of cybercrime. The episode closes with a reminder about HEAL Security’s free trial offering for enhanced protection of digital environments. 
https://healsecurity.com/

Tech Turmoil: Windows 11 Woes, Meta's Threads Breach, and Google’s Quantum Leap

HEAL Security Dispatch Daily Digest is your go-to source for the latest cybersecurity trends and expert insights, with a focus on healthcare security. Hosted by HEAL Security, this podcast covers breaking cybersecurity news, critical vulnerabilities, and industry developments.

In this episode, topics include DeepSeek’s unencrypted data transmission raising privacy concerns, increased federal oversight of a critical Treasury payment system, and a surge in banking malware exploiting the SimpleHelp RMM tool. Other discussions highlight a major cyberattack on Hospital Sisters Health System affecting nearly 900,000 individuals, Trimble’s urgent Cityworks security update, and Cloudflare’s recent outage caused by a misstep in blocking a phishing URL. Additional segments cover Google’s email security advancements with DMARC, Kaspersky’s discovery of the "SparkCat" malware targeting iOS and Android apps, and Microsoft’s latest Edge browser security update.

Stay ahead of cyber threats with HEAL Security Dispatch Daily Digest.
🔗 healsecurity.com

HEAL Security Dispatch: DeepSeek Data Leak, Treasury Oversight, and Banking Malware Surge

HEAL Security Dispatch Daily Digest is your essential source for the latest in cybersecurity, with a focus on healthcare security challenges and technological advancements. Hosted by Richard Simmons from London, the podcast delivers expert insights on critical threats, industry developments, and solutions shaping the digital security landscape. In this episode, key topics include VMware's patch for guest-to-hypervisor escape vulnerabilities, calls for stronger cybersecurity measures in healthcare at HIMSS25, and serious misconfigurations affecting global access management systems. Other highlights cover AI-driven security innovations from Hunters, a cyber-espionage campaign targeting UAE infrastructure, Cisco's Webex vulnerability, new malware techniques leveraging Windows registry exploits, and Google's expansion of AI-powered scam detection for Android devices. Stay informed with HEAL Security Dispatch Daily Digest as we navigate the complex world of cybersecurity. 
https://healsecurity.com/

Cybersecurity News Roundup: VMware Patches, and Google's AI Scam Detection Expansion

HEAL Security Dispatch Daily Digest is a leading cybersecurity podcast hosted by Richard Simmons from London, delivering the latest updates on threats, vulnerabilities, and expert insights with a focus on healthcare and cybersecurity intelligence. Covering critical developments such as Microsoft's inadvertent removal of Copilot AI, cybercriminals leveraging Cascading Style Sheets for data tracking, and AI tools like DeepSeek capable of generating malware, the podcast highlights the evolving digital risks organizations face. Listeners gain insights into steganographic malware hidden in JPEG images, ransomware threats targeting U.S. government entities, and vulnerabilities in GitHub Actions affecting CI/CD environments. Additionally, it explores Cloudflare's adoption of post-quantum encryption, the extradition of a key LockBit ransomware developer, and the persistent challenges posed by advanced persistent threats (APTs). With expert analysis and in-depth reporting, the podcast equips professionals with the knowledge to navigate the dynamic cybersecurity landscape. 
https://healsecurity.com/

Microsoft's Copilot Mishap, Cloudflare’s Quantum Encryption, and AI-Generated Malware Threats

In this eye-opening episode of SecureTalk, host Justin Beals welcomes Joe Gronemeyer, Solutions Engineer at Akamai Technologies, for a masterclass in how internet security has evolved from basic content delivery to sophisticated edge protection powering 30% of global web traffic. From stories of literally burning servers in 1999 to today's quantum-resistant cryptography, this conversation tracks the incredible journey of cybersecurity infrastructure.
### Key Highlights:
- **The Birth of Edge Networks**: How Akamai transformed from emergency content delivery savior to cybersecurity powerhouse
- **Massive Security Scale**: Processing 26 billion web attacks monthly and analyzing 7 trillion DNS queries daily
- **Zero Trust Evolution**: Why identity-aware proxies are replacing traditional VPNs for enterprise security
- **Micro-segmentation Explained**: Creating "mini-firewalls" at every endpoint to contain breaches and limit attack radius
- **Bot Attack Revolution**: The evolution from simple DDoS to sophisticated credential abuse and account takeover attempts
- **API Security Challenges**: Why APIs have become the new security frontier as other defenses improve
- **Client-Side Security**: How PCI DSS v4 is forcing new approaches to JavaScript security monitoring
- **Quantum-Resistant Future**: Akamai's implementation of NIST-approved quantum-resistant cryptography

### Notable Quotes:
"If you had our auto rules applied during the Log4J incident, you wouldn't have had to take any action during Christmas - it would have been protecting you automatically." - Joe Gronemeyer

"At some point I think it was in 2011-2012, is when we would start looking at the traffic coming in and protecting websites from attacks as well. So applying security at the edge, keeping the bad actors away from your servers." - Joe Gronemeyer

### About Our Guest:
Joe Gronemeyer serves as a Solutions Engineer at Akamai Technologies with nearly a decade of experience. Previously, he spent 13 years at Accenture as a Senior Manager leading digital solutions for Fortune 500 companies across pharmaceuticals, consumer goods, and telecommunications industries. He holds a BS in Industrial and Systems Engineering from Georgia Tech and is CISSP certified.

### Resources Mentioned:
- Web Application Firewall (WAF) technology
- Zero Trust Network Access (ZTNA)
- Enterprise Application Access
- Client-Side Access and Compliance (formerly Page Integrity Manager)
- OWASP Top 10 for web, API, and AI security
- PCI DSS version 4 compliance requirements
- NIST standards for quantum-resistant cryptography
*Don't miss our next episode where we'll continue exploring cutting-edge cybersecurity approaches for enterprise organizations.*


From Burning Servers to Enterprise Resilience The Evolution of Internet Security With Akamai

In this special episode of HEAL Security Dispatch Daily Digest, we bring you key insights from RSA Conference 2025, held in San Francisco. With over 44,000 cybersecurity professionals in attendance, this year’s event spotlighted pressing healthcare security concerns — from AI’s evolving role to rising ransomware threats. We break down the most important takeaways, including:

- AI’s dual impact on healthcare security
- Nation-state ransomware threats like Black Basta
- The growing adoption of Zero Trust and microsegmentation
- Global collaboration around AI governance

Stay tuned to understand how these developments shape the future of healthcare cybersecurity — and what you need to do next.

Special Episode: RSA 2025 Highlights for Healthcare Cybersecurity Pros

The HEAL Security Dispatch Daily Digest is a trusted daily podcast delivering the latest updates in cybersecurity with a particular focus on healthcare. Hosted by Richard Simmons from London and presented by HEAL Security, the show dives into emerging cyber threats, expert insights, and industry trends that shape digital security worldwide. Each episode highlights critical developments—from exposed solar power systems and deepfake vulnerabilities to major data breaches at luxury brands and sophisticated phishing campaigns. The podcast also examines government advisories, such as CISA's vulnerability alerts, and analyzes reports like LevelBlue’s Spotlight on cybersecurity in healthcare. With its sharp focus on evolving risks and strategic responses, the HEAL Security Dispatch Daily Digest keeps listeners informed and prepared in the ever-changing landscape of cybersecurity. 
https://healsecurity.com/

Cartier Breach, Hedera Airdrop Scams, Solar Power Risks, and LevelBlue’s AI Threat Report

Listen to experts discuss the latest in Zero Trust security on our podcast! Explore topics like adaptive access control, data protection, and insider threat mitigation. Stay informed about Zero Trust architecture, best practices, and real-world case studies to enhance your cybersecurity strategy. Tune in for insights and advice on building a resilient, secure infrastructure.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Secure Talk reviews the latest threats, tips, and trends on security, innovation, and compliance. 

Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.

New tracks tagged #ZeroTrust