Left to Our Own Devices
Cybellum Technologies LTD
Subscribe
Introducing Left to Our Own Devices - the podcast dedicated to everything product security.
Every other week, we will be talking with a different cybersecurity policymaker, engineer, or industry leader to hear their war stories and get their insider tips for surviving the product security jungle.
From Medical SBOMs, to WP. 29 and the latest industrial security threats, this is your place to catch up and learn from the pros.
Left to Our Own Devices is brought to you by Cybellum. To learn more, visit Cybellum.com
Available episodes
Newest first
Oldest first
19 Sept 2023
Michal Geva: Securing OTA
We sat down with Michal Geva, General Manager, OTA and Cybersecurity at HARMAN International to discuss trends in automotive cybersecurity and OTA cybersecurity. Michal also discussed supply chain cybersecurity, EVs and provided her tips for women in cybersecurity roles.
playlist_add
5 Sept 2023
Nidhi Gani: Championing Medical Device Regulatory Affairs
We sat down with Nidhi Gani, a seasoned regulatory affairs professional with over a decade of experience in medical devices and digital health to discuss her experiences and her insights. Nidhi has worked with devices ranging from heart and lung machines to rehabilitation devices. She works at Embecta as a Regulatory Affairs Software and Cybersecurity and is a Cybersecurity Fellow at the Archimedes Center for Health Care and Medical Device Cybersecurity at Northeastern University.
playlist_add
15 Aug 2023
Mihoko Matsubara: Cybersecurity as a Global Effort
The Chief Cyber Security Strategist at NTT Japan came by our offices to discuss the differences in cybersecurity approaches between countries, her experience working with the public and the private sector, and how to manage cybersecurity and spend time at the beach at the same time.
playlist_add
2 Aug 2023
Joanna C. Cooper: The Power of “Yes”
Joanna C. Cooper is the General Manager at Daimler Truck North America. Over the past 15 years, Joanna built multi-disciplinary industry experience, domestically and internationally, ranging from project management and component procurement, through manufacturing operations and engaging customer experience. She joined us to discuss the automotive industry, cybersecurity, and how to advance women in manufacturing roles.
playlist_add
19 Jul 2023
John Heldreth: Growing a 15,000 Strong Automotive Cybersecurity Group
We sat down with the Car Security Operations at Volkswagen AG, and ASRG founder to discuss his journey into automotive cybersecurity, what he learned along the way, and why the upcoming Secure Our Street Conference is so important to the community.
playlist_add
5 Jul 2023
Bindu Sundaresan: Uncovering Business Blind Spots With Cybersecurity
We sat down with the Director at AT&T Cybersecurity to discuss the relationship between cybersecurity and the business, the growing connectivity in the telecom industry, and to hear her tips and tricks for women in cybersecurity.
playlist_add
21 Jun 2023
Tony Turner: HBOMs, Threat Modeling and Supply Chain Cybersecurity
We sat down with Tony Turner, CEO at Opswright, for a fascinating conversation about everything product security - from the collaboration challenge between asset owners and manufacturers to HBOMs and his new book.
playlist_add
7 Jun 2023
Katie Boswell: When AI Meets Industrial Cybersecurity
We sat down with the Managing Director, Cyber Security Services at KPMG, to discuss life on the front lines of securing the most critical national infrastructure, how AI will change security as we know it, and how her mother inspired her to become a leader in this field.
playlist_add
24 May 2023
Esti Pesin: Flying Cyber (with Guest Host Michael Engstler)
We sat down with Esti Peshin, VP, General Manager, Cyber Division at Israel Aerospace Industries - ELTA, and our guest host Michael Engstler, co-founder and CTO of Cybellum, to discuss what flying a plane can teach you about cybersecurity. Under Esti’s management, IAI's cyber activity was expanded from a Directorate to a Division. Esti also served as the Director General of the Israeli Hi-Tech Caucus at the Knesset, the Israeli Parliament, and was a partner in multiple private equity firms. Esti is also a licensed pilot, as shown in the fantastic videos she shares on social media.
playlist_add
9 May 2023
Paul Cha: How LG VS Became CSMS Compliant
Paul Cha is a cyber and product security leader, serving as the VP of Cybersecurity at LG Electronics Vehicle component Solutions. Paul held critical positions at Synopsis, Ford Motor Company, and Samsung prior to joining LG. We sat down with him to discuss LG VS' journey to becoming CSMS certified, his work with Cybellum, and learn from his many years of experience.
playlist_add
26 Apr 2023
Slava Bronfman: Watching Product Security Mature
We sat down with the Cybellum Co-founder and CEO, to discuss the progress made in the product security world and Cybellum's transition from a tiny start-up into a global company that was bought by LG Electronics.
playlist_add
28 Mar 2023
Adam Boulton: From Food to Embedded Devices
Adam Boulton, VP of Security Technologies at Cybellum, is one of the most experienced software security pros on the planet, with over 15 years of experience in security engineering. Among other things, he has more than 100 cybersecurity patents under his belt and is one of the leading experts in reverse engineering of device binaries in particular and product security in general. In this episode, he shares his experience and his tips on building a product security strategy and provides security lessons from the food and building industries.
playlist_add
16 Mar 2023
Mirel Sehic: Simplifying Product Security
The Global VP and GM of Cybersecurity at Honeywell shares his thoughts on the link between IT, OT, and Product Security, and shares how simplifying cybersecurity is key. Mirel spent over a decade embedded across varying domains, with global experience leading engineering, operations, marketing, and sales teams. He is an advisor and board member in multiple cybersecurity organizations and non-profits and is one of the trailblazers in the world of IT and OT cybersecurity.
playlist_add
28 Feb 2023
Faye Francy: The Power of Community
We sat down with the Executive Director of Automotive-ISAC to discuss the power of community in the Automotive cybersecurity world and beyond. Faye has over 30 years of diverse experience in government and industry specializing in forensic chemistry, aviation, security, and networked systems. She’s a key figure in today's Automotive cybersecurity world,
playlist_add
14 Feb 2023
Adam Shostack: Threat Modeling, Star Wars, and Games
Adam is one the biggest threat modeling experts in the world, he is an advisor, a lecturer, a game designer, and the author of multiple books, including "Threat Modeling: Designing for Security".
His latest book “Threats: What Every Engineer Should Learn From Star Wars” is available now: https://www.amazon.com/Threats-Every-Engineer-Should-Learn/dp/1119895162#:~:text=In%20Threats%3A%20What%20Every%20Engineer,how%20to%20develop%20secure%20systems.
During our conversation, Adam mentioned a book by Csikszenmihality, which can be found here:
https://www.amazon.com/Finding-Flow-Psychology-Engagement-Everyday-ebook/dp/B086SVQ1MJ/ref=sr_1_1?crid=132R6QL2KYRZU&keywords=finding+flow&qid=1675723854&sprefix=finding+flow%2Caps%2C166&sr=8-1
He also mentioned a book called "Don't Bother Me Mom", which can be found here: https://www.amazon.com/Dont-Bother-Me-Mom-Im-Learning/dp/1557788588
playlist_add
1 Feb 2023
Phil Englert: The Way Forward for Med Device Cybersecurity
Phil Englert is the Director of Medical Device Security at Health ISAC. Phil is an experienced professional well versed in building and sustaining Medical Device Cybersecurity programs in healthcare. He has held key positions at MedSec, Deloitte, and Catholic Health Initiatives. We sat down with him to discuss the challenges, trends, and outlooks in today's medical device cybersecurity world.
playlist_add
17 Jan 2023
Thomas LaRock: SolarWinds' Cybersecurity Strategy
Thomas is the Head Geek at SolarWinds. He has over 20 years of IT experience holding roles such as programmer, developer, analyst, and database administrator. He came to our show to talk about lessons learned from SUNBURST, as well as SolarWinds' initiatives and strategy going forward.
playlist_add
3 Jan 2023
New Year Special: Summarizing 2022 in Product Security
In the 20th episode of Left to Our Own Devices: The Product Security Podcast, hosts David Leichner and Shlomi Ashkenazy summarize the highlights and takeaways from their 19 interviews with product security leaders in 2022
playlist_add
14 Dec 2022
Joe Weiss: The Hard Truth About Industrial Cybersecurity
Joe Weiss is what you would call a trailblazer in the realm of critical infrastructure cybersecurity. During his 40+ years in industrial instrumentation controls and cybersecurity, he has set many of the standards we now aspire to achieve and written multiple books on cybersecurity for power stations, water stations, and data centers. He is the managing partner at Applied Control Solutions consultancy and director of the International Society for Automation.
We sat down with him to discuss the frightening reality of industrial control systems. and the importance of including engineers in industrial product security.
playlist_add
23 Nov 2022
Dale Peterson: ICS Security Has a Way to Go
Dale Peterson is the founder of the S4 conference and creator of many of today’s standard ICS security tools and techniques. We spoke with him about the biggest challenges in industrial control system cybersecurity today and learned from his fascinating personal story.
playlist_add
10 Nov 2022
Mimi Gross: The Cybersecurity Talent Crisis
Mimi Gross - a.k.a the “Cybersecurity Matchmaker” -- is an expert in cybersecurity recruiting, and has helped dozens of companies find the right talents to join their teams. We sat down with her to discuss what manufacturers can learn from start-ups about recruiting top talent.
playlist_add
26 Oct 2022
Rick Driggers: From the U.S. Air Force to Industrial Cybersecurity
Rick Driggers is the critical infrastructure cyber lead at Accenture Federal Services. We chatted with him about his incredible journey from the U.S. Air Force to CISA, and uncovered the biggest challenges facing the industrial cybersecurity world today
playlist_add
12 Oct 2022
Ronen Lago: Shifting Gears in Product Security
Ronen Lago has spent the past 20 years as CTO and Head of Product, in companies such as Daimler, Lockheed Martin, Motorola, and CYE. We sat with him to discuss why device manufacturers need to make drastic changes to their operations and hear his tips and tricks for product security teams.
playlist_add
28 Sept 2022
Dr. Suzanne Schwartz, FDA: What's Next in Medical Device Cybersecurity
Dr. Suzanne Schwartz is the Director of the Office of Strategic Partnerships & Technology Innovation, at the Center for Devices & Radiological Health of the US FDA. She is one of the most prominent policymakers and leaders in medical device cybersecurity, having spent the past 12 years at the FDA advancing medical device cybersecurity for the benefit of the entire world. We sat down with her to discuss where medical device cybersecurity regulations are headed and hear her advice for women wanting to advance their careers in cybersecurity.
playlist_add
13 Sept 2022
Eystein Stenberg: Software Updates for Connected Devices - Everything You Wanted to Know
Eystein Stenberg, Co-founder, and CTO at Northern.tech (developers of Mender), sheds some light on the intricate world of software updates for connected devices and provides his tips and tricks for product security teams.
playlist_add
31 Aug 2022
Anthony Fernando: Surgical Robots, FDA and Cybersecurity
Medical Device leader and innovator Anthony Fernando discusses the future of robotic surgery, regulations, and cybersecurity.
Anthony Fernando is President and CEO of Asensus Surgical, a company that is reimagining how surgeries are being done. Anthony is a veteran of the medical device industry, having held key positions at Stryker, Becton Dickinson & Company, PerkinElmer, and more.
playlist_add
16 Aug 2022
Asaf Atzmon: The Future of Automotive Cybersecurity
Asaf Atzmon, the former VP & General Manager Automotive Cybersecurity at HARMAN International, sat down with us to discuss where automotive product cybersecurity is headed and explains the complexity of open-source security for car manufacturers.
playlist_add
3 Aug 2022
Ken Hoyme: Building a Medical Device Cybersecurity Practice
Product cybersecurity expert Ken Hoyme shared with us how he built the product security practice at Boston Scientific, why he chose this profession, and gives his practical recommendations for product security teams.
Ken is an expert in everything product cybersecurity and has held key positions at Boston Scientific and Honeywell. He is a senior technical leader with demonstrated capabilities to drive broad cross-functional teams to create effective solutions to complex problems, with particular emphasis on safety and security-critical, regulated industries.
playlist_add
20 Jul 2022
Joseph Steinberg: Aliens, AI and Product Security
The "expert witness of cyber", Joseph Steinberg, sat down with us to discuss how AI will change cybersecurity, why the product security world has ways to go, and what aliens have to do with all of that.
Joseph Steinberg is a world-renowned speaker, advisor, and expert witness talking about cybersecurity, AI, and IoT. He was ranked as one of the top cybersecurity influencers in the world, wrote numerous successful books about cybersecurity, and is instrumental in shaping the cybersecurity world as we know it.
playlist_add
6 Jul 2022
Dr. Allan Friedman: All About SBOMs
We sat down with one of the most influential cybersecurity experts in the world, to talk about SBOMs, standards, and everything in between.
Dr. Allan Friedman is a Senior Advisor and Strategist at the U.S Cybersecurity and Infrastructure Security Agency (CISA). He is both a technologist and a policymaker, with more than 15 years of experience in international cybersecurity and technology policy. He is known for his ability to design, convene, and facilitate complex, multi-stakeholder policy processes, which he demonstrated more than once while leading CISA's efforts to coordinate SBOM standards around the world.
playlist_add
21 Jun 2022
Tom Alrich: VEXs and Supply Chain Cybersecurity
Tom Alrich is a well-known independent consultant and blogger about supply chain cybersecurity and software bills of material, for electric power and other industries.
We sat down with him to learn from his vast experience about supply chain security, SBOMs, VEXs, and how they all tie together.
playlist_add
7 Jun 2022
Steve Springett: CycloneDX and the Future of SBOMs
In this fascinating interview, the CycloneDX leader gives his take on the future of CycloneDX and SBOMs, and shares tips on how product security teams should prepare themselves for what's coming
playlist_add
24 May 2022
John Ray: Is Florida the Silicon Valley of Medical Devices?
John Ray is the Executive Director of the FMMC, a Florida statewide association of medical technology firms., which aims to unite, promote and grow the Florida medical device industry, and to enhance the business success of its member companies.
John sat down with us and explained why Florida is one of the greatest hubs for medical device manufacturers and reveals what he learned about medical device cybersecurity after working with dozens of medical technology companies.
playlist_add
3 May 2022
Chris Gates: Protecting Lives with Medical Device Cybersecurity (Part 2 of 2)
Part 2 of 2.
In this thought-provoking interview, one of the world's leading medical device cybersecurity experts shares his hopes and concerns for the medical device industry and reveals the personal reasons behind why he chose this challenging -- and fascinating -- profession.
During the past 40+ years, Chris Gates – Director of Product Security at Velentium, has built a huge legacy as a product security expert for embedded systems, especially medical devices. He has helped dozens of leading medical device manufacturers create their product security practice, and greatly contributed to the working groups designing the security frameworks used by the entire industry, such as SBOMs.
playlist_add
26 Apr 2022
Chris Gates: Protecting Lives with Medical Device Cybersecurity (Part 1 of 2)
Part 1 of 2.
In this thought-provoking interview, one of the world's leading medical device cybersecurity experts shares his hopes and concerns for the medical device industry and reveals the personal reasons behind why he chose this challenging -- and fascinating -- profession.
During the past 40+ years, Chris Gates – Director of Product Security at Velentium, has built a huge legacy as a product security expert for embedded systems, especially medical devices. He has helped dozens of leading medical device manufacturers create their product security practice, and greatly contributed to the working groups designing the security frameworks used by the entire industry, such as SBOMs.
playlist_add
14 Apr 2022
Thomas Wambera: The Automotive Ghost-Writers
Thomas Wambera, Affiliate Business Manager at AVL Deutschland, sheds some light on the upcoming WP. 29 regulations and talks about cybersecurity in an autonomous world.
Thomas is a veteran cybersecurity expert and engineer in the automotive industry, including in areas such as controllers, autonomous cars, and regulation.
playlist_add
6 Apr 2022
Felipe Fernandes: Securing Jaguars
Felipe Fernandes from Jaguar Land Rover (JLR) discusses the toughest challenges and most exciting innovations in today's automotive cybersecurity world and reveals what his favorite JLR car is.
Felipe is a Cyber Security Manager at Jaguar Land Rover. He is an expert in all things automotive cybersecurity, from RF systems to IoT and embedded hardware design. In the past, he was Head of Vehicle Cyber Security LATAM at Fiat Chrysler.
playlist_add
23 Mar 2022
David Colombo: Hacking Teslas
In the first episode of "Left to Our Own Devices", David Colombo (aka the "cyber boy wonder") breaks down how he hacked dozens of Teslas in one day, how he became a world-renowned security researcher at the age of 19, and shares his tips and tricks for product security teams.
David is the founder of Colombo Technologies. He is a very prolific cyber security researcher who, despite his young age, has managed to build quite a name for himself in multiple industries. During the past few years, he's exposed critical vulnerabilities in government offices, banks, and, most recently, Tesla cars.
playlist_add
2 Mar 2022
Introducing Left to Our Own Devices: The Product Security Podcast
Product security and cybersecurity pros around the world are working really hard right now to build their strategy for safeguarding devices and complying with regulations.
We’ve noticed everyone’s running into the same problems, but they take different approaches. Another thing they all have in common is that they wanna learn what the other person is doing.
And then it hit us - why not start a podcast?
Left to Our Own Devices is the name of our new podcast. Dedicated to everything product security, from Medical SBOM, to WP. 29 and the latest industrial security threats.
We’ve invited policymakers, engineers, and industry leaders to hear their war stories and insider tips for surviving the product security jungle.
Product security teams - this podcast is for you. Whether you’re from the Automotive, Medical Device or Industrial equipment industries, you’ve come to the right place.
So buckle up, make yourself a good cup of coffee, and join us for a peek under the hood.
Le…
playlist_add