What Matters in Cyber Thu, 15 Oct 2026 17:04:00 -0400 https://www.buzzsprout.com/2652206 en-us © 2026 What Matters in Cyber yes 3e13b9c5-0c61-5d56-a748-de739a228e61 podcast@securitymultipliers.com Steve episodic false What Matters in Cyber is a weekly look at the cybersecurity stories that deserve your attention.

Hosted by cybersecurity and technology leader Steve Hill, each episode examines significant attacks, emerging threats, new security technologies, vendor developments, regulatory changes, and the growing influence of artificial intelligence.

The goal is not to repeat every headline. It is to explain what happened, why it matters, and what security professionals, technology leaders, and businesses should consider doing next.

New episodes every Monday.

]]> Buzzsprout (https://www.buzzsprout.com) Steve podcast@securitymultipliers.com https://storage.buzzsprout.com/thtxyqqta4tefuggk4gggcnolxh9?.jpg What Matters in Cyber https://www.buzzsprout.com/2652206 Cybersecurity at Machine Speed Cybersecurity at Machine Speed This week, cyberattacks are moving faster, but many defensive processes are still stuck waiting for maintenance windows, approvals and someone to confirm that a patch was actually installed.

Steve examines the FBI breach reportedly linked to an unpatched third party system, the FortiBleed campaign targeting exposed Fortinet devices, and the use of AI agents in attacks against South Korean financial institutions. We also look at the disruption of infrastructure connected to Flax Typhoon, the ASOS social engineering breach, and important Citrix, SonicWall and Cisco updates in the Monday Patch List.

Finally, Steve shares his take on the growing speed mismatch between attackers and defenders, and why organizations need faster verification, stronger identity controls and better oversight of the vendors managing their critical systems.

Send us Fan Mail

]]> This week, cyberattacks are moving faster, but many defensive processes are still stuck waiting for maintenance windows, approvals and someone to confirm that a patch was actually installed.

Steve examines the FBI breach reportedly linked to an unpatched third party system, the FortiBleed campaign targeting exposed Fortinet devices, and the use of AI agents in attacks against South Korean financial institutions. We also look at the disruption of infrastructure connected to Flax Typhoon, the ASOS social engineering breach, and important Citrix, SonicWall and Cisco updates in the Monday Patch List.

Finally, Steve shares his take on the growing speed mismatch between attackers and defenders, and why organizations need faster verification, stronger identity controls and better oversight of the vendors managing their critical systems.

Send us Fan Mail

]]> Steve Buzzsprout-19944081 Mon, 12 Oct 2026 02:00:00 -0400 990 1 5 full false Trusted Until It Isn't Trusted Until It Isn't Trust sits at the center of almost every cybersecurity decision. We trust vendors, platforms, accounts, software updates and increasingly, AI agents. But what happens when that trust is misplaced or quietly exploited?

In this week’s episode of What Matters in Cyber, Steve follows up on the Kiteworks security story, examines a breach affecting a contractor supporting the Pentagon’s Defense Manpower Data Center, and looks at the takeover of Microsoft’s Clippy account on X to promote cryptocurrency scams.

We also cover Warlock ransomware attacks targeting vulnerable SharePoint environments, the essential items on this week’s Monday Patch List, and new research showing AI agents attempting SQL injection while carrying out seemingly routine tasks.

Finally, Steve shares his take on the common thread connecting these stories: trust should never be treated as permanent. It must be limited, monitored and continually verified.

Send us Fan Mail

]]> Trust sits at the center of almost every cybersecurity decision. We trust vendors, platforms, accounts, software updates and increasingly, AI agents. But what happens when that trust is misplaced or quietly exploited?

In this week’s episode of What Matters in Cyber, Steve follows up on the Kiteworks security story, examines a breach affecting a contractor supporting the Pentagon’s Defense Manpower Data Center, and looks at the takeover of Microsoft’s Clippy account on X to promote cryptocurrency scams.

We also cover Warlock ransomware attacks targeting vulnerable SharePoint environments, the essential items on this week’s Monday Patch List, and new research showing AI agents attempting SQL injection while carrying out seemingly routine tasks.

Finally, Steve shares his take on the common thread connecting these stories: trust should never be treated as permanent. It must be limited, monitored and continually verified.

Send us Fan Mail

]]> Steve Buzzsprout-19908695 Mon, 05 Oct 2026 01:00:00 -0400 1100 1 4 full false The Cost of Waiting The Cost of Waiting What happens when waiting becomes the biggest cybersecurity risk?

In this week’s episode of What Matters in Cyber, Steve examines the decisions organizations make when threats are developing, information is incomplete and the consequences of getting it wrong can be significant.

We look at Kiteworks’ unusual decision to recommend a precautionary shutdown following intelligence about a possible imminent attack, and why acting before a breach is confirmed may sometimes be the responsible choice.

Also in this episode:

• ShinyHunters returns with renewed attacks against Oracle PeopleSoft
• How attackers bypassed temporary firewall protections with one encoded character
• The actively exploited vulnerabilities that deserve attention this Monday
• Why aircraft communication systems remain vulnerable to interception, spoofing and jamming
• A new proposal for strengthening US telecommunications security
• Whether voluntary cybersecurity standards are enough for critical infrastructure

Steve also shares his take on the common thread connecting these stories: the cost of waiting.

What security risk is your organization currently containing, postponing or accepting that it should actually be fixing?

Subscribe to What Matters in Cyber and join the conversation.

Send us Fan Mail

]]> What happens when waiting becomes the biggest cybersecurity risk?

In this week’s episode of What Matters in Cyber, Steve examines the decisions organizations make when threats are developing, information is incomplete and the consequences of getting it wrong can be significant.

We look at Kiteworks’ unusual decision to recommend a precautionary shutdown following intelligence about a possible imminent attack, and why acting before a breach is confirmed may sometimes be the responsible choice.

Also in this episode:

• ShinyHunters returns with renewed attacks against Oracle PeopleSoft
• How attackers bypassed temporary firewall protections with one encoded character
• The actively exploited vulnerabilities that deserve attention this Monday
• Why aircraft communication systems remain vulnerable to interception, spoofing and jamming
• A new proposal for strengthening US telecommunications security
• Whether voluntary cybersecurity standards are enough for critical infrastructure

Steve also shares his take on the common thread connecting these stories: the cost of waiting.

What security risk is your organization currently containing, postponing or accepting that it should actually be fixing?

Subscribe to What Matters in Cyber and join the conversation.

Send us Fan Mail

]]> Steve Buzzsprout-19870338 Mon, 28 Sep 2026 05:00:00 -0400 934 1 3 full false Who Has the Keys? Who Has the Keys? Who has access to your business through the apps and services you trust?

In the first full episode of What Matters in Cyber, Steve looks at how a stolen third party app key exposed customer information, what Boston Scientific’s cyber incident reveals about operational disruption, and why CISA is changing how it prioritizes vulnerabilities. He also shares his take on a new AI security testing service and whether it could help teams find and fix the weaknesses that matter most.

Four stories, one practical question: would you know quickly if a trusted connection was being misused?

Send us Fan Mail

]]> Who has access to your business through the apps and services you trust?

In the first full episode of What Matters in Cyber, Steve looks at how a stolen third party app key exposed customer information, what Boston Scientific’s cyber incident reveals about operational disruption, and why CISA is changing how it prioritizes vulnerabilities. He also shares his take on a new AI security testing service and whether it could help teams find and fix the weaknesses that matter most.

Four stories, one practical question: would you know quickly if a trusted connection was being misused?

Send us Fan Mail

]]> Steve Buzzsprout-19853164 Wed, 23 Sep 2026 12:00:00 -0400 700 1 1 full false What Matters in Cyber - Introduction What Matters in Cyber - Introduction Welcome to What Matters in Cyber. I’m Steve, and in this short introduction, I share why I started the podcast and what you can expect each week.

We’ll look beyond the headlines at cyberattacks, emerging threats, new technology, and changes across the industry. I’ll explain what happened, why it matters, and what you might want to watch or do next, drawing on my experience working with security teams and business leaders.

Have a story I should cover or a perspective I should hear? Join the conversation, and subscribe for new episodes every Monday.

Send us Fan Mail

]]> Welcome to What Matters in Cyber. I’m Steve, and in this short introduction, I share why I started the podcast and what you can expect each week.

We’ll look beyond the headlines at cyberattacks, emerging threats, new technology, and changes across the industry. I’ll explain what happened, why it matters, and what you might want to watch or do next, drawing on my experience working with security teams and business leaders.

Have a story I should cover or a perspective I should hear? Join the conversation, and subscribe for new episodes every Monday.

Send us Fan Mail

]]> Steve Buzzsprout-19852988 Wed, 23 Sep 2026 12:00:00 -0400 96 full false