Brilliance Security Magazine Podcast

Transitioning security operations away from traditional SOAR platforms toward AI SOC solutions requires a careful, phased strategy rather than an abrupt, total replacement. Security teams must begin by mapping existing playbooks and prioritizing problematic areas where automation frequently fails or requires manual intervention, leaving functional high-volume workflows running for the time being. Next, organizations should operate the AI SOC in shadow mode alongside current procedures to evaluate its investigative accuracy and compare verdicts against human analysts. Once the AI consistently proves reliable, individual playbooks can be systematically switched off to eliminate redundant maintenance costs without creating security coverage gaps. Ultimately, this gradual migration narrows the function of SOAR systems primarily to fixed response gates and general IT workflows, while transferring core triage and investigative responsibilities to artificial intelligence.

What if security teams could disrupt cyberattacks before malicious infrastructure is ever weaponized?In this episode of the BSM Podcast, host Steven Bowcut speaks with Abu Bakr Qureshi, Director of Cybercrime Disruption at Bfore, about predictive attack intelligence and the shift from reactive defense to preemptive security.Abu explains how registration patterns, DNS activity, certificate issuance, infrastructure relationships, and other behavioral signals can reveal attacker intent before a campaign launches. He also discusses Bfore’s reported 18-day detection advantage, the challenge of minimizing false positives, and real-world efforts to disrupt fraudulent mobile apps, phishing sites, malicious forms, and messaging accounts.The conversation also explores how AI is increasing the speed and scale of cybercrime—and what organizations can do now to begin protecting their most valuable external assets.

Visitor management is evolving from a front-desk function into a strategic security and risk discipline. Alex Brennan, Vice President of Global Enterprise Sales at Sign In App, joins host Steven Bowcut to explain “access intelligence” and how connecting visitor activity, identity, compliance, access control, real-time occupancy, and emergency communications can help organizations operate more securely. They also discuss pre-boarding, data governance, interoperability, AI-driven risk detection, and why “trust but verify” will become increasingly important in an era of deepfakes and declining digital trust.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut speaks with Abhay Kulkarni, Co-founder and CEO of WideField Security, about the rapidly changing identity security landscape.Abhay explains why identity has become the linchpin of modern cybersecurity, especially as enterprises rely more heavily on SaaS, cloud platforms, API connections, non-human identities, and AI agents. The conversation explores why traditional IAM, SSO, MFA, and access reviews are no longer enough, and why security teams must understand what identities are actually doing after authentication.Steven and Abhay also discuss post-authentication visibility, session tracking, behavioral context, identity lifecycle security, and the challenge of securing increasingly autonomous AI agents without slowing down innovation.

In this episode of the Brilliance Security Magazine Podcast, host Steven Bowcut speaks with Phuong “Kenny” Nguyen, CTO at KhaiCode, about binary exploit intelligence and the growing need to verify what is actually inside the software organizations deploy. Kenny explains how KhaiCode analyzes binaries, firmware, containers, and embedded components to identify vulnerabilities and validate which ones are truly exploitable. The conversation explores vendor trust, software supply chain risk, vulnerability overload, critical infrastructure use cases, and how AI-assisted development may make software transparency even more important.

Aviv Nahum, CEO and co-founder of ABOVE and ex-CTO with a background in an elite Israeli military cyber unit. He discusses AI’s role in moving security from static rules to continuous reasoning. He explores why insider risk resists rule-based fixes. He highlights AI strengths in multi-step reasoning, context, and helping analysts judge ambiguous cases.

Satyam Patel, CISO and CIO at Iru with 25+ years in cybersecurity leadership, explains a unified approach to identity, endpoint, and compliance. He discusses collapsing tool stacks, contextual AI to cut noise, passwordless design, and continuous compliance. Practical steps for reducing tool sprawl and aligning teams are highlighted.

In this episode of the Brilliance Security Magazine Podcast, Steven Bowcut speaks with Dr. Catherine Knibbs, CEO of Children and Tech and pioneer of Cybertrauma Theory. They explore how children’s online experiences can create emotional, psychological, and developmental harm that often goes unseen, and why cybersecurity leaders, parents, educators, and policymakers need a broader understanding of digital risk.

Claremont McKenna College President Hiram E. Chodosh joins Steven Bowcut to unpack what cybersecurity leadership looks like in higher education—where openness, collaboration, and constant user turnover create a risk profile unlike most enterprises. They discuss how a college president defines cybersecurity at the governance level, how institutions balance academic freedom with necessary security controls, and how AI is reshaping both the threat landscape and the classroom. The episode also explores how CMC is integrating responsible AI, IT resilience, and cybersecurity thinking into scientific and computational fluency for students—and what security leaders should understand when communicating cyber risk to academic leadership.

In today’s threat environment, attackers don’t just target systems. They target people—and artificial intelligence is accelerating that reality. Generative AI enables social engineering at a scale and level of personalization that many organizations are not prepared to meet. Especially with yesterday’s security awareness models.Today’s guest is Matt Lindley, the Chief Innovation & Information Security Officer at NINJIO, a cybersecurity awareness training and human risk management platform. Matt is known for his work in emerging cyber threats, social engineering, compliance, AI strategy and transformation, and security risk management—especially where the human element is the critical variable.This conversation explores what modern human risk management looks like when the adversary can quickly and cheaply produce convincing messages, voices, and narratives. We’ll also touch on two practical supporting themes: How to measure human risk with meaningful metrics, and how to drive culture change without creating security fatigue.