If misconfigured cloud settings are one of the most reventable causes of breaches, what happens when the gaps aren't misconfigurations at all, but known, documented vulnerabilities that simply never got patched?

This episode explores why organizations still struggle to fix what they already know is broken, covering prioritization frameworks like CVSS and EPSS, the challenge of legacy systems, the race against zero-day exploitation, and why the window between public disclosure and active attack is shrinking faster than most security teams can respond.

Listen & Follow: ⁠⁠Spotify⁠⁠⁠ | ⁠⁠⁠⁠⁠⁠⁠⁠YouTube⁠⁠⁠ | ⁠⁠⁠⁠⁠⁠⁠Linkedin⁠⁠⁠⁠

If insurance can't save you from a breach, what's causing most of them in the first place?

This episode tackles one of the most underreported yet devastating causes of cloud breaches: misconfiguration.

Covers how a single wrong setting can silently expose millions of records, the shared responsibility model that trips up even the most sophisticated organizations, and the real-world cases that prove it: from Capital One's $190M lesson to a 2025 AWS DNS misconfiguration that cascaded across thousands of organizations worldwide.

Listen & Follow: Spotify⁠ | ⁠⁠YouTube⁠ | ⁠Linkedin⁠⁠⁠

If people are the last line of defense and training alone isn't enough, what happens when the breach occurs anyway?

This episode explores the booming cyber insurance market, what it actually covers, what it quietly excludes, how ransomware claims have reshaped premiums and underwriting requirements, and whether having a policy is genuinely improving security posture or simply giving organizations a false sense of comfort.

Listen & Follow: ⁠Spotify⁠⁠ | ⁠⁠⁠⁠⁠YouTube⁠⁠ | ⁠⁠⁠⁠Linkedin⁠⁠⁠⁠