Ransomware remains the dominant breach pattern in cybersecurity, but the trajectory beneath that headline is more encouraging than most practitioners realize. Bipin Prakash joins Paul Marco for a wide-ranging, education-grounded conversation about ransomware economics, the shifting threat surface from email to browser, the sophistication of modern social engineering, and why the industry’s default pessimism may be masking real defensive progress.

The episode works through two complementary findings from the 2026 Verizon Data Breach Investigations Report. The first: ransomware appeared in 48% of all breaches in 2025, up from 44% the previous year, and in 77% of system intrusion pattern breaches. The second: the median ransom payment declined to $139,875 in 2025, down from $150,000 the prior year, continuing a two-year downward trend. Bipin, a technology director with two decades of experience in K-12 education, brings a practitioner’s eye to both numbers. Paul reframes his initial expectation that the ransomware prevalence figure would land in the 80s or 90s, and the panel coalesces around a surprisingly optimistic read: defenses are improving, resiliency is up, and attackers are being forced to accept smaller payouts.

You will discover why ransomware is inextricably linked to the rise of cryptocurrency, and why the industry’s two-decade shift from credit card fraud to direct extortion traces back to that single enabling technology. The group unpacks the modern ransomware ecosystem, where access brokers, exfiltration teams, and encryption operators function as separate specialized businesses, each taking a slice of a commoditized attack chain. The conversation then examines whether AI-enabled development, agentic swarms, and ransomware-as-a-service platforms are quietly driving per-incident payouts down through sheer volume and reduced overhead on the attacker side.

The discussion widens into the operational reality of defending modern environments, where the browser has replaced email as the fastest-growing data loss vector, where shadow AI usage has made the perimeter conversation obsolete, and where cloud workloads have outpaced the governance frameworks built for on-premise infrastructure. Bipin and Paul explore the sophistication of modern social engineering, including real-world examples of new hires receiving impersonation attempts within hours of starting, the aggregation of public data through sites like TruePeopleSearch, and the use of multimodal AI agents to execute convincing voice and video impersonation at scale.

The episode closes on the authentication paradox that defines our moment. Passwords gave way to two-factor, two-factor gave way to voice verification, voice gave way to video verification, and video is now giving way to family safe words. The industry has traveled a full circle back to shared secrets, which is itself a reminder that human verification, lived experience, and curiosity are the durable advantages no model can replicate.

Essential listening if you care about ransomware trends, the economics of extortion, browser-based data loss, shadow AI, or the evolving reality of social engineering in an AI-enabled world. If you are responsible for protecting people, systems, or data, this conversation gives you both the measured optimism and the operational perspective to think more clearly about what comes next.

https://www.talas.io/podcast

Not every DLP alert tells the full story, and the ones that do are usually the tip of a much larger iceberg. Paul Zimmerman joins Owahn Bazydlo and Paul Marco for a wide-ranging, education-grounded conversation about AI governance, intellectual property risk, user behavior, and why the next phase of cybersecurity will be shaped as much by optimism and design as by fear.

The episode centers on a sharp finding from the 2026 Verizon Data Breach Investigations Report: in 3.2% of DLP policy violations, research and technical documentation was uploaded to unauthorized AI systems, creating direct intellectual property risk exposure. Paul Zimmerman, a technology director based in Hailey, Idaho, whose career began in Air Force encryption work and moved through MSP operations before landing in K-12 technology leadership, brings a practitioner’s eye to the number. The panel is clear that 3.2% is almost certainly a significant undercount, representing only what current DLP tooling can actually see, with the real exposure likely sitting several multiples higher.

You will discover why the threat model behind this statistic is far more complex than a single user pasting a single document into a free AI tool, and why the real exposure now extends through chains of subprocessors embedded in every modern SaaS platform. The group examines why FERPA, HIPAA, and other regulatory frameworks are already struggling to keep pace with frontier model capabilities, why organizations that fail to provide sanctioned AI tools inevitably drive their people toward unauthorized ones, and why transparency across the data processor chain has become one of the most important and least enforced controls in enterprise cybersecurity.

The conversation then widens into the broader AI governance question, drawing parallels to Google’s early days when similar outrage over data harvesting ultimately gave way to an entire economy built around responsible data use. Paul Zimmerman challenges the industry’s reflexive doom and gloom with a reminder that the automobile arrived in a world with no rules, and that human beings built the guardrails as they went. The group explores the collapse of traditional bug bounty programs under the weight of AI-generated spam submissions, the shift from expert-driven vulnerability discovery to tool-enabled participation, and the ongoing erosion of research spaces that once depended on expert curation.

The episode closes on a shared philosophy that Paul Zimmerman calls “freedom in a box.” Build the box through policy, technical controls, user training, and sanctioned AI tooling, then let people operate freely inside it. The organizations that embrace this model, that treat statistics as directional rather than definitive, and that pair governance with genuine curiosity about what AI can enable, will be the ones that turn today’s risk into tomorrow’s advantage.

Essential listening if you care about data loss prevention, AI governance, intellectual property protection, FERPA and HIPAA compliance, or the future of responsible AI adoption in regulated industries. If you are responsible for protecting people, systems, or data, this conversation gives you both the realism and the optimism to think more clearly about what comes next.

https://www.talas.io/podcast

Twenty-seven seconds. That is the fastest e-crime breakout time on record in the 2026 CrowdStrike Global Threat Report, and it reframes almost every assumption we make about defensive response. Albert Galeas joins Owahn Bazydlo and Paul Marco for a candid, education-grounded conversation about cyber hygiene, governance, the limits of security tooling, and why the fundamentals still decide who wins when the attack clock is measured in seconds.

The episode centers on the CrowdStrike finding and what it actually reveals: that the fastest observed pivot from initial access to a second system in the environment took less than half a minute. Albert, a technology director whose career began in the classroom and moved into IT leadership during COVID, brings a practitioner’s eye to the number. Paul and Owahn draw the line from that measurement to the preconditions that make it possible, including flat networks, shared admin credentials, missing access segmentation, and unrotated built-in accounts. The panel is clear that 27 seconds is not a story about attacker genius, it is a story about defender hygiene.

You will discover why the CIS Group 1 Controls remain one of the most under-utilized defensive frameworks available to resource-constrained organizations, why security awareness training continues to deliver outsized returns even in environments with mature email filtering, and why asset inventory and governance are the real foundation beneath every other control. Albert walks through a seemingly small operational change, routing all new devices through a central configuration office before they ever touch the production network, as a reminder that defensive maturity is built from procedural discipline, not from product acquisition.

The conversation then widens into the near-term future, with the group examining how agentic AI is likely to compress breakout times further, why defenders will need their own agentic blue-team capability to keep pace, and why the current wave of AI-enabled attacks is likely to shift the industry’s focus from end-user compromise back toward automated vulnerability exploitation. Albert, Owahn, and Paul also return repeatedly to the attacker’s advantage: the adversary needs only one way in, while the defender is responsible for the entire perimeter.

The episode closes on a shared conviction that simplicity, discipline, and self-knowledge are the durable foundation beneath every new wave of tooling. Attackers will keep getting faster. The organizations that keep their house in order, that know their inventory, that patch consistently, that disable accounts on exit, and that make the environment annoying enough to drive the adversary elsewhere, will keep buying themselves the time their analysts need to respond.

Essential listening if you care about cyber hygiene, foundational controls, security awareness, agentic AI threats, or the future of defensive operations. If you are responsible for protecting people, systems, or data, this conversation gives you both the urgency and the perspective to think more clearly about what comes next.

https://www.talas.io/podcast

There is finally a bright spot in the AI governance conversation, and it comes from an unexpected place: the companies themselves. Michael Brady joins Paul Marco for a candid, financial-services-grounded conversation about AI governance, shadow AI, third-party risk, and why defense remains one of the hardest jobs in cybersecurity.

The episode centers on an encouraging finding from the 2026 World Economic Forum Global Cybersecurity Outlook: 64% of organizations now have a process to assess the security of AI tools before deployment, nearly double the 37% reported in 2025. Michael, a CIO and CISO in the financial services industry with over 25 years of experience across verticals ranging from armored cars to satellites, brings a practitioner's eye to the number. Paul draws the line from written policy to operational reality, pressing on whether these processes are actually trained, executed, and enforced inside the business, or whether they are simply AI-generated artifacts sitting in a governance folder.

You will discover why Fannie Mae and Freddie Mac's AI governance letters are forcing the entire mortgage banking ecosystem to formalize its posture, why vendor renewals have become one of the most under-managed risks in financial services, and why cascading subprocessor terms and conditions are quietly transferring AI data exposure down a chain that most legal teams cannot keep up with. Michael walks through how healthcare underwriters that turned AI fully on and removed humans from the loop ended up making biased decisions that cost them their business, as a cautionary tale for any organization tempted to let AI replace human judgment in high-stakes workflows.

The conversation widens into the cloud parallel, with Michael and Paul tracing how AI adoption is moving at a velocity that makes early cloud adoption look slow, and why that velocity is itself a risk factor. The group examines why shadow AI, personal accounts, and fly-by-night wrapper tools remain a major blind spot even in mature programs, why sales teams are being overwhelmed by shiny-object technology bundles, and why prompt injection and model manipulation are only the first wave of a longer attack surface problem. Michael also makes a strong case for managed services and global threat visibility, arguing that no single organization can staff its way through the current pace of change.

Michael and Paul close on the deeper reality underneath all of it: the asymmetry of cyber defense, the invisibility of successful protection, and the budget conversations that follow when nothing goes wrong. It is a practical reminder that cybersecurity leaders are judged by outcomes they can rarely show, and that AI will not change the fundamental math of defending complex, human-built environments.

Essential listening if you care about AI governance, shadow AI, third-party and subprocessor risk, financial services cybersecurity, or the future of defense in a machine-accelerated world. If you are responsible for protecting people, systems, or data, this conversation gives you both the optimism and the operational urgency to think more clearly about what comes next.

https://www.talas.io/podcast

Shadow IT never went away, it just learned to speak in prompts. Lou Mazzucchelli joins Owahn Bazydlo and Paul Marco for a wide-ranging, historically grounded conversation about AI governance, corporate culture, data as an asset, and why the newest problems in cybersecurity keep rhyming with the oldest.

The episode centers on a striking finding from the 2026 Verizon Data Breach Investigations Report: 67% of users access AI services via non-corporate accounts on corporate devices, and 45% of employees are now considered regular AI users on corporate devices, up from 15% the previous year. Lou, who holds the first undergraduate degree in AI ever granted in the United States and whose career spans everything from IBM 1401 mainframes to venture capital to building a corporate culture with such staying power that 180 former employees held a reunion 10 years after the company was gone, turns that number into practical reality. Owahn and Paul draw the line from personal productivity pressure to enterprise data leakage.

You'll discover why unauthorized AI use is not a novel threat but a repeat of decades of shadow IT behavior, why organizations that fail to provide sanctioned tools drive their people to rogue platforms, and why corporate data assets should appear on the balance sheet as seriously as gold bars. Lou walks through the Maersk incident, where a single server offline in Ghana became the seed of a global recovery, as a reminder of what enterprise data is truly worth when it is gone. The group also examines why standard vendor sourcing practices, if honestly applied, would disqualify most of today's AI providers on financial viability alone, and why corporate FOMO is overriding that discipline at the board level.

Lou, Owahn, and Paul then dig into the deeper shift underneath all of it: the enduring importance of culture, intentional hiring, quiet workspaces, and the small signals of respect, like a $12 mouse, that determine whether employees pick up the phone at one in the morning. The conversation reframes shadow AI as a human and organizational problem rather than a technology problem, and closes with a practical call to use existing telemetry, long-tail web log analysis, and honest risk analysis to surface what employees are actually doing before the data walks out the door.

Essential listening if you care about AI governance, shadow IT, third-party risk, data valuation, or the future of corporate culture in a machine-accelerated world. If you are responsible for protecting people, systems, or data, this conversation gives you both the historical perspective and the operational urgency to think more clearly about what comes next.

https://www.talas.io/podcast

AI is accelerating attacks faster than most defenders can adapt, but the surprise is how little of that acceleration is actually new. Dustin Brown joins Owahn Bazydlo and Paul Marco for a wide-ranging conversation about agentic AI, third-party risk, critical infrastructure, and why the fundamentals still decide who wins.

The episode opens with a striking finding from the 2026 Verizon Data Breach Investigations Report: less than 2.5% of AI-assisted malware observations involve rare techniques with one or fewer known malware examples, indicating that AI is currently accelerating known attack methods rather than unlocking novel ones. The panel turns that number into practical reality. Dustin, a Texas-based technology leader working across IoT and critical infrastructure, brings a defender's eye to the space where the physical and digital layers meet, while Owahn and Paul draw the line from commodity exploits to enterprise exposure.

You'll discover why agent-driven commerce is reshaping the risk surface, with an estimated 10% of transactions already originating from agents and projections pointing toward 90% within a year. The group unpacks why third-party and fourth-party risk questionnaires have become an operational burden on small and mid-market firms, why trust portals are emerging as a smarter path to vendor transparency, and why the SOC 2 attestation process forces the kind of vendor discipline most organizations delay far too long.

Paul and Owahn then widen the lens into the reality of what Dustin calls vibe-coded "plastic apps," the security debt they generate, and why AI functions as a force multiplier that rewards skilled hands and punishes unskilled ones. The conversation examines how attackers are simply running old playbooks at machine speed and machine volume, why obscurity as security no longer holds, and how observability, asset knowledge, and disciplined patching remain the durable foundation beneath every new wave of tooling.

Dustin, Owahn, and Paul also dig into the deeper shift underneath all of it: the human trade of agency for convenience, the cultural gap in AI literacy, and the growing need for personal security awareness at the same level enterprises have long demanded. It is a practical reminder that cybersecurity outcomes still trace back to intent, discipline, and preparation, no matter how capable the tools become.

Essential listening if you care about AI-enabled threats, third-party risk, critical infrastructure, or the future of agentic systems inside the business. If you are responsible for protecting people, systems, or data, this conversation gives you both the urgency and the perspective to think more clearly about what comes next.

https://www.talas.io/podcast

In this episode of Cybersecurity Perspectives, Paul Marco and Owahn Bazydlo unpack a striking data point from the 2026 Verizon Data Breach Investigations Report: the median threat actor researched or used AI assistance across 15 different MITRE ATT&CK techniques in 2025, with some actors leveraging as many as 40 to 50. What follows is a candid discussion of what happens when the very frameworks defenders rely on become the roadmaps adversaries feed to unrestricted large language models.

The conversation frames a fundamental asymmetry that has always existed in cybersecurity but is now accelerating at machine speed. MITRE ATT&CK was built to codify known adversary tradecraft and give defenders a common language for identifying coverage gaps. That same catalog, once handed to an AI agent, becomes an efficient checklist for probing enterprise environments. Attackers need only one technique to succeed. Defenders need every control to hold. AI compresses the time and expertise required on the offensive side, while defenders remain constrained by procurement cycles, architectural complexity, incomplete asset inventories, and log coverage gaps that no framework alignment exercise can quickly resolve.

The episode also touches on broader industry context, including recent departures from frontier AI labs by researchers raising alignment concerns, and updated ransomware payment data pointing to manufacturing, education, and healthcare as the most frequently paying verticals. Together, these threads reinforce the central takeaway: the defender's advantage now depends less on tooling sophistication and more on operational discipline, environmental clarity, and the ability to contain a compromise before it outpaces the humans defending against it.

https://www.talas.io/podcast

Security is moving faster than the people trying to stop it - and attackers are already using AI to widen the gap. Tom Hafemann joins Owahn Bazydlo and Paul Marco for a sharp, unfiltered conversation about why vulnerability exploitation, patching, third-party risk, and AI-powered attacks are becoming harder to ignore.

The episode starts with a sobering stat from the 2026 CrowdStrike Global Threat Report: a 42% increase in zero-day vulnerabilities exploited before public disclosure. But the real value here is how the conversation turns that number into practical reality. Tom, who has spent 30 years building systems on the community finance side, brings a defender’s eye to the chaos, while Owahn and Paul break down what it actually means to operate securely when every new control seems to create three more problems.

You'll discover why access segmentation and separate admin accounts matter more than most teams want to admit, why third- and fourth-party risk is now a business-critical blind spot, and why cyber insurance carriers are so focused on vendor exposure. The group also gets into the limits of patching, the tradeoffs between security and functionality, and how organizations can prioritize vulnerabilities based on what is truly in their environment, not just what looks scary on a report.

Paul introduces what is leading AI-assisted initial access stats from the 2026 Verizon Data Breach Report, including phishing leading with 44% of initial access and vulnerability exploitation at 32%, and the conversation quickly widens into the reality of adversarial AI. The panel explores how attackers are using generative tools to produce better phishing, faster malware, and more convincing impersonation, while defenders are still figuring out how to govern AI safely inside the business.

Tom, Owahn, and Paul also dig into the deeper shift underneath all of it: the move from trusting passwords, to voice, to video, and now back to safe words and human verification. It is a practical reminder that cybersecurity is cyclical, and that the tools changing the game for defenders are usually the same tools empowering attackers.

Essential listening if you care about vulnerability management, cyber insurance, third-party exposure, or the future of AI in security. If you are responsible for protecting people, systems, or data, this conversation gives you both the urgency and the perspective to think more clearly about what comes next.

https://www.talas.io/podcast