Episode 9 - Federal Cyber Defense: Legacy Debt, Cloud Shifts, and Network Truth

Richard Bejtlich sits down with Jean Schaffer, Corelight’s Federal CTO, to discuss the unique hurdles facing government agencies in an era of escalating state-sponsored threats. Jean highlights the persistent challenge of legacy IT infrastructure and the "technical debt" that complicates modernization efforts across the Department of Defense, the intelligence community, and the civilian sector. The conversation explores the strategic shift toward cloud adoption as a means to decommission vulnerable on-premise hardware and the evolving "whole of nation" defense strategy that requires deeper public-private partnerships.

Sovereign Cloud: Basics, Benefits, and Data Protection

Governments and regulated enterprises are pulling their most sensitive workloads out of infrastructure they can’t fully control. That’s the core driver behind sovereign cloud: cloud infrastructure where data residency, jurisdictional control, and supply-chain transparency are architectural requirements, not optional features. With GAIA-X moving into implementation and vendors like Red Hat launching sovereign support models for EU member states, adoption is accelerating fast.

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

AI risk management is the process of identifying, assessing, and mitigating risks associated with artificial intelligence systems to ensure they are developed and used responsibly. It involves using frameworks like the NIST AI Risk Management Framework to address technical, ethical, and social challenges, including data bias, privacy violations, and security vulnerabilities.

What are AI skill-gaps new defenders can leverage? #cybersecurity #ai #podcast

AI skill gaps are a real conversation right now, and Chris Cochran, Field CISO and VP of AI Security at SANS Institute, breaks it down into three practical buckets for defenders who want to stay ahead. Start by figuring out what you can offload to AI: summarization, enrichment, repetitive tasks. Save the deterministic decisions for humans. Then learn how to secure AI itself: Finally, understand governance. Not just the technical side, but what your company is actually trying to do with AI. Security practitioners who can enable the business, not just protect it, become irreplaceable.

Self Employed and Online? Your Tax Setup Might Be Your Weakest Link

If you're a self-employed individual or online business owner, then the upcoming Make Tax Digital for Income Tax is something that you'll certainly want to prioritise. It's a critical business component to have, and there are a lot of people who are currently in this category of workers and aren't aware that this is coming into fruition. Poor tax planning is now the biggest risk for those who own a business and want to sustain it. Here's why your tax setup might be your weakest link and how to strengthen it before MTD comes into action.

Staying Safe and Connected: The Security Side of Off-Grid Technology

Going off the grid used to mean completely disconnecting. No phone signal, no internet, no way to call for help if something went wrong. For remote workers, overlanders, and anyone venturing into isolated areas, that kind of disconnection wasn't just inconvenient. It was a genuine safety risk.

One Identity Appoints Michael Henricks as Chief Financial and Operating Officer

One Identity, a trusted leader in identity security, today announced the appointment of Michael Henricks as Chief Financial and Operating Officer. This decision reflects the continued growth of the business and a focus on aligning financial leadership with operational objectives as One Identity scales.

The Mitnick Method: Why a 15-Year old schoolboy can empty your bank account

Picture this: It’s 3pm on a busy Tuesday. Your phone rings, and the caller ID shows your company's main number. "Hi, this is Jake from IT," says a confident voice. "We're seeing some unusual activity on your account and need to verify your password to secure it. Can you help me out real quick?". Sound familiar? Well, this was the exact technique perfected by a teenager named Kevin Mitnick in 1983, long before the internet, smartphones, or even Windows or Linux existed.