Modern Cyber with Jeremy Snyder

Modern Cyber with Jeremy Snyder

di Jeremy Snyder

Lavoro Tecnologia

Stagione 1

Dhruv Ahuja of Chaser Systems

In this special live episode recorded at fwd:cloudsec 2025 , Jeremy is joined by Dhruv Ahuja of Chaser Systems for a deep dive into the world of financial services, network evolution, and elegant security solutions. Dhruv shares his experiences working in the highly regulated financial sector and explains why many parts of the industry, like market data feeds, still rely on bespoke, low-latency infrastructure outside the cloud. The discussion also covers Dhruv's presentation on using Let's Encrypt with AWS IAM Roles Anywhere to create an interoperable, PKI-based authentication system for machines. The episode concludes with a fascinating conversation on the changing landscape of networking , the slow but steady rise of IPv6 , and the shift from IP-based to domain-based network security. Guest Bio – Dhruv Ahuja Dhruv Ahuja is a cybersecurity professional from Chaser Systems with a background in financial services and sysadmin roles in London. He specializes in network and cloud security, focusing on building user-friendly products that prioritize usability for developers and security teams. A strong advocate for interoperability and open-source protocols, Dhruv is known for his work leveraging asymmetric cryptography and has presented on topics like using Let's Encrypt with AWS IAM Roles Anywhere to create secure, elegant authentication solutions. He has extensive experience with the unique security demands of financial institutions , from low-latency market data feeds to retail banking operations. Chaser Systems - https://chasersystems.com/

Jason Kao of Fog Security

Recorded live at fwd:cloudsec 2025, this episode of Modern Cyber features a conversation between Jeremy and Jason Kao, founder of FoxSecurity. Drawing from his experience across enterprises, startups, and cloud security consulting, Jason unpacks the growing complexity of IAM in the cloud—focusing on the “duplicitous” nature of AWS permissions and the challenges in enforcing effective data perimeters. The two explore the shift from traditional network boundaries to identity-based security models, and Jason shares practical takeaways for organizations looking to improve IAM strategy in the face of sprawling permissions and conflicting access controls. Guest Bio – Jason Kao: Jason Kao is the founder of FoxSecurity, a new company focused on solving data perimeter and cloud ransomware challenges. His career spans engineering roles at Cisco and Fidelity Investments, offensive security consulting at Praetorian, security research at CloudQuery, and now startup leadership. Jason is a regular speaker at security conferences like fwd:cloudsec, where he shares deep research and practical insights into complex topics like IAM, cloud architecture, and data protection. Fog Security - https://www.fogsecurity.io/

Toni de la Fuente of Prowler

Recorded live at fwd:cloudsec 2025, this episode of Modern Cyber features Toni de la Fuente, founder of Prowler, one of the most widely adopted open source cloud security tools. Toni joins Jeremy to reflect on nearly a decade of building in the cloud security space, sharing the origin story of Prowler, lessons from maintaining open source software, challenges in cloud forensics, and the evolving threat landscape. They also explore how AI, platform complexity, and compliance frameworks are shaping the next generation of cloud security. About Toni de la Fuente Toni de la Fuente is the founder of Prowler, the open source cloud security tool designed to help organizations improve their cloud security posture. With over 25 years of experience in cybersecurity and more than a decade focused on cloud, Toni has held roles across blue, red, and purple teams, including time at AWS. A passionate open source advocate and Iron Maiden fan, Toni built Prowler to automate cloud configuration checks and make security accessible to all. Prowler Website: https://prowler.com/ Prowler on GitHub: https://github.com/prowler-cloud/prowler

Kyler Middleton & Sai Gunaranjan

In this special episode recorded at fwd:cloudsec 2025 in Denver, Jeremy sits down with two cloud leaders from Veradigm: Kyler Middleton and Sai Gunaranjan. The duo shares insights from their joint talk on securing AI usage in enterprise platforms, highlighting real-world challenges around governance, model usage, data sovereignty, and developer enablement. With the health tech industry as a backdrop, they reflect on balancing innovation with control, managing AI risks, and fostering collaboration between platform engineering and governance teams. This episode is a timely and practical look at the realities of secure AI adoption in modern organizations. Guest Bio – Kyler Middleton Kyler Middleton is the Principal Internal AI Developer at Veradigm, where she leads internal AI development initiatives with a focus on enablement, experimentation, and responsible model usage. A passionate technologist, Kyler works closely with platform and security teams to ensure AI is integrated thoughtfully and securely into enterprise workflows. Guest Bio – Sai Gunaranjan Sai Gunaranjan is the Lead Architect for the Veradigm Cloud Platform, with a focus on Azure technologies and scalable platform governance. He plays a key role in enabling secure AI experimentation and implementation across Veradigm’s healthcare-focused products, combining deep cloud expertise with a pragmatic approach to compliance and risk mitigation. Kyler on Linkedin - https://www.linkedin.com/in/kylermiddleton Sai on Linked - https://www.linkedin.com/in/saigunaranjan Let's Do DevOps - http://letsdodevops.com/

Celina Stewart of Neuvik

In this episode of Modern Cyber, Jeremy is joined by Celina Stewart, Director of Cyber and AI Risk Management at Neuvik, for a wide-ranging discussion on how cybersecurity findings are best translated into business risk—and why most organizations still struggle with that step. Celina draws on her background in consulting, offensive security, and M&A due diligence to explore common missteps in cloud migrations, hidden AI risks most companies overlook, and how to prioritize remediation in real-world, high-pressure situations. Plus, she shares her perspective on what’s coming next in AI attacks, including a deep dive into memory injection. Guest Bio – Celina Stewart: Celina Stewart is the Director of Cyber and AI Risk Management at Neuvik, where she helps organizations design and optimize cybersecurity programs through a risk-based lens. Before joining Neuvik, Celina was a founding member of McKinsey & Company’s cybersecurity practice, advising Fortune 500 companies on strategy, program performance, and enterprise risk integration. Her insights have been published in McKinsey on Risk and other leading outlets, and she’s a regular speaker at conferences including the AI Risk Summit, HackRedCon, and ACSAC. Celina holds an MBA and an MS in Design Innovation from Northwestern’s Kellogg School of Management. Neuvik Webiste - www.neuvik.com

Dan Draper of CipherStash

In this episode of Modern Cyber, Jeremy sits down with Dan Draper, founder and CEO of CipherStash, to unpack the complexities of modern data encryption and secure access. From searchable encryption to post-quantum cryptography, Dan explains how CipherStash is making secure data access possible without sacrificing utility. The conversation covers Zero Trust, access control philosophies, real-world encryption applications, and why most people don’t actually care about security—until it blocks a deal. This is a highly technical, yet accessible dive into how data protection is evolving in the face of increasing complexity and looming quantum threats. About Dan Draper Dan Draper is the founder and CEO of CipherStash, a data security company focused on enabling trusted access to encrypted data. An experienced cryptography engineer, Dan previously served as VP of Engineering at MedicalDirector and Expert360. His mission is to empower developers with the tools and knowledge they need to build secure, privacy-respecting applications. Dan is a leading voice in applying searchable encryption to real-world business challenges and is passionate about rethinking how organizations manage data access securely and efficiently. Host Note: “We checked Riverside’s encryption after recording and found this: https://www.ietf.org/id/draft-ietf-tls-ecdhe-mlkem-00.html — so quantum-safe 🙂” CipherStash Website: https://cipherstash.com/ Dan on Linkedin: https://www.linkedin.com/in/ddraper/

Stephen Hinch, author of Winning Through Innovation

In this episode of Modern Cyber, Jeremy is joined by Stephen Hinch, award-winning author and longtime high-tech executive, for a wide-ranging conversation on the intersection of cybersecurity, innovation, and organizational mindset. Drawing on decades of experience at companies like HP and Agilent, Stephen shares insights into the mindset challenges facing modern cybersecurity programs, particularly in small and midsize businesses. He also discusses the real cost of complacency, how to lead innovative initiatives without compromising security, and what writing a cybersecurity book—and hiking guide—has taught him about leadership, resilience, and purpose. About Stephen Hinch Stephen W. Hinch is an experienced senior executive, award-winning author, and recognized innovator in the high-tech industry. With decades of management experience at companies like Hewlett-Packard, Agilent Technologies, and TeamLogic IT, he played a pivotal role in advancing surface mount and fiber optic technologies. He has authored five books, including the IBPA Benjamin Franklin Award-winning The Slickrock Desert, and his latest title, Winning Through Innovation: Lessons from the Front Lines of Business, is set to release in May 2025. Steve now serves as a consultant to senior executives in high tech and continues to shape industry standards and innovation. Winning Through Innovation on Amazon: https://www.amazon.com/Winning-through-Innovation-Lessons-Business-ebook/dp/B0DXRGS99R The Slickrock Desert on Amazon: https://www.amazon.com/Slickrock-Desert-Discovery-Endangered-Wilderness/dp/0966199901 Stephen's Website: https://www.stephen-w-hinch.com/

Mikko Hypponen of WithSecure

In this special in-person episode of Modern Cyber, Jeremy sits down with cybersecurity icon Mikko Hypponen at RSA Conference 2025 in San Francisco. Surrounded by the energy of the industry’s biggest event, the conversation dives into the current state of AI in security, LLMs discovering vulnerabilities, and the emerging threat of AI-powered ransomware gangs. Mikko also shares insights on geopolitics in cybersecurity—from North Korean developer infiltration to Russian ransomware operations—and reflects on Europe’s shifting trust in U.S. tech. This episode blends deep technical insight with broader industry trends and personal reflections, recorded steps away from the Moscone Center. About Mikko Hypponen: Mikko Hyppönen is a globally recognized cybersecurity expert and the Chief Research Officer at WithSecure. With over 30 years of experience in the industry, Mikko has analyzed some of the most significant malware outbreaks in history, such as Love Letter, Melissa, and Stuxnet. He is a sought-after speaker at international conferences, a TED Talk veteran, and the author of the acclaimed book If It’s Smart, It’s Vulnerable. Passionate about cybersecurity education, Mikko has been a driving force behind initiatives like the Museum of Malware Art, showcasing how digital threats can inspire artistic creativity. Mikko's Website: https://mikko.com/ WithSecure Website: https://www.withsecure.com/en/home Mikko's Linkedin: https://www.linkedin.com/in/hypponen/ Mikko's X: https://twitter.com/mikko

Justin Rende of Rhymetec

In this episode of Modern Cyber, Jeremy is joined by Justin Rende, founder and CEO of Rhymetec, to unpack the critical differences between proactive and reactive security strategies. They dive into the realities of SaaS security, the role of compliance as both a sales enabler and a security foundation, and the importance of building security into an organization from the very beginning. With insights from thousands of audits and assessments, Justin shares practical guidance on vendor risk, developer awareness, and why a checkbox approach to compliance simply doesn’t cut it. About Justin Justin Rende is the founder and CEO of Rhymetec, a cybersecurity firm providing cybersecurity, compliance and data privacy needs to SaaS companies. With more than 20 years of experience in cybersecurity, Justin has focused exclusively on developing the most innovative and customizable cybersecurity solutions for modern SaaS-based companies. Since founding the company in 2015, Justin has led Rhymetec’s growth to more than 35 full-time employees, without outsourcing any of its services, and has served more than 1,000 clients ranging from startups to large enterprises. Rhymetec Website - https://rhymetec.com/ Justin on Linkedin - https://www.linkedin.com/in/justin-rende/

Joe Erle of the Ransomware Rewind Podcast

In this special crossover episode of Modern Cyber and the Ransomware Rewind podcast, Jeremy teams up with Joe Erle for a wide-ranging discussion on API security, ransomware threats, and the changing landscape of cyber insurance. From dissecting real-world examples like the MOVEit vulnerability to breaking down how ransomware negotiations really work, this episode blends technical insight with practical guidance. Whether you're a defender thinking about supply chain risk or a business leader evaluating your cyber insurance policy, this one’s packed with useful takeaways. About Joe Erle Joe Erle is the host of the Ransomware Rewind podcast and a cybersecurity insurance expert at C3 Insurance. With years of experience helping organizations navigate the complexities of cyber risk, Joe brings deep knowledge of incident response, policy coverage, and ransomware negotiation. Through his podcast and professional work, he provides actionable insights on current threats, trends, and how companies can better protect themselves. Ransomware Rewind Podcast - https://www.youtube.com/@UC8UYB3xzRVdm6QypQ8SZBww C3 Insurance - https://c3insurance.com/ Joe on Linkedin - https://www.linkedin.com/in/joeerle/

8 di 14