In this episode of The Edge, Anne Coulombe discusses the concept of Zero Trust as a principle rather than a product or strategy. She emphasizes the importance of identity in Zero Trust and how it can enhance both security and user experience. 

Anne also highlights the need for Zero Trust in industries like healthcare and life sciences, where data privacy and security are crucial. She explains the role of user behavior analytics and AI in Zero Trust and emphasizes the importance of responsible AI and governance. Anne also discusses the future of cloud computing and the continued relevance of networks.

Takeaways

•	Zero Trust is a principle that leverages network, IAM, and other security elements to create a secure environment for processing data.
•	Zero Trust enhances both security and user experience by reducing friction in accessing resources and adapting access based on user identity.
•	Industries like healthcare and life sciences are adopting Zero Trust to secure devices and systems and protect patient data.
•	User behavior analytics and AI can play a crucial role in identifying abnormal behavior and preventing security threats.
•	Cloud computing and Zero Trust go hand in hand, with identity being a key component in securing cloud-based services.
•	The future of cloud computing involves faster compute, AI, ML, and responsible AI with proper governance.
•	Networks are not dead but are being transformed and will continue to evolve alongside advancements in technology.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Healthcare and Zero Trust with Anne Coulombe

Joe Sullivan, former CISO of Uber and Facebook, shares his journey in the IT and security industry and discusses the evolving relationship between the public and private sectors in cybersecurity. 

He highlights the need for collaboration and communication between government agencies and tech companies to improve cybersecurity practices. 

Joe also emphasizes the importance of CISOs having a voice in policymaking and investing in tools that facilitate incident response and coordination across departments. He encourages the security community to continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. 

The conversation covers topics such as cybersecurity standards, the need for a clear and objective minimum bar, the role of the security leader, the importance of cross-functional collaboration, the evolving role of CISOs, and the challenges they face. 

It also touches on the need for better communication, incident response preparedness, and educating the wider team about cybersecurity. 

The conversation concludes with a discussion about the importance of protecting digital risks and the role of CISOs in addressing them.

Takeaways
•	Collaboration and communication between government agencies and tech companies are crucial for improving cybersecurity practices.
•	CISOs need to have a voice in policymaking and provide feedback on regulations to ensure their perspectives are considered.
•	Investing in tools that facilitate incident response and coordination across departments is essential for effective cybersecurity management.
•	The security community should continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. There is a need for a clear and objective minimum bar for cybersecurity standards.
•	The role of the security leader is evolving to include responsibilities beyond cybersecurity.
•	Cross-functional collaboration is crucial for effective cybersecurity.
•	CISOs need to educate the wider team about cybersecurity and the importance of their involvement.
•	Incident response preparedness is essential, as it is likely that organizations will face a cybersecurity incident at some point.
•	CISOs should take a proactive approach to address digital risks and protect the organization.
•	The cybersecurity community needs to come together and support each other in the fight against cyber threats.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Role of CISOs in Policymaking with Joe Sullivan

In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. 

He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. 

The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. 



Takeaways
•	The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering.
•	Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface.
•	Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach.
•	Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it.
•	Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well.
•	Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability.
•	The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience.
•	Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic.
•	Ranch dressing is a popular staple in Midwest cuisine.
•	Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Human Element in Cybersecurity with Nick Mullen

AI and cybersecurity are a perfect match, one that has the power to significantly enhance the way government systems detect and respond to threats. Integrating AI into zero trust frameworks elevates their effectiveness even further. AI is always active, consistently monitoring user behavior, network traffic and devices. It also gives agencies the ability to quickly tweak and improve security capabilities to stay one step ahead of threats. 

In this episode of Beyond borders: The future of zero trust in government, Paul Blahusch, the chief information security officer at the Labor Department, Beau Nuanes, systems engineer from ThunderCat, and Christopher Hoesly, director of solutions engineering for BigID dive into practical tips and tricks federal agencies can use to maximize AI-boosted zero trust setups for increased security and efficiency.

AI meets zero trust: A game changer for cybersecurity?

In this conversation, Evgeniy Kharam discusses his upcoming book on soft skills in technical sales. He emphasizes the importance of soft skills for sales engineers and how they have become more instrumental in the sales process. 

Evgeniy also highlights the need for adaptability and creativity in presentations, as well as the impact of soft skills in building connections with customers. 

The conversation then shifts to the recent CrowdStrike update that caused widespread disruption, leading to a discussion on the risks of relying on a single vendor and the importance of having a backup plan. 

The conversation concludes with a mention of Evgeniy's upcoming bike and hike event, which aims to bring together professionals to discuss innovation and security in the bike industry.

Takeaways

•	Soft skills are crucial for sales engineers and have become more instrumental in the sales process.
•	Adaptability and creativity in presentations can significantly impact building connections with customers.
•	Relying on a single vendor can pose risks, as demonstrated by the recent CrowdStrike update that caused widespread disruption.
•	Having a backup plan is essential to mitigate the impact of vendor outages or failures.
•	Evgeniy's upcoming bike and hike event aims to bring professionals together to discuss innovation and security in the bike industry.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Soft Skils With Evgeniy Kharam

We hosted a live conversation with cybersecurity expert Gina Yacone at Black Hat 2024. 

The discussion covered a range of critical topics, including the transformative impact of Zero Trust and AI, the challenges of burnout in the industry, and the importance of fostering cyber awareness. 

Gina, John, and Jaye also explored how events like Black Hat contribute to the cybersecurity community and offered insights on maximizing their benefits.

There may have also been a discussion on 'Does pineapple belong on pizza'.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Live at Black Hat with Gina Yacone

In today’s episode of the 'HEAL Security Dispatch Daily Digest,' Richard Simmons brings you a comprehensive update on critical developments in healthcare cybersecurity. Kicking off the discussion, Microsoft’s recent security lapse—where customer security logs were lost due to a data retention configuration issue—raises concerns about organizational vulnerability to cybersecurity incidents. This episode also covers Intel's denial of backdoor allegations from China, highlighting the heightened tensions over global technology security. Richard also reports on the First Nations Health Authority's May breach in British Columbia, which exposed sensitive personal information, and the growing importance of zero-trust architectures and advanced data encryption in healthcare.

Additionally, Richard discusses a ransomware attack on tech giant Nidec, further emphasizing the importance of proactive cybersecurity measures. Listeners are informed about new research identifying cybersecurity risks in extended reality (XR) technologies used in healthcare, with experts urging stronger protective frameworks. Finally, the episode wraps up with insights into Veeam’s new threat analysis tools for bolstering data resilience and the discovery of a vulnerability in Intel and AMD CPUs, which reopens concerns about Spectre attack protections.
https://healsecurity.com

From Lost Security Logs to Ransomware Breaches: Examining the Latest Cybersecurity Incidents

The HEAL Security podcast provides an informative roundup of the latest developments in technology, cybersecurity, and data protection. In this episode, topics include Microsoft's Windows 11 update challenges, particularly compatibility issues with older hardware, and a report underscoring the growing cybersecurity risks posed by third-party identities, which are implicated in a significant portion of breaches. Google’s investment in neutral atom quantum technology marks a major leap in quantum computing, while cybersecurity threats from groups like Evasive Panda show the ongoing risks to cloud data. The episode also covers the data breach at French ISP Free, criminal activity involving stolen credit card data on Meta's Threads platform, and the arrest of several individuals in Italy for unauthorized access to sensitive data, illustrating the persistent threat of cybercrime. The episode closes with a reminder about HEAL Security’s free trial offering for enhanced protection of digital environments. 
https://healsecurity.com/

Tech Turmoil: Windows 11 Woes, Meta's Threads Breach, and Google’s Quantum Leap

HEAL Security Dispatch Daily Digest is your go-to source for the latest cybersecurity trends and expert insights, with a focus on healthcare security. Hosted by HEAL Security, this podcast covers breaking cybersecurity news, critical vulnerabilities, and industry developments.

In this episode, topics include DeepSeek’s unencrypted data transmission raising privacy concerns, increased federal oversight of a critical Treasury payment system, and a surge in banking malware exploiting the SimpleHelp RMM tool. Other discussions highlight a major cyberattack on Hospital Sisters Health System affecting nearly 900,000 individuals, Trimble’s urgent Cityworks security update, and Cloudflare’s recent outage caused by a misstep in blocking a phishing URL. Additional segments cover Google’s email security advancements with DMARC, Kaspersky’s discovery of the "SparkCat" malware targeting iOS and Android apps, and Microsoft’s latest Edge browser security update.

Stay ahead of cyber threats with HEAL Security Dispatch Daily Digest.
🔗 healsecurity.com

HEAL Security Dispatch: DeepSeek Data Leak, Treasury Oversight, and Banking Malware Surge

HEAL Security Dispatch Daily Digest is your essential source for the latest in cybersecurity, with a focus on healthcare security challenges and technological advancements. Hosted by Richard Simmons from London, the podcast delivers expert insights on critical threats, industry developments, and solutions shaping the digital security landscape. In this episode, key topics include VMware's patch for guest-to-hypervisor escape vulnerabilities, calls for stronger cybersecurity measures in healthcare at HIMSS25, and serious misconfigurations affecting global access management systems. Other highlights cover AI-driven security innovations from Hunters, a cyber-espionage campaign targeting UAE infrastructure, Cisco's Webex vulnerability, new malware techniques leveraging Windows registry exploits, and Google's expansion of AI-powered scam detection for Android devices. Stay informed with HEAL Security Dispatch Daily Digest as we navigate the complex world of cybersecurity. 
https://healsecurity.com/

Cybersecurity News Roundup: VMware Patches, and Google's AI Scam Detection Expansion

HEAL Security Dispatch Daily Digest is a leading cybersecurity podcast hosted by Richard Simmons from London, delivering the latest updates on threats, vulnerabilities, and expert insights with a focus on healthcare and cybersecurity intelligence. Covering critical developments such as Microsoft's inadvertent removal of Copilot AI, cybercriminals leveraging Cascading Style Sheets for data tracking, and AI tools like DeepSeek capable of generating malware, the podcast highlights the evolving digital risks organizations face. Listeners gain insights into steganographic malware hidden in JPEG images, ransomware threats targeting U.S. government entities, and vulnerabilities in GitHub Actions affecting CI/CD environments. Additionally, it explores Cloudflare's adoption of post-quantum encryption, the extradition of a key LockBit ransomware developer, and the persistent challenges posed by advanced persistent threats (APTs). With expert analysis and in-depth reporting, the podcast equips professionals with the knowledge to navigate the dynamic cybersecurity landscape. 
https://healsecurity.com/

Microsoft's Copilot Mishap, Cloudflare’s Quantum Encryption, and AI-Generated Malware Threats

In this special episode of HEAL Security Dispatch Daily Digest, we bring you key insights from RSA Conference 2025, held in San Francisco. With over 44,000 cybersecurity professionals in attendance, this year’s event spotlighted pressing healthcare security concerns — from AI’s evolving role to rising ransomware threats. We break down the most important takeaways, including:

- AI’s dual impact on healthcare security
- Nation-state ransomware threats like Black Basta
- The growing adoption of Zero Trust and microsegmentation
- Global collaboration around AI governance

Stay tuned to understand how these developments shape the future of healthcare cybersecurity — and what you need to do next.

Special Episode: RSA 2025 Highlights for Healthcare Cybersecurity Pros

The HEAL Security Dispatch Daily Digest is a trusted daily podcast delivering the latest updates in cybersecurity with a particular focus on healthcare. Hosted by Richard Simmons from London and presented by HEAL Security, the show dives into emerging cyber threats, expert insights, and industry trends that shape digital security worldwide. Each episode highlights critical developments—from exposed solar power systems and deepfake vulnerabilities to major data breaches at luxury brands and sophisticated phishing campaigns. The podcast also examines government advisories, such as CISA's vulnerability alerts, and analyzes reports like LevelBlue’s Spotlight on cybersecurity in healthcare. With its sharp focus on evolving risks and strategic responses, the HEAL Security Dispatch Daily Digest keeps listeners informed and prepared in the ever-changing landscape of cybersecurity. 
https://healsecurity.com/

Cartier Breach, Hedera Airdrop Scams, Solar Power Risks, and LevelBlue’s AI Threat Report

In this episode, Edd Hall discusses recent major cybersecurity incidents affecting healthcare, retail, and software development sectors. Topics include Premier Health and Apria Healthcare data breaches, supply chain vulnerabilities highlighted by the Dollar Tree hack, and the CrowdStrike update failure. Edd also covers warnings from the FBI and CISA about the Scattered Spider threat group, phishing campaigns targeting Python developers, and the spread of Lumma Stealer malware via Facebook Ads. Stay informed on how these events impact security and what measures organizations and individuals should take.

Critical Healthcare Breaches, Supply Chain Risks, and Emerging Cyber Threats

From AI-powered phishing scams in Brazil to a major breach at Allianz Life, today’s cybersecurity roundup covers the latest threats and revelations. Learn how attackers are using generative AI tools—and how defenders are fighting back using AI-powered forensics. We dive into a privilege escalation flaw in Amazon ECS, a new malware analysis platform from CISA, and cyberattacks targeting Air France, KLM, and Allianz. Plus, find out what’s next for three Pennsylvania hospitals in a major healthcare shake-up. Stay informed and stay secure with today’s top stories in cybersecurity.

AI Scams, Cloud Flaws, and Global Breaches: This Week in Cybersecurity

In this episode, Edd Hall discusses the latest cybersecurity developments, including an actively exploited FortiSIEM remote code execution flaw, a KernelSU vulnerability granting root access on Android devices, and a Russian-linked APT campaign targeting government and energy sectors. He also covers supply chain risks from backdoored Docker Hub images, GitHub-based SmartLoader malware, and the growing threat of stealthy backdoors against public sector entities. Beyond threats, the episode explores initiatives to enhance EMS integration in healthcare interoperability and new CISA guidance to strengthen OT asset inventories for critical infrastructure.

Recent Cybersecurity Threats, Vulnerabilities, and Mitigation Updates

In this special global edition of the HEAL Security Dispatch Daily Digest, we turn our attention to the Middle East. From rising cyber threats and regional security initiatives to groundbreaking partnerships and technological advancements, this episode explores the latest developments shaping the region’s cybersecurity landscape.

Global Edition: Middle East Cybersecurity Outlook

In today’s HEAL Security Dispatch Daily Digest, we cover the biggest cybersecurity developments shaping the digital landscape. From the Medusa ransomware exploiting Fortra’s GoAnywhere flaw to healthcare networks struggling with outdated infrastructure, today’s stories reveal how technology, security, and innovation intersect. We also explore BatShadow’s new Go-based malware campaign, DraftKings’ credential stuffing breach, and growing concerns over AI-driven “vibe coding.” Plus, we look at Google’s CodeMender AI, which patches vulnerabilities automatically, and Microsoft’s latest Windows 11 security changes. Stay informed and stay secure with the latest in cybersecurity intelligence.

Medusa Ransomware Exploits GoAnywhere Vulnerability

In this episode, Edd Hall discusses the latest cybersecurity developments shaping the global landscape — including a massive surge in DDoS attacks across the Middle East, LinkedIn’s AI data privacy deadline, and a shocking case of a U.S. defense contractor selling exploits to Russia. He also covers a major data leak from Iran’s intelligence academy, new additions to CISA’s Known Exploited Vulnerabilities catalog, malware targeting WooCommerce sites, high-severity flaws in Docker Compose, and fresh security guidance from CISA and NSA for Microsoft Exchange and industrial control systems.

DDoS Surge, AI Privacy Deadline, and New CISA Warnings

Listen to experts discuss the latest in Zero Trust security on our podcast! Explore topics like adaptive access control, data protection, and insider threat mitigation. Stay informed about Zero Trust architecture, best practices, and real-world case studies to enhance your cybersecurity strategy. Tune in for insights and advice on building a resilient, secure infrastructure.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

The GovBrief is brought to you by the GovExec Content Studio. Join us for insightful discussions with leaders of government and industry, as they delve into the trending topics impacting the public sector, from efficiency and workforce productivity to AI integration, modernization and more.

For advertising opportunities please visit: https://about.govexec.com/connect/

New tracks tagged #zerotrust