Advertise on podcast: Brilliance Security Magazine Podcast

Transitioning security operations away from traditional SOAR platforms toward AI SOC solutions requires a careful, phased strategy rather than an abrupt, total replacement. Security teams must begin by mapping existing playbooks and prioritizing problematic areas where automation frequently fails or requires manual intervention, leaving functional high-volume workflows running for the time being. Next, organizations should operate the AI SOC in shadow mode alongside current procedures to evaluate its investigative accuracy and compare verdicts against human analysts. Once the AI consistently proves reliable, individual playbooks can be systematically switched off to eliminate redundant maintenance costs without creating security coverage gaps. Ultimately, this gradual migration narrows the function of SOAR systems primarily to fixed response gates and general IT workflows, while transferring core triage and investigative responsibilities to artificial intelligence.

What if security teams could disrupt cyberattacks before malicious infrastructure is ever weaponized? In this episode of the BSM Podcast, host Steven Bowcut speaks with Abu Bakr Qureshi, Director of Cybercrime Disruption at Bfore, about predictive attack intelligence and the shift from reactive defense to preemptive security. Abu explains how registration patterns, DNS activity, certificate issuance, infrastructure relationships, and other behavioral signals can reveal attacker intent before a campaign launches. He also discusses Bfore’s reported 18-day detection advantage, the challenge of minimizing false positives, and real-world efforts to disrupt fraudulent mobile apps, phishing sites, malicious forms, and messaging accounts. The conversation also explores how AI is increasing the speed and scale of cybercrime—and what organizations can do now to begin protecting their most valuable external assets.

Visitor management is evolving from a front-desk function into a strategic security and risk discipline. Alex Brennan, Vice President of Global Enterprise Sales at Sign In App, joins host Steven Bowcut to explain “access intelligence” and how connecting visitor activity, identity, compliance, access control, real-time occupancy, and emergency communications can help organizations operate more securely. They also discuss pre-boarding, data governance, interoperability, AI-driven risk detection, and why “trust but verify” will become increasingly important in an era of deepfakes and declining digital trust.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut speaks with Abhay Kulkarni, Co-founder and CEO of WideField Security, about the rapidly changing identity security landscape. Abhay explains why identity has become the linchpin of modern cybersecurity, especially as enterprises rely more heavily on SaaS, cloud platforms, API connections, non-human identities, and AI agents. The conversation explores why traditional IAM, SSO, MFA, and access reviews are no longer enough, and why security teams must understand what identities are actually doing after authentication. Steven and Abhay also discuss post-authentication visibility, session tracking, behavioral context, identity lifecycle security, and the challenge of securing increasingly autonomous AI agents without slowing down innovation.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut speaks with Phuong “Kenny” Nguyen, CTO at KhaiCode, about binary exploit intelligence and the growing need to verify what is actually inside the software organizations deploy. Kenny explains how KhaiCode analyzes binaries, firmware, containers, and embedded components to identify vulnerabilities and validate which ones are truly exploitable. The conversation explores vendor trust, software supply chain risk, vulnerability overload, critical infrastructure use cases, and how AI-assisted development may make software transparency even more important.

In this episode of the Brilliance Security Magazine Podcast, Steven Bowcut speaks with Aviv Nahum, CEO and co-founder at Above Security, about how AI is changing cybersecurity, why insider threat remains so difficult to solve, and where human judgment still matters most. Aviv explains why the future of cyber defense depends less on static rules and more on reasoning, context, and getting the fundamentals right.

Steven Bowcut speaks with Satyam Patel, CISO and CIO at Iru, about simplifying modern security by bringing identity, endpoint management, compliance, and AI-driven context into a unified approach. Patel shares lessons from more than 25 years in cybersecurity leadership, explains what differentiates Iru, and offers practical advice for security leaders looking to reduce complexity and improve resilience.

In this episode of the Brilliance Security Magazine Podcast, Steven Bowcut speaks with Dr. Catherine Knibbs, CEO of Children and Tech and pioneer of Cybertrauma Theory. They explore how children’s online experiences can create emotional, psychological, and developmental harm that often goes unseen, and why cybersecurity leaders, parents, educators, and policymakers need a broader understanding of digital risk.

Claremont McKenna College President Hiram E. Chodosh joins Steven Bowcut to unpack what cybersecurity leadership looks like in higher education—where openness, collaboration, and constant user turnover create a risk profile unlike most enterprises. They discuss how a college president defines cybersecurity at the governance level, how institutions balance academic freedom with necessary security controls, and how AI is reshaping both the threat landscape and the classroom. The episode also explores how CMC is integrating responsible AI, IT resilience, and cybersecurity thinking into scientific and computational fluency for students—and what security leaders should understand when communicating cyber risk to academic leadership.

In today’s threat environment, attackers don’t just target systems. They target people—and artificial intelligence is accelerating that reality. Generative AI enables social engineering at a scale and level of personalization that many organizations are not prepared to meet. Especially with yesterday’s security awareness models. Today’s guest is Matt Lindley, the Chief Innovation & Information Security Officer at NINJIO, a cybersecurity awareness training and human risk management platform. Matt is known for his work in emerging cyber threats, social engineering, compliance, AI strategy and transformation, and security risk management—especially where the human element is the critical variable. This conversation explores what modern human risk management looks like when the adversary can quickly and cheaply produce convincing messages, voices, and narratives. We’ll also touch on two practical supporting themes: How to measure human risk with meaningful metrics, and how to drive culture change without creating security fatigue.

Private credit is growing fast—and in many cases it still runs on “trust” across fragmented systems, creating openings for fraud, double-pledging, and costly verification gaps. In this episode, Steven Bowcut talks with Cole Snell, founder of Real Private Credit, about why lending is a trust-and-controls problem, how bad actors exploit UCC filing fragmentation, and how continuous monitoring, explainable scoring, and tokenization can shift the market from “trust” toward “truth.”

In this episode, Steven Bowcut talks with Linda Calvin, Dean of the School of Technology at Western Governors University, about how cybersecurity education must evolve to meet today’s rapidly shifting threat landscape. Linda shares insights on competency-based learning, integrating AI into cyber curricula, building hands-on experience through virtual labs and internships, and creating more inclusive pathways into tech. She also discusses the importance of employer partnerships, industry certifications, and the role education plays in unlocking economic mobility.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut talks with Dan Benveniste, Founder and CEO of SkillWaze, about how technology is transforming the way organizations identify, develop, and hire cybersecurity talent. Dan shares how SkillWaze’s AI-powered “Learn and Earn” platform connects employers with skilled, job-ready candidates through virtual apprenticeships and innovation challenges. The conversation explores the growing cybersecurity skills gap, how Gen Z and Gen A can prepare for the innovation economy, and how employers can build their own “farm teams” of talent. Listeners will gain insights into: Why traditional education and hiring models are failing to keep pace with industry needs How AI and human collaboration can verify real skills—not just resumes The future of workforce development across cybersecurity, manufacturing, and healthcare A must-listen for anyone interested in the intersection of AI, education, and cybersecurity workforce development.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut speaks with Dr. Masoud Nafey, Founder of Ment, an AI-driven relationship intelligence platform built on a foundation of privacy and authenticity. Together, they explore how artificial intelligence can help professionals build and nurture meaningful relationships without compromising personal data. Dr. Nafey discusses Ment’s “privacy by design” approach, which protects user data through encryption and transparency, and explains how AI-generated contextual insights can strengthen both personal and professional connections. The conversation delves into topics like data ethics, authenticity in digital interactions, regulatory compliance, and the future of human-centered AI. Listeners will gain a hopeful and practical perspective on how technology can make relationships more human—not less.

The browser has quietly become the most critical—and most overlooked—attack surface in cybersecurity. In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut talks with John Carse, Field CISO at SquareX, about the company’s groundbreaking Browser Detection and Response (BDR) technology and why legacy tools like EDR and Secure Web Gateways can’t see today’s browser-native threats. John draws on his two decades of global cybersecurity experience—spanning the U.S. Navy, JPMorgan, Expedia, and Dyson—to explain emerging risks like Syncjacking, Polymorphic Extensions, and the coming wave of AI-powered browser agents. He also shares practical steps for CISOs to reduce risk from Shadow SaaS and unmanaged devices. If you think your browser is safe, this episode will make you think again.