Best Matt Johansen Podcasts (2025)

1
Chasing Entropy Episode 004: From Student to Leader – A Conversation with Matt Johansen 37:21

2h ago37:21

37:21

In this episode of Chasing Entropy, host Dave Lewis welcomes longtime friend and cybersecurity thought leader Matt Johansen. What unfolds is a deeply insightful, often personal discussion that spans the evolution of an entire career—from a student in a literal church pew to a key voice shaping cybersecurity narratives today. From Dorm Room to Indus…

1
Chasing Entropy episode 003: Digital Security for the Vulnerable — A Conversation with Runa Sandvik 30:57

7d ago30:57

30:57

In this compelling episode of the Chasing Entropy Podcast, host Dave Lewis, Global Advisory CISO at 1Password, sits down with renowned cybersecurity expert Runa Sandvik, founder of Granite and longtime advocate for digital security in high-risk spaces. Together, they explore a career dedicated to protecting journalists, challenging the status quo i…

1
Chasing Entropy Podcast episode 002: Digital Doomsday & Resilient Response with Rich Mogull 31:52

13d ago31:52

31:52

In the second episode of Chasing Entropy, host Dave Lewis, Global Advisory CISO at 1Password, welcomes a true luminary in the cybersecurity world—Rich Mogull, SVP of Cloud Security at Firemon and CEO of Securosis. What follows is a lively, insightful, and often humorous conversation that ranges from paramedics to Black Swan events, revealing how ph…

1
Chasing Entropy Podcast Episode 001: Staying True to Your Passion with Jennifer Leggio 29:56

21d ago29:56

29:56

In our first-ever episode, host Dave Lewis sits down with Jennifer Leggio — cybersecurity strategist, marketing leader, and community builder — for a candid conversation on career growth, the evolution of cybersecurity, and why staying true to your passion matters more than chasing titles. Key Topics Discussed The Origins of the Security Twits: How…

1
The Sony Hack Ten Years Later With Brian Raftery 45:17

9M ago45:17

45:17

The Sony Pictures hack in 2014 by the North Korean Lazarus Group was a seminal event both in Hollywood and in the security community, bringing to light the capabilities and ambitions of North Korean attackers and showing the damage a leak of sensitive data can be. Brian Raftery joins Dennis Fisher to discuss his new Ringer podcast, The Hollywood Ha…

1
Zero Day Reuse and A Busy Week for Iranian APTs 18:32

9M ago18:32

18:32

The focus was on Iranian APTs this week, both from private threat intelligence teams and CISA, exposing new operations from UNC757 and other groups targeting government, higher education, and private industry. We also check in on a new report from Google's Threat Analysis Group on APTs using the same exploits for zero days that were developed by pr…

1
Reddit's Matt Johansen on Identity Attacks, Enterprise Security, and Burnout 31:42

9M ago31:42

31:42

Reddit's head of software security Matt Johansen joins Dennis Fisher to talk about the highlights of Black Hat USA, the challenges of sorting security priorities in a large enterprise, and how he's learned to take care of his mental health after many years in the security industry.By Decipher

1
Rebekah Brown and John Scott-Railton on COLDRIVER and Russian Cyberespionage 23:12

9M ago23:12

23:12

Rebekah Brown and John Scott-Railton of the Citizen Lab join Dennis Fisher to dive into their group's new report on highly targeted spear phishing campaigns by the Russian threat actor COLDRIVER and then discuss the emergence of a new, possibly related group called COLDWASTREL.By Decipher

1
Back Hat USA 2024 Recap 20:08

9M ago20:08

20:08

Dennis Fisher and Lindsey O'Donnell-Welch reflect on their week in Las Vegas at Black Hat and discuss the talks they liked, including Moxie Marlinspike's keynote and the Google Project Zero retrospective, and the other topics they found interesting, including vulnerability exploitation versus social engineering and the AI ecosystem.…

1
Black Hat Podcast: Josh Harguess and Chris Ward 26:52

10M ago26:52

26:52

At Black Hat USA this year, Josh Harguess and Chris Ward, with Cranium AI, talk about the security challenges that organizations are experiencing while implementing AI in their environments, what AI red teaming consists of and the backstory of how MITRE Labs’ AI Red Team came to be.By Decipher

1
Gary McGraw on Data Feudalism 27:03

10M ago27:03

27:03

AI and machine learning security expert Gary McGraw joins Dennis Fisher to discuss the concept of data feudalism in LLM foundation models, what the security implications of it are, and whether narrowly focused models may help address these issues.By Decipher

1
Black Hat USA 2024 Preview: AI, AI, and More AI 46:46

10M ago46:46

46:46

Decipher editors Dennis Fisher and Lindsey O"Donnell-Welch are joined by Brian Donohue to dissect the Black Hat talks they're looking forward to, including sessions with H D Moore, Sherrod DeGrippo, and Moxie Marlinspike, and some talks they can't quite figure out from the titles.By Decipher

1
John Hammond on the CrowdStrike Outage 18:17

10M ago18:17

18:17

The fallout from the CrowdStrike outage continues more than a week after the faulty update, so Huntress security researcher John Hammond joins Dennis Fisher to talk about the lessons learned from the incident, our fragile software ecosystem, and what cybersecurity practitioners can do differently next time.…

1
Tyler Healy 30:17

10M ago30:17

30:17

Tyler Healy, CISO of Digital Ocean, joins Dennis Fisher to discuss the unique challenges of defending a huge platform, how AI is changing things for defenders, and what new challenges AI might bring in the near future.By Decipher

1
What Happened With the CrowdStrike Update and Azure Outage 11:47

10M ago11:47

11:47

CrowdStrike said a problem with an update the company pushed to Falcon sensors on Windows hosts on July 18 caused a blue screen of death, an issue that coincided with a Microsoft Azure outage and widespread outages across airlines, banks, hospitals, and other services. Our story on this incident: https://duo.com/decipher/crowdstrike-windows-update-…

1
Antonio Cocomazzi 19:43

10M ago19:43

19:43

FIN7 is a highly active and capable cybercrime group also known as Carbanak that has been evolving and using its own tools such as AVNeutralizer for many years. SentinelOne researchers Antonio Cocomazzi helps us dig into the group's tactics and tools. Read Antonio's new research here: https://www.sentinelone.com/labs/fin7-reboot-cybercrime-gang-enh…

1
George Barnes 39:08

10M ago39:08

39:08

Former NSA Deputy Director George Barnes joins Dennis Fisher to talk about his 35-year career at the agency, how he came to be intrigued by the cybersecurity world, the emergence of Cyber Command as a force inside the government, and what he sees as the priorities for defenders now.By Decipher

1
Chris Hughes 23:11

11M ago23:11

23:11

Chris Hughes, co-founder of Aquia and a Cyber Innovation Fellow at the Cybersecurity and Infrastructure Security Agency, joins Dennis Fisher to talk about the challenges of supply chain security, working with the government to address systemic issues, and the importance of collaboration.By Decipher

1
The TeamViewer Breach and a Busy Week for APT29 10:07

11M ago10:07

10:07

Dennis Fisher and Lindsey O'Donnell-Welch dig into the news of the TeamViewer corporate breach, attributed to APT29/Midnight Blizzard, and news of more victims from the Microsoft intrusion by the same group earlier this year.By Decipher

1
Cisco Talos: How Threat Actors Target MFA 15:42

11M ago15:42

15:42

Multi-factor authentication (MFA) is a critical form of defense for organizations, and threat actors are recognizing that: According to the latest Cisco Talos Incident Response Quarterly Trends report, instances related to MFA were involved in some capacity in half of all security incidents that the Talos team responded to in the first quarter of 2…

1
Metin Kortak 20:50

11M ago20:50

20:50

Metin Kortak, CISO with Rhymetec, talks about how organizations are approaching data privacy and security compliance, and thinking about risk management policies, when it comes to generative AI in the workplace.By Decipher

1
Deciphering Heat 1:02:28

11M ago1:02:28

1:02:28

Michael Mann's 1995 thriller Heat is considered by many people to be the best crime movie ever made. And hidden inside the intricate plot is a story of a lone hacker with a background at DARPA who uses his skills to set up scores for the crews in LA's underworld. Meg Gardiner, the co-author of Heat 2, and Casey Ellis, cofounder of Bugcrowd, join De…

1
Amy Bogac 35:33

12M ago35:33

35:33

Amy Bogac, a longtime security executive with a deep background in systems administration and networking, joins Dennis Fisher to talk about how she came to security, how her background in communications informed her career choices, and the difficult conversations that need to occur before someone has to push the button during an incident.…

1
The Microsoft Recall Recall 20:44

12M ago20:44

20:44

A few days after Microsoft announced the new AI-enabled Recall feature--generating tremendous concerns and pushback from the security and privacy communities--the company had decided to disable it by default, but many concerns still remain. A month after the company's CEO proclaimed that it would be "prioritizing security above all else", how did t…

1
The Challenges of Reporting on Complex Intrusions With Ryan Naraine 26:13

12M ago26:13

26:13

Veteran security journalist and podcaster Ryan Naraine joins the Decipher podcast to discuss the challenges of separating fact from fiction when reporting on complex incidents such as the Snowflake breach.By Decipher

1
Garrett Yamada 31:31

12M ago31:31

31:31

Garrett Yamada, associate director of identity security at Texas A&M University, talks about his experiences navigating identity challenges, building an identity-centric strategy and moving away from “home-grown, home-managed systems” that were historically used for authentication.By Decipher

1
Sarah Powazek 34:06

12M ago34:06

34:06

Sarah Powazek, the Program Director of Public Interest Cybersecurity at the UC Berkeley Center for Long-Term Cybersecurity, joins Dennis Fisher to talk about her work in setting up Cybersecurity Clinics at high education institutions around the country to help bring knowledge and skills to underserved organizations.…

1
Caitlin Condon on the Attack Intelligence Report 29:22

1y ago29:22

29:22

Caitlin Condon of Rapid7 joins Dennis Fisher to dive into the juicy tidbits from the Rapid7 Attack iNtelligence Report, including the rise in attacks on zero days, ransomware proliferation, and why network edge devices remain a major problem. Read the report here: https://www.rapid7.com/c/fr-2024-attack-intelligence-report-TY/1/…

1
Chris Langford 31:39

1y ago31:39

31:39

Chris Langford, Director of Network, Infrastructure, and Cyber Security at the Lewisville Independent School District, talks about how having experience in the classroom has helped him from a cybersecurity perspective, and how we can best educate the next generation of students on cybersecurity best practices.…

1
RSA Conference: Kelly Shortridge 23:52

1y ago23:52

23:52

At RSA Conference 2024, Kelly Shortridge, senior director of portfolio product management at Fastly, talks about the first steps organizations can take toward adopting a Secure by Design mindset and how businesses can approach the challenge of sustaining resilience in complex systems.By Decipher

1
RSA 2024 Preview: What are These Sessions Even About? 53:55

1y ago53:55

53:55

In this special episode, Dennis Fisher and Lindsey O'Donnell-Welch are joined by Brian Donohue of Red Canary to preview the RSA conference talks they're excited about and to try to make sense of some of the session titles that are maybe a little indecipherable.By Decipher

1
Memory Safe: Dennis Fisher 1:04:15

1y ago1:04:15

1:04:15

Lindsey O'Donnell-Welch turns the tables on Decipher editor-in-chief Dennis Fisher in this episode of Memory Safe to find out how his background covering crime prepared him for the cybersecurity beat, why Ferris Bueller's Day Off is his favorite hacker movie, and how much the security world has changed in the last 20 years.…

1
Source Code 4/26 5:50

1y ago5:50

5:50

In this week's Source Code podcast, we go over findings from a newly released Ransomware Task Force report and give an update on the types of data accessed in the Change Healthcare ransomware attack.By Decipher

1
Lachlan McGill and Euan Moore 36:37

1y ago36:37

36:37

The Salvation Army’s Lachlan McGill, general manager of cyber risk and compliance, and Euan Moore, security operations manager, talk about their experiences building a strong cybersecurity foundation, navigating the organization’s unique challenges and fostering a culture around security awareness.By Decipher

1
Source Code 4/19 6:52

1y ago6:52

6:52

In this week’s Source Code podcast, we discuss new reporting from Change Healthcare parent UnitedHealth Group that the massive ransomware attack has cost the company $872 million so far. We also talk about recent research about Sandworm, which has been designated by Mandiant as APT44.By Decipher

1
Cody Stokes 38:57

1y ago38:57

38:57

Cody Stokes, a security leader at Procellis Technology, joins Dennis Fisher to talk about his time in the Marine Corps, the challenges of breaking into the cybersecurity field, and the fulfillment he gets from helping to protect users.By Decipher

1
Memory Safe: Sherrod DeGrippo 50:16

1y ago50:16

50:16

In this week’s Memory Safe episode, Sherrod DeGrippo of Microsoft talks about her first experiences with hacker culture, why a Stanley Kubrik movie shows a glimpse of what AI is, and how she makes sure that “threat intelligence hits the right note.”By Decipher

1
Dan Lorenc 36:05

1y ago36:05

36:05

Dan Lorenc, co-founder and CEO of Chainguard, joins Dennis Fisher to dig into the recent XZ Utils backdoor incident, the implications for the open source ecosystem, and what can be done to avoid similar incidents in the future. Then they discuss the problems facing NIST's National Vulnerability Database and the CVE ecosystem.…

1
Rick Gordon 40:36

1y ago40:36

40:36

Rick Gordon of Tidal Cyber joins Dennis Fisher to discuss his path from the US Naval Academy to submarine officer to Wall Street and finally to the cybersecurity industry, where he's worked for the last 25 years. Dennis and Rick also talk about the importance of the community aspect of cybersecurity and why it's vital to the collective defense.…

1
Source Code 3/29 6:17

1y ago6:17

6:17

In this week's Source Code news wrap podcast, we talk about a report by the U.S. Treasury Department looking at AI-specific cybersecurity risks in the financial sector, CISA's newly released Notice of Proposed Rulemaking document for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), and recently discovered activity linked to AP…

1
Jack Cable 29:07

1y ago29:07

29:07

Jack Cable, senior technical advisor at the Cybersecurity and Infrastructure Security Agency (CISA), talks about his past experiences with bug bounty programs, CISA’s Secure By Design initiative and its efforts to help secure the open-source software ecosystem.By Decipher

1
Brian Donohue 36:32

1y ago36:32

36:32

Brian Donohue of Red Canary joins Dennis Fisher to talk about some of the surprising findings from the company's new 2024 Threat Detection Report, including why identity based attacks continue to work so well and how attackers are approaching the shift to the cloud.By Decipher

1
Source Code 3/15 5:33

1y ago5:33

5:33

In this week's Source Code podcast, we talk about Patch Tuesday updates and the HHS investigation into the ransomware attack on Change Healthcare.By Decipher

1
Change Healthcare Attack Fallout 16:57

1y ago16:57

16:57

Decipher editors Dennis Fisher and Lindsey O'Donnell-Welch talk about the BlackCat ransomware attack on Change Healthcare that has crippled the company and affected the ability of thousands of health care providers, pharmacies, and hospitals to get paid and submit claims.By Decipher

1
Memory Safe: Daniel Cuthbert 51:03

1y ago51:03

51:03

Daniel Cuthbert, global head of cybersecurity research at Banco Santander, joins Dennis Fisher to talk about getting his first computer, a ZX Spectrum that he still owns (!), finding his way into hacking through IRC, his passion for photography, and his surprising alternate career path.By Decipher

1
Source Code 3/1 5:52

1y ago5:52

5:52

In this week's Source Code podcast we talk about how threat actors are using malware that allows them to maintain a better foothold on compromised Ivanti appliances, and we discuss advisories from the U.S. government about APT28, APT29 and the BlackCat ransomware group.By Decipher

1
Alex Delamotte 26:22

1y ago26:22

26:22

Alex Delamotte, threat researcher at SentinelLabs, talks about the importance of actionable threat intelligence, how threat actors are leveraging cloud services, and the upcoming Net Gala, a hacker and tech-themed art exhibition.By Decipher

1
Source Code 2/23 6:05

1y ago6:05

6:05

In this week's Source Code podcast, we discuss the LockBit ransomware takedown operation and a critical, actively exploited ScreenConnect flaw.By Decipher

1
Jennifer Leggio 39:53

1y ago39:53

39:53

Jennifer Leggio, a longtime security industry executive who has served in many different roles, joins Dennis Fisher to talk about the shift in thinking among those in the security community, technical gatekeeping in security, her new consulting venture Moveable Feast, and finding your niche.By Decipher

1
LockBit Ransomware Takedown 11:43

1+ y ago11:43

11:43

Dennis Fisher and Lindsey O'Donnell-Welch discuss the disruption of the LockBit ransomware operation by the FBI, Europol, and UK authorities, what it means for victims, and how it fits into the government's larger strategy to target cybercrime groups.By Decipher

Podcasts Worth a Listen

Matt Johansen Podcasts

Podcasts Worth a Listen