Cyber All Day

About Cyber All Day

Cybersecurity Podcast

Publisher

Michael VIRGONE

Category

business · technology

Language

en

Explicit

Yes

First episode

13 Aug 2026

Latest episode

29 Oct 2026

Latest episodes

10 episodes in the feed.

1. 

   29 Oct 2026

   Alerts aren't enough anymore #09

   We're looking at why alerts alone aren't enough, and why understanding behaviour and context matters. First part of my conversation with James HAMILTON, Cyber & Infrastructure Director. CHAPTERS (01:48) - Introduction (02:57) - The game is changing in security operations: we need to look at it differently (08:27) - How do you define normal behaviour in a company? (12:49) - Changes in attack behaviour and vulnerability management (16:26) - “We need to bring more analytics into play and start looking at behaviour” (22:01) - The rise of identity-based attacks (25:00) - Organisations don't share much information with each other (29:45) - How much of detecting abnormal behaviour comes down to gut feeling and experience? GUEST James HAMILTON, Cyber & Infrastructure Director LinkedIn: https://www.linkedin.com/in/james-h-a472ba77 (https://www.linkedin.com/in/james-h-a472ba77)/ HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

2. 

   8 Oct 2026

   When does outsourcing security actually make sense? #08

   Second part of my conversation with John WALLWORTH, Information Security Officer at System C Healthcare CHAPTERS (01:59) - How internal teams think about conversations about outsourcing (08:53) - Internal vs external: understanding the real cost of running a service (13:58) - It makes more sense to go with the provider. Sometimes. Not all the times. (19:22) - Using externals to say things you can't say internally (24:06) - Funny story: John’s own work gets presented back to him (28:37) - What John learned from that experience (32:16) - John’s final message GUEST John WALLWORTH, Information Security Officer at System C Healthcare LinkedIn: https://www.linkedin.com/in/john-wallworth-citp-mbcs-202410a6/ (https://www.linkedin.com/in/john-wallworth-citp-mbcs-202410a6/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

3. 

   24 Sept 2026

   Security has to deliver value #07

   First part of my conversation with John WALLWORTH, Information Security Officer at System C Healthcare CHAPTERS (01:41) - John’s experience on both sides of the table, across different industries (03:56) - How your industry and what you protect shape the pressure on internal teams (07:13) - Even in-house, Security is still a service provider and has pressure (09:46) - “Don’t be the Department of No, be the Department of KNOW” (14:58) - The expectations of an internal Security team (17:39) - “Is it fit for purpose or fit for use?” (21:52) - Navigating relationships, context and pressure (24:59) - Different kinds of pressure, and making Security invisible GUEST John WALLWORTH, Information Security Officer at System C Healthcare LinkedIn: https://www.linkedin.com/in/john-wallworth-citp-mbcs-202410a6/ (https://www.linkedin.com/in/john-wallworth-citp-mbcs-202410a6/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

4. 

   17 Sept 2026

   Helping AI agents understand what secure means for your business #06

   Second part of my conversation with Erlend OFTEDAL - AppSec and AI security researcher. CHAPTERS (01:23) - DORA state report (link below), improved delivery throughput, but also increased delivery stability (05:25) - Planning stage: shifting the focus from attacks to defensive code and security principles (09:03) - Teaching AI agents to write more secure code is sort of the same thing as teaching developers to write more secure code (12:08) - Planning stage: the typing was never the bottleneck. The thinking was (15:45) - With AI writing code, how do you bring security into the development process? (20:29) - Security team being able to ask AI how secure the code is (22:38) - What we need to do right now + AppSec and AI agents (27:21) - Choose the right AI agent for the right purpose (e.g. Claude vs Opengrep) (32:03) - Leverage AI to analyse legacy code to find vulnerabilities, Firefox example, etc. (38:22) - Last words LINK MENTIONED 2025 DORA State of AI-assisted Software Development report: https://cloud.google.com/resources/content/2025-dora-ai-assisted-software-development-report GUEST Erlend OFTEDAL- AppSec and AI security researcher LinkedIn: https://www.linkedin.com/in/erlendoftedal/ (https://www.linkedin.com/in/erlendoftedal/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

5. 

   9 Sept 2026

   As AI writes more of the code. What about security? #05

   First part of my conversation with Erlend OFTEDAL- AppSec and AI security researcher. CHAPTERS (01:04) - How is the role of the developers changing with the increase of code developed by AI (04:17) - AI gives you more options, makes us more productive + some benefits of AI (building quick app) (06:33) - Example of containing the agents, the two-sided problems to contain the agents (trust vs agency of the AIs) (09:49) - If we have bad practices in the company, AI as an amplifier, would amplify those (14:15) - You can fake competency, Stack Overflow rankings, code on GitHub (18:04) - Automating social engineering, the agents creating GitHub users playing the long game (21:26) - Proprietary code and AI & how it changes the developers’ job developing proprietary code (26:29) - Will we have new open-source frameworks in the future and what will they look like (31:02) - About old languages like COBOL & the bigger picture (34:02) - Another use of AI, finding and fixing low-severity bugs LINK MENTIONED 2025 DORA State of AI-assisted Software Development report: https://cloud.google.com/resources/content/2025-dora-ai-assisted-software-development-report GUEST Erlend OFTEDAL- AppSec and AI security researcher LinkedIn: https://www.linkedin.com/in/erlendoftedal/ (https://www.linkedin.com/in/erlendoftedal/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

6. 

   2 Sept 2026

   Measuring what matters in a SOC #04

   Second part of my conversation with Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment. CHAPTERS (01:28) - Why Dave hates Mean Time to Detect (MTTD) (07:00) - Why SOCs need to measure the quality of their data and signals (13:01) - Confirmation rates + and why the math often doesn't add up (18:00) - It’s very difficult to measure quality, but it’s very valuable + an example (19:29) - Example: how to define the metrics that actually matter to your organisation (23:41) - Mean Time to Respond (MTTR) - and why the number doesn't necessarily inspire confidence (32:06) - Why SOC severity levels need business context (35:28) - Making sure your SOC understands what is actually critical to the business (39:09) - Example of business criticality (41:09) - The importance of having a key operational contact inside the business (43:34) - One of his big measures of quality: how many tickets had to be sent back for validation (47:06) - Not many people understand what a SOC actually is GUEST Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment LinkedIn: https://www.linkedin.com/in/davewmckenzie/ (https://www.linkedin.com/in/davewmckenzie/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

7. 

   24 Aug 2026

   MSSP SOC reporting has a metrics problem #03

   First part of my conversation with Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment. CHAPTERS (00:00) - In this episode & intro (01:20) - Dave’s introduction (04:34) - Dave jokes that he “tortures” vendors for a living (07:47) - The story behind his talk at Security BSides London, “You Scored 46” - and why SOC metrics matter (12:34) - For the purposes of his talk, he went to AI and asked for a monthly service delivery report + scope + inventory (15:57) - AI averages the internet, vendor claims & pure filler slides (17:00) - The industry doesn't know how to measure SOC performance: MSSP economics & honesty (24:30) - Those monthly service delivery meetings should be more about what is happening rather than the stats (30:29) - Goodhart’s Law: when metrics create the behaviour you want to avoid (33:28) - The MSSP value paradox: they want to bring value, but it's good to have “boring customers” too (38:59) - Why we need to keep clarifying the terminology: alerts, incidents & events (42:52) - What is even an incident? It depends who you ask: security vs data incidents GUEST Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment LinkedIn: https://www.linkedin.com/in/davewmckenzie/ (https://www.linkedin.com/in/davewmckenzie/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

8. 

   17 Aug 2026

   What is wrong with cybersecurity marketing #02

   Second part of my conversation with Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr, Conference Organizer of multiple BSides events, with a background in global threat response. CHAPTERS (02:24) - A lot of teams in cybersecurity marketing hire great marketing people who know absolutely bugger all about cybersecurity (04:29) - The problems with absolutes (09:08) - Product claims and their limitations (what works on paper vs. what actually works) (11:25) - Sam's thoughts: “I think authentic is the word I always want to go with” (14:12) - Being honest about where a product isn't strong enough (including walking away from a deal) (18:24) - The balance between what you say you do, what you actually do and what somebody actually needs (21:25) - Building products with a finite amount of engineering resources (customer requests, roadmaps and validating ideas) (24:42) - The information candidates give away during interviews (CVs, LinkedIn, background and what they reveal) (27:13) - Speaking to people on the ground (customers, Gong transcripts and cybersecurity events) (28:09) - The value of cybersecurity events for marketing, product and sales (B-Sides, grassroots events vs. RSA and Black Hat) (30:00) - Talking to people outside your product bubble (red team, offensive security, SOC, etc.) (31:44) - Fake companies and fake jobs (35:58) - Sam's 2020 example: when she halted a product release because it wasn't ready (37:13) - The importance of speaking to people more (getting outside the vendor bubble) (37:59) - The message to remember: stop saying absolutes, don't scare people, authenticity matters GUEST Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr LinkedIn: https://www.linkedin.com/in/safesecs/ (https://www.linkedin.com/in/safesecs/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

9. 

   17 Aug 2026

   A real-world deepfake job applicant #01

   First part of my conversation with Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr, Conference Organizer of multiple BSides events, with a background in global threat response. CHAPTERS (03:06) - Real-life example: the deepfake job applicant. What happened during the interview (05:21) - Why a deepfake may be used for a job interview (salary differences, subcontracting, etc.) (07:47) - This candidate looked great on paper (CV, LinkedIn, job description, covering email) (08:36) - The red flags that started to add up (new LinkedIn profile, Romania, skills and experience) (10:32) - The Romanian language odd situation. The candidate didn't want to switch languages (15:15) - Deepfakes getting better and cheaper (16:30) - How attackers can prepare for interviews with AI (research, LinkedIn, prompts) (19:03) - In this particular situation, the technology wasn't the problem, it was the preparation (21:19) - How to mitigate the risk (job descriptions, identity verification, etc.) (26:02) - The information candidates give away (CVs, LinkedIn, previous employers, etc.) (31:44) - Fake companies and fake jobs (35:31) - Sam's message, and as the technology gets better: what can companies actually do GUEST Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr LinkedIn: https://www.linkedin.com/in/safesecs/ (https://www.linkedin.com/in/safesecs/) HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

10. 

    13 Aug 2026

    Welcome to Cyber All Day #00

    A short introduction to Cyber All Day: who I am, what the podcast is about, why I created it, and why I follow a two-conversation format. CHAPTERS (00:00) - Introduction to Cyber All Day (00:27) - About me and how I approach the podcast (01:51) - What is Cyber All Day about? (02:26) - The two-episode format and how I approach conversations (04:30) - The vibe, where to find the podcast, and timestamps (05:54) - Outro GUEST None - Episode 0 HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ (https://www.linkedin.com/in/michaelvirgone/) GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io (mailto:hello@cyberallday.io) Website: https://cyberallday.io/ (https://cyberallday.io/) ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

Contact Cyber All Day

Guest appearances

Books guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.