Advertise on podcast: FIRST Impressions Podcast

Recorded live at FIRSTCON26 in Denver, Colorado, this episode of FIRST Impressions features an interview with John Hollenberger of Fortinet to discuss his FIRSTCON26 presentation on ChaosStack, a fresh approach to tabletop exercises designed to better prepare incident response teams for real-world crises. Rather than following a traditional step-by-step scenario, John explains how ChaosStack intentionally overwhelms participants with multiple competing events at the outset, mirroring the uncertainty, pressure, and decision fatigue that security teams face during actual incidents. Topics discussed include: why traditional tabletop exercises often fail to recreate the realities of incident response; how the ChaosStack methodology introduces multiple simultaneous "injects" to simulate competing priorities and high-pressure decision making; the importance of helping teams learn how they collaborate under stress, and more! The conversation highlights an important takeaway: incident response isn't just about technical expertise, it's about how people communicate, collaborate, and make decisions when the pressure is at its highest.

Recorded live at FIRSTCON26 in Denver, Colorado, this episode of FIRST Impressions, interviews Tim Brown, CISO-in-Residence at Team8 and former CISO of SolarWinds, following his opening keynote at the conference. Drawing on his firsthand experience leading SolarWinds through one of the most significant cyber incidents in recent history, Tim offers an honest and deeply personal conversation about what happens after the headlines fade. Topics discussed include: How Team8 partners with a global community of CISOs to identify security challenges and launch innovative cybersecurity startups; the realities of leading an organization through the SolarWinds incident, from the initial crisis response to years of recovery; the often-overlooked human impact of major cyber incidents, including prolonged stress, burnout, and the emotional toll on security teams; lessons learned and more! Tim closes with an encouraging message for incident responders: while crises are never easy, they are also opportunities for growth. The experiences gained through responding to difficult incidents can shape stronger leaders, stronger teams, and ultimately a stronger cybersecurity community.

Recorded live at FIRSTCON26 in Denver, Colorado, this episode of FIRST Impressions, features an interview with Chris Butera, acting Executive Assistant Director for Cybersecurity at CISA (Cybersecurity and Infrastructure Security Agency), the local host of the conference. Chris shares how CISA serves as America’s cyber defense agency, protecting federal, state, local, tribal, and territorial government systems while working closely with industry partners across the cybersecurity ecosystem. The conversation explores the rapidly evolving vulnerability landscape, including, the growth of the CVE Program from 26 CVE Numbering Authorities to more than 500 worldwide; why CVEs remain the authoritative global system for identifying and tracking software vulnerabilities; the role of Software Bills of Materials (SBOMs) in managing software supply chain risk; new efforts to create AI-specific SBOM standards through the G7 AI SBOM Minimum Elements initiative, and more! Take a practical look at how vulnerability management, supply chain security, AI governance, and workforce development are becoming increasingly interconnected, and why these initiatives matter to every organization operating in today’s threat environment.

Rapidly approaching, the EU Cyber Resilience Act (CRA) is set to reshape how manufacturers develop, secure, and support digital products. In this episode of the First Impressions Podcast, Mars Cheng of TXOne Networks breaks down what the CRA means for organizations that want to sell products in the European market and why the regulation is being called one of the most significant cybersecurity compliance initiatives in years. Previewing his FIRSTCON26 talk, the discussion covers practical steps companies can take today, including stakeholder alignment, tabletop exercises, internal reporting processes, and compliance planning.

In this episode of First Impressions, Julie Agnes Sparks and Greg Foss of Datadog discuss the growing wave of SaaS-focused attacks, from credential theft and supply chain compromises to large-scale data exfiltration campaigns targeting platforms like Salesforce, GitHub, and other cloud services. They explore the visibility gaps that make these incidents difficult to detect, the challenges of monitoring non-human identities and API-driven access, and why many organizations are overlooking some of their most valuable security telemetry.

In this episode of the First Impressions Podcast, FIRSTCON26 Speakers, Cheng-Lin Yang and Lily Chen of CyCraft, explore a growing threats to LLM-assisted security workflows: poisoned artifacts designed to manipulate AI-generated analysis. They discuss how a single malicious document can attract an AI's attention, influence its reasoning, and ultimately alter the information presented to security teams. The conversation covers the evolution of prompt injection attacks, the challenges of defending modern language models, and more! Tune in to preview their FIRSTCON26 session.

In this episode of the First Impressions Podcast, we sit down with Vijay Sarvepalli and Christopher Cullen to unpack the chaotic reality of modern vulnerability coordination. From AI-generated bug reports and patching nightmares to insecure pickle files, Log4j flashbacks, and the race to secure open source software before attackers strike, the conversation dives deep into how security teams can “push left” and automate the path from vulnerability discovery to secure release. Equal parts technical insight, cautionary tale, and therapy session for anyone who survived Log4Shell, this episode explores why fixing vulnerabilities is still harder than finding them, and what the future of coordinated vulnerability disclosure might look like in an AI-driven world.

In the first episode of the 2026 season of the First Impressions Podcast, Mor Weinberger and Lior Kaplan preview their upcoming FIRST Conference session, “From Discovery to Fix: What 10,000 Open Source Projects Reveal About CVE Remediation.” The discussion explores why vulnerability remediation remains slow despite the growing speed of CVE discovery, especially as AI accelerates vulnerability research and exploit development. Drawing from research across thousands of open source projects, they examine the challenges of patch adoption, dependency management, and supply chain complexity. The episode also highlights practical ways organizations can reduce risk and improve remediation efforts ahead of FIRSTCON26 in Denver.

The FIRST Impressions Podcast returns for FIRSTCON26! This kick off episode brings Program Chair, Merike Kaeo, to the table to discuss the vision behind the 38th Annual FIRST Conference program and the goals and challenges faced. Centered around the theme “Peak Defense: Building Adaptive Systems for Modern Threats,” Merike shares how this year’s program was carefully designed to balance technical depth, operational strategy, incident response, and AI security topics while ensuring diverse perspectives and skill levels. The episode highlights the importance of community collaboration, knowledge sharing, and making cybersecurity capabilities more accessible for smaller and underserved organizations through automation, practical incident response planning, and stronger global cooperation.

In this episode of the FIRST Impressions Podcast, FIRSTCON25 Speaker, Matias Mesiä of NCSC-FI, discusses the high-impact 2024 data breach that targeted the City of Helsinki’s education department. With over 100,000 residents affected, Matias breaks down how the incident unfolded and the coordinated response involving NCSC-FI, city officials, service providers, and law enforcement. He shares the unique challenges of managing a major breach under intense media scrutiny. Tune in for key lessons on public-sector cybersecurity, crisis communication, and response readiness.

In this episode of the FIRST Impressions Podcast, Martin and Chris chat with FIRSTCON25 speaker, John Hollenberger of Fortinet. John offers a sneak peek into his session, "Building the Blueprint: Designing Effective Storyboards for Cybersecurity Tabletop Exercises." He explains how detailed storyboards can shape more impactful tabletop exercises by aligning objectives, scenarios, injects, and key decision points. Tune in to learn how to create exercises that are not only engaging but truly enhance organizational preparedness.

In this episode of FIRST Impressions, the hosts interview FIRSTCON25 speaker, Cornelia Puhze of SWITCH-CERT, a human-centered security professional and co-chair of the FIRST Human Factors in Security SIG. Cornelia dives into the world of social engineering, AI-driven manipulation, and how we can better educate people to protect themselves from scams without the burden of technical jargon. She emphasizes the power of gut instincts, breathing, and human intuition in recognizing and resisting criminal tactics. Tune in to explore how we can train ourselves to stay secure in a tech-driven world — naturally.

In this episode of FIRST Impressions, hosts Martin McKay and Chris John Riley speak with Desiree Sacher and Carson Zimmerman about their upcoming talk at the 2025 FIRST Conference in Copenhagen. Drawing from personal experience and scientific research, they unpack the complexities of burnout in cybersecurity — exploring its causes, impact, and sustainable solutions for both individuals and organizations

In this episode of FIRST Impressions, hosts Chris John Riley and Martin McKeay speak with John Stoner, Global Principal Security Strategist at Google Cloud. Together they discuss the importance of ongoing detection testing, the challenges of running emulations in production environments, and how to balance technical goals with organizational constraints. John previews his upcoming talk at the 2025 FIRST Conference, offering practical strategies for evolving security practices without boiling the ocean.

In this special FIRSTCON25 FIRST Impressions episode, our hosts, Chris John Riley and Martin McKeay interview Henrik Larsen, Program Chair of the 2025 FIRST Conference in Copenhagen. Henrik discusses the conference theme: “Fortresses of the Future: Building Bridges, Not Walls” and previews keynote speakers, Scandinavian influence, and cultural highlights of the host city. Tune in to learn what to expect this June and learn more about the diverse speaker lineup and the vibrant Copenhagen experience awaiting us!