Episodes
How CISOs Are Using Attack Path Management
In episode 160 of Cybersecurity Business with Fexingo, Lucas and Luna dig into attack path management — the practice of mapping how an attacker could move from initial compromise to crown-jewel data. They explore a 2025 report showing that 74 percent of breach paths used known, unpatched vulnerabilities, and walk through how a mid-sized healthcare firm used graph-based analysis to cut its exposure by half. The conversation covers why traditional patch management fails, how CISOs are shifting to…
How CISOs Buy Cyber Insurance for Cloud Native Stacks
As enterprises move workloads to the cloud, cyber insurance underwriting is struggling to keep up. In this episode, Lucas and Luna explore how cloud-native architectures are forcing insurers to rethink risk models, and how CISOs are adapting their buying strategies. They break down the rise of cloud-specific insurance products, the role of automated security assessments, and the growing gap between traditional policies and modern infrastructure. With real-world examples like the Capital One…
How Security Teams Are Adopting Passwordless Authentication
Passwords are the weakest link in enterprise security, yet most firms still rely on them. In this episode, Lucas and Luna explore the shift to passwordless authentication—why it's gaining traction, how it works, and what it means for security teams. They break down the move from passwords to passkeys, the role of standards like FIDO2, and the challenges of rolling out passwordless across a large organization. With practical examples and real-world considerations, they explain how this approach…
How Cyber Insurance Is Priced After a Breach
In this episode of Cybersecurity Business, Lucas and Luna dive into the hidden mechanics of how cyber insurance premiums are set after a breach. They break down the role of loss-run reports, the shift from per-incident to aggregate coverage, and why a single breach can double your premium even if your security posture improves. They also explore how insurers are now using real-time threat telemetry and AI to price risk, and what CISOs can do to avoid being blindsided at renewal. With a sharp…
How Breach Disclosure Timelines Shape Cyber Insurance Payouts
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how the speed and accuracy of breach disclosure can influence cyber insurance payouts, using the 2024 Change Healthcare ransomware attack as a case study. They unpack the insurer's perspective, the role of forensic investigators, and the delicate dance between legal obligations and policy requirements. With cyber premiums up an average of 15% in 2026, understanding the disclosure timeline is more critical than ever.…
How CISOs Use AI to Triage Alerts and Beat Alert Fatigue
Security teams drown in alerts—some estimates put the volume at thousands per day. In this episode, Lucas and Luna explore how CISOs are using AI-powered triage to separate real threats from noise. They dig into the math behind false positives, why traditional rules-based systems are failing, and what it means for security analysts' jobs. With a concrete example from a mid-sized fintech, they show how AI cut alert volume by 70 percent while catching a sophisticated credential-stuffing attack…
How Cyber Insurance Premiums Are Priced After a Breach
In this episode of Cybersecurity Business, Lucas and Luna dive into the gritty mechanics of how cyber insurance premiums are calculated after a company suffers a breach. They explore the role of security questionnaires, loss history, and remediation efforts, using a concrete example of a mid-sized logistics firm that saw its premium double after a ransomware incident. The conversation unpacks how insurers differentiate between a single event and a pattern of poor security hygiene, and why a…
How Zero-Knowledge Proofs Can Prove a Breach Without Revealing Secrets
Enterprises have long struggled to prove to auditors, regulators, and business partners that they've been breached without exposing the very vulnerabilities that allowed it. Zero-knowledge proofs, a cryptographic technique that lets one party prove a fact without revealing the underlying data, are emerging as a practical solution. In this episode, Lucas and Luna explore how firms are using zero-knowledge proofs to verify breach notifications, share threat intelligence without leaking sensitive…
Why Security Teams Are Switching to On-Prem SIEM
In this episode of Cybersecurity Business, Lucas and Luna look at a quiet but significant shift in enterprise security: on-premise security information and event management, or SIEM. After more than a decade of 'cloud first' messaging, a growing number of security teams are pulling their log data back in-house. Lucas walks through the math that's driving the change—data ingestion costs, egress fees, and the trade-offs between cloud scalability and on-prem control—and cites a concrete case: a…
How Security Teams Use Threat Hunting to Find Hidden Attackers
Episode 151 of Cybersecurity Business with Fexingo looks inside the world of proactive threat hunting. Lucas and Luna examine how enterprise security teams move beyond automated alerts to actively search for signs of intrusion that slipped past their defenses. They break down the difference between reactive monitoring and hunting, the role of the MITRE ATT&CK framework as a roadmap, and the human intuition that still matters when machines miss the subtle clues. Using the example of a stealthy…
How Zero Trust Is Rewriting Network Security
In this special 150th episode, Lucas and Luna explore how the zero trust model is fundamentally changing enterprise network security. They trace the shift from perimeter-based defenses to a verify-everything approach, using the 2023 Okta breach as a case study to show how even identity providers can fall victim to credential theft. The conversation covers the rise of identity-centric security, the practical challenges of implementing zero trust, and the uncomfortable truth that perimeters no…
How CISOs Are Using Threat Intelligence Sharing to Stop Attacks
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore the rise of threat intelligence sharing among enterprises. They dive into how companies are moving from siloed security to collaborative defense, using platforms like the Cyber Threat Alliance and industry-specific ISACs. The conversation centers on a concrete example: the 2021 Kaseya supply-chain attack, where shared indicators of compromise helped organizations respond faster. Lucas breaks down the economics of…
How CISOs Use Tabletop Exercises to Stress Test Their Plans
Episode 148 of Cybersecurity Business with Fexingo looks at how CISOs use tabletop exercises to stress-test their incident response plans before a real breach hits. Lucas and Luna walk through a realistic ransomware scenario, showing how a well-run exercise can expose gaps in communication, decision-making, and technical readiness. They discuss why many exercises fail because they're too scripted, how red teams and purple teams add realism, and what CISOs can learn from the military's use of…
How Cyber Insurance is Reshaping Enterprise Defense Strategies
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the evolving role of cyber insurance in enterprise security. With premiums rising sharply and carriers demanding stronger security controls, insurers are becoming de facto regulators of corporate cybersecurity. Lucas breaks down how underwriting now involves technical assessments, how policy terms are tightening around ransomware and business email compromise, and why some companies are self-insuring while others…
How AI Agents Are Reshaping Enterprise Security Operations
In this episode, Lucas and Luna dive into how AI agents are transforming security operations centers. They explore a real-world example: a major financial institution that deployed autonomous agents to triage thousands of daily alerts, cutting response times by 60 percent. The conversation covers what AI agents actually do, where they still struggle, and how human analysts are shifting from firefighters to supervisors. They also discuss the risk of 'agent sprawl' and why some CISOs are pushing…
How CISOs Are Using Cyber Range Training to Prepare for Real Attacks
Cyber ranges are the flight simulators of the cybersecurity world, letting security teams rehearse their response to a live attack in a simulated environment. In this episode, Lucas and Luna explore how leading enterprises are using cyber ranges to move beyond tabletop exercises and build hands-on muscle memory for incident response. They break down the anatomy of a typical range exercise, from realistic network ladders to the 'injects' that force teams to make decisions under pressure. The…
How Security Teams Use Cyber Deception to Trap Attackers
In this episode, Lucas and Luna explore how enterprises are deploying cyber deception—honeypots, decoys, and fake credentials—to outsmart attackers. They dive into a real case involving a financial services firm that used a fake database to catch a persistent intruder, and discuss the shift from passive detection to active engagement. With insights on realistic honeypots, the role of deception in threat intelligence, and how even smaller companies can adopt these strategies, this episode offers…
How CISOs Turn Incident Postmortems Into Strategic Assets
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are transforming incident postmortems from after-the-fact reports into strategic assets that reshape security programs. The discussion centers on a 2025 study showing that companies with structured post-incident review processes cut repeat incidents by 40 percent. They break down why traditional postmortems often fail, how forward-looking teams use them to drive process improvements and tooling…
Why CISOs Are Cutting Their Security Vendor Count
Episode 142 of Cybersecurity Business with Fexingo dives into the growing trend of security vendor consolidation. Lucas and Luna unpack why the average enterprise now juggles over 45 security tools—and why many CISOs are aggressively cutting that number. They explore the business case for consolidation, from reducing alert fatigue to lowering total cost of ownership, and cite examples like Palo Alto Networks' Cortex XSIAM and CrowdStrike's Falcon platform. The hosts also discuss the risks of…
How Bug Bounty Programs Find Vulnerabilities Before Attackers
Bug bounty programs have become a cornerstone of enterprise security. In 2025 alone, HackerOne's community reported over 100,000 unique vulnerabilities. This episode explores how companies like Google and Microsoft leverage crowd-sourced testing to catch flaws internal teams miss. We break down the economics: payouts versus breach costs, the choice between running an in-house program or using a platform like Bugcrowd, and why private programs are growing for sensitive assets. Lucas and Luna…
How Software Bill of Materials Improves Supply Chain Security
In episode 140 of Cybersecurity Business, Lucas and Luna dive into how enterprises are adopting Software Bill of Materials (SBOM) to manage supply chain risk. Starting with the Log4j vulnerability as a cautionary tale, they explain what an SBOM is—an ingredient list for software—and how it helps organizations know exactly what components are in their code. They discuss adoption drivers like the 2021 Executive Order and CISA's guidance, tools such as Anchore and Snyk, and real-world case studies…
How Cloud Misconfigurations Cause Most Breaches
Episode 139 dives into cloud security posture management (CSPM). Lucas and Luna break down a shocking stat: over 60% of cloud breaches stem from customer misconfigurations, citing Azure's latest report. They explore how tools like CSPM automatically discover and remediate risky settings, share a case study of a Fortune 500 retailer that closed 90% of critical gaps in three months, and debate whether CSPM is becoming table stakes for cloud adoption. A practical look at why 'the cloud is secure'…
How XDR Is Reshaping Enterprise Incident Response
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how Extended Detection and Response (XDR) platforms are changing the way security teams investigate and respond to threats. They break down how XDR aggregates telemetry from endpoints, networks, and cloud workloads to reduce alert fatigue and accelerate containment. Lucas cites an IDC survey showing nearly 40% of large enterprises have adopted XDR by mid-2026, and contrasts it with traditional SIEM approaches. The…
How CISOs Fight Deepfake Social Engineering Threats
In 2025, a deepfake voice clone of a CEO tricked a multinational firm into wiring $25 million. As generative AI tools make voice and video synthesis cheap and convincing, enterprises are scrambling to update their social engineering defenses. This episode drills into how security teams verify identity on calls, the state-of-the-art in liveness detection, and why old-school callback protocols are making a comeback. We look at real-world incidents, the detection arms race between security vendors…
How SEC Disclosure Rules Are Reshaping Incident Response Plans
On July 27, 2026, a mid-sized healthcare company suffered a ransomware attack and filed an SEC 8-K within 48 hours. Lucas and Luna explore how the SEC's cybersecurity disclosure rule, effective since late 2023, has fundamentally changed how enterprises prepare for and respond to breaches. They discuss the pressure on CISOs to assess materiality quickly, the rise of disclosure committees, and why tabletop exercises now include mock filings. Plus: how the rule is forcing firms to rethink the…
How Enterprises Outsource Threat Detection to MDR Providers
Episode 135 of Cybersecurity Business with Fexingo dives into the rapid adoption of Managed Detection and Response (MDR) services. Lucas and Luna explore why over 60% of organizations now outsource threat hunting to providers like CrowdStrike and Arctic Wolf, citing a severe shortage of cybersecurity analysts and the need for 24/7 coverage. They break down the economics: a typical in-house SOC costs upwards of $1.5 million annually, while MDR subscriptions can start at $50,000 per year for…
How Companies Use Security Ratings to Vet Third-Party Vendors
In this episode, Lucas and Luna explore the rise of security rating platforms like BitSight and SecurityScorecard, which are replacing traditional vendor questionnaires. They discuss how a typical Fortune 500 company with over 1,300 third-party vendors uses continuous monitoring to assess risk, referencing the Verizon DBIR statistic that one in five breaches traces back to a third party. The hosts examine the methodology behind these ratings, including external scanning and breach data, and…
How Enterprises Use Identity Threat Detection and Response to Stop Credential Attacks
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are adopting Identity Threat Detection and Response (ITDR) to combat rising credential-based attacks. Using the 2023 Okta breach as a case study, they explain how ITDR fills gaps between traditional IAM and EDR, and why Gartner predicts that by 2026, 75% of enterprises will deploy ITDR. Lucas breaks down the difference between ITDR and other tools, citing vendors like Silverfort and CrowdStrike. The…
How Companies Use Ransomware Negotiation Firms to Manage Breach Fallout
When ransomware strikes, many enterprises now hire third-party negotiation firms to handle the attacker directly. This episode explores the rise of professional ransomware negotiators — often staffed by former FBI agents and crisis psychologists — who step in as intermediaries between victims and criminal groups. We discuss how these firms assess attackers' credibility, drive down ransom demands (by an average of 38% according to Coveware), and coordinate with legal and insurance teams in real…
How CISOs Use Cyber Deception to Trap Attackers
Episode 131 of Cybersecurity Business with Fexingo explores the emerging practice of cyber deception technology. Lucas and Luna break down how companies like a major European bank deployed fake assets—decoy databases, credentials, and network shares—to detect and study attackers in real time. They discuss a real case where a deception layer caught a ransomware group within hours of initial access, before any actual data was encrypted. Lucas explains the three types of lures: breadcrumbs…
How Enterprises Use Cyber Exposure Management
Episode 130 of Cybersecurity Business with Fexingo dives into cyber exposure management — the practice of continuously quantifying and prioritizing cyber risk across an organization's entire attack surface. Lucas and Luna explore how this approach goes beyond traditional vulnerability management by factoring in business context, asset criticality, and threat intelligence. They discuss the rise of exposure management platforms like Tenable's Exposure360 and Qualys TotalCloud, and how companies…
How Zero-Trust Network Access Is Replacing VPNs
Episode 129 of Cybersecurity Business explores how enterprises are migrating from traditional VPNs to zero-trust network access (ZTNA). Lucas and Luna discuss the CrowdStrike outage in July 2024 that accelerated the shift, the specific security weaknesses of VPNs — including lateral movement risks and credential theft — and how ZTNA architectures enforce least-privilege access. They break down the differences between ZTNA and VPNs, using Zscaler as a key example, and examine why the zero-trust…
How Security Teams Use Cyber Threat Intelligence Platforms
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore how enterprises are operationalizing cyber threat intelligence platforms. They dive into a specific case: how a mid-sized financial services firm used an open-source CTI platform to reduce incident response time by 40 percent. Lucas explains the difference between strategic, tactical, and operational intelligence, and why many companies still fail to connect intelligence to actual detection rules. Luna challenges…
Why Enterprises Are Adopting Cyber Insurance Alternatives
Cyber insurance premiums have surged 300% since 2021, and coverage exclusions for nation-state attacks and silent ransomware are leaving companies exposed. In this episode, Lucas and Luna explore the rise of parametric cyber insurance and captive insurance structures as alternatives. They walk through a concrete case: a mid-size logistics firm that used a 144A catastrophe bond structure to create a $50 million cyber-specific captive, cutting its premium cost by 40% while gaining coverage for…
How Security Teams Use Digital Twins to Simulate Attacks
In this episode, Lucas and Luna explore how enterprises are deploying digital twins—virtual replicas of their production networks—to run attack simulations without risking real systems. They break down a specific case: a mid-sized financial services firm that built a twin of its trading infrastructure to test ransomware response. The hosts discuss the cost savings, the fidelity challenge, and why CISOs are treating digital twins as a core part of their cyber range exercises. Listeners will…
How Enterprises Use Machine Learning for Insider Threat Detection
Insider threats are notoriously hard to catch—employees who accidentally expose data, or malicious actors with legitimate access. In this episode, Lucas and Luna dive into how companies like Varonis and Splunk are applying machine learning to baseline normal user behavior and flag anomalies in real time. They discuss a recent case where a mid-sized financial firm detected an account takeover via unusual database queries, preventing a $4.7 million wire fraud. The hosts explore the challenges of…
How Security Teams Use Breach and Attack Simulation
Episode 124 of Cybersecurity Business with Fexingo: Lucas and Luna explore how enterprises are adopting breach and attack simulation (BAS) tools to continuously test defenses without red teams. They break down the core use case—automated adversarial emulation—and discuss the key players like Cymulate, AttackIQ, and SafeBreach. Lucas explains how BAS differs from traditional penetration testing and vulnerability scanning, and why CISOs are using it to validate security controls and meet…
How Security Teams Are Using Dark Web Monitoring
In this episode of Cybersecurity Business, Lucas and Luna explore how enterprises are turning to dark web monitoring to detect stolen credentials, leaked data, and early signs of targeted attacks. They break down a 2025 case where a Fortune 500 retailer discovered 15,000 employee credentials for sale on a Russian-language forum three weeks before a credential-stuffing campaign hit. The discussion covers how dark web intelligence feeds into incident response, what types of data actually show up…
How Companies Use Security Awareness Training to Reduce Breach Risk
Lucas and Luna explore why enterprise security awareness training has evolved from compliance checkbox to a critical risk-reduction tool. Drawing on data from the 2025 Verizon Data Breach Investigations Report showing that 68 percent of breaches involve the human element, they discuss how companies like KnowBe4 and Proofpoint are reshaping training with micro-learning, simulated phishing, and behavior analytics. They also examine the tension between security teams and employees who feel…
How Enterprises Are Using Identity-First Security Architectures
In this episode, Lucas and Luna explore how enterprise security teams are shifting from perimeter-based defenses to identity-first architectures. They discuss the rise of identity threat detection and response (ITDR), the role of privileged access management in stopping lateral movement, and a real-world case where a mid-size financial firm cut its mean-time-to-detect by 60 percent after deploying a unified identity platform. The conversation also touches on the challenges of managing non-human…
How CISOs Map Adversary Infrastructure with Censys
Episode 120 of Cybersecurity Business with Fexingo dives into how enterprise security teams use internet-wide scanning platforms like Censys to map adversary infrastructure before an attack lands. Lucas and Luna walk through a real case: how a Fortune 500 CISO used Censys to discover a command-and-control server staged in a cloud provider, then proactively blocked it through a peering partner. They explain the concept of 'pre-breach adversary reconnaissance,' the difference between passive and…
Why Security Teams Are Using Browser Isolation
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna explore why enterprise security teams are turning to browser isolation to defend against web-based threats. They break down how remote browser isolation works—running web content in a cloud container so nothing touches the endpoint—and why it's gaining traction as a complement to traditional antivirus and secure web gateways. Lucas explains the two main approaches: DOM isolation and pixel-push streaming, and dives into…
How Enterprises Are Using External Attack Surface Management
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the rapidly growing field of External Attack Surface Management (EASM). They explore why enterprises are adopting EASM platforms to discover and monitor exposed assets—from forgotten subdomains to misconfigured cloud storage—that attackers can exploit. The discussion centers on a 2025 Gartner report predicting that 70% of organizations will use EASM by 2026, and a real-world case involving a Fortune 500 retailer…
How Enterprises Are Using Security Data Lakes
Episode 117 of Cybersecurity Business with Fexingo dives into the growing adoption of security data lakes—centralized repositories that store and analyze massive volumes of security telemetry. Hosts Lucas and Luna explore why companies like a global retailer are moving away from traditional SIEMs toward data lake architectures built on platforms like Snowflake and Databricks. They break down the economics: storing a petabyte of security logs in a data lake versus a legacy SIEM can cut costs by…
Why Security Teams Are Adopting Cloud Workload Protection Platforms
Cloud workload protection platforms, or CWPPs, are becoming the standard for securing workloads across AWS, Azure, and Google Cloud. In this episode, Lucas and Luna break down why traditional endpoint detection and response falls short in cloud-native environments, using the example of a major financial services firm that deployed a CWPP after a misconfigured S3 bucket exposed 50 million records. They explore how CWPPs differ from cloud security posture management, the role of agentless vs.…
How Security Teams Are Using AI-Powered Email Security Gateways
Episode 115 of Cybersecurity Business with Fexingo dives into the fast-growing market for AI-native email security gateways. Lucas and Luna break down how traditional Secure Email Gateways (SEGs) struggle against advanced phishing, business email compromise (BEC), and zero-day attacks — and how startups like Abnormal Security and Avanan are using behavioral AI and natural language processing to detect anomalies. They examine a specific case: a 2025 BEC attack on a mid-sized manufacturer that…
How Security Teams Are Using Automated SOAR Playbooks
Episode 114 of Cybersecurity Business with Fexingo explores how enterprise security teams are using Security Orchestration, Automation, and Response (SOAR) platforms to automate incident response. Lucas and Luna break down a real-world case: a mid-size financial services firm that reduced its mean time to respond from 45 minutes to under 90 seconds by deploying SOAR playbooks for phishing and endpoint alerts. They discuss the common pitfalls—over-automation, playbook maintenance debt, and…
Why Security Teams Are Using OT Security Platforms
Episode 113 of Cybersecurity Business with Fexingo. Lucas and Luna explore the growing convergence of IT and operational technology (OT) security, focusing on how industrial control systems are being protected. The hosts discuss a specific case: how a major European chemical manufacturer deployed an OT security platform to monitor programmable logic controllers (PLCs) across 12 plants after a 2023 water-treatment breach. They break down the architecture—passive monitoring, asset inventory, and…
Why Companies Use Cyber Threat Hunting Teams
Episode 112 of Cybersecurity Business with Fexingo explores how enterprises are shifting from reactive incident response to proactive cyber threat hunting. Lucas and Luna examine the rise of dedicated hunting teams, the MITRE ATT&CK framework as a hunting roadmap, and how companies like CrowdStrike and SentinelOne offer managed hunting services. They discuss why threat hunting is becoming a standard practice, with 42% of organizations now running formal hunting programs according to a 2025 SANS…
Why Security Teams Are Using Bug Bounty Platforms
In this episode of Cybersecurity Business with Fexingo, Lucas and Luna dive into the booming world of bug bounty platforms. They explore how companies like HackerOne and Bugcrowd have turned vulnerability discovery into a scalable business model, paying ethical hackers millions to find flaws before criminals do. The discussion covers the economics of bug bounties—how payouts are determined, why some companies spend over $1 million annually, and the tension between crowdsourced testing and…
Showing the latest 50 episodes. The full archive of 160 is on Apple Podcasts, Spotify and every major podcast app — or via the RSS feed above.