The Cybersecurity Awesomeness Podcast from Enterprise Management Asscoaites (EMA) features cybersecurity expert Chris Steffen discussing critical cybersecurity issues. They cover everything from the challenges of certificate management and the cyber workforce talent shortage to deep. Available on all major platforms, this podcast offers credible, well-regarded insights into today's top security topics.
In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen analyzes the political and regulatory fallout of the recent midterm election results, which saw Democrats claim majorities in both the House and Senate. Steffen explores how this shift in congressional power directly impacts the enterprise cybersecurity, data privacy, and AI governance landscapes heading into 2027.
Key takeaways include a renewed push to modernize the Cybersecurity Information Sharing Act (CISA 2015) to cover AI threat telemetry and non-human identity risks, as well as the demise of federal AI preemption—leaving enterprise GRC teams to navigate a permanent patchwork of strict state-level regulations from jurisdictions like California and Colorado. Additionally, Steffen anticipates a reversal of proposed budget cuts for CISA, the restoration of multi-year state and local cyber grants, and an surge in investigative oversight into commercial AI labs and enterprise tech vendors. Ultimately, he stresses that foundational cybersecurity hygiene remains the most reliable strategy through changing legislative cycles.
30 Oct 2026
Cybersecurity Awesomeness Podcast - Episode 180
In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen shares key takeaways from his recent attendance at the Cloudflare Connect conference in San Francisco, focusing on the critical PHP remote code execution vulnerabilities (CVE-2026-109618 / CVE-2026-109619, dubbed "PHP2Shell").
Steffen highlights a jarring insight directly from Cloudflare leadership: from the moment the vulnerability was publicly announced, it took just 17 to 22 minutes for automated AI bots to begin actively exploiting it in the wild. Walking step-by-step through a best-case human patch cycle—reading the CVE, conducting risk assessments, securing emergency change approvals, and staging code—Steffen demonstrates that even the fastest human response takes at least 20 minutes, during which millions of automated attack attempts have already launched. Because security patching operates at human speed while threats move at AI speed, Steffen urges organizations to rely heavily on defense-in-depth and compensating controls. He outlines four essential stopgaps: WAF edge-layer virtual patching (such as Cloudflare’s automated rule deployments), network segmentation, Runtime Application Self-Protection (RASP), and aggressive attack-surface reduction.
23 Oct 2026
Cybersecurity Awesomeness Podcast - Episode 179
In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen is joined by Justin Beals, CEO and founder of StrikeGraph, for an in-depth conversation on the evolving landscape of Third-Party Risk Management (TPRM) and CISO liability.
Drawing on his background as a CTO and software engineer, Beals highlights three key trends shaping vendor risk: persistent breach rates tied to third-party vectors, heightened regulatory scrutiny (such as CMMC Rev 3 requirements), and the increasing adoption of AI to automate complex compliance workflows. A major focus of the discussion centers on the shift from self-attested security questionnaires toward mandatory, verifiable vendor testing—particularly driven by Department of Justice enforcement under the False Claims Act. Steffen and Beals explore the legal and criminal implications for "affirming officials" who sign off on compliance data, emphasizing that CISOs must go beyond surface-level questionnaires to systematically collect "receipts" and proof of vendor controls.
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
5.0 / 5
1 ratings
Podcast Authority Score: 53 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Quality
95
Social presence
0
YouTube
0
Engagement
27
Contact Cybersecurity Awesomeness Podcast
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Questions about Cybersecurity Awesomeness Podcast
Who hosts Cybersecurity Awesomeness Podcast?
Chris Steffen and Ken Buckler host the show. Published by Enterprise Management Associates.
How often do new episodes come out?
The show publishes weekly, based on its RSS feed.
Does Cybersecurity Awesomeness Podcast take guests?
Yes. Guests have been identified in episode analyses.
Host of Cybersecurity Awesomeness Podcast?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
