#blackhat2025 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blackhat2025, aggregated by home.social.
-
New Episode 🥳
BlackHat Europe 2025: New President Suzy Pallett on Community, Collaboration, and What Comes Next
I had the chance to speak with Suzy Pallett as she wrapped up her first #BlackHatEurope as the brand's new President. The event saw attendance grow more than 25 percent over last year.
Her perspective on #cybersecurity stands out. She called it "collaboration unlike any other industry I've ever been close to." In a world where knowledge is usually guarded, here it gets shared freely. Because the threats affect everyone, and defending together just makes sense.
The keynotes this year pushed some uncomfortable questions. Is ransomware actually stoppable? Are our compliance checklists creating vulnerabilities instead of preventing them? These are the conversations that matter—not just what tool to buy, but how we think about the problems in the first place.
And when I asked about her priorities for the year ahead, she kept coming back to the same word: community. Listening. Building a platform that belongs to the people who use it.
Events like this remind us why this industry, for all its stress and complexity, still feels different.
The cat-and-mouse game continues, but at least we're running together.
Links in the comments.
#BlackHatEurope #Cybersecurity #BlackHat2025 #ITSPmagazine #InfoSec #CyberCommunity #ThreatIntelligence #SuzyPallett #SecurityEvents #OnLocation #infosecurity
Sean Martin, CISSP Studio C60 / ITSPmagazine
Episode Links:
Podcast: https://itspmagazine.simplecast.com/episodes/black-hat-europe-2025-wrap-up-suzy-pallett-on-global-expansion-ai-threats-and-defending-together-on-location-coverage-with-sean-martin-marco-ciappelli
YouTube: https://youtu.be/nTZSaurWv_M
On Location Coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage
Article: https://www.itspmagazine.com/cybersecurity-technology-society-events/black-hat-europe-2025 -
🎯 WRAPPING UP: #BlackHat USA 2025 Coverage Nearly Complete!
With nearly all our on-location content from Las Vegas now published, we're excited to share this recap story.Stay tuned for the closing reflections (Newsletter Articles and Audio version) from Marco Ciappelli and Sean Martin, CISSP coming soon!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to catch those final insights when they drop!
This is an event recap from the expo floor with our friends at ThreatLocker 🙏
#ThreatLocker Unveils Configuration Defense & Achieves #FedRAMP Status at #BlackHat2025
#Zerotrust evolved from theory to practical business solution at Black Hat 2025, as Kieran Human from ThreatLocker revealed game-changing announcements that address real-world security challenges.
The standout:
Defense Against Configuration (#DAC)—a monitoring tool that solves a critical zero trust gap. Organizations invest heavily in security but often leave systems vulnerable through poor configuration management. DAC changes this by:
• Continuously monitoring configurations and alerting to potential issues
• Mapping findings to compliance frameworks including Essential 8
• Providing weekly executive reports to ensure oversight
• Preventing the "overly permissive rules" that compromise securityThreatLocker's "denied by default, allowed by exception" approach fundamentally differs from traditional EDR solutions. With 10,000+ built-in application profiles and learning mode capabilities, deployment no longer means business disruption.
Major milestone:
FedRAMP certification opens government sector opportunities, answering strong customer demand from highly regulated environments that previously couldn't adopt their zero trust capabilities.Real impact:
One customer reported preventing THREE breaches after implementing ThreatLocker's solution—proving that properly implemented zero trust delivers measurable security improvements.The key insight? Security must enable business, not hinder it. ThreatLocker's least privilege implementation focuses on meeting business requirements with minimal necessary permissions—protecting assets without hampering productivity.
📺 Watch the video: https://youtu.be/AN5k5-aBwWc
➤ Learn more about ThreatLocker: https://itspm.ag/threatlocker-r974
✦ Catch more stories from ThreatLocker: https://www.itspmagazine.com/directory/threatlocker
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #BlackHatUSA #BHUSA25 #Compliance #SecurityAutomation #GovTech
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
#Cybersecurity Hiring Is Not Broken—Your Job Descriptions Are
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're thrilled to share this transformative Brand Story conversation thanks to our friends at CyberSN 🙏
Cybersecurity Hiring Is Not Broken—Your Job Descriptions Are
The cybersecurity #talentgap isn't just about finding people—it's about understanding who you have and what you actually need.
At #BlackHat2025, Deidre Diamond (CEO of #CyberSN) and Carraig Stanwyck (CEO of 3 Tree Tech) reveal why outdated job descriptions and static spreadsheets are sabotaging your security team's success.
The hidden problems killing your team effectiveness:
• Leaders manage complex teams with tools that can't capture real-time role changes or skill utilization
• Employees burn out doing work outside their job descriptions
• Strategic plans and budgets are built on incomplete or inaccurate information • Generic job postings create the "square peg, round hole" hiring problem
• Retention suffers when skills and roles don't alignCyberSN's workforce risk management platform changes the game by providing:
• Dynamic capability mapping—see how each capability is staffed and identify gaps
• Role realignment insights to match employees with work that fits their strengths
• Accurate job descriptions based on actual needs, not outdated templates
• Employee engagement data for better career planning and retention
• Data-backed insights that strengthen budget requestsThe #business impact?
Improved retention, stronger budgets, reduced burnout, and teams that can proactively adapt to changing priorities. When you truly understand your #workforce, you can transform cybersecurity from a reactive function into a strategic force.📺 Watch the video: https://youtu.be/TIIwtawhGFE
➤ Learn more about CyberSN: https://itspm.ag/cybersn-476941
✦ Catch more stories from CyberSN: https://www.itspmagazine.com/directory/cybersn
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #TalentManagement #WorkforceRisk #CyberHiring #BlackHatUSA #BHUSA25 #SecurityTeams #CyberCareers #TeamBuilding
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
"Data Kidnapping: Because File Encryption Is So 2020" 🫢
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're excited to share this eye-opening Brand Story conversation thanks to our friends at Zscaler 🙏
#Ransomware has evolved. Attackers no longer need to encrypt your data—they're stealing it and threatening public exposure unless you pay.
At #BlackHat2025, Brett Stone-Gross from #Zscaler reveals how this shift changes everything about defense strategies.
The new reality organizations face:
• Stolen data moves slowly enough to avoid alerts—or quickly enough to overwhelm teams
• File transfer tools and other apps left exposed to the internet create easy entry points
• Advanced groups target single victims for multimillion-dollar payouts based on stolen data value
• The U.S. accounts for ~50% of ransomware incidents, making American companies prime targets
• Legacy systems in #healthcare, #manufacturing, and oil & gas amplify risksZscaler's #zerotrust approach tackles these challenges by:
• Eliminating internet-facing vulnerabilities—hiding applications from public view
• Advanced #threatprevention that blocks exploits before escalation
• Segmentation that prevents lateral movement from compromised accounts
• #DLP that detects and stops unauthorized data transfers
• Continuous monitoring that catches privilege escalation attemptsThe business impact?
Reduced attack surface, faster threat containment, lower risk of repeated incidents, and better security #ROI.When attackers can't see your applications, they can't exploit them.
➤ Learn more about Zscaler: https://itspm.ag/zscaler-327152
✦ Catch more stories from Zscaler: https://www.itspmagazine.com/directory/zscaler
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #Ransomware #ZeroTrust #DataProtection #BlackHatUSA #BHUSA25 #ThreatIntelligence #DLP #CloudSecurity #DataKidnapping #infosec #infosecurity
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
How to Automate #Cybersecurity Operations Without Coding, Crying, or Calling IT at 2 A.M.
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're delighted to share this game-changing Brand Story conversation thanks to our friends at BlinkOps 🙏
Traditional #SOAR platforms promise automation but deliver complexity—requiring extensive scripting, specialized skills, and weeks to implement new workflows. At #BlackHat2025, Mike Wayne from #BlinkOps reveals a better way.
The breakthrough: Micro agents instead of monolithic #AI. BlinkOps enables you to build small, focused #AI entities designed for specific tasks—minimizing hallucination risks while maximizing control and precision.
What makes this different:
• Describe automation goals in plain language—the system generates working automations
• Low-code/no-code accessibility lets citizen developers across HR, finance, and security build automations
• Smaller context windows = fewer AI mistakes and more predictable outcomes • Deploy as #SaaS, hybrid, or in #FedRAMP #GovCloud environments
Real-world results that matter:
• One customer saved $1.8M in 30 days automating endpoint deployments
• A triage agent processed 400 SOC alerts in 8 days with zero human intervention
• Reduced MTTR through agent-embedded workflows
• Automation extends beyond security into HR, finance, and operationsThe message is clear: Instead of replacing humans, these micro agents work alongside them—taking on repetitive tasks so your team can focus on strategic initiatives. Just blink it!
📺 Watch the video: https://youtu.be/eohOpveUkCQ
➤ Learn more about BlinkOps: https://itspm.ag/blinkops-942780
✦ Catch more stories from BlinkOps: https://www.itspmagazine.com/directory/blinkops
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #SecurityAutomation #SOAR #AI #NoCode #BlackHatUSA #BHUSA25 #SOC #AutomationPlatform #MicroAgents
-
🎯 NOW PUBLISHING: On-Location Coverage from #BlackHat USA 2025!
We're back in the office and excited to start sharing all the conversations we captured on location in Las Vegas with our amazing sponsors and editorial coverage!
🔔 Follow ITSPmagazine, Sean Martin, CISSP, and Marco Ciappelli to get this content fresh as it drops!
We're thrilled to share this critical Brand Story conversation thanks to our friends at ReversingLabs 🙏
Your Business Apps Are Bringing Friends You Didn't Invite
Every commercial software application is a complex assembly of first-party, contracted, open source, and third-party code. But when #SolarWinds, #Kaseya, and #Ivanti happened, we learned that vendor questionnaires and contractual assurances offer little protection against supply chain compromises.
At #BlackHat2025, Saša Zdjelar, Chief Trust Officer at ReversingLabs, reveals how organizations can finally verify the integrity of #software from outside vendors—without relying on blind trust.
The game-changer: Comprehensive binary analysis that deconstructs any file into its components to:
• Detect malware, tampering, and embedded secrets
• Identify #vulnerabilities and insecure practices
• Uncover undocumented network connections
• Flag #compliance risks from restricted regions
This isn't just another policy checkbox—it's a true technical control that inspects the software itself, regardless of size or complexity.
Real-world applications:
• Procurement: Auto-scan all software before deployment
• Version Monitoring: Detect unexpected behavior changes between releases
• Critical Environments: Verify integrity before software enters OT, ICS, or financial systems
• Risk Management: Assess COTS software as part of ongoing vendor reviews
With regulations like EO 14028 and the EU's #CyberResilience Act demanding transparency, the ability to technically validate every application delivers both strategic protection and measurable benefits.
📺 Watch the video: https://youtu.be/pU9bHYFND7c
➤ Learn more about ReversingLabs: https://itspm.ag/reversinglabs-v57b
✦ Catch more stories from #ReversingLabs: https://www.itspmagazine.com/directory/reversinglabs
🎪 Follow all of our #BHUSA 2025 coverage: https://www.itspmagazine.com/bhusa25
#Cybersecurity #SupplyChainSecurity #SoftwareIntegrity #BlackHatUSA #BHUSA25 #ThirdPartyRisk #SBOM #BinaryAnalysis #Compliance #ZeroTrust
-
A couple more news from #InfosecurityEurope25
Post Event Recordings On ITSPmagazine🎙️ These Aren’t Soft Skills — They’re Human Skills
A post–Infosecurity Europe 2025 conversation with Rob Black and Anthony D'AltonYes, Infosecurity Europe 2025 is behind us, but the most important conversations are still unfolding — like this one.
I (Marco Ciappelli) reconnected with Rob Black (yeah, I kicked Sean Martin, CISSP out again… temporarily 😄) and welcomed Anthony D’Alton to dive into something we all know is important but rarely define properly: so-called soft skills — or as we prefer to call them… human skills.
From communication and trust to team resilience and real-world training, this conversation is a practical look at what truly makes cybersecurity teams work — and why these “intangibles” aren’t soft at all.
🎥 Watch the conversation:
👉 https://youtu.be/iczQBFabLno🎧 Prefer audio? Listen to the podcast:
👉 https://eventcoveragepodcast.com/episodes/these-arent-soft-skills-theyre-human-skills-a-postinfosecurity-europe-2025-conversation-with-rob-black-and-anthony-dalton📚 See all the Infosecurity Europe 2025 coverage:
👉 https://www.itspmagazine.com/infosec25✅ Next stop: Black Hat USA 2025 – Las Vegas
If your company would like to join us for an On Location Brand Story or Editorial Conversation at Black Hat USA — now is the time to book:👉 Full Sponsorship
🔗 Book here: https://www.itspmagazine.com/event-coverage-sponsorship-and-briefings👉 On Location Briefing
🔗 Book here: https://www.itspmagazine.com/event-coverage-briefings#Cybersecurity #InfosecurityEurope2025 #HumanSkills #SoftSkills #CyberResilience #SecurityLeadership #StorytellingInCyber #ITSPmagazine #MarcoCiappelli #RobBlack #AnthonyDalton #OnLocation #IncidentResponse #CommunicationSkills #Teamwork #BlackHat2025 #Sponsorship #MediaPartnerships #blackhat