Explorez tous les épisodes du podcast Defend Your Time

In the rapidly evolving realm of IT and security, leadership is not just about possessing technical expertise.

In this episode, Gavriella Schuster and Gareth Lindahl-Wise discuss how security leaders can bridge the gap between technical prowess and business leadership acumen to become strategic influencers within their organizations. 

Gareth Lindahl-Wise shares a CISO's perspective on applying agentic AI to security operations. Emphasizing the need for speed and accuracy, Gareth explains why hiring more people isn't a sustainable solution for the increasing complexities in cybersecurity. 

One key takeaway is the importance of combining domain expertise with data science principles. Gareth warns against the danger of "automating mediocrity," which occurs when AI systems are implemented without a deep understanding of both the technology and the security domain.

In this episode Dan Holland, Deputy CISO at Tampa General Health System (TGH) and Sam McHugh, security strategist at Ontinue cover how to effectively talk about risk with organizational leaders. Dan discusses how to adopt the concept of “return on risk mitigation” to translate the ROI of cybersecurity investments. 

In this second episode of our 3-part series, Iris Safaka, lead data scientist at Ontinue, helps us demystify Agentic AI and explain its application in security operations (SecOps). 

What is Agentic AI? 

Key Properties of AI Agents

Building an Autonomous AI Agent

Theus Hossman, Chief Technology Officer for Ontinue, joins us in the first episode in a three-part series on Applying Agentic AI to security operations. With the exploding number of attack surfaces and a severe talent shortage, advances in AI and automation have the potential to turn the tide for IT and security leaders. 

In Episodes two and three we will discuss demystifying Agentic AI and agentic AI from the CISO’s perspective, respectively. 

In this episode, an IT security leader shares his top recommended steps to quickly improve your organization’s security posture. 

In this episode, Microsoft MVP Dean Ellerby discusses the state of OT Security, covering common risks and sharing best practices for security and IT leaders to get ahead of OT-related risks. 

SOC Analyst Andrew Tranter shares a few of his favorite open-source tools that - when combined with Windows event logs - can uplevel your DFIR efforts. Andrew covers specific use cases as well as how to get started with Hayabusa (Yamato-Security), Chainsaw (WithSecureLabs), and Timeline Explorer (Eric Zimmerman).

In this episode, Ontinue Chief Innovation Officer Drew Perry looks back to see how we did with our 2024 cybersecurity predictions. 

Topics include breaches affecting AI companies, the resurgence of homegrown ransomware groups, and the rise of passkeys and the rapid shift toward passwordless security. Drew explains why passkeys are useful, and how IT and security teams can enable this technology using tools that exist within their Microsoft security licenses. 

In this episode, SOC Analyst Rhys Downing sheds light on his research into a new sample of the LummaC2 Infostealer. You can find Rhys' most recent report on this new sample on the Ontinue blog.  

In this episode, Zach Garcia and Dom De Vitto explain how security leaders should interpret the 1H 2024 Threat Report from Ontinue’s Advanced Threat Operations (ATO) team. You can find the report's key findings summarized in this blog post. 

The conversation includes using Defender's vulnerability scanning to uncover shadow IT as a means to keep up with patch adoption, and an exploit using Microsoft-owned domains to bypass security controls.  

In this episode, we go deep on Identity Protection with Ryan Huls, a Microsoft security expert at Ontinue, and Rob Smith, CEO and founder of Lionfish Tech Advisory. Ryan and Rob talk about the new Attack Surface Map in the Defender console, risk-based conditional access, and modern versus legacy multi-factor authentication methods. 

Related resource:
Guide: Maximizing your Microsoft Licensing to Reduce Costs and Increase Security

Microsoft Security expert Daniel Morris and security strategist Sam McHugh discuss a security assessment that uncovered $1,000,000 in cost savings through tool reduction and optimization. 

The client was looking to better leverage Microsoft E5 licensing and address some of the confusion and underutilization resulting from a multitude of tools. Daniel and Sam stepped in to streamline their security stack, optimize configurations, and uncover hidden savings.

Welcome to the inaugural episode of the “Defend Your Time” podcast brought to you by Ontinue. In this pilot episode, we bring Microsoft security experts Daniel Morris and Ryan Huls to share how they help customers realize the full value of their Microsoft security investments. The discussion covers:  

• Understanding Microsoft licensing (1:00)
• Optimizing configurations for enhanced security (2:59)
• The benefits of CASB solutions (4:40)
• The Defender User Group (8:56)