Explore every episode of the podcast Cyber Rants - The Refreshingly Real Cybersecurity Podcast
| Title | Pub. Date | Duration | |
|---|---|---|---|
| Episode 136 - Inside CTEM: The New Standard for Cyber Risk | 12 Dec 2025 | 00:32:22 | |
On this episode, Silent Sector breaks down what cybersecurity really looks like beyond the buzzwords. We dive into CTEM and why continuous exposure management beats the outdated once-a-year pen test. You’ll hear how adversarial simulation, social engineering, and threat modeling work together to reveal real-world risk—not just compliance checkboxes. If you’ve ever felt overloaded by industry acronyms or wondered how organizations can actually stay ahead of evolving threats, this conversation brings clarity, strategy, and straight-talk insights from the front lines of cyber defense. Pick up your copy of Cyber Rants on Amazon. Looking to take your Cyber Security to the next level? Visit us at www.silentsector.com. Be sure to rate the podcast, leave us a review, and subscribe! | |||
| Episode 135 - Cyber Insurance: Promises, Pitfalls, and the Fine Print | 11 Nov 2025 | 00:47:34 | |
Cyber insurance is meant to provide assurance when incidents occur—but too often, organizations face confusion, denied claims, and unclear coverage. Attorney and cybersecurity expert, Matt Silverman, joins Zach and Lauro to break down why cyber policies are so complex, how evolving threats are outpacing the insurance industry, and what companies can do to navigate this uncertain landscape better. Connect with Matt Silverman: https://www.linkedin.com/in/mdsilverman/ Learn more about AIB Partners: https://www.aib-partners.com Pick up your copy of Cyber Rants on Amazon. Looking to take your Cyber Security to the next level? Visit us at www.silentsector.com. Be sure to rate the podcast, leave us a review, and subscribe! | |||
| Episode 126 - Eric O'Neill on Espionage, Insider Threats, and Cybersecurity's Future | 12 Dec 2024 | 00:53:29 | |
This week, Lauro and Zach are joined by Eric O'Neill, a former FBI agent who brought down Robert Hanssen, the most notorious and damaging spy in United States history. Eric recounts his role in one of the FBI's most significant spy takedowns and dives deep into the world of espionage and counter-espionage. He sheds light on the realities of insider threats lurking within the United States and shares actionable insights into defending against modern cyber risks. Tune in for a compelling discussion on the intersection of national security and cybersecurity resilience. Eric O'Neill's Website: https://ericoneill.net Eric O'Neill on LinkedIn: https://www.linkedin.com/in/eric-m-oneill/ Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #36 - Covering the "What Ifs" with Incident Response Planning | 26 Jul 2021 | 00:35:29 | |
What's the difference between having an Incident Response Plan and just "winging it"? This week the guys talk about their real world cybersecurity incidents and share their knowledge about proper planning and preparation. Learn what goes into incident response planning, who should be involved, and how to ensure everyone is on the same page for quick response and minimizing damage during a cyber attack.
| |||
| Episode #35 - Cyber Risk Assessments: Everything You Never Thought You Wanted To Know! | 12 Jul 2021 | 00:32:59 | |
This week, the guys take a deep dive into the intricate world of Cyber Risk Assessments. They cover best practices from choosing an industry recognized cybersecurity framework, to scoping and preparing for your cyber risk assessment, plus how to make cybersecurity standards like NIST, CSF, and CIS Controls work for your company. They discuss how these assessments work for different purposes and what to expect when you're planning for your first Cyber Risk Assessment. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #34 - Cybersecurity for Credit Unions, Banks, Insurance, and FinTech | 06 Jul 2021 | 00:27:17 | |
Cybersecurity is critical for financial services organizations but many mid-market and emerging companies struggle tremendously with their cyber risk management programs. This week, the guys talk about cybersecurity programs for financial institutions, sharing specific considerations for the industry including staffing, risk assessment, penetration testing, and compliance. Financial services companies are an attractive and highly targeted sector for cyber criminals. It is also an industry where Zach, Mike, and Lauro have a deep history
| |||
| Episode #33: PCI Compliance - Do's and Don'ts | 28 Jun 2021 | 00:27:54 | |
This week, the guys talk about a topic that everyone loves, PCI (Payment Card Industry) Compliance! They rant about PCI-DSS compliance levels and standards, plus what first timers need to consider when preparing for a PCI audit. They share tips about how to make your PCI compliance process simpler throughout the year and how to deal with the QSA (auditor), especially when the auditor doesn't understand your environment. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #32 - Healthcare Cybersecurity | 21 Jun 2021 | 00:29:27 | |
This week, the guys discuss cybersecurity for healthcare organizations. They dispel the myth that healthcare cybersecurity is completely unique while also sharing the healthcare nuances that don't apply as frequently in other industries. From healthcare risk assessment to policies, HIPAA compliance, and even physical intrusion testing, the guys share their experience and points of view on healthcare cyber risk management.
| |||
| Episode #31: How to start a career in cybersecurity. | 14 Jun 2021 | 00:33:20 | |
There's no "right way" to get started in cybersecurity but there are a lot of different paths. This week, the guys talk about their career paths starting from the ancient IT world and moving into modern day cybersecurity disciplines. They share some of the most important skill sets that you rarely hear about, plus tips and tricks to succeed. | |||
| Episode 30 - Beware of these Top 10 Cybersecurity Myths | 01 Jun 2021 | 00:33:21 | |
Zach and Lauro discuss 10 common cybersecurity myths that are causing business leaders to make poor decisions and making companies an easy target for cyber criminals. They clear up these myths and share how you can be better informed if you hear something that doesn't sound quite right.
| |||
| Episode #29 - Social Engineering: Minimize the Exposure of Human Error | 17 May 2021 | 00:34:02 | |
This week, the guys discuss Social Engineering - the most common way cyber criminals get access to their targets. They discuss the controls smart companies are implementing to prevent their staff from falling for cyber criminal scams and how to minimize exposure resulting from human error. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #28: Moving CISOs from Good to Great - with Ed Escobedo | 10 May 2021 | 00:30:35 | |
This week, the guys welcome back Ed Escobedo, former Head of Technology Risk Management for PayPal, CIO of Apollo Education Group, VP for DHL and Charles Schwab, and currently Silent Sector's Chief Strategy Officer. They share how to bust through the growth roadblocks that CISOs hit when improving their organizations' cybersecurity programs. They also share the unique Organizational Adoption Framework and Methodology(TM) that Silent Sector uses to bring established cybersecurity programs to the next level. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #27: The Joy of SOC 2 Audits | 04 May 2021 | 00:32:21 | |
This week, the guys dive into the rapidly growing topic of SOC 2 Audits. The SOC 2 Audit is widely becoming a requirement for B2B technology companies serving large enterprise clients. As both SOC 2 auditors and the guys who help companies prepare for audits, they cover common misconceptions such as the SOC 2 being all about IT security. They talk about the important factors to consider when undergoing the audit for the first time such as scope, timeline, and even auditor selection.
| |||
| Episode #125: End of Year Cyber Hustle | 18 Oct 2024 | 00:40:38 | |
Let's face it, the end of the year can be stressful as tech teams push to get security and compliance efforts done. Zach and Lauro have seen it all, with people scurrying to meet their company's annual requirements. They discuss the top challenges they see, how to overcome them, and how to get the best proposals from your vendors for next year. | |||
| Episode 26: Defense Contractors and CMMC Requirements | 26 Apr 2021 | 00:28:40 | |
This week, the guys dive into all the "fun" requirements that U.S. Government defense contractors are facing when working with Controlled Unclassified Information (CUI), including the NIST 800-171 Self-Assessment and getting CMMC certificatied. They share their insights and experience about how organizations align to these requirements and what's involved. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #25 - CISO As A Service | 19 Apr 2021 | 00:30:29 | |
Companies are turning to Virtual CISO and CISO as a Service providers for help as cybersecurity requirements continue to grow. Is hiring a vCISO always the right option?
| |||
| Episode #24 - To Cloud or Not to Cloud? | 12 Apr 2021 | 00:24:01 | |
The "cloud" is arguably one of the most common topics of discussion in technology today, primarily for its cost savings and accessibility benefits. However, it's also a hot topic for cybersecurity professionals and not always for the best reasons. This week, the guys discuss cloud considerations for organizations of all sizes, providing recommendations for transitioning to the cloud, safely storing information, and avoiding data loss nightmares. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #23 - Penetration Tests: What You Need to Know (Part 4) | 05 Apr 2021 | 00:30:30 | |
This week in the final part of our Penetration Test Mini-Series, the guys discuss the realities of automated vs. manual penetration tests and what those terms actually mean. They also talk about timeframes, approaches, and situations that seem to cause some confusion for companies undergoing their first penetration test. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #22 - Penetration Testing: What You Need to Know (Part 3) | 29 Mar 2021 | 00:30:29 | |
This week, the guys continue their penetration testing discussion, covering the following common questions: How often should your organization conduct a penetration test? | |||
| Episode #21 - Penetration Testing: What You Need To Know (Part 2) | 25 Mar 2021 | 00:31:08 | |
This week we take a deeper dive into penetration testing. The guys discuss why it's important to consider the reason behind a penetration test and some different methods of testing to consider. In addition, they cover options that companies can take in their testing initiatives, along with providing best practices for companies getting their first pen test.
| |||
| Episode #20 - Penetration Tests: What You Need to Know (Part 1) | 22 Mar 2021 | 00:26:06 | |
Penetration tests are vital for nearly every organization to see how secure they really can be. While the demand for them is higher than ever, it can be a bit tricky on deciding what test which penetration test provider is best for you, along with figuring out if a penetration test is right for you. This week, the guys answer these questions and give their own advice on how to guide yourself through the world of Penetration Tests. | |||
| Episode #19 - Diagram Delight! | 08 Mar 2021 | 00:29:29 | |
This week the guys discuss why it's vital for an organization to have Network Architecture Diagrams, discuss best practices for building them (scotch can help), and explain why a little effort now will make your work life so much better.
| |||
| Episode 18 - Proactive vs. Reactive Cybersecurity | 02 Mar 2021 | 00:29:12 | |
There is a lot of talk about "proactive cybersecurity" but what does that really mean and is it better than reactive security? On this week's show, the guys discuss proactive versus reactive cybersecurity considerations and where to focus. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 17 - Starting a Cybersecurity Career plus Insight for Employers | 23 Feb 2021 | 00:26:13 | |
The guys talk with Haidon Storro, who brings a different point of view to the conversation. Haidon is an exceptionally motivated cybersecurity professional who recently graduated college and started her career. She shares her journey from finding a passion in technology, to getting educated and finding her first full time role in the industry. It's a highly competitive market for finding talent and Haidon insights are critical for employers to understand when trying to recruit junior team members. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #124: Urgent Release - Major Two Factor Authentication Vulnerability Discovered | 25 Sep 2024 | 00:42:06 | |
In this urgent episode, the Cyber Rants crew welcomes Silent Sector’s Principal Cybersecurity Architect, Brian Contario, to discuss his game-changing discovery of a critical vulnerability in the Two-Factor Authentication Enrollment Process. This vulnerability has the potential to impact hundreds of millions of accounts globally and poses a serious threat to IT infrastructures everywhere. Brian and the team break down why this finding is not just another CVE but a pivotal moment that will require swift action from software vendors to update their 2FA Enrollment Process. Tune in to learn what steps IT professionals must take now to protect their organizations from a new wave of attacks and where you can find additional resources, including the IETF Request For Comments Draft. This is a must-listen episode for anyone serious about safeguarding their systems! | |||
| Episode 16 - Everybody Loves Cybersecurity Compliance! | 15 Feb 2021 | 00:24:28 | |
Compliance. It's not the most attractive topic to discuss but for most organizations, it's a necessity. This week, the guys discuss compliance obstacles and pitfalls, how to overcome them, plus the investment that provides the biggest returns when it comes to cybersecurity compliance. Whether you're faced with PCI, CMMC, SOC 2 audits, GDPR, CCPA, or any other set of requirements, the fundamentals are the same and this episode is for you. | |||
| Episode 15 - Are we losing the Cyber War? | 08 Feb 2021 | 00:29:55 | |
Are we losing the war against cyber crime? What does winning look like? Where does the U.S. stand on a global spectrum of cyber protection? This week the guys discuss these alarming yet valid concerns. | |||
| Episode 14 - Building and Keeping your Cybersecurity Team | 01 Feb 2021 | 00:26:45 | |
How do you find the right people when other companies can pay them more? How do you make your rock stars want to stay? Does it make sense to hire a Senior VP of IT when they will also be handling the help desk function? What about entry-level staff running critical functions? This week, the guys discuss the importance of finding and hiring the best talent for your company's cybersecurity program, along with sharing best practices to make your team the best in the industry! | |||
| Episode 13 - Frameworks Vs. Compliance | 26 Jan 2021 | 00:23:43 | |
This week, the guys discuss one of their favorite topics the comes up frequently in the CyberSecurity World: The difference between companies reaching out to meet compliance, rather than aligning to a secure Cybersecurity Framework, and how being compliant does not always mean being secure. | |||
| Episode 12 - Disconnects and Redundancies | 18 Jan 2021 | 00:29:42 | |
This week, the guys discuss a disconnect between employees working remotely and their corporate IT departments hindering productivity for both parties, along with how the debate between IT providers leaning towards a self-service model for IT help. In addition, the guys discuss the recent shutdown of Parler and the issue of companies relying on a cloud-based server, instead of relying on its own hardware. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 11 - Implementation Models | 11 Jan 2021 | 00:33:13 | |
Zach, Lauro, and Mike welcome 2021 by diving into one of their favorite topics, Cybersecurity Implementation Models. They discuss the different ways companies build cybersecurity programs and considerations to find right method for your organization. Whether you're considering a DIY approach, hiring a cybersecurity firm, or getting a vCISO, this episode rants about the pros and cons of each. | |||
| Episode 10 - Goodbye 2020, Hello 2021! | 21 Dec 2020 | 00:19:06 | |
In the last episode of the year, Zach, Mike, and Lauro discuss the benefits of performing certain cybersecurity tasks earlier in the year rather than waiting for the last quarter. They also discuss tips and tricks to avoid cyber criminals around the holiday season, along with what they liked and loathed in the year of cybersecurity news and blunders, plus their holiday wish lists. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 9 - The Cybersecurity Gold Rush | 14 Dec 2020 | 00:29:43 | |
This week Zach, Mike, and Lauro rant about the pitfalls of the "arms race" of new cybersecurity tools. In addition, they propose strategies for evaluating and implementing cybersecurity tools with a holistic approach instead of chasing the shiny new products that promise to answer all problems. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 8: The War on Cybersecurity | 08 Dec 2020 | 00:23:34 | |
This week, Zach, Mike, and Lauro discuss the misperception of the critical points on what can happen if companies choose to not take Cybersecurity seriously, how it can affect more than a bottom line for a businesses, and what steps businesses can take to thwart initial attacks and protect themselves from Cyber Criminals. | |||
| Episode 7: Cybersecurity as an Asset, Not an Obligatory Cost. | 23 Nov 2020 | 00:27:50 | |
Zach, Mike, and Lauro discuss using cybersecurity as an asset and competitive advantage to drive revenue, rather than just a necessary cost. They cover the ins and outs of cybersecurity questionnaires that all B2B tech companies get when they're trying to land enterprise clients. The team discusses the proper precautions and steps needed to align your company with the best cybersecurity framework, plus navigating potential audits and avoiding security pitfalls. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #123 - Data-Centric Security: The Future of Cyber Defense | 26 Aug 2024 | 00:36:45 | |
Lauro and Zach welcome Denzil Wessels, Founder & CEO of Dymium, to explore groundbreaking innovations in database security. Denzil introduces Dymium's cutting-edge "Ghost layer" approach, which emphasizes securing data itself rather than just the network, offering granular control and preventing the need for data duplication. This episode highlights how Dymium's unique focus on protecting specific data sets them apart in the cybersecurity landscape. Additionally, Denzil shares insights into Dymium's other capabilities, designed to help organizations safely leverage AI platforms like ChatGPT and more. Tune in to discover a fresh perspective on safeguarding your one of your organization's most valuable assets—its data. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 6: Educating and Encouraging CyberSecurity | 09 Nov 2020 | 00:20:13 | |
This Week: Zach, Lauro, and Mike discuss how Cybersecurity professionals can be active with organizations in their cybersecurity approach, along with encouraging continuing education and participation by other employees in the workforce. | |||
| Episode 5: Defining Proactive Security Posture | 04 Nov 2020 | 00:21:15 | |
This Week, Zach, Lauro, and Mike discuss the steps needed to create a proactive security posture, especially when creating a cybersecurity program for the first time. In addition, we also provide tips on how to create a plan of action when implementing your cybersecurity program to make it the right fit for your company. | |||
| Episode 4 - Ed Escobedo: Translating the value of CyberSecurity | 21 Oct 2020 | 00:22:19 | |
This week - Ed Escobedo joins the podcast to discuss his journey to joining the Silent Sector team as Chief Strategy Officer and what lesson’s he’s learned while implementing programs for companies like PayPal and Apollo Education Group, plus the importance of translating the value of cybersecurity to CFO’s and other organizational leaders. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 3 - Building a Security-Conscious Culture | 21 Oct 2020 | 00:23:12 | |
This week - The guys discuss how to build a Security-Conscious Culture in your organization, along with some of the successes and failures that occur in the process. In addition, they talk steps to implement your your security program, beginning with leadership support. | |||
| Episode 2 - Make the Right Decision - Implement a Program! | 20 Oct 2020 | 00:29:09 | |
Episode 2: Lauro, Mike, and Zach reveal the biggest failure that companies make when it comes to cybersecurity. We discuss what steps leaders can take to implement a program within their organization. The team also provides ideas for companies to use additional incentives with staff in order to help minimize cyber risk related to the human element. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode 1 - Why Cybersecurity Education Matters | 20 Oct 2020 | 00:21:27 | |
Episode 1: In our introduction episode, we discuss our book “Cyber Rants: Forbidden Secrets and Slightly Embellished Truths About Corporate Cybersecurity Programs, Frameworks, and Best Practices.” We discuss reasons why corporate cybersecurity programs fail and how some organizations do not receive the right guidance or education to get the best cybersecurity protection for their needs. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #122 - Prevent SaaS Data Leakage & Shadow IT | 26 Aug 2024 | 00:40:17 | |
In this episode of the Cyber Rants Podcast, Zach and Lauro are joined by Yasir Ali, CEO of Polymer, to dive deep into the critical issue of data leakage and shadow IT in today's SaaS-driven business environment. As companies rely on a multitude of software platforms, employees often create unauthorized accounts on new tools, posing significant security risks. Yasir shares his expert insights on identifying and mitigating these threats, offering actionable strategies to secure your operations against improper and unauthorized SaaS usage. Tune in to learn how to safeguard your organization's data in a complex, ever-evolving digital landscape. | |||
| Episode #121 - Mastering the Art of Social Engineering with Chris Hadnagy | 22 Jul 2024 | 00:53:31 | |
In this episode of the Cyber Rants Podcast, we sit down with Chris Hadnagy, a prominent speaker at RSA, Black Hat, and DefCon's SE Capture the Flag events. Chris is the author of four influential books, including "Social Engineering: The Art of Human Hacking" and "Human Hacking: Win Friends, Influence People, and Leave Them Better Off for Having Met You." He is also the founder of the Innocent Lives Foundation, a nonprofit dedicated to fighting the sexual abuse of children, and the CEO of Social-Engineer, LLC. | |||
| Episode #120 - Defending Against Personal Cyber Attacks | 09 Jul 2024 | 00:40:58 | |
Financial scams and cyber breaches are hitting more Americans than ever. This week, Zach and Lauro dive into common personal scams and cyber attacks, sharing essential prevention tips and steps to take if you're targeted. Tune in and share with non-tech-savvy friends to help them stay safe from online criminals. | |||
| Episode #119 - Cyber Risk Visibility With Dan DeCloss | 30 May 2024 | 00:37:46 | |
This week, Zach and Lauro welcome pen tester, CISO, and entrepreneur, Dan DeCloss. From navigating organizational challenges to systemizing vulnerability management processes, Dan shares expert insight that applies to IT and security professionals in every organization. The guys also discuss Dan's solution to simplify penetration test reporting, vulnerability management, and monitor progress over time. To Connect with Dan, find him on LinkedIn: https://www.linkedin.com/in/ddecloss/ To learn more about Dan's company, PlexTrac, visit: https://plextrac.com/ | |||
| Episode #118 - Leadership Insights with a Navy SEAL Turned Tech Entrepreneur | 30 Apr 2024 | 00:45:15 | |
In this episode of Cyber Rants, Zach and Lauro sit down with Ty Smith, a former Navy SEAL turned successful tech entrepreneur, to uncover invaluable leadership and mindset lessons. Ty draws from his combat experience and entrepreneurial journey to offer crucial insights for technology leaders. Tune in to learn how to build resilient teams, lead with purpose, and elevate your organization to new heights. Whether you're a seasoned tech professional or aspiring leader, this episode is packed with actionable strategies to propel your team forward. Pick up your copy of Cyber Rants on Amazon. | |||
| Episode #117 - Securing Critical API Connections | 30 Apr 2024 | 00:45:03 | |
In this episode of Cyber Rants, Zach and Lauro are joined by Jeremy Snyder, CEO of Firetail, to explore the intricacies of safeguarding vital API connections. Jeremy shares invaluable expertise on identifying and fortifying the vulnerable points targeted by cyber adversaries. Tune in as he discusses a range of topics, from API authentication to threat detection, providing essential knowledge to shield your organization's API endpoints from malicious actors. Don't miss this deep dive into API security and learn how to protect your critical digital assets effectively. | |||
| Episode 134 - AWS Outage Fallout and Planning Ahead for 2026 Budgets | 05 Nov 2025 | 00:31:29 | |
In this episode, the Silent Sector team dives into the recent AWS shutdown, exploring what may have caused the disruption and the ripple effects it had across organizations relying on Amazon’s cloud infrastructure. They break down lessons learned from the outage, including how companies can strengthen resilience and prepare for similar incidents in the future. The conversation also shifts toward the budget season for 2026, with insights on how cybersecurity leaders can plan strategically—balancing cost management with the growing need for proactive security investments. Whether you’re in IT, security leadership, or executive management, this episode offers timely perspectives on operational risk, planning, and readiness in today’s evolving landscape. Pick up your copy of Cyber Rants on Amazon. Looking to take your Cyber Security to the next level? Visit us at www.silentsector.com. Be sure to rate the podcast, leave us a review, and subscribe! | |||
| Episode #116 - Navigating Post-Breach Communication | 20 Feb 2024 | 00:44:39 | |
In today's cyber landscape, breaches are often disclosed by criminals before victims are even aware, leaving companies scrambling to manage the fallout. Crafting a swift and effective response is essential to safeguarding trust and reputation. Join us this week with corporate communications expert Kevin Dinino, President of KCD PR, as he shares key strategies for post-breach messaging. From protecting customer relationships to addressing shareholder concerns, Kevin provides actionable insights to help organizations navigate the complexities of crisis communication. Whether you're a seasoned professional or new to incident response planning, this episode is a must-listen for mastering communication in the wake of a breach. Learn more about Kevin Dinino and KCD PR at https://kcdpr.com | |||