The 2026 Verizon Data Breach Investigations Report just dropped — and in this bonus episode, Andy and Brandi sit down with Dean Sheley, Senior Security Architect and Consultant at High Point Networks, to unpack what's in it and what it means for your organization.

Dean brings nearly 30 years of cybersecurity experience across global financial institutions, higher education, and the SMB sector. He's a CISSP, holds a Master's in Information Security and Assurance from Dakota State University, and previously served as CISO for the South Dakota Board of Regents, overseeing cybersecurity across six South Dakota public universities.

0:00 - Introduction & welcome
1:49 - What is the DBIR and why does it matter?
6:45 - The DBIR's north star: fundamentals still matter most
8:38 - Vulnerability exploitation is now the #1 threat vector
14:21 - Why organizations are struggling to keep up with patching
21:10 - Does automated patch management exist? (Yes.)
22:40 - Ransomware is up — but payments are declining
26:43 - Third-party risk and the expanding attack surface
33:20 - What to ask before you move to the cloud or a third party
37:28 - AI vs. AI: how the threat landscape is shifting

🗨️ Mentioned in this episode:

2026 Verizon Data Breach Investigations Report (DBIR) — free download at verizon.com/business/resources/reports/dbir | Industry breakdowns: pages 80–81

CISA Known Exploited Vulnerabilities Catalog — cisa.gov/known-exploited-vulnerabilities-catalog

Jen Easterly, former Director of CISA — referenced in context of software quality accountability

Project Glasswing — anthropic.com/glasswing

Connect with Dean: linkedin.com/in/deansheley/

_____

New episodes every other Wednesday.

Connect with us: 🌐 highpointnetworks.com 📱 LinkedIn, Instagram & Facebook: @highpointnetworks

Subscribe — Spotify | Apple Podcasts | YouTube | And wherever you listen.

Get to the Point is produced by High Point Networks for informational purposes only. Guests include High Point Networks professionals as well as subject matter experts from across the industry, each speaking from their own experience and expertise. Content shared is intended as general information and should be evaluated within the context of your specific organization and circumstances. Views expressed by outside guests are their own and do not necessarily reflect those of High Point Networks or its affiliates. High Point Networks assumes no liability for decisions or actions taken based on content discussed in this podcast.