About the show

Security Conversations is a series of podcasts covering threat intelligence and the business of cybersecurity, from the lens of veteran journalist and storyteller Ryan Naraine. The Three Buddy Problem show features conversations and debates on nation-state APTs, cyberespionage, spy tradecraft, cryptocurrency theft, advancements in offensive research and targeted malware espionage activity.

Connect with Ryan on Twitter (Open DMs).

Security Conversations on social media

Episodes

  • Serial entrepreneur Rishi Bhargava on building another cybersecurity company

    April 10th, 2023  |  32 mins 32 secs

    Episode sponsors:

    Rishi Bhargava and the team of entrepreneurs behind Demisto’s $560 million exit are back at it with a new startup building technology in the customer identity market. The new company, called Descope, raised an abnormally large $53 million seed-stage funding round with ambitious plans to take on rivals big and small in the customer identity and authentication space.

    On this episode of the podcast, Bhargava joins Ryan to talk about the VC funding landscape, the confusing 'identity' category, the responsibilities of vendors in the identity ecosystem, the emergence of Microsoft and Google as big security players, and some thoughts on the Israeli startup scene.

  •

    Claude Mandy on CISO priorities, data security principles

    March 6th, 2023  |  35 mins 2 secs
    cloud security, data guard, data security, dspm

    Episode sponsors:

    Symmetry Systems executive Claude Mandy joins the show to discuss a career in the security trenches, life as a CISO during the WannaCry crisis, and first principles around data security. We dig into the emerging Data Security Posture Management (DSPM) category and how it extends the Zero Trust philosophy to hybrid cloud data stores.

  •

    Sidra Ahmed Lefort dishes on VC investments and cyber uncertainties

    February 15th, 2023  |  31 mins
    data security, investments, venture capital

    Episode sponsors:

    Munich Re Ventures investment principal Sidra Ahmed Lefort joins Ryan for a frank discussion on the state of VC funding in cybersecurity, the rise (and coming fall?) of 'unicorns', the massive early-stage funding rounds and what they mean, layoffs and contractions, and the areas in security still ripe for innovation.

  •

    Paul Roberts on wins and losses in the 'right to repair' battle

    January 19th, 2023  |  47 mins 32 secs

    Episode sponsors:

    SecuRepairs.org co-founder Paul Roberts joins the show to discuss his passion for the right to repair consumer electronic devices, the big-ticket lobbyists working to undermine the movement, and how changing consumer spending patterns are helping to rack up regulatory wins.

  • Katie Moussouris on where bug bounties went wrong

    December 8th, 2022  |  33 mins 18 secs

    Episode sponsors:

    Luta Security founder and chief executive Katie Moussouris joins the show to dish on the bug-bounty ecosystem, the abuse of hacker labor, and the common mistakes made by even the most mature security programs. A security industry pioneer, Moussouris argues for better use of bug bounty metrics to drive decisions and a heavy focus on reducing duplicate vulnerability submissions.

  •

    Robinhood CSO Caleb Sima on a career in the security trenches

    November 8th, 2022  |  30 mins 38 secs
    ciso, mobile stock trading, robinhood, webapp security

    Episode sponsors:

    Caleb Sima is a cybersecurity lifer now responsible for security at Robinhood, a mobile stock trading platform. Caleb joins Ryan on the show to discuss the early hacking scene in Atlanta, building SPI Dynamics in a webapp security powerhouse, the evolution of attack surfaces, the CISO's changing priorities, and more...

  •

    Charlie Miller on hacking iPhones, Macbooks, Jeep and Self-Driving Cars

    October 18th, 2022  |  59 mins
    apple, car hacking, iphone, lockdown mode, pwn2own, self driving cars

    Episode sponsors:

    Famed hacker Charlie Miller joins Ryan on the podcast to discuss a career in vulnerability research and software exploitation. Charlie talks about hacking iPhones and Macbooks at Pwn2Own, the 'No More Free Bugs' campaign, the Jeep hack that led to a recall and his current work securing Cruise's self-driving fleet.

  •

    JAG-S on big-game malware hunting and a very mysterious APT

    October 17th, 2022  |  52 mins 40 secs
    apts, cyberespionage, exploits, zero-day
    • Episode sponsors: Binarly and FwHunt - Protecting devices from emerging firmware and hardware threats using modern artificial intelligence.

    SentinelLabs malware hunter Juan Andres Guerrero-Saade (JAG-S) returns to the show to discuss how big-game attribution has changed over the years, the nation-state APT landscape, Mudge and the nightmares facing CISOs, and a mysterious actor named Metador.

  •

    Chainguard's Dan Lorenc gets real on software supply chain problems

    October 13th, 2022  |  47 mins 7 secs
    entrepreneurship, open source software, supply chain security
    • Episode sponsors: Binarly and FwHunt - Protecting devices from emerging firmware and hardware threats using modern artificial intelligence.

    Dan Lorenc and team or ex-Googlers raised $55 million in early-stage funding to build technology to secure software supply chains. On this episode of the show, Dan joins Ryan to talk about the different faces of the supply chain problem, the security gaps that will never go away, the decision to raise an unusually large early-stage funding round, and how the U.S. government's efforts will speed up technology innovation.

  •

    Vinnie Liu discusses a life in the offensive security trenches

    August 7th, 2022  |  1 hr 7 mins
    bug bounties, continuous testing, h2c smuggling, pen-testing, security assessments, web app security

    A conversation with Bishop Fox chief executive Vinnie Liu on the origins and evolution of the pentest services business, the emerging continuous attack surface management space, raising $75m as a 'growth mode' investment, cybersecurity's people problem, and much more...

  •

    Down memory lane with Snort and Sourcefire creator Marty Roesch

    July 25th, 2022  |  1 hr 7 mins
    netography, network security, snort, sourcefire

    Network security pioneer Marty Roesch takes listeners on a trip down memory lane, sharing stories from the creation of Snort back in the 1990s, the startup journey of building Sourcefire into an IDS/IPS powerhouse and selling the company for $2 billion, the U.S. government killing a Check Point acquisition, and his newest adventure as chief executive at Netography.

  •

    Subbu Rama, co-founder and CEO, BalkanID

    June 1st, 2022  |  34 mins 17 secs
    balkanid, funding, iga, public cloud, saas

    Serial entrepreneur Subbu Rama joins the show to talk about building a cybersecurity business, addressing the problem of entitlement sprawl and raising seed funding for intelligent access governance technology.