Security Boulevard Podcast

Email your questions and topics to the podcast here.
What if the secret to mastering supply chain security is accepting that it can never actually be "fixed"?
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth, co-host Fernando Montenegro, and Packet Pushers' Editor-in-Chief Drew Conry-Murray tackle the escalating complexities of both hardware and software supply chains.
Drew highlights how attackers increasingly target open-source projects and NPM ecosystems as easy entry points, while Fernando introduces a game-changing mental model: cybersecurity leaders should treat structural security gaps the same way the retail industry handles "shrinkage"—as a measurable, expected risk to manage rather than an absolute failure to panic over.
Together, the panel explores the operational value of Software Bills of Materials (SBOMs), Vulnerability Exploitability eXchange (VEX), and how to communicate realistic risk tolerances to non-technical business stakeholders without overpromising perfection.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 

Email your questions and topics to the podcast here.
When a massive database of exposed, internet-facing devices is leaked to the world, the last thing customers expect from their trusted security vendor is a nine-day silence.
In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Ed Weadon, and Jonathan Davis break down Fortinet's controversial handling of a recent FortiGate vulnerability exposure.
While Fortinet's eventual PSIRT blog provided necessary remediation steps, the panel discusses how the defensive "we told you so" tone and a severe lack of proactive, direct account outreach left enterprise customers dangerously in the dark—raising critical questions about what we are actually paying for in a security support contract.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 
 

Email your questions and topics to the podcast here.
Are we trying to secure the future of artificial intelligence with the cyber equivalent of duct tape?
In this episode of Security Boulevard, Tom Hollingsworth and Fernando Montenegro dive into the dangerous industry tendency to fall back on legacy frameworks—like firewalls, tunnels, and isolation VLANs—to solve modern AI, LLM, and agentic security challenges.
They expose why processing context-heavy AI traffic at a central network device creates massive compute bottlenecks, arguing instead for distributed application-level security to combat threats like prompt injection and data exposure.
From board-level strategic shifts to the realities of threat containment, Tom and Fernando challenge practitioners to step up their abstraction layers, stop leaning on temporary fixes, and build a more sustainable architecture for the future.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 
#SecurityBoulevard #Cybersecurity #ZeroTrust #AIAgents #NetworkSecurity #InfoSec #TechFieldDay #ArtificialIntelligence #Podcast #EnterpriseSecurity
 

Email your questions and topics to the podcast here.
Imagine giving an autonomous AI agent a task, only for it to act like an evil genie that twists your words and deletes your entire database to "manage" it.
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth and Fernando Montenegro explore how the concept of Zero Trust is evolving to solve this exact problem.
They move past the traditional networking hype to explain why implementing "least privilege" is critical for both human users and goal-directed AI agents.
By looking at innovative host-isolation architectures like Nile and using graph theory to map potential threats, the duo explains how strict constraints can transform unpredictable, non-deterministic AI behavior into a safe, controllable environment.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 
 

Email your questions and topics to the podcast here.
Are corporate lawsuits about to push independent security researchers out of cybersecurity just as AI becomes better at finding vulnerabilities?
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth is joined by Fernando Montenegro and cybersecurity architect Kate Scarcella to discuss Microsoft’s legal threats against researcher “Nightmare Eclipse,” the growing breakdown of coordinated vulnerability disclosure, and the risks facing independent security researchers.
The panel also explores how Anthropic’s Claude Mythos and Project Glasswing are accelerating AI-powered vulnerability discovery, what that means for the future of bug hunting, and why organizations are shifting toward Continuous Threat Exposure Management and stronger identity security for autonomous AI systems.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 

Email your questions and topics to the podcast here.
When Dutch authorities shattered a massive 17-million-device botnet, they exposed a critical reality of modern infrastructure: you aren't the target, but your everyday devices absolutely are.
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth is joined by Fernando Montenegro and Zoë Rose to dissect the coordinated takedown of a global botnet operation fueled by residential proxy services and infected Android apps.
The panel dives deep into the ruthless operationalization of "Botnet-as-a-Service" models, the invaluable role of independent security researchers, and the practical limitations of leveraging LLMs to police hundreds of millions of compromised endpoints and focusing on foundational cyber resilience.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network. 

Email your questions and topics to the podcast here.
What happens when AI can find and exploit vulnerabilities faster than humans can respond?
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth is joined by Drew Conry-Murray and Jack Poller to examine the rise of the so-called “Vulnpocalypse” and what it means for security teams, developers, CISOs, and IT operations.
The discussion explores how AI-powered tools like Mythos are accelerating vulnerability discovery, shrinking the gap between finding and exploiting security flaws, and forcing organizations to rethink patching, risk management, software development, and cyber defense strategies.
The trio also debates whether AI will make cybersecurity worse before it makes it better, and how organizations can adapt to a future where attacks and defenses operate at machine speed.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.
#SecurityBoulevard #Cybersecurity #SecurityPodcast #AISecurity #VulnerabilityManagement #MythosAI #CISO #ThreatExposureManagement #DevSecOps #CyberDefense

Email your questions and topics to the podcast here.
Imagine managing 100 autonomous digital workers for every human employee in your organization, now, how do you stop them from going completely rogue or violating your security compliance?
In this episode of the Security Boulevard Podcast, host Tom Hollingsworth sits down with Fernando Montenegro and Alan Shimel to tackle the chaotic frontier of Agentic AI and the massive cybersecurity challenges it introduces.
They discuss the critical difference between AI identity and cross-system authorization, debates whether we should treat autonomous agents like "cattle or pets," and breaks down practical zero-trust isolation frameworks using real-world enterprise architectures like SPIFFE.
From the traditional principal-agent problem in economics to the terrifying realities of scale and velocity, discover why human-centric security models are bound to shatter under the weight of an autonomous AI workforce and how modern security teams can prepare.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.
#SecurityBoulevard #Cybersecurity #AI #AgenticAI #AIAgents #AIWorkforce #ZeroTrust #NonHumanIdentity #InfoSec 

Email your questions and topics to the podcast here.
What happens to your security team when public certificate lifetimes shrink to just 47 days?
In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Fernando Montenegro, and Mitch Ashley tackle the looming operational nightmare of ultra-short certificate validity and why manual management is officially hitting its breaking point.
The panel explores the "Red Queen Hypothesis" in cybersecurity, moving faster just to stay still, before shifting gears to the impact of Anthropic’s Mythos on vulnerability management.
Discover how Microsoft’s partnership with Anthropic is turning AI from a weapon into a tool in the Secure Development Lifecycle (SDLC), the reality of "vibe coding," and why the industry must choose between automated patching or catastrophic failure in the age of the zero-day.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.
#SecurityBoulevard #XFD15 #Cybersecurity #SecOps #CertificateManagement #AI #AnthropicMythos #Infosec #DevSecOps #CybersecurityPodcast #MicrosoftSecurity

Email your questions and topics to the podcast here.
As security alerts skyrocket and cloud infrastructure becomes the new normal, is the traditional Security Operations Center officially hitting its breaking point?
In this live episode of the Security Boulevard Podcast recorded at Security Field Day, host Tom Hollingsworth is joined by analysts Jack Poller and Fernando Montenegro to dissect the massive shifts hitting SecOps.
The panel dives into the implications of the Google/Wiz acquisition and Palo Alto Networks' Prisma Cloud moves, settling the debate on where cloud security truly belongs. They also engage in a heated discussion on the "Pets vs. Cattle" architecture in security, the rise of agentic AI, and whether automation can truly save analysts from burnout or if we’re just building a faster treadmill.
This and more on Security Boulevard Podcast, part of The Futurum Group Podcast Network.
#SecurityBoulevard #XFD15 #Cybersecurity #SecOps #AI #CloudSecurity #CybersecurityPodcast #Infosec #SOC #GoogleCloud #PaloAltoNetworks