Episodes

  • AI Regulation Before RSAC: Why Cybersecurity Needs Real Rules
    Mar 17 2026

    Is the era of "wild west" AI development finally coming to an end, or are we just building taller fences?

    In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro dive into why AI regulation has shifted from a "nice-to-have" ethical debate to an urgent cybersecurity mandate.

    As the industry prepares to descend on San Francisco, the trio breaks down the high-stakes collision between lightning-fast innovation and the tightening grip of global governance. They examine the growing need for explicit, enforceable rules in a world of autonomous agents and "Shadow AI."

    Emerging standards like ISO 42001 and the NIST AI Framework are becoming the new blueprints for enterprise trust, and why traditional law continues to struggle with the velocity of tech. From the economic pressures of global compliance to the grassroots power of community-led safety, this discussion provides a definitive roadmap for navigating today’s most complex security landscape.

    See why "trust but verify" has evolved from a simple catchphrase into the ultimate survival strategy for the intelligence era.

    #SecurityBoulevard #Cybersecurity #AIRegulation #AIGovernance #EnterpriseAI #AIRisk #ResponsibleAI #RSAC #TechPolicy

    Show More Show Less
    42 mins
  • Securing the AI Revolution: Why Observability is the Key to Trust
    Mar 10 2026

    If we can't see what AI is actually doing, how can we ever hope to secure it?

    In this episode of the Security Boulevard Podcast, hosts Tom Hollingsworth, Mitch Ashley, and Fernando Montenegro break down the complex intersection of Artificial Intelligence and modern cybersecurity.

    As AI continues to reshape software development, the team explores why observability has become the critical foundation for establishing accountability and trust in automated systems. They dive into the challenges of governing autonomous agents, the necessity of building "observability-native" architectures, and why transparency is often the missing link in current AI operations.

    Whether you're a developer, a security practitioner, or a tech leader, this conversation provides essential insights into integrating security into the DNA of AI-driven environments to ensure that as we innovate, we remain in control.

    For more cybersecurity content, visit the Security Boulevard website and subscribe on YouTube.

    #SecurityBoulevard #Cybersecurity #ArtificialIntelligence #Observability #SecurityPodcast #InfoSec #TechGovernance #SoftwareDevelopment #AIPathways

    Show More Show Less
    37 mins
  • AI Agents Are Moving Faster Than Security Teams | Security Boulevard Ep. 21
    Mar 3 2026

    AI agents are accelerating discovery, automation, and operational change—but enterprise security teams are still operating on human-speed processes.

    In this episode of Security Boulevard, Mitch Ashley joins Tom Hollingsworth and Fernando Montenegro to examine what happens when AI-driven systems begin operating at machine speed while traditional security workflows remain constrained by governance, patch cycles, and change management controls.

    The conversation explores:

    • How AI agents compress vulnerability discovery timelines
    • Why automation without operational maturity increases risk
    • Whether enterprise security programs are structurally prepared for AI-era velocity
    • The growing tension between innovation and control

    As AI capabilities expand, the real challenge isn’t just technical—it’s organizational. Security leaders must rethink processes, prioritization, and response frameworks to avoid widening exposure. AI is scaling. Is your security program?

    Subscribe to Security Boulevard for weekly enterprise cybersecurity analysis.

    #SecurityBoulevard #CyberSecurity #AI #ArtificialIntelligence #EnterpriseSecurity #SecurityLeadership #Automation #AIagents #CISO #SecurityStrategy #SecurityBoulevard #DigitalTransformation #RiskManagement #Infosec #TechPodcast #Governance

    Show More Show Less
    37 mins
  • Claude Just Exposed 600 Vulnerabilities. What Happens Next?
    Feb 24 2026

    AI is no longer just assisting security teams — it’s actively finding vulnerabilities humans missed.

    In this episode of Security Boulevard, Tom Hollingsworth, Alan Shimel, and Fernando Montenegro examine the real-world implications of AI-driven vulnerability discovery after Anthropic allowed Claude to conduct large-scale scanning across open-source projects.

    The result? More than 600 vulnerabilities identified — including a long-standing issue in Ghostscript that traditional research had missed for years. The discussion goes beyond headlines.

    The panel analyzes:

    • Whether AI can outperform human threat researchers • How iterative model reasoning changes vulnerability discovery
    • The risks of AI-powered offensive security • What this means for DevSecOps and open-source maintainers •
    • Whether AI shifts the balance between defenders and attackers

    As AI systems begin to reason across version histories, patch gaps, and architectural inconsistencies, cybersecurity teams face a new reality: automation at machine scale. Is this a breakthrough for defenders — or the beginning of a new attack surface?

    If AI can audit every version of your software in seconds, what does that mean for your security posture? Subscribe and join the conversation.

    Read More:

    • Son of Moltbot vs. Claude Opus
    • OpenClaw, Cows and Free Milk
    • Is Claude Opus 4.6 the Best Security Researcher Ever?

    #SecurityBoulevard #CyberSecurity #AIThreatHunting #AISecurity #Anthropic #ClaudeAI #VulnerabilityManagement #OpenSourceSecurity #ThreatIntelligence #CVE #AppSec #SecurityResearch #ResponsibleDisclosure #SecurityOperations #Ghostscript

    Show More Show Less
    42 mins
  • Supply Chain Security Is Everyone’s Problem | Security Boulevard Ep. 19
    Feb 17 2026

    Cybersecurity failures increasingly originate inside the software supply chain.

    In this episode, Tom Hollingsworth, Event Lead at Tech Field Day and Networking Industry Analyst, joins Mitch Ashley, Vice President and Practice Lead, Software Lifecycle Engineering at Techstrong Research, along with Steve Puluka, Network & Security Engineer and Network Architect, Tech Field Day Delegate.

    They examine supply chain compromises, including incidents involving Notepad++ and software update distribution mechanisms. The conversation highlights why secure code distribution must be treated as an architectural control, not an operational afterthought.

    As software ecosystems grow more interconnected, accountability now spans developers, hosting providers, infrastructure operators, and security teams. The traditional shared responsibility model must evolve to address increasingly complex dependency chains and third-party exposure.

    The discussion also explores how artificial intelligence is reshaping networking operations, why observability has become foundational to modern security strategy, and how transparency and proactive incident response reduce systemic risk.

    Security today is lifecycle discipline across the entire software delivery chain.

    #Cybersecurity #SupplyChainSecurity #DevSecOps #AIinNetworking #Observability #SecurityLeadership

    Show More Show Less
    36 mins
  • Data Ownership, Privacy Laws, and Trust in the Age of AI with Zoe Rose
    Feb 10 2026
    In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Mitch Ashley, and Zoe Rose, CSIRT SecOps Dev Manager at Canon EMEA, examine the growing challenges around data ownership, digital sovereignty, and privacy in modern cybersecurity. The discussion breaks down the complexity of data privacy laws, particularly the differences between the United States and Europe, and what those regulatory gaps mean for organizations responsible for handling sensitive data. The panel also explores challenges around encryption, government access to data, and why transparency in privacy policies is critical to maintaining trust. The conversation closes with a look at how AI is reshaping security and privacy practices, and why trust remains the foundation of any technology strategy in an increasingly regulated and data-driven world. #Cybersecurity #DataPrivacy #DataOwnership #DigitalSovereignty #AISecurity #Trust #SecurityBoulevard #Podcast
    Show More Show Less
    34 mins
  • Cybersecurity, Disaster Recovery, and Real-World Threat Models | Security Boulevard Ep. 17
    Feb 3 2026

    Cybersecurity plays a critical role in disaster recovery planning, especially as threats and environments continue to change.

    In this episode of the Security Boulevard Podcast, Mitch Ashley, Fernando Montenegro, and Tom Hollingsworth discuss why realistic threat models and regular testing are essential to uncovering hidden weaknesses. The conversation draws lessons from past weather-related disasters and cybersecurity near misses, showing how organizations can learn from incidents that almost went wrong.

    The panel also explores how security practices must evolve to match modern environments, including the growing role of AI agents in security operations.

    The episode closes with a reminder of the value of learning from history and staying engaged with the cybersecurity community through ongoing discussion, feedback, and shared experience.

    #Cybersecurity #DisasterRecovery #ThreatModeling #IncidentResponse #BusinessResilience #AISecurity #SecurityTesting #SecurityBoulevard #Podcast

    Show More Show Less
    39 mins
  • Jen Easterly, RSA Conference, and the Future of Cybersecurity Leadership | Security Boulevard Ep. 16
    Jan 27 2026

    The appointment of Jen Easterly as CEO of the RSA Conference marks a pivotal moment for the cybersecurity industry.

    In this episode of the Security Boulevard Podcast, Tom Hollingsworth, Alan Shimel, and Fernando Montenegro discuss what this leadership change signals for the broader security community.

    The conversation examines the evolving role of CISA, the growing influence of venture capital on cybersecurity startups, and why public-private partnerships remain essential as threats grow more complex.

    The panel also explores how AI is reshaping cybersecurity, what upcoming industry events reveal about market direction, and why practitioners must stay informed about funding, policy, and technology trends to remain effective.

    #Cybersecurity #RSAC #JenEasterly #CISA #AISecurity #SecurityLeadership #SecurityBoulevard #Podcast

    Show More Show Less
    36 mins