Who said cybersecurity had to be serious? The future of cyber is creative, human, and even a little sexy.In this special 400th episode, Ron Eddings celebrates six incredible years of Hacker Valley Studio with one of cyber’s most creative voices, Maria Velasquez, Co-Founder of the Cybersecurity Marketing Society and Co-Host of Breaking Through in Cybersecurity Marketing. Together, they discuss how bold storytelling, authentic community, and a touch of fun are reshaping the way we connect in cybersecurity. Maria opens up about turning burnout into purpose, building a 4,000-strong global movement, and why the next frontier in cyber might just be entertainment.   Impactful Moments: 00:00 - Introduction 02:00 - CISA layoffs and collaboration fragility 04:00 - Welcoming Maria Velasquez 06:00 - How loneliness sparked a global community 08:00 - Why collaboration fuels cybersecurity growth 10:00 - When cybersecurity marketing was “boring”12:00 - The rise of creativity and brand power 14:00 - Story behind Torque’s “Kill the S.O.A.R” campaign 15:00 - Making cybersecurity emotional and human 17:00 - Maria’s advice for bold marketing leaders 18:00 - The next big thing: experiential marketing 20:00 - Inside Cyber Marketing Con 2025 24:00 - Final reflections on community and creativity 27:00 - Ron’s takeaways: connection drives innovation Links: Connect with Maria on LinkedIn: https://www.linkedin.com/in/maria-vepa/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

To defend like a human, you first have to think like a hacker. In this episode, Ron Eddings sits down with Chris Dale, Co-Founder and Chief Hacking Officer at River Security, to explore the human side of hacking, where curiosity, persistence, and vigilance meet defense. Chris shares how the traditional idea of penetration testing has evolved into a continuous journey of discovery, and why reconnaissance and storytelling are critical tools for modern defenders. From real-world breach stories to lessons on trust and responsibility, this episode reveals how thinking like a hacker, and acting like a human can transform the way we approach cybersecurity.   Impactful Moments00:00 - Introduction and massive breach overview03:00 - Trusted systems become exposure points05:00 - Meet Chris Dale of River Security07:00 - The problem with traditional pen testing08:30 - Continuous reconnaissance and real-world risk10:00 - Knowing yourself as a security principle13:00 - The meaning of continuous vigilance15:00 - Turning cybersecurity lessons into stories18:00 - Storytelling and mindset in defense19:30 - Final takeaways on fundamentals and vigilance   Links:Connect with our Chris on LinkedIn: https://www.linkedin.com/in/chrisad/ Read the Tech Radar article here: https://www.techradar.com/pro/security/f5-breach-fallout-over-266-000-instances-exposed-to-remote-attacks Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/      

When code meets intuition, innovation gets personal. But what happens when we let AI vibe with our ideas? In this episode, Ron Eddings covers the rise of AI-driven development from Vibe Coding, where natural language shapes real code, to the emerging Model Context Protocols (MCPs) that redefine how apps talk to AI. He breaks down the recent Figma MCP vulnerability to discuss how creativity and security now collide in surprising ways. With hands-on insights using Raycast and practical steps for building responsibly, Ron takes you inside a new era where human intuition and machine intelligence truly build together.     Impactful Moments 00:00 - Introduction01:00 - The Figma vulnerability explained03:00 - Why MCP security matters05:00 - What vibe coding really means07:00 - Writing with intention and context08:00 - The power of structured prompting10:00 - How MCP connects everything12:00 - Why adoption is skyrocketing15:00 - Setting up an MCP server17:00 - Agents, actions, and security trust19:00 - The real takeaway: curiosity with caution30:00 - Predictions on OpenAI’s upcoming browser33:00 - The profit battle between OpenAI and Microsoft35:00 - Windsurf’s rollercoaster of acquisitions   Links:Connect with our Ron on LinkedIn: https://www.linkedin.com/in/ronaldeddings/ Check out the Hacker News article here: https://thehackernews.com/2025/10/severe-figma-mcp-vulnerability-lets.html?m=1   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

The real edge in cybersecurity isn’t found in new tools, it’s built through timeless fundamentals and a mindset that never stops learning. In this episode, Ron sits down with Rich Greene, Senior Solutions Engineer and Instructor at SANS Institute, to uncover how true cyber value starts with skills, curiosity, and mindset. Rich shares his remarkable story of surviving a battlefield injury, retraining his brain, and how that journey shaped his approach to mastering cybersecurity. Together, they connect real-world lessons like the recent Discord breach to the core truth that even advanced systems depend on people who master the basics. Impactful Moments00:00 - Introduction02:00 - Discord breach and third-party risk05:00 - Meet Rich Greene from SANS06:00 - The power of mastering fundamentals07:00 - Learning how to learn08:30 - Rich’s story of rebuilding his memory11:00 - Forcing the brain to grow stronger12:00 - Top skills that get you paid14:00 - Skills that lead to fulfillment16:00 - Fundamentals that fuel long-term success17:00 - The OSI model decoded20:00 - Why operating systems matter21:00 - Security operations fundamentals23:00 - Why cloud is the #1 must-learn skill25:00 - Final advice: sharpen your fundamentals   LinksConnect with our Rich on LinkedIn: https://www.linkedin.com/in/secgreene/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

What if protecting your digital twin becomes the new cyber hygiene? In this week's episode, Ron welcomes back cybersecurity leader Jason Rebholz, CEO of Evoke, to discuss how AI is reshaping the fundamentals of cyber hygiene. From data breaches and deepfakes to everyday habits that protect our digital lives, Jason shares how small actions and smarter use of AI can make all the difference. Together, they uncover how our growing digital footprints are giving rise to digital twins, AI replicas that can mirror our behaviors, voices, and even decisions, and what that means for the future of trust, identity, and security. Impactful Moments:00:00 - Introduction01:00 - The Neon app data leak story03:00 - Why our voices are the new passwords05:00 - How AI can strengthen cyber hygiene07:00 - Jason’s mission to secure AI systems09:00 - AI as a force multiplier for defenders11:00 - Deepfakes and the new social engineering playbook13:00 - Attackers’ use of AI and what it means for us15:00 - The rise of digital twins and identity threats19:00 - How to defend against “yourself” online20:00 - Final reflection: Trust in the AI age   Links:Connect with Jason on LinkedIn: https://www.linkedin.com/in/jrebholz/ Check out the TechCrunch article on the Neon app data leak story: https://techcrunch.com/2025/09/25/viral-call-recording-app-neon-goes-dark-after-exposing-users-phone-numbers-call-recordings-and-transcripts/   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

The biggest security threat isn’t in the cloud, it’s hidden in the code you trust the most. In this episode, Ron sits down with Varun Badhwar, Co-Founder & CEO of Endor Labs, who shares why research shows that nearly 80–90% of application code comes from open source and third-party libraries, not your own developers. Varun discusses the unseen risks of AI-generated software, how attackers can now weaponize vulnerabilities in hours, and why precision in security matters more than ever. He also reveals how AI can be both the ultimate accelerator and the ultimate weakness in modern development.   Impactful Moments:00:00 - Introduction02:00 - Varun’s journey from RedLock to Endor Labs04:00 - Why the software supply chain is broken07:00 - AI coding assistants and insecure code risks10:00 - The NPM self-replicating worm discovery13:00 - Simple controls to enforce Zero Trust in code16:00 - Pairing AI with security to prevent slop19:00 - AI-powered security code reviews explained22:00 - Why 88% of code goes unused26:00 - Developer efficiency as the new security metric29:00 - The next wave of AI-driven software threats   Links:Connect with our Endor on LinkedIn: https://www.linkedin.com/in/vbadhwar/     Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/    

Search engines aren’t dying quietly, they’re being replaced in real time by AI browsers and voice agents. AI isn’t just answering questions anymore; it’s acting for us. In this episode, Ron Eddings explores how tools like NanoBrowser and Comet are reshaping browsing, why Google may be in trouble, and how AI voices are becoming the new interface for productivity. From breakthroughs to risks, this is a front-row look at how AI agents are changing how we work, connect, and live online.   Impactful Moments:00:00 - Introduction01:00 - AI agents as everyday tools02:00 - Testing AI-powered browsers03:00 - Comet: AI browser from Perplexity04:30 - Why Google should be worried05:30 - Real-world tasks for AI browsers07:00 - Automating cybersecurity inventory09:00 - Comet in action on LinkedIn10:00 - Testing for malicious exploits11:00 - Risks of persuasive AI prompts12:00 - The rise of voice agents13:30 - First real-world AI voice experience15:00 - Security concerns with customer data16:30 - Double-edged sword of AI adoption17:30 - System prompt leakage vulnerabilities18:00 - Why voice could shrink attack surfaces Links:Connect with Ron on LinkedIn: https://www.linkedin.com/in/ronaldeddings/   Check out NanoBrowser: https://nanobrowser.ai/ Check out Comet by Perplexity: https://www.perplexity.ai/comet Read the article ‘No more links, no more scrolling - the browser is becoming an AI Agent.’ here: https://venturebeat.com/ai/no-more-links-no-more-scrolling-the-browser-is-becoming-an-ai-agent Read the article ‘How Voice AI Prompt Injection Threatens Enterprise Security’ here: https://www.teneo.ai/blog/how-voice-ai-prompt-injection-threatens-enterprise-security   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/    

Some tools replace tasks. Others reshape the way we think about security. In this episode, Ron welcomes back Phillip Wylie, one of the most respected voices in offensive security, author, educator, and longtime friend of the Hacker Valley community. With over 27 years of experience across cybersecurity disciplines, Phillip has guided thousands of professionals through his books, talks, and mentorship. He shares how AI is reshaping pen testing and red teaming, the value of automating away repetitive tasks, and why the fundamentals of security will always matter. From defining red teaming in 2025 to guiding newcomers on how to break in, Phillip delivers insights that balance cutting-edge innovation with timeless wisdom. Impactful Moments:00:00 - Introduction01:00 - Why Phillip keeps podcasting03:00 - AI opportunities in pen testing04:30 - What automation should replace06:00 - Red teaming vs pen testing in 202508:00 - Defining adversary emulation10:40 - Building the ideal AI assistant15:00 - The best AI use cases today18:30 - AI-driven threat modeling21:00 - Breaking into pen testing now25:00 - Building a portfolio and personal brand27:30 - Why in-person networking still matters   Links:Connect with Phillip on LinkedIn: https://www.linkedin.com/in/phillipwylie/   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/    

What if showing up with consistency could spark opportunities, create careers, and build a global movement? In this episode, Ron sits down with Gerald Auger, Ph.D., cybersecurity educator, content creator, and founder of Simply Cyber. Gerald shares how his daily livestream grew into a thriving community, why consistency is the key to influence, and how AI is reshaping the way cyber professionals work. From building SimplyCyberCon to launching a new pentesting venture, Gerry’s journey is a masterclass in community, creativity, and courage. This episode is filled with inspiration and practical takeaways for anyone ready to grow their career, brand, or business in cybersecurity.

What if defenders had their own AI-powered task force, always on, always adapting, and finally one step ahead of attackers? In this episode, Ron welcomes Vineet Edupuganti, Founder and CEO of Cogent Security, to discuss how AI agents are rewriting the rules of cybersecurity. Vineet shares why traditional vulnerability management is fundamentally broken, why exposure management matters more than ever, and how Cogent is building an “AI Task Force” to give defenders the edge. From his early days in machine learning to reshaping the future of cyber defense, Vineet breaks down the urgent need for automation, context-driven insights, and explainable AI in security. Impactful Moments:00:00 - Introduction02:00 - Vineet’s journey into AI and cyber04:30 - Why vulnerability management is broken06:10 - Generative AI as a defender’s edge08:20 - Why AI agents outperform brittle automation09:45 - The first use cases for Cogent’s agents12:00 - Rethinking tier-one SOC analyst roles13:30 - The rise of exposure management (CTEM)17:10 - Cogent’s vision for an AI task force18:30 - Early wins and insights with Cogent20:00 - Biggest misconceptions about AI in security23:00 - What enterprises should demand from vendors25:00 - Why explainability is essential in AI systems27:00 - Startups vs incumbents in cybersecurity innovation29:30 - Why enterprises must invest in AI now   Links:Connect with our guest, Vineet Edupuganti, on LinkedIn: https://www.linkedin.com/in/vineetedupuganti Learn more about Cogent Security: https://www.cogent.security    Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/    

AI is neither friend nor foe, it’s both. The way we choose to use it determines whether it helps or harms. In this solo episode, Ron Eddings shares lessons from his first job at a grocery store, his early days in cybersecurity, and today’s AI-driven landscape. From productivity hacks like meeting transcription, to creative tools like content-aware editing, to the dark side of phishing and deepfakes, Ron shows why human judgment remains the ultimate defense. This is a passionate reminder that the real power isn’t in the tools, it’s in us. Impactful Moments00:00 - Introduction01:15 - AI is the tool, not the toolbox03:00 - A grocery store scam that taught a life lesson06:00 - The irreplaceable role of human judgment07:30 - First cybersecurity job at Booz Allen Hamilton09:00 - How AI boosts productivity with meeting transcription12:00 - Creative shortcuts with AI in image and video editing15:00 - Vibe coding and generative red teaming17:30 - AI-powered phishing and scam emails18:50 - Testing a deepfake voice on Ron’s mom21:30 - Why curiosity and skepticism beat AI deception22:30 - Final challenge: don’t serve AI—make AI serve you Links:Connect with our Ron on LinkedIn: https://www.linkedin.com/in/ronaldeddings/ Check out our upcoming events: https://www.hackervalley.com/livestreamsJoin our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudioLove Hacker Valley Studio? Pick up some swag: https://store.hackervalley.comContinue the conversation by joining our Discord: https://hackervalley.com/discordBecome a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

AI might analyze your logs in seconds, but only the community can put you in the room that changes your career. In this solo episode, Ron Eddings discusses the powerful balance between human connection and artificial intelligence in shaping the future of cybersecurity and beyond. From the sacrifices that sparked his career to the mentors who opened doors, Ron shares personal stories that show why community will always be your ultimate competitive edge, even as AI advances into the SOC. He also runs live AI experiments on ransomware response and log analysis, revealing what AI can (and can’t) do for practitioners right now.   Impactful Moments: 00:00 - Introduction02:00 - Why community is your first advantage03:30 - The sacrifice that launched Ron’s career04:40 - Meeting mentor Marcus Carey06:00 - Early opportunities in cybersecurity07:00 - The power of hacker spaces09:00 - How mentors open hidden doors10:00 - RSA and Black Hat as career accelerators13:00 - The most underrated LinkedIn feature15:00 - The HVS mastermind community16:00 - Reality check on GPT-518:00 - AI builds an IR playbook20:00 - Critical do’s and don’ts in incident response23:00 - Why hallucinations matter in cybersecurity AI25:00 - AI makes sense of raw logs28:00 - Can AI replace tier one analysts?30:00 - Where AI still falls short31:00 - Final challenge: Strengthen your community     Links: Connect with our Ron on LinkedIn: https://www.linkedin.com/in/ronaldeddings/ Register for our livestream with Gerry Auger: https://www.linkedin.com/events/7359290642633539586/ Check out the links to the OpenAI ChatGPT threads here:Incident Analysis Summary: https://chatgpt.com/share/689fa61f-3498-8006-9989-ff8221f97b01 Ransomware Incident Playbook: https://chatgpt.com/share/689fa63f-86ec-8006-8355-642d4d38808e Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

When AI agents move faster than security teams, the game changes, and the risks multiply. Ron welcomes back Marco “Mystic Marc” Figueroa, Program Manager at Mozilla’s 0DIN Program, to continue the conversation and update on 2025’s most pressing AI and cybersecurity shifts. From the explosive rise of AI agents and OpenAI’s rumored browser to the hidden dangers of MCP implementations and prompt injection exploits like the Gemini attack, Marco shares insights that security pros can’t afford to miss. Impactful Moments00:00 - Introduction02:00 - Why 2025 is the year of the agent05:45 - MCP’s rapid adoption and security risks10:00 - The Gemini prompt injection vulnerability15:00 - How attackers hide malicious AI prompts18:00 - High success rates in non-technical teams22:00 - Rise of voice-based AI scams25:00 - Using jailbreaks to bend AI to your needs30:00 - Predictions on OpenAI’s upcoming browser33:00 - The profit battle between OpenAI and Microsoft35:00 - Windsurf’s rollercoaster of acquisitions Links:Connect with our guest Marco on LinkedIn: https://www.linkedin.com/in/marco-figueroa-re/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudioLove Hacker Valley Studio? Pick up some swag: https://store.hackervalley.comContinue the conversation by joining our Discord: https://hackervalley.com/discordBecome a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

The riskiest move in cybersecurity? Playing it too safe. In this solo episode, Ron Eddings redefines the way we think about technical debt, risk, and missed opportunities, in security and in life.Ron reframes the debt vs. risk paradigm through the lens of the SharePoint breach, personal milestones, and co-founding Hacker Valley. With sharp insights, personal stories, and a call to action for every listener, he shows how curiosity and calculated risk are the true drivers of innovation. Impactful Moments00:00 - Introduction01:10 - Why debt vs. risk matters now02:20 - What the SharePoint breach taught us04:15 - Risk avoidance creates deeper debt05:10 - Clear definitions: risk vs. debt06:30 - Hidden costs of deferring decisions08:15 - Leaving $200k salary to build Hacker Valley10:00 - Long-term founder debt explained11:08 - When comfort becomes dangerous12:00 - Curiosity as a leadership skill13:10 - What you’re not seeing yet14:30 - Final thought: reflect and reassess Links:Connect with our Ron on LinkedIn: ​​https://www.linkedin.com/in/ronaldeddings/ Check out our upcoming events: https://www.hackervalley.com/livestreamsJoin our creative mastermind and stand out as a cybersecurity professional:https://www.patreon.com/hackervalleystudioLove Hacker Valley Studio? Pick up some swag: https://store.hackervalley.comContinue the conversation by joining our Discord: https://hackervalley.com/discordBecome a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/    

The world’s youngest continent is also its most untapped resource. Confidence Staveley, Founder of CyberSafe, makes a powerful case for why Africa’s youth are the answer to global cybersecurity and AI innovation… if we’re bold enough to invest. In this episode, Ron welcomes back cybersecurity leader and advocate Confidence Staveley for a discussion on purpose-driven innovation, talent development, and AI-powered awareness tools. Confidence shares updates on her nonprofit work, her bold new ventures including AI Cyber Magazine, and how she's helping shape Africa into a tech talent hub. With global budget cuts hitting nonprofits and marginalized communities, Confidence shares how Africa’s innovators, who are often excluded from the table, are building their own tables, making their impact impossible to ignore, and shaping cybersecurity’s future on their terms.   Impactful Moments 00:00 - Introduction02:00 - Her Difference Makers Award speech04:00 - Partnering with SANS for bigger impact06:01 - Global DEI backlash and ripple effects10:00 - Why Africa is the future of tech13:01 - Innovation with limited resources17:10 - AI Cyber Magazine and its mission19:00 - Building AI-powered awareness tools21:00 - The African adage on self-renewal22:10 - How sharing knowledge builds trust   Links Connect with our guest, Confidence Staveley: https://www.linkedin.com/in/confidencestaveley/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/  

Is compliance just a checkbox, or the backbone of real security? Returning to the show with decades of hard-earned insight, Jeff Man makes the case that compliance, especially PCI-DSS, isn't just a formality; it's foundational to modern security. As one of the original architects of the NSA Red Team and a 20-year PCI veteran, Jeff explains how this often-misunderstood framework has shaped everything from pen testing to vendor accountability. Ron and Jeff unpack the six core goals of PCI, how red teams and SaaS builders are directly affected, and why many security teams resist compliance efforts, despite relying on them to get essential buy-in and funding.   Impactful Moments: 00:00 – Introduction01:00 – Does compliance equal security?02:09 – Jeff returns with PCI firepower03:15 – Defining security vs. compliance05:33 – “Show me what you’re doing”06:45 – Six goals at PCI’s core10:45 – Security is watching, not reacting13:30 – Companies secure because they have to15:00 – PCI gave red teams their jobs16:30 – Stripe and Square absorb PCI burden19:30 – PCI 4.0 causes confusion21:00 – Vendors aren’t your trusted advisors22:30 – “Hate me, but I’ll help” Links: Connect with our guest, Jeff Man: https://www.linkedin.com/in/jeffreyeman/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

What separates a great CISO from a great one? In this powerhouse conversation, Ron invites friend and cybersecurity leader Gary Hayslip, CISO at SoftBank Investment Advisers, back on the mic to discuss what it takes to lead in today’s high-stakes digital world. Gary shares battle-tested insights on accountability, the evolving expectations of the CISO role, and how AI is reshaping leadership without replacing it. Gary shares stories ranging from military mishaps to enterprise-scale transformation, and makes the case for visibility, trust, and embracing change. His perspective brings clarity to the fundamental responsibilities of a CISO and the mindset required to lead with impact. Impactful Moments 00:00 – Introduction 02:00 – Defining the modern CISO as a business leader 05:45 – Why CISOs should never delegate accountability 07:30 – The danger of staying invisible 10:45 – The $40K UPS explosion mistake 15:00 – How leaders build trust in new teams 19:10 – Visibility is not micromanagement 24:30 – Staying humble while leading big 30:00 – Building “Rocky the Raccoon” internal GPT 34:30 – Hiring for AI fluency in security teams Links: Connect with our guest, Gary Hayslip: https://www.linkedin.com/in/ghayslip/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Want to stand out as a leader? According to our guest Mel Reyes, you need to dress like you mean it and speak like you’ve got nothing to prove. In this episode, Mel shares how he built billion-dollar portfolios, coached executive teams, and still shows up in a white hoodie when that feels right. With Ron, he unpacks how executive presence becomes a strategic weapon for breaking resistance, commanding attention, and making your message unforgettable. You’ll learn why generic resumes fail, how to master executive storytelling with the SPAR method, and what dropping the ego really looks like in your next leadership role.   Impactful Moments: 00:00 – Introduction03:00 – Breaking the rules of executive delivery07:00 – Why confidence starts in your closet11:30 – Respecting identity in professional spaces12:30 – Advice for breaking into cybersecurity17:00 – Reinvention at the mid-senior level21:00 – The SPAR framework for storytelling30:00 – Drop the ego, find your passion   Links: Connect with our guest, Mel Reyes: https://www.linkedin.com/in/melreyes/ Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Cybersecurity isn’t just red or blue anymore... it’s purple, white, and deeply human. Maril Vernon, award-winning ethical hacker and Senior Solutions Architect at NetSPI, returns to the Hacker Valley Studio to discuss purple teaming as the most future-proof career path in cyber. She opens up about mentorship, burnout, compensation realities, and how we’re still failing the fundamentals. Together, Ron and Maril dig into what purple teaming really is (and isn’t), why soft skills matter more than ever, and how defenders are the frontline signal source for law enforcement. From guiding her mom into IR to co-founding Mind Over Cyber, Maril embodies what it means to show up for the cyber community and demand more from the culture itself.   Impactful Moments 00:00 - Introduction01:01 - Maril’s role at NetSPI03:00 - Why purple skills are future-proof05:19 - Salary truths in purple teaming08:30 - Know your value, negotiate wisely13:07 - How defenders enable law enforcement16:22 - The real meaning of purple teaming18:39 - Common misconceptions debunked24:45 - People are always the soft spot26:01 - The two security stack must-haves29:00 - Mom made it to incident response30:48 - Maril’s mentorship philosophy34:09 - Why you need to post anyway36:35 - What Mind Over Cyber is really about40:00 - CISOs are burning out silently41:31 - Closing thoughts Links: Connect with our guest, Maril Vernon: https://www.linkedin.com/in/marilvernon   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

The new cybersecurity pioneers aren’t chasing alerts, they’re building with AI. But what happens when tools meant to assist begin making decisions for us? And what skills do we lose when machines fill the gaps we used to grow into? In this episode, Chris Cochran, CEO and Founder of Commandant, returns to Hacker Valley Studio with an insider view on building in the AI boom. He shares why he’s betting on incident response over the “AI SOC,” what it means to use AI with integrity, and how this moment mirrors the early industrial revolutions: chaotic, risky, but ripe with once-in-a-career opportunity.   Impactful Moments: 00:00 – Introduction02:11 – Launch of Commandant AI03:06 – Early-stage LLM opportunities05:26 – Built first AI co-pilot in 4 hours06:00 – AI bot tops HackerOne leaderboard07:44 – AI used for and against orgs10:14 – Focus on incident response, not AI SOC12:34 – Reducing cost of prolonged incidents14:01 – Cybersecurity changing every 2 months16:58 – AI causing rapid skill loss21:59 – AI-assisted job interviews detected24:49 – AI lacks business context for blocking27:30 – Daily AI use pays long-term dividends Links: Connect with our guest, Chris Cochran: https://www.linkedin.com/in/chrishvm/   Check out our upcoming events: https://www.hackervalley.com/livestreams Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Continue the conversation by joining our Discord: https://hackervalley.com/discord Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/