Chasing Entropy Podcast by 1Password

In this discussion, Grigorios Fragkos, known as Dr. Greg, shares his extensive background in cybersecurity spanning academia and enterprise defense. He delves into the fascinating rise of agentic AI and its potential ethical applications in enhancing cybersecurity defenses. The talk also highlights the evolving role of the Chief Information Security Officer, advocating for a shift towards a Chief Cybersecurity Officer to address new challenges. Dr. Greg emphasizes the necessity of continuous learning and critical thinking in navigating the complex cybersecurity landscape.

Javvad Malik, a security advocate, Guinness World Record holder, and co-host of Host Unknown, dives into a captivating conversation about humor's role in cybersecurity. He shares his unique journey from banking in the late '90s to industry advocacy, emphasizing the art of clear communication with non-technical audiences. With engaging anecdotes, he highlights how humor can bridge gaps in understanding complex security risks. Javvad also reflects on collaborative podcasting and the importance of empathy in sharing cybersecurity insights, making tech both relatable and entertaining.

Mark Hillick, CISO at Brex, shares his extensive journey from infrastructure engineer to security leader, emphasizing the importance of security as a business enabler. He discusses the critical role of empathy in building trust within security teams, highlighting how communication can transform past traumas into collaborative victories. Hillick also delves into AI's transformative impact on operational efficiency while cautioning against rushing without necessary safeguards. His insights blend innovation and heartfelt connection, making security a partner, not a blocker.

Join Brian Honan, founder and CEO of BH Consulting and a key figure in cybersecurity policy in Europe, as he shares his journey from IT's early days to current challenges. He emphasizes the importance of curiosity and continuous learning for aspiring security professionals. Brian discusses the emergence of agentic AI and its implications for enterprise security, urging teams to enable safe business outcomes rather than merely saying no. He also explores the complexities of data sovereignty and the evolving landscape of cybersecurity threats.

In this engaging chat, Thom Langford, EMEA CTO at Rapid7 and a two-time recovering CISO, reflects on his unique journey into cybersecurity. He shares insights on the emotional challenges faced in the field, including burnout and imposter syndrome, lightening the mood with humor and relatable stories. Thom emphasizes the importance of mentorship and community, while advocating for a more user-friendly approach to security that doesn't sacrifice fun. His outlook shows that serious topics can still have a playful twist, making learning enjoyable.

Allison Miller, a cybersecurity veteran and founder of Cartomancy Labs, shares her fascinating journey from childhood hacker to industry expert. She discusses how fraud reveals system weaknesses and emphasizes the importance of understanding payment and identity vulnerabilities. Allison also delves into the evolving role of AI in cybersecurity, highlighting its potential for detection and automation while addressing governance concerns. Her insights challenge organizations to enhance trust and security in a rapidly changing digital landscape.

Wendy Nather, a cybersecurity trailblazer known for her innovative concept of the 'security poverty line,' shares her unconventional career journey. She discusses her transition from Unix systems at a Swiss bank to pivotal CISO roles. Wendy emphasizes the need for empathy in cybersecurity leadership, arguing that understanding people is key to success. She highlights how resource constraints impact security practices and calls for a collaborative approach between security and business operations. Her insights inspire a more inclusive view of cybersecurity careers.

In a candid conversation, Adrian Sanabria, Principal Researcher at the Defenders Initiative and founder of Destroyed by Breach, shares his unconventional path from tech support to cybersecurity thought leader. He debunks common myths, arguing many industry 'best practices' are outdated and often ineffective. Adrian discusses the impact of emerging threats like Agentic AI, emphasizing the need for foundational problem-solving over hastily adopted innovations. His insights on mentorship and community engagement highlight the importance of empathy in tech support and broader cybersecurity.

Matt Johansen, a cybersecurity thought leader and founder of Vulnerable U, dives into his remarkable journey from a student's church pew to a leading voice in cybersecurity. He shares the pivotal moments that sparked his career through networking and mentors. Matt discusses the stark contrasts between agile startup environments and rigid corporate structures, highlighting challenges like shadow IT. With a passionate focus on mental health, he advocates for systemic changes to combat burnout and critiques the 'superhero culture' pervasive in the field.

Runa Sandvik, founder of security consulting firm Granite and a keen advocate for cybersecurity in high-risk spaces, joins the conversation. She shares her journey from hacking in Oslo to enhancing security at The New York Times, notably launching a whistleblower tip line. Runa discusses how cybersecurity pros can better support journalists through strong relationships and highlights critical initiatives. In a surprising twist, she reveals her research on hacking smart rifles, exposing alarming vulnerabilities. This conversation is a must-listen for anyone interested in digital security!