In this episode of And Security For All, host Kim Hakim sits down with Merlin Namuth, CISO for the City and County of Denver, for a behind-the-scenes look at the complex world of public-sector cybersecurity.

With responsibility spanning 55 different agencies, Merlin is helping protect everything from police, fire, and emergency services to transportation, infrastructure, wastewater systems, and other essential services Denver residents depend on every day. And unlike many private-sector environments, the mission isn’t about protecting the bottom line—it’s about protecting people and keeping critical public services running.

Kim and Merlin dive into the realities of being a public-sector CISO, including navigating government red tape and procurement, balancing security across agencies with different priorities and resources, attracting cybersecurity talent, managing limited budgets, and deciding when risk has to be accepted in order to accomplish the larger mission.

They also discuss why relationships may be one of a CISO’s most important security tools. Merlin shares why only about 30–40% of his role involves the technical side of cybersecurity, with much of the rest centered around communication, collaboration, leadership, and building trust across the organization.

The conversation also tackles ransomware, critical infrastructure, incident preparedness, public communication, collaboration with other CISOs and security partners, and an important distinction every security leader should understand: the CISO helps identify and mitigate risk, but the organization ultimately owns it.

Plus, Merlin shares his advice for cybersecurity professionals who want to move into leadership and eventually become a CISO, including lessons from his own transition from a hands-on technical career into security leadership.

From hackers and headaches to budgets, bureaucracy, public safety, and the people behind the technology, this episode offers a candid look at what it means to lead cybersecurity when an entire community is counting on you.

Tune in for a conversation about cybersecurity, leadership, resilience, and the unique challenges—and rewards—of protecting the public sector.

On this episode of And Security For All, host Kim Hakim sits down with Sal Lifrieri, Counter Terrorism Expert, President of PCCSecure, and author of Leading Through Chaos, to talk about crisis management, leadership under pressure, and how the way we respond to uncertainty can make all the difference. Drawing from his extensive background with the NYPD, hostage negotiation, intelligence operations, and counterterrorism, Sal shares real-world lessons on staying calm, checking your ego at the door, and making thoughtful decisions when the stakes are high.

Sal also breaks down his STOP Technique and why sometimes the best thing a leader can do in a crisis is slow down before reacting. Kim and Sal discuss how threats have evolved since 9/11, the role technology plays in both protecting us and creating new vulnerabilities, preparing for situations that could overwhelm even the best plans, and why situational awareness remains so important.

From the boardroom to a real-world security crisis, this conversation is a reminder that strong leadership isn’t about having every answer—it’s about knowing how to think, communicate, and lead when you don’t.

Tune in for a fascinating conversation on crisis management, security, preparedness, and what it really means to lead through chaos.

In this episode of And Security For All, host Kim Hakim sits down with Jonathan Kimmitt, Chief Information Security Officer at Alias Cybersecurity, for a practical conversation about the everyday cybersecurity risks that are easy to overlook — and the simple steps that can make a big difference.

Fresh off DEF CON, Jonathan shares some of his biggest takeaways from the event before diving into the security risks hiding in our daily routines. From public Wi-Fi and fake networks to mobile devices, outdated software, personal data, and the growing amount of sensitive information stored on our phones, the conversation explores how attackers can take advantage of vulnerabilities we may not even realize are there.

Kim and Jonathan also discuss protecting your privacy while traveling, why keeping your phone and applications updated matters, the risks of oversharing personal and family information online, and how compromised devices can potentially become an entry point into much larger organizational systems.

The conversation then turns to the human side of cybersecurity, including insider threats, extortion, privileged access, and why organizations must balance trust with verification — even when it comes to longtime employees and leadership.

Key topics include:

• Public Wi-Fi and fake network risks

• Mobile device security and software updates

• Protecting personal and business data while traveling

• Passwords, MFA, and privileged access

• Online privacy and protecting children's information

• Social engineering, extortion, and targeted attacks

• Insider threats and organizational risk

• Why “trust but verify” still matters

• Simple cybersecurity habits everyone should be practicing

Cybersecurity isn't only about sophisticated attacks or advanced technology. Sometimes the vulnerabilities that create the biggest risks are hiding in the devices, connections, and habits we use every day.

Tune in for practical advice that may make you rethink how you use your phone, connect to Wi-Fi, share information, and protect your digital life.

Building a stronger cybersecurity industry isn't just about bringing more people into the field—it's about creating an environment where different perspectives are valued, future leaders are prepared to succeed, and professionals actively support one another.

Kim and Dr. Kesar discuss how cybersecurity education is evolving to prepare the next generation for more than just the technical side of the profession. From critical thinking, communication, confidence, and leadership skills to hands-on learning and real-world experience, they explore what tomorrow's cybersecurity professionals need to succeed in an industry that continues to change at an incredible pace.

They also dive into what it truly means to be an ally in cybersecurity, why inclusion requires participation from everyone, and how something as simple as reaching out, making an introduction, mentoring someone, or helping a new professional feel welcome can have a lasting impact. Dr. Kesar shares why diversity needs to extend beyond gender to include different perspectives, experiences, backgrounds, and individuals who may not always feel represented in the cybersecurity community.

The conversation also explores the changing cybersecurity workforce, career readiness, mentorship, networking, AI in education, and why qualities such as dependability, curiosity, communication, and the ability to think outside the box are becoming increasingly important for emerging cyber professionals.

The future of cybersecurity will be shaped by the people entering the industry today—and building a more united, inclusive, and resilient community is a challenge that belongs to all of us.

Cyberattacks aren’t slowing down in 2026 — and the recent Canvas attack is proof.

On this episode of #AndSecurityForAll, host Kim Hakim sits down with Jonathan Kimmitt, CISO at Alias CyberSecurity and former University of Tulsa CISO, to discuss the recent Canvas breach that impacted thousands of educational institutions and millions of students worldwide.

Together, they explore: ▪️ How the attack unfolded ▪️ Why universities are increasingly targeted ▪️ The growing risks surrounding SaaS and third-party vendors ▪️ The rise in healthcare and enterprise breaches ▪️ Business continuity and incident response challenges ▪️ Cybersecurity burnout among practitioners

The episode also touches on the Stryker Cyberattack, CareCloud Patient Records Breach, hacktivism, vendor trust, and the evolving tactics threat actors are using to disrupt organizations at scale.

If you’re a security leader, IT professional, student, or simply interested in today’s cyber threat landscape, this is an episode you won’t want to miss.

In this episode of #AndSecurityForAll, Kim Hakim sits down with Matt Richardson, Head of Intelligence at the Canadian OSINT Centre, to explore how Open Source Intelligence (OSINT) is being used to combat human trafficking, child exploitation, online grooming, sextortion, and violent extremism in today's increasingly connected world.

Drawing from years of experience supporting law enforcement and government agencies, Matt shares powerful real-world stories of investigations that have helped identify victims, disrupt trafficking operations, prevent suicides, and stop predators before they could cause further harm. The conversation also examines how AI, deepfakes, and social media have transformed the tactics used by criminals—and how cybersecurity professionals, parents, educators, and everyday citizens can play a role in protecting vulnerable individuals.

Whether you're a cybersecurity professional, parent, educator, or simply someone who wants to better understand today's digital threats, this episode offers practical advice, eye-opening insights, and an important reminder that cybersecurity is ultimately about protecting people.

In this episode, you'll learn:

• How OSINT is helping combat human trafficking and online exploitation
• Why AI and deepfakes are creating new challenges for investigators
• How predators and violent extremists exploit social media and gaming platforms
• The warning signs of online grooming and sextortion every parent should know
• Practical steps families can take to build safer online habits
• How collaboration between cybersecurity professionals, nonprofits, and law enforcement is making a real-world impact
• Inspiring success stories where technology helped save lives and rescue victims

If you enjoyed this episode, be sure to follow, rate, and share And Security For All to help us continue bringing important conversations about cybersecurity, technology, and protecting our digital future to a wider audience.

Together, they explore:

• The growing need for AI governance and accountability
• How AI is changing cybersecurity—for both defenders and attackers
• Emerging risks surrounding deepfakes, biometric data, and AI-powered cybercrime
• The reality of managing cybersecurity in government and critical infrastructure
• Third-party risk, ransomware lessons learned, and protecting sensitive data
• Why AI should be viewed as a capacity amplifier—not a replacement for human judgment
• The future of the CISO role and the evolving cybersecurity workforce

Ron shares real-world experiences from leading cybersecurity efforts in county government, discusses recent threats targeting schools and public institutions, and offers practical advice for organizations trying to balance innovation, security, and responsible AI adoption.

Whether you're a security leader, IT professional, business executive, or simply curious about how AI is reshaping our digital future, this episode provides valuable insights into the opportunities, risks, and governance strategies that will define the next generation of cybersecurity.

As artificial intelligence continues to transform the way we work, communicate, and make decisions, how do individuals and organizations build confidence while managing risk? Marivell shares her perspective on why cybersecurity is ultimately about people, relationships, and trust—not just technology.

Together, they discuss:

What “Trust by Design” means in an AI-driven world

Why cybersecurity impacts everyone, not just security professionals

How AI is changing privacy, governance, and decision-making

The growing importance of digital trust and transparency

Recognizing phishing attacks and AI-powered scams

Practical ways to use AI safely and responsibly

Why trust is becoming a competitive advantage for organizations

How future leaders can build successful careers in cybersecurity

The role of education, mentorship, and community in creating a safer digital future

Whether you're a cybersecurity practitioner, business leader, student, or everyday technology user, this episode provides practical insights on navigating AI, protecting what matters most, and building trust in an increasingly connected world.

Trust isn't something that's given—it's something that's designed, earned, and protected. 🔐🤖🌎

From real-world attack simulations to the growing impact of AI on cybersecurity, Robert shares firsthand stories from the field, lessons learned from years in offensive security, and what organizations are still getting wrong when it comes to protecting their environments.

Topics include:

• How modern pentesters simulate real-world attacks
• The biggest security gaps organizations still overlook
• AI’s growing role in offensive security and automation
• Why visibility is critical for defending today’s environments
• The challenges of testing cloud, web, and enterprise systems
• How attackers are evolving faster than ever before
• The importance of proactive security, not reactive security
• What businesses should understand before hiring a pentesting team

Whether you’re a security leader, practitioner, business owner, or simply curious about how ethical hackers think, this episode offers an inside look at the mindset, tools, and realities of modern penetration testing in 2026 🎧

Boris shares insights from over 20 years in the industry, discussing how organizations can better prepare for emerging threats, why traditional security approaches are struggling to keep up, and how AI is changing both the speed and scale of cyberattacks. The episode also explores the future of human-led security, third-party risk, offensive security strategies, and what companies should look for in cybersecurity partners moving forward.

Topics covered in this episode include: • How AI is transforming offensive security and penetration testing • Why organizations are struggling to keep up with evolving cyber threats • The rise of agentic AI and automated vulnerability discovery • Real-world risks facing small and mid-sized businesses • Human behavior, identity security, and third-party vendor risk • The future of AI-driven cyberattacks and AI-powered defense • What companies should look for in a cybersecurity partner • Why cybersecurity fundamentals still matter more than ever

If you’re interested in AI, cybersecurity leadership, offensive security, penetration testing, cyber risk, or the future of cyber defense, this is a must-listen episode packed with practical insights and expert perspective. 🔐⚛️

On this episode of #AndSecurityForAll, host Kim Hakim sits down with Jonathan Kimmitt, CISO at Alias CyberSecurity and former University of Tulsa CISO, to discuss the recent Canvas breach that impacted thousands of educational institutions and millions of students worldwide.

Together, they explore: ▪️ How the attack unfolded ▪️ Why universities are increasingly targeted ▪️ The growing risks surrounding SaaS and third-party vendors ▪️ The rise in healthcare and enterprise breaches ▪️ Business continuity and incident response challenges ▪️ Cybersecurity burnout among practitioners

The episode also touches on the Stryker Cyberattack, CareCloud Patient Records Breach, hacktivism, vendor trust, and the evolving tactics threat actors are using to disrupt organizations at scale.

If you’re a security leader, IT professional, student, or simply interested in today’s cyber threat landscape, this is an episode you won’t want to miss.

From AI bias and data privacy to trust, transparency, and real-world failures like Delta Airlines and Amazon’s AI recruiting challenges, this conversation breaks down what organizations need to know as AI rapidly transforms the industry. Tony also shares insights into AI governance roles, support teams on the front lines, and why cybersecurity professionals must stay ahead of emerging technologies like quantum computing.

🎙️ Topics include:

• AI ethics & governance
• Building trustworthy AI systems
• Data privacy and bias
• AI support and security operations
• Real-world AI failures and lessons learned
• The rise of AI officers and governance teams
• Preparing for the future of AI & cybersecurity

As AI adoption continues to accelerate across every industry, understanding how to balance innovation with accountability has never been more important. This episode offers practical insights for cybersecurity leaders, IT teams, and anyone navigating the rapidly evolving world of AI-driven technology

In this episode of And Security For All, host Kim Hakim sits down with Jonathan Kimmitt to break down quantum computing in simple, practical terms. From understanding what quantum actually is to why security professionals are paying attention, this conversation cuts through the noise and focuses on what matters most today.

You’ll learn:

• What quantum computing is (without the complex math)
• Why it’s faster—and why that matters
• The real risks to encryption and data security
• What organizations should be doing now to prepare
• Whether quantum is hype, risk, or opportunity

While large-scale quantum threats may still be years away, the implications for data protection, encryption, and long-term risk are very real.

🎧 If you work in cybersecurity, IT leadership, or simply want to understand what’s coming next—this episode is your starting point.

In this episode of #AndSecurityForAll, guest host Steve Winterfeld, Advisory CISO, sits down with Kim Gomez, Director of Security Research, to break down key insights from Akamai’s latest State of the Internet Security Report.

Together, they explore how today’s threat landscape is rapidly evolving—from surging API attacks and advanced DDoS tactics to the growing impact of AI on both attackers and defenders.

Key topics include:

• Why APIs are now one of the fastest-growing attack surfaces (and what that means for your organization)
• The continued rise of DDoS attacks and how “turbo” botnets are changing the game
• How AI and automation are accelerating attack speed, scale, and sophistication
• The concept of “vibe coding” and how it’s lowering the barrier to entry for attackers
• Why visibility gaps across applications, APIs, and AI are creating new security risks
• The shift from large outages to performance degradation and business impact
• How attack motivations are evolving—from hacktivism to financial extortion and geopolitics
• What CISOs should be communicating to the board right now
• The importance of multi-layered defense strategies and real-world mitigation planning

If you want to understand where cybersecurity is heading—and how to prepare—this episode delivers practical insights you can apply immediately.

This episode dives into the rapid acceleration of AI in cybersecurity—from powerful new models uncovering vulnerabilities at unprecedented speed to the real-world risks organizations are already facing. The conversation explores how AI is reshaping defense strategies, why “AI vs. AI” may soon become the norm, and what CISOs are actually doing about it.

Kim and Ken also go deeper into the evolving value of major conferences, including what professionals are gaining beyond networking, and why in-person events still play a critical role in a fast-moving, AI-driven industry.

You’ll hear insights on:

• The biggest AI takeaways from RSA—and why things are moving faster than expected
• The rise of agentic AI and what it means for security teams
• Real-world challenges with data quality, governance, and “shadow AI”
• Whether AI will replace jobs—or redefine them
• Why cybersecurity talent gaps may be more about process than people
• The future of conferences and where the real value lies

This is a candid, practitioner-focused discussion on where cybersecurity is heading—and what leaders need to be thinking about right now.

🎧 Tune in for a no-BS breakdown of AI, risk, and the future of the industry.

In this episode of And Security For All, host Kim Hakim sits down with Keith McMenamin, VP of IT at Visit Philadelphia, to break down why user awareness is still one of the most critical—and overlooked—components of cybersecurity today.

As cyber threats evolve and AI-driven attacks become more sophisticated, even the most experienced users can be fooled. Keith shares real-world examples of modern phishing scams, explains how attackers exploit human behavior, and discusses why employees are both the biggest target and the greatest opportunity for defense.

You’ll learn:

• Why phishing and social engineering are more convincing than ever
• How to move from security training to building a true security culture
• The importance of creating a no-blame environment where employees feel safe reporting mistakes
• Why multi-factor authentication and awareness together stop most attacks
• How organizations can turn users into a “human firewall”
• The growing risks of AI, deepfakes, and evolving cyber threats

This conversation also explores how security leaders balance protection with productivity, why executive buy-in is critical, and how collaboration across the cybersecurity community is shaping the future of defense.

Whether you’re a security leader, IT professional, or everyday user, this episode will change how you think about the human role in cybersecurity.

🔐 Because in today’s threat landscape, hackers don’t just break in… they log in.

In this episode of And Security For All, host Kim Hakim sits down with Ron Bevans, CISO at BenefitHub, to explore how AI is reshaping both cyber threats and cyber defense. As attackers increasingly leverage automation and AI-driven tactics, security teams must evolve just as quickly to stay ahead.

Ron shares practical insights on how organizations can embrace AI responsibly, empower employees to use it effectively, and build governance strategies that balance innovation with security. Rather than replacing cybersecurity professionals, AI has the potential to amplify human expertise, accelerate detection, and help teams focus on what matters most.

🎙️ In this episode we discuss:

• How AI is changing the cyber threat landscape

• Why organizations shouldn’t fear AI — but learn to leverage it

• The importance of governance and responsible AI adoption

• How CISOs can empower teams to safely use AI tools • Why human expertise is still essential in the age of AI

This conversation offers valuable perspectives for CISOs, security leaders, IT professionals, and anyone navigating the intersection of AI and cybersecurity.

Listen now to learn how security leaders can stay ahead of emerging threats while using AI as a strategic advantage.

While many organizations focus on deploying security tools and controls, Jonathan explains why perfect security is unrealistic and why modern organizations must instead focus on resilience — the ability to detect, respond to, and recover from cyber incidents quickly.

Drawing on real-world incident response experiences, Jonathan shares practical insights into why many organizations still struggle with security despite major investments in tools. From overlooked vulnerabilities to unused monitoring systems, the conversation highlights how visibility, preparedness, and continuous testing are critical to defending against today’s evolving cyber threats.

The discussion also explores:

• Why cybersecurity perfection is impossible • The difference between cyber protection and cyber resilience • Why many companies have security tools but don’t use them effectively • The importance of visibility, logging, and monitoring in modern security programs • How penetration testing reveals real attack surfaces • Why organizations must practice incident response and tabletop exercises • The role of business continuity and disaster recovery planning • Real-world stories of how attackers exploit small overlooked vulnerabilities

Jonathan also shares actionable advice for security leaders, including how organizations can begin building resilience today by testing assumptions, practicing response scenarios, and strengthening communication during incidents.

In an era where cyber incidents are no longer a matter of if but when, this conversation offers valuable guidance for CISOs, security teams, and business leaders looking to strengthen their cybersecurity strategy.

In this powerful episode of And Security For All, host Kim Hakim sits down with Zach Lewis, CIO & CISO at the University of Health Sciences and Pharmacy in St. Louis, to break down the real-world story behind his new book Locked Up — a firsthand account of surviving a major ransomware incident.

From negotiating with the notorious LockBit ransomware group to navigating board-level decisions about paying (or not paying) a ransom, Zach shares what most organizations never talk about publicly.

🔐 In this episode, we cover:

• What actually happens during a ransomware attack (pre, during & post-breach)
• How ransomware groups like LockBit operate as “ransomware-as-a-service”
• Why some organizations pay — and what happens after they do
• Double extortion & the evolving tactics of cybercriminals
• AI-powered phishing, deepfakes, and the new threat landscape
• How boards are responding to growing cyber risk
• Practical advice for small and mid-sized organizations with limited security budgets
• Lessons learned from real breach recovery

With ransomware, AI-driven attacks, and data extortion on the rise in 2026, this conversation is essential listening for CISOs, IT leaders, board members, business owners, and anyone responsible for protecting sensitive data.

🎧 Whether you're in healthcare, education, finance, or enterprise security — this episode delivers actionable insight from someone who’s lived through it.

From supply chain risk and ransomware evolution to OT security, cloud vulnerabilities, regulatory accountability, and AI-powered threats, this episode explores the real-world challenges security leaders are navigating right now.

Topics include:

• The rise of cyber resilience over pure prevention
• Why supply chain risk is now bigger than ransomware
• OT and critical infrastructure targeting
• The API economy and expanding attack surfaces
• AI as both attacker and defender
• Deepfakes, autonomous attacks, and data poisoning
• Observability vs visibility in modern security operations
• The revolutionary evolution of the CISO role

Arun also shares practical strategies for embedding security into innovation lifecycles, building AI governance frameworks, and preparing organizations for the next wave of disruption.

If you’re a CISO, security practitioner, board member, or technology leader, this episode delivers actionable insight on how to stay ahead in an era where innovation and risk move at warp speed.

Jeff shares his journey from helping create the OWASP Top Ten to building one of the leading runtime application security platforms, and explains why traditional AppSec approaches are no longer keeping up with modern software development.

🎙️ In this episode, we cover:

• Why 2026 is shaping up to be the year of runtime security
• How traditional AppSec tools create noise instead of clarity
• What runtime security reveals that static and perimeter tools cannot
• Where AI truly helps in AppSec—and where the hype falls short
• How European regulatory changes are redefining software liability
• Why security teams must prioritize context over volume
• What developers, CISOs, and security leaders should focus on next

This conversation breaks down complex topics like runtime protection, AI-driven remediation, regulatory pressure, and developer enablement into clear, practical insights for today’s security practitioners.

Whether you’re a CISO, AppSec leader, developer, or security architect, this episode offers a forward-looking perspective on how application security is evolving—and what it takes to stay ahead.

Jessica shares real-world insights on how employees are using AI both inside and outside corporate environments, the growing risks of data exposure, phishing, deepfakes, and shadow AI usage, and what security leaders must do to regain visibility and control. The discussion also covers how organizations can safely enable AI without sacrificing productivity, the evolving role of the CISO, the rise of fractional CISOs, and how security teams can communicate AI risk in business terms that resonate with leadership.

Topics include:

• How AI is changing the cyber threat landscape
• Why blocking generative AI puts organizations at risk of falling behind
• Data leakage, shadow AI, and employee behavior
• Deepfakes, phishing, and AI-driven social engineering
• AI governance, visibility, and policy challenges
• The future of the CISO role and cybersecurity careers

This episode is a must-listen for CISOs, security leaders, IT professionals, and anyone navigating the fast-changing intersection of AI, cyber risk, governance, and workforce impact.

Matthew takes listeners deeper into the “lion’s den,” revealing what he has learned from directly engaging with threat actors on the dark web—how they think, how they operate, and why the human element inside these criminal ecosystems matters more than most organizations realize.

In this episode, they break down:

• What motivated Matthew to enter ransomware intelligence and begin infiltrating criminal groups
• How ransomware crews recruit, organize, and operate like legitimate businesses
• Key differences between the clear web and dark web, and common misconceptions
• Essential OPSEC practices and how both researchers and criminals protect their identities
• How personas are created and maintained when engaging directly with threat actors
• Human drivers of cybercrime—from financial incentive to desperation and coercion
• Insider risks, layoffs, and how human vulnerability contributes to modern breaches
• Major intelligence wins and insights that help organizations make stronger security decisions

This episode offers rare, firsthand insight into the techniques, mindset, and operational flow of active cybercriminals—paired with practical guidance for defenders. Whether you’re in security leadership, incident response, threat intel, or simply curious about the dark web, this conversation will challenge your assumptions and expand your understanding of today’s most dangerous threats.

Listen now and hear why knowing your adversary is one of the most powerful defenses in cybersecurity.

Matthew shares how he entered closed cybercriminal communities, built trust, gathered intelligence, and passed critical findings to government agencies—all while maintaining a full-time role protecting one of the largest healthcare systems in the Midwest. His research provides a rare, real-time window into ransomware crews, their structure, their onboarding process, their business platforms, and the tactics they use to select, study, and strike their victims.

What You’ll Learn in This Episode

• How ransomware groups actually operate behind closed doors
• What “initial access brokers” are and why they’re the real first step in most attacks
• How threat actors select targets, test stolen credentials, and prepare for exploitation
• Why holidays and long weekends remain prime attack windows
• What defenders consistently overlook—and the fixes that matter most
• How Matthew manages OPSEC, safety, and reporting while undercover
• Why MFA gaps, vendor access, phishing, and unpatched systems remain the top entry points
• The surprising internal rules, ethics, and boundaries some threat groups enforce
• How organizations should rethink backups, insurance, and negotiating ransom demands

Matthew also discusses the psychological side of this work—the fear, the risk, and the personal motivation that keeps him in the fight. His insights provide actionable takeaways for CISOs, SOC teams, and anyone responsible for protecting an enterprise today.

This is a rare interview with someone who has seen ransomware operations from the inside. It’s a conversation every cybersecurity leader should hear.

They explore how AI-driven bots are reshaping the landscape of digital fraud—surging over 300% in the past year—and what that means for businesses, defenders, and everyday users. From ad fraud and data scraping to compliance challenges and the ethics of AI, this conversation dives deep into the tension between innovation and exploitation in cybersecurity.

Listen as Steve and Tricia discuss:

• The explosive growth of AI bots and their impact on digital operations
• Ad fraud, zero-click searches, and the dark economy of stolen data
• Why healthcare and commerce are prime targets for automated attacks
• The evolving balance between compliance, risk, and real security
• How organizations can defend against this new wave of AI-powered fraud

With insights from Akamai’s global research team, this episode offers a grounded look at how to navigate the rise of generative AI, protect brand integrity, and build trust in a rapidly changing threat environment.

From layoffs and talent shortages to the rise of agentic AI, Kim and Ken break down how automation, machine learning, and new attack surfaces are changing the cybersecurity landscape in real time. They discuss:

• How AI is transforming security operations and workforce dynamics
• The growing risk of over-automation and the loss of human oversight
• Why data governance and validation are critical to AI success
• The double-edged sword of AI in threat detection — and how bad actors are using it too
• The looming impact of quantum computing and what it means for encryption and defense strategies
• The importance of Zero Trust, segmentation, and continuous monitoring in today’s AI-driven world

Ken also shares candid insights on hiring trends, upskilling the next generation of cybersecurity professionals, and how leaders can prepare for a workforce that increasingly depends on — and is challenged by — artificial intelligence.

Whether you’re a CISO, IT leader, or security practitioner, this conversation offers practical perspective on where AI, automation, and human expertise intersect — and how to stay ahead in a rapidly evolving cyber landscape.

In this episode of Security for All, host Kim Hakim explores what really happened during the AWS outage and what it means for organizations, consumers, and cybersecurity professionals.

Kim welcomes Tahjar Roamartinez, MBA, CISSP, ITIL, CEH—former U.S. Army officer and cybersecurity executive with extensive experience in IT governance, risk management, and cloud security. Together, they examine both the technical root causes and the broader business and societal impacts of the outage.

Discussion Topics Include:

• The technical breakdown of the AWS outage and how a DNS failure rippled across industries
• How overreliance on a single cloud provider creates systemic risk
• The importance of redundancy, resilience, and multi-cloud strategies
• How to prepare and respond using playbooks, tabletop exercises, and recovery planning
• The growing digital dependency of individuals, families, and organizations
• How security leaders can balance innovation with risk management
• Lessons learned for CISOs, IT leaders, and business owners moving forward

Tahjar and Kim also discuss how this event should serve as a wake-up call for every organization, regardless of size or budget. From small businesses to large enterprises, no one is immune from the ripple effects of an outage in today’s interconnected digital ecosystem.

Listeners will gain practical insights into strengthening cyber resilience, building awareness, and preparing for future disruptions—because in cybersecurity, it’s not a question of if, but when.

Drawing from her own experience in cybersecurity and human behavior, Eva shares how burnout isn’t just a personal problem — it’s a security risk. They discuss how the human element remains the weakest link in cyber defense, and why emotional resilience and psychological regulation are as essential as technical skills.

The conversation also explores gender balance and leadership energy, challenging the traditional “hustle harder” mindset. As they reflect on outdated workplace beliefs, the two discuss the importance of alignment: how working in tune with your authentic self prevents exhaustion and unlocks creativity.

They also examine the double-edged nature of AI — a tool that can either amplify burnout or help professionals regain time and focus when used with intention.

From redefining what success really looks like to cultivating workplaces where people can thrive, this episode is an honest, insightful, and empowering reminder that true leadership begins with balance — not burnout.

If you’ve ever struggled with burnout, leadership fatigue, or the constant push to keep up in a hyper-digital world, this conversation will inspire you to slow down, realign, and find drive from a place of strength and humanity.

In this episode of And Security For All, host Kim Hakim is joined by Jonathan Kimmit, CISO at Alias Cybersecurity and former CISO at the University of Tulsa. Together, they explore the evolving role of cybersecurity awareness in a rapidly changing threat landscape. Jonathan shares insights from his years in leadership, including how foundational strategies can adapt to future challenges, how culture and communication influence security posture, and why staying vigilant is just as important today as ever before.

Throughout the discussion, they tackle:

• Why awareness isn’t just a “check-the-box” exercise
• How organizational culture impacts cybersecurity effectiveness
• Strategies for engaging teams and leadership in meaningful awareness efforts
• What’s changing in the industry and what CISOs should anticipate in the coming year

Listeners will walk away with practical takeaways and a renewed understanding of why awareness still matters—not only during Cybersecurity Month but year-round.

Guest:

Seth Meenakshisundaram

Co-Founder and COO at Zluri

Steve Winterfeld

I have served as CISO for Nordstrom Bank, Director of Cybersecurity for Nordstrom and Director of Incident Response and Threat Intelligence at Charles Schwab. Also have published a book on Cyber Warfare and hold CISSP, ITIL and PMP certifications.

Sean Flynn

I work with companies to ensure Akamai’s Security Vision aligns with industry and customer needs. I advise some of the largest customers in Finance, Commerce, and Healthcare on security strategies for implementing application, network, enterprise, and cyber best practices. I also act as a lead trainer for web and security teams. Before that, I designed and deployed critical security capabilities for multiple industries. I have over 18 years of IT security experience working for networking and application security providers. I have extensive hands-on experience, helping protect customers from active attacks by state-sponsored actors, hacktivists, and cyber criminals.

Steve Winterfeld

I have served as CISO for Nordstrom Bank, Director of Cybersecurity for Nordstrom and Director of Incident Response and Threat Intelligence at Charles Schwab. Also have published a book on Cyber Warfare and hold CISSP, ITIL and PMP certifications.

Sean Flynn

I work with companies to ensure Akamai’s Security Vision aligns with industry and customer needs. I advise some of the largest customers in Finance, Commerce, and Healthcare on security strategies for implementing application, network, enterprise, and cyber best practices. I also act as a lead trainer for web and security teams. Before that, I designed and deployed critical security capabilities for multiple industries. I have over 18 years of IT security experience working for networking and application security providers. I have extensive hands-on experience, helping protect customers from active attacks by state-sponsored actors, hacktivists, and cyber criminals.

Today's Special Guests:                                                                           

Tricia Howard                                                  Steve Winterfeld

Mitch Mayne                                                Roger Barranco

Guest: Richard Bird

Richard William Bird is the Chief Security Officer for Singulr AI and a six-time C-level executive in the corporate and start-up worlds. His 30-year career journey has been diverse and unique, from a dozen years at JPMorgan Chase to delivering keynote presentations worldwide. Richard is internationally recognized for his expert insights, work, and views on AI security, data privacy, digital consumer rights, API security, and identity security. He is a highly sought-after speaker and moderator who addresses today's security problems with humor and clarity.

Richard recently released his first book, Famous With 12 People: A Career Guide On How to Be an Internationally Recognized Expert In Something Nobody Cares About. It is a practical field guide on personal and professional branding, public speaking, and effective networking.

He is a Senior Fellow with the CyberTheory Zero Trust Institute and an executive member of CyberEdBoard. He has been interviewed and quoted extensively by media outlets, including ISMG, the Wall Street Journal, CNBC, Bloomberg, The Financial Times, Business Insider, CNN, NBC Nightly News, Dark Reading, and TechRepublic.

Guest: Richard Bird

Richard William Bird is the Chief Security Officer for Singulr AI and a six-time C-level executive in the corporate and start-up worlds. His 30-year career journey has been diverse and unique, from a dozen years at JPMorgan Chase to delivering keynote presentations worldwide. Richard is internationally recognized for his expert insights, work, and views on AI security, data privacy, digital consumer rights, API security, and identity security. He is a highly sought-after speaker and moderator who addresses today's security problems with humor and clarity.

Richard recently released his first book, Famous With 12 People: A Career Guide On How to Be an Internationally Recognized Expert In Something Nobody Cares About. It is a practical field guide on personal and professional branding, public speaking, and effective networking.

He is a Senior Fellow with the CyberTheory Zero Trust Institute and an executive member of CyberEdBoard. He has been interviewed and quoted extensively by media outlets, including ISMG, the Wall Street Journal, CNBC, Bloomberg, The Financial Times, Business Insider, CNN, NBC Nightly News, Dark Reading, and TechRepublic.

Guest:

Tera Ladner

I’m focused on building strong, proactive cybersecurity programs that protect organizations from today’s evolving threats while ensuring compliance and fostering a culture of security awareness. I work to ensure security strategies align with business goals while keeping things simple, yet effective.

I am always looking for ways to make security a seamless part of business growth. I collaborate with teams across the organization to strengthen security and reduce risk, while staying ahead of emerging trends.

I’m passionate about creating a security culture where everyone is aware, engaged, and protected—ultimately enabling the business to thrive. I am deeply committed to enabling a safer, more resilient community where younger members are inspired to be the next generation of cyber defenders.

Guest:

Tera Ladner

I’m focused on building strong, proactive cybersecurity programs that protect organizations from today’s evolving threats while ensuring compliance and fostering a culture of security awareness. I work to ensure security strategies align with business goals while keeping things simple, yet effective.

I am always looking for ways to make security a seamless part of business growth. I collaborate with teams across the organization to strengthen security and reduce risk, while staying ahead of emerging trends.

I’m passionate about creating a security culture where everyone is aware, engaged, and protected—ultimately enabling the business to thrive. I am deeply committed to enabling a safer, more resilient community where younger members are inspired to be the next generation of cyber defenders.

AI has transformed cybersecurity, from early detection systems to today’s generative models like DeepSeek. While it strengthens defenses, it also has limitations and is being weaponized by cybercriminals. Beyond security, AI is reshaping industries, from autonomous vehicles to healthcare, while raising concerns about job displacement. As it continues evolving, what challenges and opportunities lie ahead?

Guest: Tony Anscombe

Dynamic, revenue-focused executive with over 20 years of international leadership experience in business development, partnerships and as a company spokesperson. Successfully led startups and served as part of executive teams for global, publicly-held companies. In-depth understanding of software, hardware, and mobile technology markets. Key areas of focus: security, privacy, compliance, financial services and child safety online. Contributor to the award winning cybersecurity blog - WeLiveSecurity.com - and guest author on Dark Reading.

Seasoned company spokesperson on an international scale including creating content and presenting at conferences and industry events and to key influencers such as broadcast, radio, online and print media and analysts.

Special Guests:  Jonathan Kimmitt and Chad Kliewer

Jonathan Kimmitt - As a leader in Information Security across the academic sectors, I have developed an accomplished career driving the strategy and management of business transformation, technical migrations, IT data security, disaster recovery and technology planning. I’ve found my success has been achieved by combining hands-on expertise in information security management and cybersecurity to ensure the optimal performance of critical, enterprise-scale environments.

I specialize in developing and implementing enterprise technology models, security architecture and best practices to maintain internal control; introducing security framework, tools and solutions to stimulate performance improvements; and aligning business requirements with information security processes. Recognized as a versatile leader, I excel at guiding cross-functional technology resources through critical projects, as well as influencing key stakeholders and decision makers on the adoption of new security framework and technical best practices to meet operational goals.

I believe that technology is the foundation for a successful business. I take pride in directly contributing to the success of an organization by supporting the development and management of security tools and solutions and am committed to expanding my skills and knowledge so that I can continue to meet corporate and customer goals.

Chad Kliewer is the Information Security Officer overseeing the cybersecurity and privacy programs for Pioneer Telephone Cooperative based in Kingfisher, OK. He has over 20 years experience in Information Technology with responsibilities ranging from PC Tech to CIO, most of that time being the primary person responsible for security including HIPAA and SOX compliance. While mostly in the healthcare field, Chad has also worked in banking, transportation, and currently in telecommunications. During his career, Chad has been outsourced, insourced, and resourced working with companies from 50 employees to more than 50,000 employees giving him insight to how things work in companies large and small and everywhere in between. Chad serves on several local event and non-profit advisory boards. He is currently serving as the Board Secretary for the InfraGard Oklahoma Members Alliance and maintains the Certified Information Systems Security Professional (CISSP) certification.

AI has transformed cybersecurity, from early detection systems to today’s generative models like DeepSeek. While it strengthens defenses, it also has limitations and is being weaponized by cybercriminals. Beyond security, AI is reshaping industries, from autonomous vehicles to healthcare, while raising concerns about job displacement. As it continues evolving, what challenges and opportunities lie ahead?

Guest: Tony Anscombe

Dynamic, revenue-focused executive with over 20 years of international leadership experience in business development, partnerships and as a company spokesperson. Successfully led startups and served as part of executive teams for global, publicly-held companies. In-depth understanding of software, hardware, and mobile technology markets. Key areas of focus: security, privacy, compliance, financial services and child safety online. Contributor to the award winning cybersecurity blog - WeLiveSecurity.com - and guest author on Dark Reading.

Seasoned company spokesperson on an international scale including creating content and presenting at conferences and industry events and to key influencers such as broadcast, radio, online and print media and analysts.

Special Guests:  Jonathan Kimmitt and Chad Kliewer

Jonathan Kimmitt - As a leader in Information Security across the academic sectors, I have developed an accomplished career driving the strategy and management of business transformation, technical migrations, IT data security, disaster recovery and technology planning. I’ve found my success has been achieved by combining hands-on expertise in information security management and cybersecurity to ensure the optimal performance of critical, enterprise-scale environments.

I specialize in developing and implementing enterprise technology models, security architecture and best practices to maintain internal control; introducing security framework, tools and solutions to stimulate performance improvements; and aligning business requirements with information security processes. Recognized as a versatile leader, I excel at guiding cross-functional technology resources through critical projects, as well as influencing key stakeholders and decision makers on the adoption of new security framework and technical best practices to meet operational goals.

I believe that technology is the foundation for a successful business. I take pride in directly contributing to the success of an organization by supporting the development and management of security tools and solutions and am committed to expanding my skills and knowledge so that I can continue to meet corporate and customer goals.

Chad Kliewer is the Information Security Officer overseeing the cybersecurity and privacy programs for Pioneer Telephone Cooperative based in Kingfisher, OK. He has over 20 years experience in Information Technology with responsibilities ranging from PC Tech to CIO, most of that time being the primary person responsible for security including HIPAA and SOX compliance. While mostly in the healthcare field, Chad has also worked in banking, transportation, and currently in telecommunications. During his career, Chad has been outsourced, insourced, and resourced working with companies from 50 employees to more than 50,000 employees giving him insight to how things work in companies large and small and everywhere in between. Chad serves on several local event and non-profit advisory boards. He is currently serving as the Board Secretary for the InfraGard Oklahoma Members Alliance and maintains the Certified Information Systems Security Professional (CISSP) certification.

Today's Special Guests:                                                                           

Tricia Howard                                                  Steve Winterfeld

Mitch Mayne                                                Roger Barranco

Mark Sangster is the author of No Safe Harbor: The Inside Truth About Cybercrime and How to Protect Your Business. He is an award-winning speaker at international conferences and prestigious stages including the Harvard Law School and RSA Conference. Mark has appeared on CNN News Hour to provide expert opinion on international cybercrime issues and is a go-to subject matter expert for leading publications and media outlets including the Wall Street Journal and Forbes when covering major data breach events.

Gordon Rudd:

Career Designer for CISOs, CIOs, & CTOs. Coaching technical people is my greatest passion. I founded Stone Creek Coaching to give back to the technical community I've been so fortunate to be a part of for 35 years. I help people discover their potential and become leaders in their technical communities. I've turned 35 years of experience in technology, cybersecurity, and building high-performance teams into a program that will put your squarely in charge of your career. 

After working in all areas of technology; programming, systems engineering, network engineering, project management, enterprise architecture, information security, vendor management, risk management, and process improvement, I have a unique perspective on career designs for techies. I'm a results-oriented technology coach and mentor and coach.

I founded the CISO Mentoring Project and remain an engaged mentor to many aspiring and active CISOs across the country. I have taught PDI (Professional Development Institute) courses for (ISC)2, helping cybersecurity leaders, create their Path to CISO and lead educational events, videos and content for (ISC)2 members. As a recognized expert, I am frequently sought after to speak at industry events on information security, GRC and enterprise risk management.

Jonathan Kimmitt:

As a leader in Information Security across the academic sectors, I have developed an accomplished career driving the strategy and management of business transformation, technical migrations, IT data security, disaster recovery and technology planning. I’ve found my success has been achieved by combining hands-on expertise in information security management and cybersecurity to ensure the optimal performance of critical, enterprise-scale environments.

I specialize in developing and implementing enterprise technology models, security architecture and best practices to maintain internal control; introducing security framework, tools and solutions to stimulate performance improvements; and aligning business requirements with information security processes. Recognized as a versatile leader, I excel at guiding cross-functional technology resources through critical projects, as well as influencing key stakeholders and decision makers on the adoption of new security framework and technical best practices to meet operational goals.

I believe that technology is the foundation for a successful business. I take pride in directly contributing to the success of an organization by supporting the development and management of security tools and solutions and am committed to expanding my skills and knowledge so that I can continue to meet corporate and customer goals.