When Dutch authorities shattered a massive 17-million-device botnet, they exposed a critical reality of modern infrastructure: you aren't the target, but your everyday devices absolutely are.

In this episode of the Security Boulevard Podcast, host Tom Hollingsworth is joined by Fernando Montenegro and Zoë Rose to dissect the coordinated takedown of a global botnet operation fueled by residential proxy services and infected Android apps.

The panel dives deep into the ruthless operationalization of "Botnet-as-a-Service" models, the invaluable role of independent security researchers, and the practical limitations of leveraging LLMs to police hundreds of millions of compromised endpoints and focusing on foundational cyber resilience.

This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 

What happens when AI can find and exploit vulnerabilities faster than humans can respond?

In this episode of the Security Boulevard Podcast, host Tom Hollingsworth is joined by Drew Conry-Murray and Jack Poller to examine the rise of the so-called “Vulnpocalypse” and what it means for security teams, developers, CISOs, and IT operations.

The discussion explores how AI-powered tools like Mythos are accelerating vulnerability discovery, shrinking the gap between finding and exploiting security flaws, and forcing organizations to rethink patching, risk management, software development, and cyber defense strategies.

The trio also debates whether AI will make cybersecurity worse before it makes it better, and how organizations can adapt to a future where attacks and defenses operate at machine speed.

This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.

#SecurityBoulevard #Cybersecurity #SecurityPodcast #AISecurity #VulnerabilityManagement #MythosAI #CISO #ThreatExposureManagement #DevSecOps #CyberDefense

Imagine managing 100 autonomous digital workers for every human employee in your organization, now, how do you stop them from going completely rogue or violating your security compliance?

In this episode of the Security Boulevard Podcast, host Tom Hollingsworth sits down with Fernando Montenegro and Alan Shimel to tackle the chaotic frontier of Agentic AI and the massive cybersecurity challenges it introduces.

They discuss the critical difference between AI identity and cross-system authorization, debates whether we should treat autonomous agents like "cattle or pets," and breaks down practical zero-trust isolation frameworks using real-world enterprise architectures like SPIFFE.

From the traditional principal-agent problem in economics to the terrifying realities of scale and velocity, discover why human-centric security models are bound to shatter under the weight of an autonomous AI workforce and how modern security teams can prepare.

This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.

#SecurityBoulevard #Cybersecurity #AI #AgenticAI #AIAgents #AIWorkforce #ZeroTrust #NonHumanIdentity #InfoSec 

What happens to your security team when public certificate lifetimes shrink to just 47 days?

In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Fernando Montenegro, and Mitch Ashley tackle the looming operational nightmare of ultra-short certificate validity and why manual management is officially hitting its breaking point.

The panel explores the "Red Queen Hypothesis" in cybersecurity, moving faster just to stay still, before shifting gears to the impact of Anthropic’s Mythos on vulnerability management.

Discover how Microsoft’s partnership with Anthropic is turning AI from a weapon into a tool in the Secure Development Lifecycle (SDLC), the reality of "vibe coding," and why the industry must choose between automated patching or catastrophic failure in the age of the zero-day.

This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.

#SecurityBoulevard #XFD15 #Cybersecurity #SecOps #CertificateManagement #AI #AnthropicMythos #Infosec #DevSecOps #CybersecurityPodcast #MicrosoftSecurity

As security alerts skyrocket and cloud infrastructure becomes the new normal, is the traditional Security Operations Center officially hitting its breaking point?

In this live episode of the Security Boulevard Podcast recorded at Security Field Day, host Tom Hollingsworth is joined by analysts Jack Poller and Fernando Montenegro to dissect the massive shifts hitting SecOps.

The panel dives into the implications of the Google/Wiz acquisition and Palo Alto Networks' Prisma Cloud moves, settling the debate on where cloud security truly belongs. They also engage in a heated discussion on the "Pets vs. Cattle" architecture in security, the rise of agentic AI, and whether automation can truly save analysts from burnout or if we’re just building a faster treadmill.

This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.

#SecurityBoulevard #XFD15 #Cybersecurity #SecOps #AI #CloudSecurity #CybersecurityPodcast #Infosec #SOC #GoogleCloud #PaloAltoNetworks

The gap between what AI vendors build and what customers actually need has reached a breaking point in 2026.

In this episode of Security Boulevard, hosts Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro discuss the growing tension between vendor roadmaps and user reality.

The team dives deep into the "Spring of Agentic 2026," discussing how the meteoric rise of OpenClaw disrupted the industry and forced major vendors to pivot toward real-world utility. From the rise of "vibe coding" and shadow AI to the critical need for faster OODA loops in cybersecurity, they explore how organizations are struggling to govern a world where anyone with a credit card and a browser can deploy an agent.

Are security teams leading the charge or just trying to keep up with the 10,000 RPM speed of AI development? This and more on Security Boulevard Podcast.

Hosts:

Tom Hollingsworth, Event Lead at Tech Field Day and Analyst for The Futurum Group

Fernando Montenegro, VP and Practice Lead for Cybersecurity at The Futurum Group

Mitch Ashley, VP and Practice Lead for Software Lifecycle Development at The Futurum Group

Alan Shimel, CEO of Techstrong Group

Modern cybersecurity risks aren’t always obvious, often hiding in plain sight.

This week on Security Boulevard, Tom Hollingsworth, Fernando Montenegro, and Jack Poller discuss the growing challenges of developer account terminations, shadow IT, and “shadow AI” across modern organizations.

The panel breaks down how cloud dependencies and third-party relationships are creating hidden risk surfaces that many companies aren’t fully prepared for.

From incident response planning to governance gaps, the conversation highlights why security teams need to think beyond traditional boundaries and prepare for failures before they happen.

This and more on the Security Boulevard Podcast, part of The Futurum Podcast Network.

What if the next major security breach comes from something hidden in your software supply chain?

In this episode of the Security Boulevard Podcast, Tom Hollingsworth is joined by Jay Cuthrell, Zoë Rose, and Devashri Datta to break down SBOM and VEX and why they matter more than ever.

The panel explores how these tools help teams identify real risks, respond faster to incidents like Log4j, and improve vulnerability management. They also discuss the growing impact of AI, open source software, and regulatory pressure across industries like automotive and healthcare.

This and more on the Security Boulevard Podcast, part of The Futurum Group's family of podcasts.

Guest:

Devashri Datta, Sr. Program Manager, Compliance and Cybersecurity

Panelists:

Zoë Rose, CSIRT manager at Canon EMEA

Jay Cuthrell, Chief Product Officer at NexusTek

Host: Tom Hollingsworth, Event Lead at Tech Field Day and Analyst for The Futurum Group

#SecurityBoulevard #CybersecurityPodcast #Cybersecurity #SBOM #VEX #SoftwareSecurity #DevSecOps #OpenSource #VulnerabilityManagement #InfoSec #TechPodcast #AppSec 

This week on the Security Boulevard Podcast, Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro dive into what happened with the Anthropic source code exposure and why it matters for the future of AI security.

The discussion breaks down the cybersecurity, legal, and supply chain risks surrounding AI-generated code, including whether models like Claude introduce new intellectual property challenges and how organizations should rethink security by design.

This and more on the Security Boulevard Podcast.

Email your questions, comments, or topics to the podcast.

Learn more on The Futurum Group's website.

#SecurityBoulevard #CybersecurityPodcast #Cybersecurity #AI #AISecurity #Anthropic #ClaudeAI #DevSecOps #SupplyChainSecurity #CloudSecurity

In this episode of Security Boulevard, Tom Hollingsworth, Fernando Montenegro, and Jay Cuthrell tackle one of the most persistent challenges in cybersecurity: reducing complex risk to a single number on a dashboard.

They unpack why so many security scores lack context, give a false sense of precision, and often mislead the very executives they’re meant to inform. The discussion dives into the pitfalls of oversimplified risk scoring models, the risks of relying on color-coded dashboards, and why metrics like CVSS often fail without proper business and environmental context.

The panel also contrasts proprietary “secret sauce” scoring systems with more defensible approaches to risk quantification, including frameworks like FAIR.

From misleading executive dashboards to the real challenge of communicating cyber risk in business terms, this episode provides a clear, critical look at why effective security metrics require much more than just a number.

#Cybersecurity #RiskManagement #CISO #CVSS #FAIR #SecurityBoulevard

On this episode of the Security Boulevard podcast, Tom Hollingsworth, Alan Shimel, and Mitch Ashley break down NVIDIA’s growing security ecosystem and what it means for the enterprise.

The conversation explores NVIDIA’s partnerships with major players including CrowdStrike, HPE, and Cisco, and why the company’s role as an AI infrastructure provider puts it at the center of the next wave of cybersecurity strategy.

The trio also examines the urgent need to secure both AI development pipelines and AI-generated outcomes, as organizations race to deploy models, agents, and new AI-driven workflows. They also discuss the promise of NVIDIA OpenClaw and what toolkits like it could signal for the future of secure AI operations.

As AI adoption accelerates, one question becomes impossible to ignore: who will secure the infrastructure powering it all?

#Cybersecurity #AI #NVIDIA #AISecurity #EnterpriseAI #SecurityBoulevard

In this episode of Security Boulevard, Tom Hollingsworth, Fernando Montenegro, and Jack Poller break down the devastating "wipe" attack on healthcare giant Stryker.

Unlike typical ransomware focused on financial gain, this attack saw laptops, phones, and entire systems systematically erased, signaling a chilling shift toward non-financially motivated nation-state aggression. The team explores why healthcare remains a "soft target," the critical importance of network segregation (which saved Stryker’s medical devices), and why identity security is the last line of defense in an era of destructive hacking.

From the "cybersecurity poverty line" to the dangers of weaponizing management tools like MDMs, this conversation is a must-watch for IT professionals and executives navigating today's perilous geopolitical landscape.

#CyberSecurity #StrykerHack #HealthcareIT #Infosec #SecurityBoulevard #NationStateActors #DigitalWarfare #IdentitySecurity #TechFieldDay #CISO #BusinessContinuity

In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro dive into why AI regulation has shifted from a "nice-to-have" ethical debate to an urgent cybersecurity mandate.

As the industry prepares to descend on San Francisco, the trio breaks down the high-stakes collision between lightning-fast innovation and the tightening grip of global governance. They examine the growing need for explicit, enforceable rules in a world of autonomous agents and "Shadow AI."

Emerging standards like ISO 42001 and the NIST AI Framework are becoming the new blueprints for enterprise trust, and why traditional law continues to struggle with the velocity of tech. From the economic pressures of global compliance to the grassroots power of community-led safety, this discussion provides a definitive roadmap for navigating today’s most complex security landscape.

See why "trust but verify" has evolved from a simple catchphrase into the ultimate survival strategy for the intelligence era.

#SecurityBoulevard #Cybersecurity #AIRegulation #AIGovernance #EnterpriseAI #AIRisk #ResponsibleAI #RSAC #TechPolicy

In this episode of the Security Boulevard Podcast, hosts Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro break down the complex intersection of Artificial Intelligence and modern cybersecurity.

As AI continues to reshape software development, the team explores why observability has become the critical foundation for establishing accountability and trust in automated systems. They dive into the challenges of governing autonomous agents, the necessity of building "observability-native" architectures, and why transparency is often the missing link in current AI operations.

Whether you're a developer, a security practitioner, or a tech leader, this conversation provides essential insights into integrating security into the DNA of AI-driven environments to ensure that as we innovate, we remain in control.

For more cybersecurity content, visit the Security Boulevard website and subscribe on YouTube.

#SecurityBoulevard #Cybersecurity #ArtificialIntelligence #Observability #SecurityPodcast #InfoSec #TechGovernance #SoftwareDevelopment #AIPathways

In this episode of Security Boulevard, Mitch Ashley joins Tom Hollingsworth and Fernando Montenegro to examine what happens when AI-driven systems begin operating at machine speed while traditional security workflows remain constrained by governance, patch cycles, and change management controls.

The conversation explores: 

• How AI agents compress vulnerability discovery timelines 
• Why automation without operational maturity increases risk 
• Whether enterprise security programs are structurally prepared for AI-era velocity 
• The growing tension between innovation and control

As AI capabilities expand, the real challenge isn’t just technical—it’s organizational. Security leaders must rethink processes, prioritization, and response frameworks to avoid widening exposure. AI is scaling. Is your security program?

Subscribe to Security Boulevard for weekly enterprise cybersecurity analysis.

#SecurityBoulevard #CyberSecurity #AI #ArtificialIntelligence #EnterpriseSecurity #SecurityLeadership #Automation #AIagents #CISO #SecurityStrategy #SecurityBoulevard #DigitalTransformation #RiskManagement #Infosec #TechPodcast #Governance

In this episode of Security Boulevard, Tom Hollingsworth, Alan Shimel, and Fernando Montenegro examine the real-world implications of AI-driven vulnerability discovery after Anthropic allowed Claude to conduct large-scale scanning across open-source projects.

The result? More than 600 vulnerabilities identified — including a long-standing issue in Ghostscript that traditional research had missed for years. The discussion goes beyond headlines.

The panel analyzes:

• Whether AI can outperform human threat researchers • How iterative model reasoning changes vulnerability discovery
• The risks of AI-powered offensive security • What this means for DevSecOps and open-source maintainers •
• Whether AI shifts the balance between defenders and attackers

As AI systems begin to reason across version histories, patch gaps, and architectural inconsistencies, cybersecurity teams face a new reality: automation at machine scale. Is this a breakthrough for defenders — or the beginning of a new attack surface?

If AI can audit every version of your software in seconds, what does that mean for your security posture? Subscribe and join the conversation.

Read More: 

• Son of Moltbot vs. Claude Opus
• OpenClaw, Cows and Free Milk
• Is Claude Opus 4.6 the Best Security Researcher Ever? 

#SecurityBoulevard #CyberSecurity #AIThreatHunting #AISecurity #Anthropic #ClaudeAI #VulnerabilityManagement #OpenSourceSecurity #ThreatIntelligence #CVE #AppSec #SecurityResearch #ResponsibleDisclosure #SecurityOperations #Ghostscript

In this episode, Tom Hollingsworth, Event Lead at Tech Field Day and Networking Industry Analyst, joins Mitch Ashley, Vice President and Practice Lead, Software Lifecycle Engineering at Techstrong Research, along with Steve Puluka, Network & Security Engineer and Network Architect, Tech Field Day Delegate.

They examine supply chain compromises, including incidents involving Notepad++ and software update distribution mechanisms. The conversation highlights why secure code distribution must be treated as an architectural control, not an operational afterthought.

As software ecosystems grow more interconnected, accountability now spans developers, hosting providers, infrastructure operators, and security teams. The traditional shared responsibility model must evolve to address increasingly complex dependency chains and third-party exposure.

The discussion also explores how artificial intelligence is reshaping networking operations, why observability has become foundational to modern security strategy, and how transparency and proactive incident response reduce systemic risk.

Security today is lifecycle discipline across the entire software delivery chain.

#Cybersecurity #SupplyChainSecurity #DevSecOps #AIinNetworking #Observability #SecurityLeadership

In this episode of the Security Boulevard Podcast, Mitch Ashley, Fernando Montenegro, and Tom Hollingsworth discuss why realistic threat models and regular testing are essential to uncovering hidden weaknesses. The conversation draws lessons from past weather-related disasters and cybersecurity near misses, showing how organizations can learn from incidents that almost went wrong.

The panel also explores how security practices must evolve to match modern environments, including the growing role of AI agents in security operations.

The episode closes with a reminder of the value of learning from history and staying engaged with the cybersecurity community through ongoing discussion, feedback, and shared experience.

#Cybersecurity #DisasterRecovery #ThreatModeling #IncidentResponse #BusinessResilience #AISecurity #SecurityTesting #SecurityBoulevard #Podcast

In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Alan Shimel, and Fernando Montenegro discuss what this leadership change signals for the broader security community.

The conversation examines the evolving role of CISA, the growing influence of venture capital on cybersecurity startups, and why public-private partnerships remain essential as threats grow more complex.

The panel also explores how AI is reshaping cybersecurity, what upcoming industry events reveal about market direction, and why practitioners must stay informed about funding, policy, and technology trends to remain effective.

#Cybersecurity #RSAC #JenEasterly #CISA #AISecurity #SecurityLeadership #SecurityBoulevard #Podcast

The panel examines Palo Alto Networks’ SHIELD framework, the rise of vibe coding, and the security risks that emerge when non-programmers begin building software without embedded security practices.

The discussion also looks at how security is shifting earlier into development workflows, the evolution of data security platforms, and how AI is reshaping software development across the industry.

#Cybersecurity #DevSecOps #SecureDevelopment #AI #DataSecurity #SecurityBoulevard #Podcast

The conversation covers the challenges of scaling security alongside AI agents, the growing need to train and mentor junior professionals, and why community engagement remains critical as the industry evolves.

The panel also highlights upcoming cybersecurity events and emphasizes continuous learning as a core requirement for long-term success in security.

#Cybersecurity #AI #BusinessIntegration #SecurityTeams #AISecurity #Community #SecurityBoulevard #Podcast

The discussion focuses on the growing security risks introduced by autonomous AI agents, why stronger protections are required, and how observability is becoming critical for managing AI workloads at scale. The panel also looks at the responsibility shared by vendors, developers, and security teams to deliver safer AI systems, while reflecting on past security gaps and the industry’s path forward.

The episode closes with a look at upcoming events and an invitation for the community to stay engaged as AI security continues to evolve.

#Cybersecurity #AI #AgenticAI #AISecurity #Observability #SecurityBoulevard #Podcast

The discussion highlights why vendors must do more to educate customers, why system understanding matters as much as tooling, and how a holistic approach to cloud security keeps organizations ahead of emerging threats.

A straight, practical look at staying secure in a cloud landscape that refuses to stop changing. #

CloudSecurity #Cybersecurity #AttackSurface #CloudStrategy #SecurityBoulevard #Podcast

The discussion covers why resilience matters, how economic pressures shape security decisions, and the growing complexity of today’s interconnected infrastructure. The panel also digs into the value of strong threat modeling, preparation for unexpected failures, and lessons learned from past outages that disrupted operations across industries.

A grounded look at keeping systems functional when everything feels like it’s built on hopes, dreams, and duct tape.

#Cybersecurity #Cloudflare #ServiceOutage #Infrastructure #Resilience #ThreatModeling #SecurityBoulevard #Podcast

They discuss the rapid evolution of attackers, the need to secure AI-driven processes, and why trust is now a critical requirement for AI-powered systems. The conversation also looks ahead at how AI will influence future security models and how organizations can integrate AI responsibly into business workflows.

#AI #Cybersecurity #AIGovernance #CyberRisk #Sysdig #SecurityBoulevard #Podcast

They break down recent failures, long-term gaps in AI security, and the growing responsibility on AI developers to build safer systems. As attackers weaponize AI, defenders must adopt stronger controls, better context awareness, and more rigorous security practices.

#AI #cybersecurity #securitychallenges #attackvector #responsibility #infosec #SecurityBoulevard

They discuss the demands of CISSP certification, the frustration of tracking continuing-education credits, and why lifelong learning is now essential for security pros, including the skills and standards shaping the next generation of cybersecurity leaders.

The conversation highlights how motivation, mentorship, and professional development keep defenders sharp as threats evolve.

#Cybersecurity #CISSP #InfoSec #ProfessionalDevelopment #SecurityBoulevard #Podcast

📌 Topics covered:

• How AI is augmenting human security analysts 
• The evolution from LLMs to agentic AI 
• Ethical risks and the future of secure AI systems 
• Highlights from AI Field Day 
• What experts predict for 2025 and beyond

#Cybersecurity #AI #AgenticAI #AIFuture #SecurityBoulevard #Podcast

They discuss:

• The evolution from small-scale hacks to state-backed intelligence operations
• Major breaches like F5 and what they reveal about attacker motives • How nation states fund and protect cyber groups
• The legal and geopolitical challenges of fighting cyber crime
• Why a broader, society-wide approach to cybersecurity is now essential

This episode delivers real-world insight into the high-stakes battlefield of modern cybersecurity.

#Cybersecurity #NationState #CyberWarfare #Infosec #SecurityBoulevard

The panel unpacks:

• How MCP redefines traditional security models
• The importance of secure implementation and API security
• The rise of autonomous systems and agentic AI
• The challenge of building trust in intelligent systems
• Why innovation must be balanced with security at every layer

This episode explores how a holistic AI security architecture can prepare organizations for what’s next in cybersecurity.

#Cybersecurity #AI #MCP #AgenticAI #APISecurity #SecurityBoulevard

• Security and privacy risks from connected devices
• How consumer behavior influences enterprise protection
• Economic implications of large-scale IoT adoption
• The use of predictive analytics to prevent attacks
• Practical steps to build lasting cyber resilience

Real insights from experts tackling today’s connected-world security challenges.

They discuss:

• How AI is reshaping security practices
• The evolving complexity of ransomware
• Why user empowerment is critical
• Insights from Security Field Day
• Upcoming research on software supply chain security

This relaunch sets the stage for deep, practical conversations on the future of cybersecurity. Subscribe now to stay informed with expert insights and industry perspectives.

#Cybersecurity #AI #Ransomware #DevSecOps #SupplyChainSecurity

https://securityboulevard.com/2024/01/dont-misdefine-network-security-in-2024-include-on-prem-and-cloud https://securityboulevard.com/2024/01/tapping-into-the-potential-of-generative-ai-in-cybersecurity/ https://techstrong.tv/videos/interviews/ai-role-payment-fraud-visa-james-mirfin https://webinars.securityboulevard.com/loggings-not-dead-long-live-logging