Advancing Cyber breaks down the leading issues in cybersecurity – incidents, law, public policy, and technology – from diverse expert perspectives to highlight what really matters.
Hosted by Cristin Flynn Goodwin, cyber law and policy expert for 25 years with the world’s largest technology companies, Advancing Cyber brings together experts in cybersecurity technology, law, and policy to explore current issues and trends impacting cyber.
Crypto Means Cryptography - The Starting Point Before the Quantum Revolution
In this episode of Advancing Cyber host Cristin Flynn Goodwin kicks off a two-part conversation with renowned cryptographer Dr. Brian LaMacchia, founder of Farcaster Consulting Group and former Distinguished Engineer at Microsoft and head of the Security & Cryptography team in Microsoft Research. Before we dive into quantum in the next episode, we start with the essential foundation: cryptography. Too often mistaken for “crypto” as in cryptocurrency, cryptography is the mathematics that keeps modern life running, protecting everything from web browsing and software updates to payments, critical infrastructure, and secure communications. Cristin and Brian unpack the building blocks of our modern digital life, (encryption, integrity, and authentication), why standards and algorithm transitions matter, and what it means that “all cryptographic algorithms weaken over time.” If you want a clear, practical primer on why trust on the internet is built on cryptography and why leaders should care that we have so little time to migrate to quantum safe encryption before 2029, this is the place to start. This is a two-part conversation, so stay tuned for their upcoming conversation on quantum computing.
@AdvancingCyber (https://studio.youtube.com/channel/UC6rluDZy99vuO117VQUd49w) #quantumcomputing #quantum #cybersecurity #cyberlaw #cyberpolicy #encryption #quantummigration #encryption #standards #CISO
13 Nov 2025
Advancing Cyber Origin Stories: Steve Lipner – Software Security Pioneer
We live in a world of vibe-coding and AI security, but how we got here is a longer story. With over 50 years in software and security, Steve Lipner lived through and drove many of the origins of our industry’s early efforts in software security and he is our featured guest on Advancing Cyber’s Origin Stories series with our host, Cristin Flynn Goodwin.
Steve is the former head of the Microsoft Security Response Center, co-author of the Security Development Lifecycle, and current Executive Director of SAFECode and Chair of NIST'sInternet Security and Privacy Advisory Board. He was elected to the Information Systems Security Hall of Fame in 2010, the National Cybersecurity Hall of Fame in 2015, and a Fellow of (ISC)2 and the National Academy of Engineering in 2017. Steve holds an appointment as adjunct professor of computer science at the Institute for Software Research, School of Computer Science of Carnegie Mellon University, and is named as an inventor on twelve US patents.
This Origin Story conversation spans some of the highlights of Steve’s career that parallel the evolution of software security in our industry. This is essential listening to understand how our security models evolved – from MIT in the early 70s to the US Government’s Orange Book, to Common Criteria turning 25 – and reflect early decisions about software and security that impacted decades of computing. We dive into Steve’spivotal role in the Trustworthy Computing initiative at Microsoft and hear his perspectives on 50 years of software development on the future of vibe-coding and the threat of quantum computing to encryption in the software ecosystem.
It’s the ultimate origin story on software development and security, and Advancing Cyber is grateful that Steve Lipner is here to share it with us.
#AdvancingCyber #OriginStories #software #security #softwaresecurity #engineering #softwarehistory #cybersecurity #AdvancedCyberLaw
3 Nov 2025
Cyber Byte: CISA 2015 - Temporary Protections
With the Cybersecurity and Information Sharing Act of 2015 in suspension, threat intelligence and incident response teams are playing with a new set of rules. Advancing Cyber host and ACL Managing Partner Cristin Flynn Goodwin breaks down the top 7 things that cyber responders should do today until a new bill is passed.
18 Sept 2025
From Federal to State & Local Cyber: Shifting Responsibilities
On this episode of the Advancing Cyber podcast, host Cristin Flynn Goodwin, former CISA Executive Assistant DirectorJeff Greene, and current Snohomish County, Washington Chief Information Security Officer (CISO) Doug Cavit unpack the recent cybersecurity responsibilities shifting from federal to state and local authorities. Jeff and Doug explore the implications of this shift, including resource allocation, the role of federal agencies, and challenges faced by smaller municipalities. Doug shares the practical realities of managing cybersecurity at the county level, and the difficulties faced by smaller entities with limited resources. Jeff, with his extensive background in national security and cybersecurity, provides insights into the federal perspective and the critical role of federal agencies in supporting state and local efforts. Cristin, Jeff, and Doug also talk about what happens if the CISA Act is not reauthorized, and the impact that will have, including a request for the cybersecurity community to call members of Congress and voice their support.
This episode is a must-listen for anyone interested in the future of cybersecurity and the evolving roles of federal, state, and local governments.
#AdvancingCyber #cybersecurity #CISA #CISAAct #publicpolicy #cyberlaw #cybersecuritylawyer #threatintelligence #informationsharing #publicprivatepartnership #stateandlocalcyber
8 Sept 2025
Origin Stories Episode 4: Katie Moussouris, The Hacker (Part 2)
This is the exciting second half of the Advancing Cyber Origin Stories conversation with Katie Moussouris, hacker, founder and CEO of Luta Security, and cybersecurity pioneer. The technical and legal worlds collide here, with Katie and host Cristin Flynn Goodwin discussing the importance of cybersecurity standards, and the role of export control incybersecurity and its restrictions on software. Katie and Cristin also discuss the impact of AI and AI-assisted coding on vulnerability research and vulnerability disclosure. It's a conversation you won't want to miss.
If you haven't heard Part 1, Part 2 can be listened to as a standalone, but we recommend enjoying the wholeconversation!
#AdvancingCyber #OriginStories #hackers #hacking #vulnerabilities #vulnerabilityresearch #AI #AIAssistedCoding #VibeCoding #Standards #ExportControl #CyberLaw #PublicPolicy
18 Aug 2025
Origin Stories Episode 3: Katie Moussouris, The Hacker (Part 1)
In this episode of the Advancing Cyber Podcast, we talk with Katie Moussouris, hacker, founder and CEO of Luta Security,and pioneer in vulnerability disclosure and responsible security research. Katie shares her experiences from her early days of cybersecurity and unpacks the evolution of vulnerability disclosure and the pressures on the security research community, managing bug bounties and working with researchers, and the importance of security standards. Katie and host Cristin Flynn Goodwin also unpack the challenge of Coordinated Vulnerability Disclosure and what happens when industry quietly fixes an issue, and government doesn’t know about the interim risks. Katie highlights the challenges of governments assessing vulnerability equities and the tradeoffs of government exploitation and relative risk.
Stay tuned for Part 2 where we dive into export control and restrictions on software, and the rise of AI in cybersecurityand coding. We’ll explore the risks of vulnerabilities developed by AI-assisted coding and what that will mean for vulnerability disclosure in the future.
23 Jul 2025
Advancing Cyber - Hacking Back
The drumbeat for “hacking back” resurfaces in public policy circles every few years, usually coinciding with a rise in cyber attacks. It’s a logical, emotional response. An attacker has stolen sensitive data, and frustrated victims ask, “How can we fight back?”
Emotionally, it feels justified. Technically, it’s a minefield. From a policy standpoint, it’s an issue that bogs down in liability, unintended consequences, and geopolitics.
On the Advancing Cyber Podcast, cybersecurity experts Nathan Case and Stacy O'Mara join host Cristin Flynn Goodwin to debate the pros and cons of hacking back, and the very real risk that collateral damages are greater than the original harm itself.
7 Jul 2025
Origin Stories Episode 2: Chris Painter, The Diplomat
Christopher Painter recounts his career as a cyber policy leader, from prosecuting hackers to becoming the first cyber diplomat, revealing insights into cybersecurity norms and inter-governmental tensions in this interview.
23 Jun 2025
Origin Stories - Episode 1: Government & Policy - Richard Clarke
Richard A. Clarke, former White House official, discusses the origins of modern cybersecurity policy, his work developing the first national strategy to defend cyberspace, and his current role as CEO of Good Harbor Security Risk Management in this interview.
11 Feb 2025
DeepSeek: AI’s Sputnik Moment or Not Good Enough for Prime Time?
In this episode of Advancing Cyber, Cristin Flynn Goodwin unpacks the growing concerns surrounding DeepSeek, a Chinese AI provider driving headlines for its powerful AI model built with cheaper and lower-power chips than its Western counterparts. While this breakthrough raises questions about AI efficiency and affordability, it sparks serious privacy concerns, and many have been quick to point out that DeepSeek’s Terms of Service clearly show compliance with laws and government requests in the People’s Republic of China.
What hasn’t yet been explored are the impacts of Chinese cybersecurity laws on DeepSeek, particularly the Chinese regulation on vulnerability reporting. Cristin explores the implications of a DeepSeek “test bed” - vulnerabilities reported to the Chinese government, combined with US user data flowing into DeepSeek servers, accessible by the Chinese government. Cristin unpacks the potential that this is, indeed, a Sputnik moment. She challenges that even if DeepSeek isn’t “good enough” from a security perspective, industry and government must create better technical options for and policy protections in place for US users.
Join the Advancing Cyber conversation on Spotify, Apple Podcasts, and on now on YouTube!
3 Feb 2025
Europe’s Cyber Regulations Come into Force – and What It Means for US Companies
The EU has taken the lead in cybersecurity regulation, and the business impacts are already being felt worldwide. On this episode of Advancing Cyber, Cristin Flynn Goodwin is joined by Chris Hale, Senior Director for Cyber and National Security Law at Cisco, and Emily Lemaire, Financial Services Regulatory Lawyer at Covington & Burling, to unpack Europe’s leading cybersecurity regulations – the Digital Operational Resilience Act (DORA), Network Information Systems Directive (NIS) 2.0, and the Cyber Resilience Act (CRA), all of which have passed milestone dates in the past 4 months. Together, they explore how these landmark regulations are reshaping the global security landscape and causing companies—especially those in the U.S.—to think about their approach to compliance and resilience.
DORA’s 4-hour incident reporting rule, NIS 2.0’s expanded scope, and CRA’s product-focused requirements impact how organizations manage cybersecurity and operational risk. Cristin, Chris, and Emily delve into the profound implications of these laws: whether short reporting timeframes increase risk, whether disclosures of newly detected exploitation of vulnerabilities amplifies risks, and whether the potential for billion-dollar penalties drives more effective compliance.
The discussion doesn’t just stop at the rules. They tackle the deeper questions: Can the U.S. maintain its best-practice approach in a world where compliance is increasingly driven by law? How will companies balance compliance obligations and business needs now that regulations include model contractual clauses?
This episode is essential listening for cybersecurity, legal, and policy experts navigating a world where the EU is rewriting the playbook—and daring the rest of the world to follow.
27 Nov 2024
The Evolution of Information Sharing in Cybersecurity
Cyber Threat Alliance President Michael Daniel and cyber threat intelligence expert Sergio Caltagirone explore the evolution of information sharing in cybersecurity, from trusted exchanges to the multi-billion-dollar threat intelligence industry.
31 Oct 2024
Who’s in Charge? Restoring Cloud Services in a Major Incident or Disaster
Natural disasters have been hitting the United States hard in 2024, and programs designed to help ensure telecommunications resiliency have been working well in the background to keep people connected and facilitate response. In this episode of Advancing Cyber, host Cristin Flynn Goodwin, joined by telecommunications policy expert Kathryn Condello and telecommunications and cybersecurity veteran Marcus Sachs, addresses a critical problem: what happens when cloud services are taken offline at such a scale that customers and sectors compete to decide who gets restored first? As cloud infrastructure increasingly underpins vital sectors—finance, healthcare, utilities, and government—the question isn’t whether disruptions will happen but how devastating the impacts will be when they do.
The discussion dives into the structural and regulatory vulnerabilities in current cloud frameworks that sit at the intersection of cybersecurity and telecommunications, evaluating whether an approach like the telecom sector’s Telecommunications Service Priority (TSP) regime can be adapted for rapid cloud restoration in times of crisis. As data centers carry multiple tenants with differing priorities, the panel explores the impact of the lack of regulation on cloud services in times of crisis, in the US and internationally.
This episode challenges cybersecurity policy and tech leaders to reassess how regulation, prioritization, and strategic partnerships must evolve as we recognize the cloud’s role in national security, emergency response, and national resilience.
20 Sept 2024
Artificial Intelligence: Critical Infrastructure, or too early to tell?
At the heart of the debate on this episode of Advancing Cyber is a fundamental question: Is “artificial intelligence” itself a critical infrastructure? Join host Cristin Flynn Goodwin, legal expert David Simon, policy leader Jason Healey, and technical expert Jesper Johanssen as they talk through a hypothetical nation state attack against AI to unpack how government and industry would respond. The experts weigh the risks and benefits of regulation, increased sector coordination and collaboration, and the need for an AI-ISAC to prepare for future attacks.
Given the diversity of uses for AI, the panel clashes over the notion that AI is critical infrastructure. The panel considers whether the issue rests with the now 25-year-old definition of “critical infrastructure” and whether it may need to be reconsidered for the new AI era.
This episode pushes boundaries, challenging the public and private sectors to prepare for the growing role AI is taking in our world. It’s clear from the debate that this is a question that needs to be answered – before the attackers answer it for us.
16 Aug 2024
Blue Screens and Liability, Cyber and AI Regulation, and Disinformation Fails at the Olympics
The CrowdStrike aftermath, the rise of AI regulations that can’t keep pace with technical change, and nation state actors testing and using AI in cyberattacks.
In this premiere episode of Advancing Cyber, host Cristin Flynn Goodwin is joined by Jason Kikta, CISO at Automox, Jen Ellis, Founder of NextJen Security, and Jessica Herrera-Flanigan, Partner at Monument Advocacy, to dive deep and dissect recent cyber events. With differing points of views, they explore the implications of the CrowdStrike incident on software liability, the evolution of cybersecurity and AI technology and regulation, and the role of AI in threat intelligence and its use by nation states in attacks - including disinformation operations the Paris Olympics.
Tune in to this must-listen discussion—subscribe now on Apple Podcasts or Spotify! #AdvancingCyber #cybersecurity #AI #incidentresponse
12 Aug 2024
Advancing Cyber
Advancing Cyber breaks down the leading issues in cybersecurity – incidents, law, public policy, and technology – from diverse expert perspectives to highlight what really matters.
Hosted by Cristin Flynn Goodwin, cyber law and policy expert for 25 years with the world’s largest technology companies, Advancing Cyber brings together experts in cybersecurity technology, law, and policy to explore current issues and trends impacting cyber.
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
YouTube views
851
Score snapshot 15 Sept 2025
Apple Podcasts (US)
5.0 / 5
6 ratings
Spotify
5.0 / 5
7 ratings
Podcast Authority Score: 29 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Quality
19
Social presence
0
YouTube
66
Engagement
32
Contact Advancing Cyber
Guest appearances
Does not typically book guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of Advancing Cyber?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
