UNSECURITY: Information Security Podcast

As tools and companies adopt AI features at a monumental rate, AI pen testing has exploded. Do these tests stack up, or are they far less magical than the hype suggests?Brad Nigh, Megan Larkins, and guest Seth Bowling break down what these tools actually do, where they fall short, and why a human tester is still typically a much more effective and thorough option.Seth, who heads R&D at FRSecure, shares what his team found after testing more than a dozen AI products over the past year. The biggest surprise? Many so-called AI pentests are mostly deterministic scripts with AI layered on top for tasks like polishing reports and writing business-risk summaries—automated, sure, but not truly autonomous testing.If you want to dive deeper into what AI pen testing tools look like and how they differ from human-led tests, you won't want to miss this episode!Be sure to like, subscribe, and hit the notification bell for more insightful episodes.#UnsecurityPodcast #FRSecure #cybersecurity #aipentesting #penetrationtesting #informationsecurity #businessWe want to hear from you! Reach out at [email protected] and follow us for more: LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

In this episode of Unsecurity Podcast, Megan Larkins, Brad Nigh, and April Meyer dig into one of the biggest issues facing healthcare today: cybersecurity as a business, operational, and patient safety risk.April breaks down what healthcare organizations should watch as the proposed HIPAA security rule evolves, why the industry still struggles with basics like multi-factor authentication, encryption, asset management, and documentation, and how recent breaches have made the need for action impossible to ignore.The conversation also explores the real-world challenges of medical devices, third-party dependencies, legacy systems, and network segmentation—plus what regulators are likely to expect when audits begin.Whether you work in healthcare or support organizations that do, this episode offers a practical roadmap for reducing risk now instead of waiting for final rule clarity.Be sure to like, subscribe, and hit the notification bell for more insightful episodes. #UnsecurityPodcast #Cybersecurity #hipaa #hipaacompliance #healthcare #informationsecurity #businessWe want to hear from you! Reach out at [email protected] and follow us for more: LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

In this episode of Unsecurity, Megan, Brad, Nathan, and Eric unpack the recent 60-day pause on CMMC Phase 2 requirements and what it really means for contractors and subcontractors.The conversation goes beyond the headline to explore the ongoing importance of self-attestation, the risks of false claims, and why compliance is still very much on the clock.The team also breaks down the real costs of becoming assessment-ready, from initial scoping and technical debt to policy work, evidence collection, and third-party assessments.Along the way, they explain why shortcuts and “easy button” solutions can create bigger problems later, and why due diligence matters when choosing a compliance partner.If your organization is weighing whether CMMC is worth the investment, this episode offers a grounded look at the business, security, and operational tradeoffs involved.Be sure to like, subscribe, and hit the notification bell for more insightful episodes.#UnsecurityPodcast #Cybersecurity #FRSecure #MyTech #CMMC #DoWWe want to hear from you!Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

Welcome to Episode 260 of the Unsecurity Podcast!Join hosts Brad Nigh and Megan Larkins as they sit down with special guest Mea Yang, an Information Security Consultant at FRSecure.The conversation explores the pipeline problem from multiple angles — from early interest and industry perception to hiring bias, retention challenges, and the lack of women in leadership. They unpack how cybersecurity teams can move beyond the “cookie-cutter” hiring mindset and build stronger defenses through broader experience, better culture, and more intentional growth opportunitiesDiscover insightful discussions on:The current state of women in cybersecurity and the industry's talent shortage.Cultural expectations and barriers affecting the progression of women in tech fields.The importance of diversity in cybersecurity teams for enhanced problem-solving and defense.Strategies for increasing female representation and retention in cybersecurity roles.Whether you're in the industry or just interested in the topic, this episode is packed with valuable perspectives and actionable insights. Don't miss out on this important conversation about inclusiveness and growth in the tech world! Tune in to expand your understanding and join the conversation on creating a more inclusive cybersecurity industry.Be sure to like, subscribe, and hit the notification bell for more insightful episodes.#UnsecurityPodcast #Cybersecurity #WomenInTech #DiversityInTech #Inclusion #FRSecureWe want to hear from you!Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

In this episode of the Unsecurity Podcast, we unpack the Cyber Resilience Act and why it’s becoming a critical framework for anyone building or selling digital products in today’s connected world.Megan talks with Madalin Neag and Christopher "CRob" Robinson about open source security, software supply chain risk, software bills of materials, and why passive consumption of open source is no longer enough.The conversation also explores how AI is changing software development and cybersecurity—and why human judgment, upstream contribution, and responsible implementation still matter more than ever.If you want a practical, thoughtful look at how regulation, open source, and AI intersect, this episode is for you.Like, subscribe, and share with your network to stay informed about the latest in cyber and information security!We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins speak with Brian Kelley, information security consultant at FRSecure and one of the infamous CISSP Mentor Program's leads this year. Together, they talk about Brian's journey in information security and how it led him to helping support the FRSecure CISSP Mentor Program.Hear the trio discuss:Working in IT and finding interest in information securitySecurity focuses at MSPsPaying help forwardStudying tips and finding resourcesPicking your exam dateThe CISSP Mentor Program's format and evolutionWhile the program has already begun, you can still get all on-demand materials and join the rest of the live mentor sessions by signing up at https://learn.frsecure.com/courses/2026-cissp-mentor-program!Like, subscribe, and share with your network to stay informed about the latest in cyber and information security!We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins speak with Samantha Floyd, an associate penetration tester and active member of Blacks in Cyber and Black Women in Cyber.Together, they talk about Samantha's shift from marketing to the cyber industry, including:The thrill and ethics of hacking and CTFsThe power of inclusive communitiesReducing barriers and amplifying diverse perspectivesPractical web app pen testing insightsChallenges pen testers faceThe importance of support and mentorship in career transitions Like, subscribe, and share with your network to stay informed about the latest in cyber and information security!We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

The Unsecurity Podcast is back for our annual discussion with Pinky, FRSecure's Incident Response Manager, to discuss the "Breachmas" season.Breachmas is a time of year or a phenomenon when attackers pull a few more levers available to them—more people on PTO, increased online spending, and general busyness contributing to less focus. The result is an uptick in cyber incidents nearing the end of each calendar year.As the team lead of FRSecure's blue team, Pinky lives and breathes incident handling. Each year, we like to get his perspective on how Breachmas has changed or evolved to stay better informed on how to protect our clients (and ourselves). This is a reflection of what we saw at year-end 2025, along with suggestions moving forward!In this episode, learn about:Resurgence of RansomwareImportance of Conditional AccessTaking a Layered Approach to Security ToolsLogs, Baselining, and Anomaly DetectionEvilGinx and Token Theft AttacksNew This Year: Extortion and AILike, subscribe, and share with your network to stay informed about the latest in cyber and information security!We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

The Unsecurity Podcast returns with a truly joyful conversation with FRecure's own Jo Moldenhauer.Jo, an Associate Information Security Consultant, is famous around the FRSecure office for her weekly security news reviews, where she meticulously compiles articles and talking points for a company-wide discussion around industry trends and snapshots.And this couldn't have been easy to do. Jo's path to InfoSec is a recent and unique one—transitioning from dealing blackjack at casinos after most of them ceased operations during the COVID-19 pandemic. You can see how being tasked with leading a discussion to 75+ industry pros like this as a relative newcomer could be challenging—but Jo simply crushes it.In this episode, learn about:Non-traditional information security career pathsWhat makes "good" InfoSec newsWhy talking about industry news is important to FRSecure (and beyond)How vCISO engagements and risk assessments guide talking pointsThe Gaming (casino) and InfoSec industry Venn Diagram (and what they can learn from each other)User and security awareness training, culture, and incentive ideasLike, subscribe, and share with your network to stay informed about the latest in cyber and information security!We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/Instagram: https://www.instagram.com/frsecureofficial/Facebook: https://www.facebook.com/frsecure/BlueSky: https://bsky.app/profile/frsecure.bsky.socialAbout FRSecure:https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.

A slow-rolling holiday episode featuring CISO at DataSite, Ted Peterson! Transitioning from a Director Role, Ted shares his journey to the CISO title and how his unique background informs his work approach.Tune in for insights on:Realities to navigating organizational leadership as a CISOImportance of diverse perspectives and backgrounds in the security space Establishing pathway to career goalsLike, subscribe, and share with your network to stay informed about the latest in cybersecurity! We want to hear from you! Reach out at [email protected] and follow us for more:LinkedIn: https://www.linkedin.com/company/frsecure/ Instagram: https://www.instagram.com/frsecureofficial/ Facebook: https://www.facebook.com/frsecure/ BlueSky: https://bsky.app/profile/frsecure.bsky.social About FRSecure: https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.