Carlton Fields Podcasts

by Carlton Fields

No Password Required: Co-Founder of SecurityScorecard, on His Journey From Academics to CISO to CEO

Dr. Aleksandr Yampolskiy is the co-founder and CEO of SecurityScorecard, one of the world's most trusted cybersecurity brands with tens of thousands of customers, including half of the Fortune 100 and nine of the top 10 U.S. banks. Before founding SecurityScorecard in 2014, Alex earned a Ph.D. in cryptography from Yale, built authentication infrastructure for Goldman Sachs and Oracle, and served as CISO at Gilt Groupe, where a near-miss with exposed credit card data became the genesis for an entirely new category of cybersecurity. In this episode, Alex traces his journey from a 14-year-old immigrant kid whose friend handed him a virus-infected floppy disk with “Prince of Persia” on it, all the way to building a company that now scores the security of every organization on the internet. He breaks down what it takes to create a market category from scratch, why the CISO version of him was more fun to have a beer with, and why North Korea tried to recruit his developers through a fake hedge fund. Jack Clabby and co-host Kayley Jerrell talk with Alex about the difference between robustness and resilience, why SecurityScorecard banned PowerPoint slides, and the single most dangerous thing a board member can say in a meeting. Alex also argues that companies openly admitting security breaches actually makes the whole ecosystem stronger. In the lifestyle polygraph segment, Alex reveals he grades restaurants by their health inspection scores, shares what The Inner Game of Tennis taught him about trusting his gut, and tells us how chess got him a date with his future wife even though she had never played chess.

Aug 17, 2026

43:08

No Password Required: Swiss Cyber Expert, Diplomat, and Military Officer, Always Two Steps Ahead of the Storm

Philipp Leo co-founded Leo & Muhly Cyber Advisory, a strategic advisory firm specializing in cyber risk, resilience, and geopolitics. Now consulting with governments and private firms in Switzerland and abroad, Philipp has served as a UN observer on the Korean DMZ, trained the next generation of Swiss Armed Forces cyber specialists, and taught at the University of Glasgow. He is also part of Europol's network of experts in data protection and cybercrime and has published stateside in MIT Sloan Management Review. In this episode, Philipp shares his journey from a Swiss bank he couldn't wait to leave to the Korean border, and eventually to the boardrooms of executives who still think cyber risk is someone else's problem. He breaks down the three most dangerous misconceptions executives have about cyber risk, why the CISO is too often a poster child rather than a decision-maker, and the challenges to cyber insurance in Europe. Cyber attorney Jack Clabby and co-host Kayley Jerrell talk with Philipp about his live crisis simulation that nobody can win, how to train cyber warriors, and how nation-state cyber conflict is looking more and more like the age of Caribbean pirates. In the lifestyle polygraph segment, Philipp reveals his favorite book, his eye-opening, go-to celebratory drink, and the weight of his luxury umbrella. He also shares his favorite escape when the complexity of modern life gets to be too much and introduces us to a Zurich commuting tradition that involves swimming home through a river.

Jul 20, 2026

42:59

No Password Required: Nonresident Senior Fellow at AEI and the Person Who Explained the Internet to Capitol Hill

Shane Tews is a nonresident senior fellow at the American Enterprise Institute, where she focuses on cybersecurity, privacy, artificial intelligence, and internet governance. She is also president of Logan Circle Strategies, a strategic advisory firm working at the intersection of technology and policy. Before her think tank work, Shane helped introduce modems to the George H.W. Bush White House, walked the halls of Capitol Hill explaining the internet to blank-staring legislators, and spent years at Verisign helping shape the foundational frameworks of how the internet would be governed. In this episode, Shane traces her unlikely path from the Bush administration to becoming one of Washington's most trusted voices on tech policy. She breaks down why regulating outcomes rather than inputs is the only sensible approach to technology governance, why the United States and European Union are operating from fundamentally different innovation philosophies, and why a national privacy bill is long overdue. She also explains why most organizations and individuals are far less protected than they think and why nobody knows who to call when something goes wrong. Jack Clabby and co-host Kayley Melton talk with Shane about legacy system vulnerabilities, the cybersecurity implications of agentic AI, and what policymakers absolutely must get right over the next decade. She also reflects on what the CISA reauthorization limbo means for companies that don't even know they've lost liability protection. In the lifestyle polygraph segment, Shane reveals she has 20,000 emails across eight accounts, admits she fakes laughs at bad jokes out of Midwestern politeness, shares her obsession with “The Bear” and “Peaky Blinders,” and tells us about her children's book project using Google Omni called "Shane on a Train."

Jun 22, 2026

51:54

No Password Required: Tech Lead at Airbnb and the Person Who Always Says, “I Got This”

Mudita Khurana is a tech lead for automated tooling and vulnerability management at Airbnb, where she focuses on building modular, scalable security systems in an era of rapidly evolving AI threats. Before Airbnb, she spent nearly a decade in security roles across Accenture, Meta, and PwC, making bold career pivots along the way, including a move into Facebook's product security team. In this episode, Mudita shares her journey from a family of doctors in India to Carnegie Mellon and into the heart of Big Tech security. She discusses what it means to thrive as a non-traditional engineer in a deeply technical field, why she stepped back from management to get closer to the work, and how she thinks about building security tooling that won't be obsolete in three months. Jack Clabby and co-host Kayley Melton, recording live from the BSides Tampa Conference at the University of South Florida, talk with Mudita about imposter syndrome, AI's curveballs for security teams, leadership without a leadership title, and the importance of community in staying on top of a field that never stops moving. She also reflects on what great mentorship looks like early in a career and why clarity, ownership, and consistency are the leadership qualities she keeps coming back to. In the lifestyle polygraph segment, Mudita firmly plants her flag in the Harry Potter universe as Hermione, explains why Deadpool doesn't qualify as a superhero, debates gym vs. nature as a reset strategy, and reveals her dream remote work base: a high-altitude Buddhist mountain town in the Himalayas.

Jun 9, 2026

28:13

No Password Required: Former Navy Cyber Targeteer Fueled by Metal Music

Madeline Sedgwick is a senior cyber research engineer and threat analyst at Palo Alto Networks Unit 42, specializing in nation-state cyber activity, covert infrastructure, and cyber intelligence analysis. Before entering the private sector, she spent six years in the U.S. Navy as an intelligence specialist, helping support some of the earliest cyber operations under U.S. Cyber Command. In this episode, Madeline shares her journey from joining the Navy to becoming one of the first certified cyber targeteers supporting offensive cyber operations. Carlton Fields’ Jack Clabby and co-host Sarina Gandy of Cyber Florida talk with Madeline about fusion analysis, cyber warfare, leadership, and the challenges of translating highly technical investigations into actionable insights for government and industry leaders. Then, in the lifestyle polygraph segment, Madeline debates cybersecurity in the “Star Wars” universe, explains her Weird Al Yankovic Dragon Con costume, reflects on her time playing bass in a metal band, and proudly shares why Jacksonville, Florida, will always be home.

May 29, 2026

50:44

No Password Required: Project Manager at Rapid7 and Queen of Cyber Media

Cynthia Wyre is a senior strategic engagement project manager at Rapid7, where she helps connect academic research and industry. Her path into cybersecurity innovation was untraditional, moving from health care and construction project management into vulnerability research and academic partnerships. Cynthia reflects how she applied for a role she did not think she was qualified for, why professionals of all backgrounds belong in cyber, and how project management skills can open unexpected doors. Jack Clabby of Carlton Fields and K. Melton of the Cognitive Security Institute welcome Cynthia live from CyberBay 2026 in Tampa for a conversation about research, resilience, and relationship-building in cybersecurity. Cynthia explains Rapid7’s partnership with the University of South Florida and Cyber Florida, including her efforts to support research around SOC analyst training and burnout, and the future of cyber education. Throughout the conversation, Cynthia highlights the importance of community, mentorship, and helping people see that cybersecurity is not limited to one path or one type of person. The episode wraps with the lifestyle polygraph segment, where Cynthia reveals how she would work a room full of strangers and how she won a costume contest moments before meeting rapper Yung Gravy. She also earns a crown of her own, officially joining the No Password Required fantasy cybersecurity squad as queen of the podcast.

Apr 6, 2026

40:11

No Password Required: AI Security Researcher and Documentarian of Spirituality and Play

Madhav Nakar is a security researcher at BeyondTrust specializing in identity threats, endpoint security, and cloud attack paths. With a background in theoretical mathematics, his current research focuses on analyzing attacker behavior to build practical systems of detection. In this episode, Madhav shares the pivotal moments that shaped his career, including his first experience witnessing a nation-state attack unfold in real time from his seat in a security operations center. He explains how mathematical thinking sharpens security strategy and why strong research is rooted in exploration, not predetermined outcomes. Jack Clabby of Carlton Fields, joined by co-host Kayley Melton of the Cognitive Security Institute, welcomes Madhav for a conversation on modern cyber defense. From AI-driven attacks and agentic systems to privilege escalation risks in role-based access environments, Madhav breaks down what teams are getting wrong about AI and why defending against AI increasingly requires AI-powered tools. The conversation turns to Madhav’s philosophy of “serious play,” where curiosity, experimentation, and failure fuel better research and resilience. He also shares insights from his spiritual and philosophy project, The Fire of Knowing, exploring consciousness and belief through a neutral lens. In the lifestyle polygraph segment, Madhav pitches a cybersecurity documentary, debates growth versus comfort, and reflects on public dancing experiments.

Mar 17, 2026

36:40

Mediation Matters: Where Preparation Meets Resolution

n this episode of Mediation Matters, Ed Page and Charles Castagna break down the habits that consistently lead to successful mediations. They discuss why thorough preparation — by lawyers, clients, and mediators alike — sets the foundation for productive dialogue, and why mediation is not about proving who’s right, but understanding risk. From active listening and strategic concessions to addressing bad facts head-on, this conversation offers practical guidance on how to help the mediator help you. The episode also explores mediator neutrality, ethical boundaries, and why people must feel fully heard before resolution is possible.

Feb 25, 2026

37:56

No Password Required: Social Media Security and Governance Leader and Lover of All Beagles

Sue Serna is the CEO and founder of Serna Social and the former head of global social media at Cargill. She brings more than two decades of experience at the intersection of storytelling, strategy, and security. In this episode, she shares her journey from business reporter to leading her own consultancy serving companies around the world on social media strategy. Jack Clabby of Carlton Fields, joined by guest co-host Rex Wilson of Cyber Florida, welcomes Sue for a candid discussion about the realities of enterprise social media. From managing more than 150 Facebook pages for a single company, to navigating internal politics, agency relationships, and regulatory pressure, Sue explains why social media is far from “free” and why most organizations still under-resource it. Sue dives deep into the gap between social media teams and cybersecurity departments. She outlines how personal account compromises can escalate into enterprise-level incidents, why governance frameworks matter, and how large organizations can regain control of sprawling digital footprints. Drawing from real-world examples, she argues that social media must be treated like finance or HR, a core business function requiring structure, ownership, and accountability. The episode wraps with the lifestyle polygraph segment, where Sue reveals her love of Apollo-era space history, debates iconic Philadelphia traditions, and imagines what magical talent her beagle would bring to Hogwarts.

Feb 17, 2026

44:39

No Password Required: CISO at RSA and Champion of a Passwordless Future

Rob Hughes, the CISO at RSA, has more than 25 years of experience leading security and cloud infrastructure teams. In this episode, he reflects on his unconventional career path, from co-founding the original Geek.com and serving as its chief technologist during the early days of the internet, to leading security and systems design at Philips Home Monitoring. Jack Clabby of Carlton Fields and Kayley Melton welcome Rob for a wide-ranging conversation on identity, leadership, and the realities of modern cybersecurity. Rob currently leads RSA’s Security and Risk Office, overseeing cybersecurity, information security governance, and risk across both RSA’s products and corporate environment. Rob explains his dream for a passwordless future. He unpacks why passwords remain one of the largest sources of cyber risk, how real-world incidents and password-spraying attacks have accelerated change, and why phishing-resistant technologies like passkeys may finally be reaching a tipping point. The episode wraps with the lifestyle polygraph, where Rob lightens the conversation with stories about gaming with his kids, underrated horror films, and classic cars.

Jan 20, 2026

44:48

1 of 16