In this conversation with Jaye Tillson and John Spiegel, Jim Tiller discusses the state of cybersecurity in 2024 and the role of a vCISO. He emphasizes the importance of having a breadth of understanding in cybersecurity and the challenges of keeping up with the evolving industry. 

The conversation also touches on the common risks and concerns across different verticals, the need to raise the cost for attackers, and the debate on platforms and consolidation in the cybersecurity market. 

The conversation explores the disruption and changing landscape of security, the importance of consolidation and simplification, the future of security, the role of Zero Trust and AI, and fun food experiences.

Takeaways

•	Having a breadth of understanding is crucial in the field of cybersecurity, as it covers a wide range of topics including governance, legislation, infrastructure, and more.
•	The role of a VCISO (Virtual Chief Information Security Officer) has emerged as a way to provide strategic security guidance to organizations without the need for a full-time dedicated CISO.
•	The state of cybersecurity in 2024 is characterized by the increasing threat of ransomware and the need for organizations to have a comprehensive cybersecurity strategy.
•	Consolidation in the cybersecurity market is a topic of debate, with some advocating for platform solutions while others emphasize the importance of diversity and integration. Customers are becoming more aware of the disruption and changing nature of security solutions, leading to a desire for more consolidated and simplified approaches.
•	Consolidation and simplification can lead to improved efficiency, cost savings, and better risk management.
•	The future of security may involve advancements in AI and the development of more accessible and user-friendly AI products.
•	Zero Trust remains important, particularly in the federal space, but there is a need to make it more tangible and easier to implement.
•	Food experiences can be memorable and enjoyable, even in unexpected places.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Platform Debate with Jim Tiller

Eliza-May Austin shares her journey in the cybersecurity industry and the basics that companies should focus on. She emphasizes the importance of doing the basics right, such as access management, logging and monitoring, and making use of existing security systems. 

Eliza-May also highlights the need for aligning cyber defense with business strategy and avoiding unnecessary complexity. She discusses the challenges of implementing Zero Trust and the importance of communication and education in any project. 

Additionally, Eliza-May shares lessons she has learned as a CEO, including the importance of sleep and downtime for both personal well-being and the success of the business. 

In this conversation, Eliza-May Austin discusses the importance of building a reliable team and setting boundaries to maintain work-life balance. She shares mechanisms she uses to disconnect from technology and take time off. 

Eliza-May also talks about the challenges of being a founder and the impact it can have on relationships. She emphasizes the need to surround oneself with the right people and let go of friendships that don't add value. 

The conversation also touches on the topic of diversity in the tech industry and the importance of integrity.

Takeaways

•	Focus on doing the basics right in cybersecurity, such as access management and logging and monitoring.
•	Make use of existing security systems and align cyber defense with business strategy.
•	Avoid unnecessary complexity in cybersecurity projects.
•	Implementing Zero Trust requires careful planning, communication, and education.
•	As a CEO, prioritize sleep and downtime for personal well-being and the success of the business. Building a reliable team is critical for success as a founder.
•	Setting boundaries and disconnecting from technology are important for maintaining work-life balance.
•	Surrounding oneself with the right people and letting go of friendships that don't add value is necessary for personal and professional growth.
•	The tech industry still lacks diversity, and there is a need to move beyond tokenism and focus on hiring based on merit.
•	Maintaining integrity is crucial in the cybersecurity industry and in leadership roles.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Balancing Business, Security and Life with Eliza-May Austin

In this episode of The Edge, Anne Coulombe discusses the concept of Zero Trust as a principle rather than a product or strategy. She emphasizes the importance of identity in Zero Trust and how it can enhance both security and user experience. 

Anne also highlights the need for Zero Trust in industries like healthcare and life sciences, where data privacy and security are crucial. She explains the role of user behavior analytics and AI in Zero Trust and emphasizes the importance of responsible AI and governance. Anne also discusses the future of cloud computing and the continued relevance of networks.

Takeaways

•	Zero Trust is a principle that leverages network, IAM, and other security elements to create a secure environment for processing data.
•	Zero Trust enhances both security and user experience by reducing friction in accessing resources and adapting access based on user identity.
•	Industries like healthcare and life sciences are adopting Zero Trust to secure devices and systems and protect patient data.
•	User behavior analytics and AI can play a crucial role in identifying abnormal behavior and preventing security threats.
•	Cloud computing and Zero Trust go hand in hand, with identity being a key component in securing cloud-based services.
•	The future of cloud computing involves faster compute, AI, ML, and responsible AI with proper governance.
•	Networks are not dead but are being transformed and will continue to evolve alongside advancements in technology.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Healthcare and Zero Trust with Anne Coulombe

Joe Sullivan, former CISO of Uber and Facebook, shares his journey in the IT and security industry and discusses the evolving relationship between the public and private sectors in cybersecurity. 

He highlights the need for collaboration and communication between government agencies and tech companies to improve cybersecurity practices. 

Joe also emphasizes the importance of CISOs having a voice in policymaking and investing in tools that facilitate incident response and coordination across departments. He encourages the security community to continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. 

The conversation covers topics such as cybersecurity standards, the need for a clear and objective minimum bar, the role of the security leader, the importance of cross-functional collaboration, the evolving role of CISOs, and the challenges they face. 

It also touches on the need for better communication, incident response preparedness, and educating the wider team about cybersecurity. 

The conversation concludes with a discussion about the importance of protecting digital risks and the role of CISOs in addressing them.

Takeaways
•	Collaboration and communication between government agencies and tech companies are crucial for improving cybersecurity practices.
•	CISOs need to have a voice in policymaking and provide feedback on regulations to ensure their perspectives are considered.
•	Investing in tools that facilitate incident response and coordination across departments is essential for effective cybersecurity management.
•	The security community should continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. There is a need for a clear and objective minimum bar for cybersecurity standards.
•	The role of the security leader is evolving to include responsibilities beyond cybersecurity.
•	Cross-functional collaboration is crucial for effective cybersecurity.
•	CISOs need to educate the wider team about cybersecurity and the importance of their involvement.
•	Incident response preparedness is essential, as it is likely that organizations will face a cybersecurity incident at some point.
•	CISOs should take a proactive approach to address digital risks and protect the organization.
•	The cybersecurity community needs to come together and support each other in the fight against cyber threats.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Role of CISOs in Policymaking with Joe Sullivan

In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. 

He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. 

The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. 



Takeaways
•	The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering.
•	Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface.
•	Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach.
•	Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it.
•	Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well.
•	Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability.
•	The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience.
•	Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic.
•	Ranch dressing is a popular staple in Midwest cuisine.
•	Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Human Element in Cybersecurity with Nick Mullen

AI and cybersecurity are a perfect match, one that has the power to significantly enhance the way government systems detect and respond to threats. Integrating AI into zero trust frameworks elevates their effectiveness even further. AI is always active, consistently monitoring user behavior, network traffic and devices. It also gives agencies the ability to quickly tweak and improve security capabilities to stay one step ahead of threats. 

In this episode of Beyond borders: The future of zero trust in government, Paul Blahusch, the chief information security officer at the Labor Department, Beau Nuanes, systems engineer from ThunderCat, and Christopher Hoesly, director of solutions engineering for BigID dive into practical tips and tricks federal agencies can use to maximize AI-boosted zero trust setups for increased security and efficiency.

AI meets zero trust: A game changer for cybersecurity?

In this conversation, Evgeniy Kharam discusses his upcoming book on soft skills in technical sales. He emphasizes the importance of soft skills for sales engineers and how they have become more instrumental in the sales process. 

Evgeniy also highlights the need for adaptability and creativity in presentations, as well as the impact of soft skills in building connections with customers. 

The conversation then shifts to the recent CrowdStrike update that caused widespread disruption, leading to a discussion on the risks of relying on a single vendor and the importance of having a backup plan. 

The conversation concludes with a mention of Evgeniy's upcoming bike and hike event, which aims to bring together professionals to discuss innovation and security in the bike industry.

Takeaways

•	Soft skills are crucial for sales engineers and have become more instrumental in the sales process.
•	Adaptability and creativity in presentations can significantly impact building connections with customers.
•	Relying on a single vendor can pose risks, as demonstrated by the recent CrowdStrike update that caused widespread disruption.
•	Having a backup plan is essential to mitigate the impact of vendor outages or failures.
•	Evgeniy's upcoming bike and hike event aims to bring professionals together to discuss innovation and security in the bike industry.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Soft Skils With Evgeniy Kharam

We hosted a live conversation with cybersecurity expert Gina Yacone at Black Hat 2024. 

The discussion covered a range of critical topics, including the transformative impact of Zero Trust and AI, the challenges of burnout in the industry, and the importance of fostering cyber awareness. 

Gina, John, and Jaye also explored how events like Black Hat contribute to the cybersecurity community and offered insights on maximizing their benefits.

There may have also been a discussion on 'Does pineapple belong on pizza'.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Live at Black Hat with Gina Yacone

In today’s episode of the 'HEAL Security Dispatch Daily Digest,' Richard Simmons brings you a comprehensive update on critical developments in healthcare cybersecurity. Kicking off the discussion, Microsoft’s recent security lapse—where customer security logs were lost due to a data retention configuration issue—raises concerns about organizational vulnerability to cybersecurity incidents. This episode also covers Intel's denial of backdoor allegations from China, highlighting the heightened tensions over global technology security. Richard also reports on the First Nations Health Authority's May breach in British Columbia, which exposed sensitive personal information, and the growing importance of zero-trust architectures and advanced data encryption in healthcare.

Additionally, Richard discusses a ransomware attack on tech giant Nidec, further emphasizing the importance of proactive cybersecurity measures. Listeners are informed about new research identifying cybersecurity risks in extended reality (XR) technologies used in healthcare, with experts urging stronger protective frameworks. Finally, the episode wraps up with insights into Veeam’s new threat analysis tools for bolstering data resilience and the discovery of a vulnerability in Intel and AMD CPUs, which reopens concerns about Spectre attack protections.
https://healsecurity.com

From Lost Security Logs to Ransomware Breaches: Examining the Latest Cybersecurity Incidents

The HEAL Security podcast provides an informative roundup of the latest developments in technology, cybersecurity, and data protection. In this episode, topics include Microsoft's Windows 11 update challenges, particularly compatibility issues with older hardware, and a report underscoring the growing cybersecurity risks posed by third-party identities, which are implicated in a significant portion of breaches. Google’s investment in neutral atom quantum technology marks a major leap in quantum computing, while cybersecurity threats from groups like Evasive Panda show the ongoing risks to cloud data. The episode also covers the data breach at French ISP Free, criminal activity involving stolen credit card data on Meta's Threads platform, and the arrest of several individuals in Italy for unauthorized access to sensitive data, illustrating the persistent threat of cybercrime. The episode closes with a reminder about HEAL Security’s free trial offering for enhanced protection of digital environments. 
https://healsecurity.com/

Tech Turmoil: Windows 11 Woes, Meta's Threads Breach, and Google’s Quantum Leap

HEAL Security Dispatch Daily Digest is your go-to source for the latest cybersecurity trends and expert insights, with a focus on healthcare security. Hosted by HEAL Security, this podcast covers breaking cybersecurity news, critical vulnerabilities, and industry developments.

In this episode, topics include DeepSeek’s unencrypted data transmission raising privacy concerns, increased federal oversight of a critical Treasury payment system, and a surge in banking malware exploiting the SimpleHelp RMM tool. Other discussions highlight a major cyberattack on Hospital Sisters Health System affecting nearly 900,000 individuals, Trimble’s urgent Cityworks security update, and Cloudflare’s recent outage caused by a misstep in blocking a phishing URL. Additional segments cover Google’s email security advancements with DMARC, Kaspersky’s discovery of the "SparkCat" malware targeting iOS and Android apps, and Microsoft’s latest Edge browser security update.

Stay ahead of cyber threats with HEAL Security Dispatch Daily Digest.
🔗 healsecurity.com

HEAL Security Dispatch: DeepSeek Data Leak, Treasury Oversight, and Banking Malware Surge

HEAL Security Dispatch Daily Digest is your essential source for the latest in cybersecurity, with a focus on healthcare security challenges and technological advancements. Hosted by Richard Simmons from London, the podcast delivers expert insights on critical threats, industry developments, and solutions shaping the digital security landscape. In this episode, key topics include VMware's patch for guest-to-hypervisor escape vulnerabilities, calls for stronger cybersecurity measures in healthcare at HIMSS25, and serious misconfigurations affecting global access management systems. Other highlights cover AI-driven security innovations from Hunters, a cyber-espionage campaign targeting UAE infrastructure, Cisco's Webex vulnerability, new malware techniques leveraging Windows registry exploits, and Google's expansion of AI-powered scam detection for Android devices. Stay informed with HEAL Security Dispatch Daily Digest as we navigate the complex world of cybersecurity. 
https://healsecurity.com/

Cybersecurity News Roundup: VMware Patches, and Google's AI Scam Detection Expansion

HEAL Security Dispatch Daily Digest is a leading cybersecurity podcast hosted by Richard Simmons from London, delivering the latest updates on threats, vulnerabilities, and expert insights with a focus on healthcare and cybersecurity intelligence. Covering critical developments such as Microsoft's inadvertent removal of Copilot AI, cybercriminals leveraging Cascading Style Sheets for data tracking, and AI tools like DeepSeek capable of generating malware, the podcast highlights the evolving digital risks organizations face. Listeners gain insights into steganographic malware hidden in JPEG images, ransomware threats targeting U.S. government entities, and vulnerabilities in GitHub Actions affecting CI/CD environments. Additionally, it explores Cloudflare's adoption of post-quantum encryption, the extradition of a key LockBit ransomware developer, and the persistent challenges posed by advanced persistent threats (APTs). With expert analysis and in-depth reporting, the podcast equips professionals with the knowledge to navigate the dynamic cybersecurity landscape. 
https://healsecurity.com/

Microsoft's Copilot Mishap, Cloudflare’s Quantum Encryption, and AI-Generated Malware Threats

In this special episode of HEAL Security Dispatch Daily Digest, we bring you key insights from RSA Conference 2025, held in San Francisco. With over 44,000 cybersecurity professionals in attendance, this year’s event spotlighted pressing healthcare security concerns — from AI’s evolving role to rising ransomware threats. We break down the most important takeaways, including:

- AI’s dual impact on healthcare security
- Nation-state ransomware threats like Black Basta
- The growing adoption of Zero Trust and microsegmentation
- Global collaboration around AI governance

Stay tuned to understand how these developments shape the future of healthcare cybersecurity — and what you need to do next.

Special Episode: RSA 2025 Highlights for Healthcare Cybersecurity Pros

The HEAL Security Dispatch Daily Digest is a trusted daily podcast delivering the latest updates in cybersecurity with a particular focus on healthcare. Hosted by Richard Simmons from London and presented by HEAL Security, the show dives into emerging cyber threats, expert insights, and industry trends that shape digital security worldwide. Each episode highlights critical developments—from exposed solar power systems and deepfake vulnerabilities to major data breaches at luxury brands and sophisticated phishing campaigns. The podcast also examines government advisories, such as CISA's vulnerability alerts, and analyzes reports like LevelBlue’s Spotlight on cybersecurity in healthcare. With its sharp focus on evolving risks and strategic responses, the HEAL Security Dispatch Daily Digest keeps listeners informed and prepared in the ever-changing landscape of cybersecurity. 
https://healsecurity.com/

Cartier Breach, Hedera Airdrop Scams, Solar Power Risks, and LevelBlue’s AI Threat Report

In this episode, Edd Hall discusses recent major cybersecurity incidents affecting healthcare, retail, and software development sectors. Topics include Premier Health and Apria Healthcare data breaches, supply chain vulnerabilities highlighted by the Dollar Tree hack, and the CrowdStrike update failure. Edd also covers warnings from the FBI and CISA about the Scattered Spider threat group, phishing campaigns targeting Python developers, and the spread of Lumma Stealer malware via Facebook Ads. Stay informed on how these events impact security and what measures organizations and individuals should take.

Critical Healthcare Breaches, Supply Chain Risks, and Emerging Cyber Threats

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France, KLM, and Allianz. Plus, find out what’s next for three Pennsylvania hospitals in a major healthcare shake-up. Stay informed and stay secure with today’s top stories in cybersecurity.

AI Scams, Cloud Flaws, and Global Breaches: This Week in Cybersecurity

In this episode, Edd Hall discusses the latest cybersecurity developments, including an actively exploited FortiSIEM remote code execution flaw, a KernelSU vulnerability granting root access on Android devices, and a Russian-linked APT campaign targeting government and energy sectors. He also covers supply chain risks from backdoored Docker Hub images, GitHub-based SmartLoader malware, and the growing threat of stealthy backdoors against public sector entities. Beyond threats, the episode explores initiatives to enhance EMS integration in healthcare interoperability and new CISA guidance to strengthen OT asset inventories for critical infrastructure.

Recent Cybersecurity Threats, Vulnerabilities, and Mitigation Updates

In this special global edition of the HEAL Security Dispatch Daily Digest, we turn our attention to the Middle East. From rising cyber threats and regional security initiatives to groundbreaking partnerships and technological advancements, this episode explores the latest developments shaping the region’s cybersecurity landscape.

Global Edition: Middle East Cybersecurity Outlook

Listen to experts discuss the latest in Zero Trust security on our podcast! Explore topics like adaptive access control, data protection, and insider threat mitigation. Stay informed about Zero Trust architecture, best practices, and real-world case studies to enhance your cybersecurity strategy. Tune in for insights and advice on building a resilient, secure infrastructure.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

The GovBrief is brought to you by the GovExec Content Studio. Join us for insightful discussions with leaders of government and industry, as they delve into the trending topics impacting the public sector, from efficiency and workforce productivity to AI integration, modernization and more.

For advertising opportunities please visit: https://about.govexec.com/connect/

New tracks tagged #zerotrust