Distilling Security https://distillingsecurity.com Consumable security, privacy, and compliance en Distilling Security Copyright 2026 Thu, 09 Apr 2026 11:30:55 +0000 Distilling Security Consumable security, privacy, and compliance Your Name youremail@example.com no Episode 68 - Doorbells Ring Hollow https://distillingsecurity.com/episode-68-doorbells-ring-hollow/ Mon, 23 Feb 2026 13:00:00 +0000

What on earth were Ring and Amazon thinking when they aired their Super Bowl advert that previewed a “there’s nowhere you can hide” type of dystopian future masked as a way to find your lost dog?  With cameras everywhere, are we safer or just more exposed? When camera data is deleted, is it really gone (spoiler alert: not necessarily), and more. Are we approaching the new location of the “creepy line” or as a society are we content to trade privacy for security? And what happens when the glasses with cameras become more pervasive? Are we all on cam all the time whether we like it or not?

Show notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 68 - Doorbells Ring Hollow Daniel Ayala

What on earth were Ring and Amazon thinking when they aired their Super Bowl advert that previewed a “there’s nowhere you can hide” type of dystopian future masked as a way to find your lost dog?  With cameras everywhere, are we safer or just more exposed? When camera data is deleted, is it really gone (spoiler alert: not necessarily), and more. Are we approaching the new location of the “creepy line” or as a society are we content to trade privacy for security? And what happens when the glasses with cameras become more pervasive? Are we all on cam all the time whether we like it or not?

Show notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 67 - Complacency in the Loop https://distillingsecurity.com/episode-67-complacency-in-the-loop/ Mon, 09 Feb 2026 15:56:00 +0000

AI is growing in use within information security, but are we ready to trust it to do all the things we hope it can, and do so automatically without doing harm?  Context is king, and training to that level is only possible when you give all your experience to the AI. What are the tradeoffs to doing so? What happens when we depend on AI and forget (or worse, never learn) the underpinnings of what makes the AI system work (remember the calculator debates of the 1980s?). And does the end justify the means when it comes to AI use? And what is that “ends” anyway? Efficiency, automation, knowledge? Erik, Dan, and Brian discuss it all in this week’s Great Security Debate!

Thanks for being part of the debate!

Show Notes

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 67 - Complacency in the Loop Daniel Ayala

AI is growing in use within information security, but are we ready to trust it to do all the things we hope it can, and do so automatically without doing harm?  Context is king, and training to that level is only possible when you give all your experience to the AI. What are the tradeoffs to doing so? What happens when we depend on AI and forget (or worse, never learn) the underpinnings of what makes the AI system work (remember the calculator debates of the 1980s?). And does the end justify the means when it comes to AI use? And what is that “ends” anyway? Efficiency, automation, knowledge? Erik, Dan, and Brian discuss it all in this week’s Great Security Debate!

Thanks for being part of the debate!

Show Notes

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 66 - WOPR Was Right https://distillingsecurity.com/episode-66-wopr-was-right/ Join the Great Security Debate as experts discuss cyber warfare, critical infrastructure, and the ethics of security in today's world. Mon, 12 Jan 2026 15:00:00 +0000

Recently and over the past few years, world events may have included cybersecurity components in their enactment. So, Brian, Erik, and Dan started talking about the role of security in critical infrastructure protection, asking questions about the ethics and thresholds for government and corporate roles in cyber retaliation, whether we as security practitioners have a role (or an obligation, or even a liability) to close vulnerabilities that can be used in primary or retaliatory scenarios. How much of human nature makes cyber retaliation a foregone conclusion, or can we find ways to reduce the need or use or availability of ways in via the technology. From Stuxnet to Iran to Caracas, using cybersecurity is a prevalent vector of retaliation, but does it always have to be that way?  Or will it end with WOPR’s recognition that the only way to win the game is not to play at all?

It’s hard to talk about modern cybersecurity and not bring in current events, and even harder to keep it from turning political. We tried very hard to do a good job in the latter as we talked about the former. 

Thanks for being part of the debate!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 66 - WOPR Was Right Daniel Ayala Join the Great Security Debate as experts discuss cyber warfare, critical infrastructure, and the ethics of security in today's world.

Recently and over the past few years, world events may have included cybersecurity components in their enactment. So, Brian, Erik, and Dan started talking about the role of security in critical infrastructure protection, asking questions about the ethics and thresholds for government and corporate roles in cyber retaliation, whether we as security practitioners have a role (or an obligation, or even a liability) to close vulnerabilities that can be used in primary or retaliatory scenarios. How much of human nature makes cyber retaliation a foregone conclusion, or can we find ways to reduce the need or use or availability of ways in via the technology. From Stuxnet to Iran to Caracas, using cybersecurity is a prevalent vector of retaliation, but does it always have to be that way?  Or will it end with WOPR’s recognition that the only way to win the game is not to play at all?

It’s hard to talk about modern cybersecurity and not bring in current events, and even harder to keep it from turning political. We tried very hard to do a good job in the latter as we talked about the former. 

Thanks for being part of the debate!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 65 - Signs. Signs. Everywhere A Sign. https://distillingsecurity.com/episode-65-signs-signs-everywhere-a-sign/ Mon, 29 Dec 2025 18:58:46 +0000

Rules are made and policies are established. But the “how” of implementing and meeting those regulations or policies will be very context specific. In this episode of the Great Security Debate, Dan, Erik, and Brian cover a number of key policies and requirements and some different ways to think about implementing them and how the specific situation, company, risk will affect the way you meet the rule. From driving a car to incident response and everything in between. We debate the need to look back at old rules and see if they all still make sense (a great programme called Kill Stupid Rules), and flexibility in control implementation to meet evolving business needs, to move quickly, and keeping the whole picture of the business, customer, and employees in mind.

Thanks for Listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 65 - Signs. Signs. Everywhere A Sign. Daniel Ayala

Rules are made and policies are established. But the “how” of implementing and meeting those regulations or policies will be very context specific. In this episode of the Great Security Debate, Dan, Erik, and Brian cover a number of key policies and requirements and some different ways to think about implementing them and how the specific situation, company, risk will affect the way you meet the rule. From driving a car to incident response and everything in between. We debate the need to look back at old rules and see if they all still make sense (a great programme called Kill Stupid Rules), and flexibility in control implementation to meet evolving business needs, to move quickly, and keeping the whole picture of the business, customer, and employees in mind.

Thanks for Listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 64 - Agentic Dan https://distillingsecurity.com/episode-64-agentic-dan/ Mon, 15 Dec 2025 19:58:54 +0000

We are back for another Great Security Debate.

In this episode: we discuss the potential role of agentic AI in security, from true “copilot” to automated decider of things, and whether LLMs are just a really cool search engine. Brian, Erik, and Dan also debate the means and extent to which we could replace ourselves with agents and what the inhibitors and risks are (spoiler alert: trust and survival of that agent after employment were big factors), and how do we train those agents of all the steps our brains take to make the decisions that the humans make, and do so without polluting it with aspirational versions of ourselves (think: Instagram vs Reality). And it all leads to a parenting lesson by Brian and an automotive process lesson by Erik? It’s quite a debate. 

Thanks for listening! We might do one more episode in 2026, but if not have a wonderful holidays and a happy new year!

Here’s the quote that Brian references at the end of the episode by Tolstoy:

Patience is waiting. Not passively waiting. That is laziness. But to Keep going when the going is hard and slow - that is patience. The two most powerful warriors are patience and time. The value lies not in reducing "power" (computational energy) but in leveraging that processing power to achieve outcomes that are difficult, slow, or impossible for humans to manage alone.

Thanks for listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 64 - Agentic Dan Daniel Ayala

We are back for another Great Security Debate.

In this episode: we discuss the potential role of agentic AI in security, from true “copilot” to automated decider of things, and whether LLMs are just a really cool search engine. Brian, Erik, and Dan also debate the means and extent to which we could replace ourselves with agents and what the inhibitors and risks are (spoiler alert: trust and survival of that agent after employment were big factors), and how do we train those agents of all the steps our brains take to make the decisions that the humans make, and do so without polluting it with aspirational versions of ourselves (think: Instagram vs Reality). And it all leads to a parenting lesson by Brian and an automotive process lesson by Erik? It’s quite a debate. 

Thanks for listening! We might do one more episode in 2026, but if not have a wonderful holidays and a happy new year!

Here’s the quote that Brian references at the end of the episode by Tolstoy:

Patience is waiting. Not passively waiting. That is laziness. But to Keep going when the going is hard and slow - that is patience. The two most powerful warriors are patience and time. The value lies not in reducing "power" (computational energy) but in leveraging that processing power to achieve outcomes that are difficult, slow, or impossible for humans to manage alone.

Thanks for listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 63 - Give a Sh!t Posture Management https://distillingsecurity.com/episode-63-give-a-sh-t-posture-management/ Mon, 17 Nov 2025 23:58:07 +0000

On this weeks’ Debate, Brian brings a truckload of acronyms for more single panes of glass to help us consolidate our various single panes of glass, Erik may actually be Brian (or maybe Brian is Erik), and Dan confirms he still (and likely always will) spend the rest of his days living in the house he just built deep in the Trough of Disillusionment.

What started out as a chat about some new technologies in the space turned into a treatise on the state of leadership and the future talent pipeline’s need for more curiosity (and why we think they are starved of the opportunity to learn to be curious). Along the way we talk about what motivates organisations to do security right from the get go vs leaving it alone based on difficulty to remediate, and the risk balances of both (think: productivity vs security). Throw in a little “binary opinions have dragged us into the mire” and you’ve got a full episode of The Great Security Debate.

We also drop some hints about a new show coming from The Distilling Security network in 2026 called The Final Act which will bring guests in the later stages of their careers about the urgency of our careers in security and tech, what they want to leave behind as legacy, and what they are doing to prepare their orgs for their eventual departure. Add on how they have and will give back to the community, and what their successors want to see done before this first generation of security and tech leaders hit the road.

Please subscribe and leave a comment.  If you’d like to sponsor the network, please email sponsors@distillingsecurity.com

Thanks for listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 63 - Give a Sh!t Posture Management Daniel Ayala

On this weeks’ Debate, Brian brings a truckload of acronyms for more single panes of glass to help us consolidate our various single panes of glass, Erik may actually be Brian (or maybe Brian is Erik), and Dan confirms he still (and likely always will) spend the rest of his days living in the house he just built deep in the Trough of Disillusionment.

What started out as a chat about some new technologies in the space turned into a treatise on the state of leadership and the future talent pipeline’s need for more curiosity (and why we think they are starved of the opportunity to learn to be curious). Along the way we talk about what motivates organisations to do security right from the get go vs leaving it alone based on difficulty to remediate, and the risk balances of both (think: productivity vs security). Throw in a little “binary opinions have dragged us into the mire” and you’ve got a full episode of The Great Security Debate.

We also drop some hints about a new show coming from The Distilling Security network in 2026 called The Final Act which will bring guests in the later stages of their careers about the urgency of our careers in security and tech, what they want to leave behind as legacy, and what they are doing to prepare their orgs for their eventual departure. Add on how they have and will give back to the community, and what their successors want to see done before this first generation of security and tech leaders hit the road.

Please subscribe and leave a comment.  If you’d like to sponsor the network, please email sponsors@distillingsecurity.com

Thanks for listening!

Show Notes:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no New Podcast Coming Soon: The Final Act https://distillingsecurity.com/new-podcast-coming-soon-the-final-act/ Tue, 11 Nov 2025 14:53:43 +0000 Announcing The Final Act: Navigating the Next Chapter of Tech and Security Leadership

Click the Subscribe button at the upper right of the screen to be notified when new episodes of Distilling Security podcasts, including The Final Act are available.

We've all been there – heads down, building, innovating, leading teams through the ever-accelerating landscape of technology and cybersecurity. For many of us, this journey began decades ago, shaping not just our careers, but the very field we work in and the fabric of the organisations we serve. But what happens when the time comes to look beyond the daily grind? What does it mean to "leave well"?

Today, we're thrilled to announce a new podcast from the Distilling Security Network designed to explore these crucial, infrequently-discussed questions: The Final Act.

The Final Act isn't just about hanging up your boots. It’s about understanding the profound implications of leadership transition in fields that grew up around us. If you're a seasoned tech or security leader, you know your fingerprints are all over the systems, the culture, and the strategy of your organisation. How do you prepare for your departure in a way that truly sets your successors up for success?

Our intent with this podcast is to provide a much-needed chronicle to serve as guide for current and aspiring leaders who are contemplating the "next chapter" of their careers, to capture the urgency and the impact of the role, and the imperatives that come along with that.

Each episode of The Final Act will feature an in-depth interview with current and former leaders from across the technology and infosec space. We'll hear their candid stories, their successes, their regrets, and their practical advice on navigating career transitions with grace, foresight, and influence. We'll also invite other guests to provide broader perspectives on leadership, career development, and life after the traditional office.

It's about hearing and learning from those who have walked the path, or are currently walking it, and equipping the next wave of leaders with the insights they need to carry the torch forward. And it's about making sure we leave behind a field that's ready for the next generation, and a next generation that's ready for the field.

The Final Act is more than a podcast; it's a conversation about the future of leadership, built on the foundations of the past. It’s about ensuring that the incredible wisdom accumulated over decades isn't lost but leveraged for the challenges and opportunities ahead.

The first episode of The Final Act will be launching soon!

Subscribe today wherever you get your podcasts, and follow us on social media for updates.

]]> New Podcast Coming Soon: The Final Act Daniel Ayala Announcing The Final Act: Navigating the Next Chapter of Tech and Security Leadership

Click the Subscribe button at the upper right of the screen to be notified when new episodes of Distilling Security podcasts, including The Final Act are available.

We've all been there – heads down, building, innovating, leading teams through the ever-accelerating landscape of technology and cybersecurity. For many of us, this journey began decades ago, shaping not just our careers, but the very field we work in and the fabric of the organisations we serve. But what happens when the time comes to look beyond the daily grind? What does it mean to "leave well"?

Today, we're thrilled to announce a new podcast from the Distilling Security Network designed to explore these crucial, infrequently-discussed questions: The Final Act.

The Final Act isn't just about hanging up your boots. It’s about understanding the profound implications of leadership transition in fields that grew up around us. If you're a seasoned tech or security leader, you know your fingerprints are all over the systems, the culture, and the strategy of your organisation. How do you prepare for your departure in a way that truly sets your successors up for success?

Our intent with this podcast is to provide a much-needed chronicle to serve as guide for current and aspiring leaders who are contemplating the "next chapter" of their careers, to capture the urgency and the impact of the role, and the imperatives that come along with that.

Each episode of The Final Act will feature an in-depth interview with current and former leaders from across the technology and infosec space. We'll hear their candid stories, their successes, their regrets, and their practical advice on navigating career transitions with grace, foresight, and influence. We'll also invite other guests to provide broader perspectives on leadership, career development, and life after the traditional office.

It's about hearing and learning from those who have walked the path, or are currently walking it, and equipping the next wave of leaders with the insights they need to carry the torch forward. And it's about making sure we leave behind a field that's ready for the next generation, and a next generation that's ready for the field.

The Final Act is more than a podcast; it's a conversation about the future of leadership, built on the foundations of the past. It’s about ensuring that the incredible wisdom accumulated over decades isn't lost but leveraged for the challenges and opportunities ahead.

The first episode of The Final Act will be launching soon!

Subscribe today wherever you get your podcasts, and follow us on social media for updates.

]]> no Episode 62 - The 100 Years AI Flood https://distillingsecurity.com/episode-62-the-100-years-ai-flood/ Mon, 03 Nov 2025 13:00:00 +0000

The Great Security Debate is *back*! It’s been a busy year, but it’s time to get this show back on the air (and maybe on the road). Dan takes a break from the rat race, Erik took over the world, and Brian uses Elmer’s Glue to splice his network cables.

Topics in the show this week: 

  • AWS and Microsoft make the best cases for business continuity plans, the AI
  • Is public cloud reliable enough? Should we all move back to local data centres? How can we reliably assess that risk?
  • Want an AI Data Centre on your town? NIMBY vs Innovation!

We will be back every 2 weeks on Mondays. Subscribe on YouTube at https://youtube.com/@greatsecuritydebateto see our smiling faces as you watch, or in your favourite podcast application to listen on your commute or with your whole family around the radio.

See you on the 17th with more debates! And some entirely new shows coming from Distilling Security very soon, too. Subscribe to the newsletter on our website https://distillingsecurity.com to hear all about them

Links to mentioned articles and topics:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 62 - The 100 Years AI Flood Daniel Ayala

The Great Security Debate is *back*! It’s been a busy year, but it’s time to get this show back on the air (and maybe on the road). Dan takes a break from the rat race, Erik took over the world, and Brian uses Elmer’s Glue to splice his network cables.

Topics in the show this week: 

  • AWS and Microsoft make the best cases for business continuity plans, the AI
  • Is public cloud reliable enough? Should we all move back to local data centres? How can we reliably assess that risk?
  • Want an AI Data Centre on your town? NIMBY vs Innovation!

We will be back every 2 weeks on Mondays. Subscribe on YouTube at https://youtube.com/@greatsecuritydebateto see our smiling faces as you watch, or in your favourite podcast application to listen on your commute or with your whole family around the radio.

See you on the 17th with more debates! And some entirely new shows coming from Distilling Security very soon, too. Subscribe to the newsletter on our website https://distillingsecurity.com to hear all about them

Links to mentioned articles and topics:

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 61 - Risky Risks https://distillingsecurity.com/episode-61-risky-risks/ Mon, 12 May 2025 13:00:00 +0000

The Great Security Debate crew recorded a live episode at the GTS Security Summit in Detroit, Michigan with special guest, Zah Gonzalvo, SVP of Financial, Climate, and Operational Risk at Banco Popular. Tune in for a great discussion on risk, risk mitigation, risk prioritisation, and risk in context. Yep, it’s all about risk!

Takeaways:

  • The evolution of security has shifted from a binary perspective to a more nuanced understanding of risk management, acknowledging the need for flexibility in addressing diverse security challenges. 
  • In contemporary discussions, it is increasingly evident that security must be integrated into business strategy, highlighting the imperative for security professionals to communicate effectively with stakeholders. 
  • The role of the Chief Information Security Officer (CISO) has transcended traditional technological boundaries, necessitating a comprehensive grasp of business risk and operational efficiency. 
  • Effective risk management within organizations requires a shared responsibility model, where every employee contributes to the overall security posture, thus reinforcing the concept that security is a collective endeavor. 
  • Scenario analysis is a potent tool in risk management, enabling organizations to anticipate potential threats and understand the implications of various risk scenarios on their operations. 
  • Engaging with business units to contextualize security risks in terms of operational impact and financial implications is vital for securing necessary budgets and resources for security initiatives.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 61 - Risky Risks Daniel Ayala

The Great Security Debate crew recorded a live episode at the GTS Security Summit in Detroit, Michigan with special guest, Zah Gonzalvo, SVP of Financial, Climate, and Operational Risk at Banco Popular. Tune in for a great discussion on risk, risk mitigation, risk prioritisation, and risk in context. Yep, it’s all about risk!

Takeaways:

  • The evolution of security has shifted from a binary perspective to a more nuanced understanding of risk management, acknowledging the need for flexibility in addressing diverse security challenges. 
  • In contemporary discussions, it is increasingly evident that security must be integrated into business strategy, highlighting the imperative for security professionals to communicate effectively with stakeholders. 
  • The role of the Chief Information Security Officer (CISO) has transcended traditional technological boundaries, necessitating a comprehensive grasp of business risk and operational efficiency. 
  • Effective risk management within organizations requires a shared responsibility model, where every employee contributes to the overall security posture, thus reinforcing the concept that security is a collective endeavor. 
  • Scenario analysis is a potent tool in risk management, enabling organizations to anticipate potential threats and understand the implications of various risk scenarios on their operations. 
  • Engaging with business units to contextualize security risks in terms of operational impact and financial implications is vital for securing necessary budgets and resources for security initiatives.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 60 - Fantasy Hacker League https://distillingsecurity.com/episode-60-fantasy-hacker-league/ Mon, 21 Oct 2024 13:00:00 +0000

In this episode of The Great Security Debate, Dan, Brian and Erik invent (and copyright) the idea of a Fantasy Hacker League then dig into more serious discussions on deception technology, asset discovery challenges, and resource management. The conversation also delves into the impact of budget constraints on security projects, the mental toll on cybersecurity professionals, and the evolving role of CISOs in digital transformation. Issues such as job stress, burnout, and role mismatches among security leaders are addressed, alongside strategic insights on integrating security within broader business operations.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 60 - Fantasy Hacker League Daniel Ayala

In this episode of The Great Security Debate, Dan, Brian and Erik invent (and copyright) the idea of a Fantasy Hacker League then dig into more serious discussions on deception technology, asset discovery challenges, and resource management. The conversation also delves into the impact of budget constraints on security projects, the mental toll on cybersecurity professionals, and the evolving role of CISOs in digital transformation. Issues such as job stress, burnout, and role mismatches among security leaders are addressed, alongside strategic insights on integrating security within broader business operations.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 59 - Free Disaster Recovery Tests! https://distillingsecurity.com/episode-59-free-disaster-recovery-tests/ Tue, 03 Sep 2024 13:00:00 +0000

Welcome to the Great Security Debate! In this episode, experts take on a multifaceted discussion about the intricacies of technology and cybersecurity. The debate navigates through the recent incident involving CrowdStrike and Microsoft, dissecting the layers of technology, processes, and the roles of different entities in maintaining security. Emphasizing the lessons learned, the debate also explores the challenges of disaster recovery, business continuity, and balancing risk in an increasingly complex digital landscape. Tune in as the hosts delve into the ramifications of over-consolidation, the implications of vendor lock-in, and the importance of maintaining a culture of quality and robust testing.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 59 - Free Disaster Recovery Tests! Daniel Ayala

Welcome to the Great Security Debate! In this episode, experts take on a multifaceted discussion about the intricacies of technology and cybersecurity. The debate navigates through the recent incident involving CrowdStrike and Microsoft, dissecting the layers of technology, processes, and the roles of different entities in maintaining security. Emphasizing the lessons learned, the debate also explores the challenges of disaster recovery, business continuity, and balancing risk in an increasingly complex digital landscape. Tune in as the hosts delve into the ramifications of over-consolidation, the implications of vendor lock-in, and the importance of maintaining a culture of quality and robust testing.

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 58 - To Insure or Not To Insure: It’s Not Even a Question https://distillingsecurity.com/episode-58-to-insure-or-not-to-insure-its-not-even-a-question/ Mon, 01 Jul 2024 13:00:00 +0000

This episode of ‘The Great Security Debate’ delves into the complexities surrounding cyber insurance, discussing its impact on minimising business risks and ensuring compliance. Erik, Brian, and Dan talk about how connected systems and automation increase risks and integrates AI reliance concerns. 

Insurance policies, force majeure, and government regulations get some quality discussion and debate time, revealing fears and misconceptions about standardised security controls vs. adaptive security practices. And last up: the practicality and pitfalls of self-insurance, government intervention, and the need for standardised security terminology.

Show Links:

Thanks for listening! We have got some exciting changes ahead including ways to support the podcast, some big announcements, new shows and conversations, and more! Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 58 - To Insure or Not To Insure: It’s Not Even a Question Daniel Ayala

This episode of ‘The Great Security Debate’ delves into the complexities surrounding cyber insurance, discussing its impact on minimising business risks and ensuring compliance. Erik, Brian, and Dan talk about how connected systems and automation increase risks and integrates AI reliance concerns. 

Insurance policies, force majeure, and government regulations get some quality discussion and debate time, revealing fears and misconceptions about standardised security controls vs. adaptive security practices. And last up: the practicality and pitfalls of self-insurance, government intervention, and the need for standardised security terminology.

Show Links:

Thanks for listening! We have got some exciting changes ahead including ways to support the podcast, some big announcements, new shows and conversations, and more! Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Distilling Security Michigan BBQ Meet-Up - July 18th https://distillingsecurity.com/distilling-security-michigan-bbq-meet-up-july-18th-6912c6751edcdb001bbde97d/ Mon, 24 Jun 2024 03:50:41 +0000

Mark your calendars for the 18th of July, because we're hosting a get-together like no other! The event will kick off at 3:30 PM and run until 9:00 PM, giving us ample time to enjoy the beautiful surroundings of Cass Lake.

The agenda for the day is packed with activities. You can arrive anytime between 3:30-4:30 PM, after which we'll have a social hour leading up to dinner at 6:00 PM. For the adventurous, boat rides and swimming will be available from 5:00 PM to 9:00 PM. And though the party officially ends at 9:00 PM, we're more than happy to have you stick around to watch the sunset at 9:19 PM.

Remember to dress casually, and feel free to bring a change of clothes for the boat rides. We'll be providing food and drinks, so all you need to bring is your appetite! Parking will be available in the neighbourhood, and we'll provide more details as the event date approaches.

Now, let's talk about the food. Our menu features

  • Thai Style Sticky Ribs,
  • Grilled Chicken Wings,
  • Wagyu A5 Skirt Steak, and
  • Possibly some homemade tube meat that goes in a bun.

Our sides include:

  • Homemade Tomato Basil Pasta,
  • Mac N Cheese,
  • Guacamole,
  • Salsa, and
  • Chips

We're also serving Japanese Fried Rice and grilled vegetables, along with a variety of salads.

To quench your thirst, the Detroit City Distillery will be on hand with mixed drinks, and we'll also have a variety of non-alcoholic beverages.

And a huge thanks to our sponsors, Material Security, Cyberhaven, Legit Security, Orca Security, and Imperva (now part of Thales). Go check them out and see what they are all about.

So join us for an evening of socializing, swimming, boating, and indulging in some mouth-watering food. If you'd like to join, please register via the form

Registration for this event has closed.

Thanks for your interest.

Please sign up for our newsletter to stay in touch with us about future events!

]]> Distilling Security Michigan BBQ Meet-Up - July 18th Daniel Ayala

Mark your calendars for the 18th of July, because we're hosting a get-together like no other! The event will kick off at 3:30 PM and run until 9:00 PM, giving us ample time to enjoy the beautiful surroundings of Cass Lake.

The agenda for the day is packed with activities. You can arrive anytime between 3:30-4:30 PM, after which we'll have a social hour leading up to dinner at 6:00 PM. For the adventurous, boat rides and swimming will be available from 5:00 PM to 9:00 PM. And though the party officially ends at 9:00 PM, we're more than happy to have you stick around to watch the sunset at 9:19 PM.

Remember to dress casually, and feel free to bring a change of clothes for the boat rides. We'll be providing food and drinks, so all you need to bring is your appetite! Parking will be available in the neighbourhood, and we'll provide more details as the event date approaches.

Now, let's talk about the food. Our menu features

  • Thai Style Sticky Ribs,
  • Grilled Chicken Wings,
  • Wagyu A5 Skirt Steak, and
  • Possibly some homemade tube meat that goes in a bun.

Our sides include:

  • Homemade Tomato Basil Pasta,
  • Mac N Cheese,
  • Guacamole,
  • Salsa, and
  • Chips

We're also serving Japanese Fried Rice and grilled vegetables, along with a variety of salads.

To quench your thirst, the Detroit City Distillery will be on hand with mixed drinks, and we'll also have a variety of non-alcoholic beverages.

And a huge thanks to our sponsors, Material Security, Cyberhaven, Legit Security, Orca Security, and Imperva (now part of Thales). Go check them out and see what they are all about.

So join us for an evening of socializing, swimming, boating, and indulging in some mouth-watering food. If you'd like to join, please register via the form

Registration for this event has closed.

Thanks for your interest.

Please sign up for our newsletter to stay in touch with us about future events!

]]> no Episode 57 - Wear a Stop Sign On Your Shirt https://distillingsecurity.com/episode-57-wear-a-stop-sign-on-your-shirt/ Thu, 06 Jun 2024 13:00:00 +0000

In this episode of the Great Security Debate, Brian, Erik, and Dan dive into the latest trends in ransomware including an uptick in attacks against the hypervisor. Speaking of VMWare, we also “discuss” the way that Broadcom has handled the VMWare acquisition and why it both make sense (to them) and doesn’t (to many customers).

The debate also heads into the impact of AI in cyber threats, and compare strategies for mitigating risk, such as prioritising vulnerabilities and understanding the attack landscape. 

Additionally, the conversation shifts to business practices in tech acquisitions and the potential future disruptions in the market and importance of balancing security measures with user experience, and the need for adaptive, short-term security roadmaps to stay ahead in an ever-changing environment. 

And break the big news about an upcoming Distilling Security in-person meet-up in Michigan in July!

Show Notes:

Thanks for listening! We have got some exciting changes ahead including ways to support the podcast, some big announcements, new shows and conversations, and more! Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 57 - Wear a Stop Sign On Your Shirt Daniel Ayala

In this episode of the Great Security Debate, Brian, Erik, and Dan dive into the latest trends in ransomware including an uptick in attacks against the hypervisor. Speaking of VMWare, we also “discuss” the way that Broadcom has handled the VMWare acquisition and why it both make sense (to them) and doesn’t (to many customers).

The debate also heads into the impact of AI in cyber threats, and compare strategies for mitigating risk, such as prioritising vulnerabilities and understanding the attack landscape. 

Additionally, the conversation shifts to business practices in tech acquisitions and the potential future disruptions in the market and importance of balancing security measures with user experience, and the need for adaptive, short-term security roadmaps to stay ahead in an ever-changing environment. 

And break the big news about an upcoming Distilling Security in-person meet-up in Michigan in July!

Show Notes:

Thanks for listening! We have got some exciting changes ahead including ways to support the podcast, some big announcements, new shows and conversations, and more! Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no Episode 56 - Mine Everything https://distillingsecurity.com/episode-56-mine-everything/ Wed, 05 Jun 2024 09:00:00 +0000

Sorry about the audio on this one. We have got the tech back on track for the next episode. I promise!

Join the Great Security Debate as Brian, Erik, and Dan delve into ‘pig slaughtering,’ a scam involving rapport building to swindle victims out of money. 

The discussion explores the intersections of security awareness, blockchain technology, and the ethical implications of digital tracking tools like chain analysis. Featuring real-world cases, including child exploitation traced through blockchain, and the broader debate on privacy versus legality in technology use. Are public blockchain transactions truly private? 

And how can we balance innovative tech with ethical concerns? Tune in to hear all about it

Show Notes:

Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> Episode 56 - Mine Everything Daniel Ayala

Sorry about the audio on this one. We have got the tech back on track for the next episode. I promise!

Join the Great Security Debate as Brian, Erik, and Dan delve into ‘pig slaughtering,’ a scam involving rapport building to swindle victims out of money. 

The discussion explores the intersections of security awareness, blockchain technology, and the ethical implications of digital tracking tools like chain analysis. Featuring real-world cases, including child exploitation traced through blockchain, and the broader debate on privacy versus legality in technology use. Are public blockchain transactions truly private? 

And how can we balance innovative tech with ethical concerns? Tune in to hear all about it

Show Notes:

Thanks for listening!

Some of the links in the show notes contain affiliate links that may earn a commission should you choose to make a purchase using these links. Using these links supports The Great Security Debate and Distilling Security, so we appreciate it when you use them. We do not make our recommendations based on the availability or benefits of these affiliate links.

]]> no