“Shift Left”: A case for threat-informed pentesting. [CyberWire-X]
Penetration testing is a vital part of a robust security program, but the traditional pentesting model is in a rut. Assessments happen infrequently, the scope is often very broad, and the report is usually overwhelming. What if you could increase the overall ROI of your pentesting program and avoid these limitations? Every penetration test should have specific goals. Coverage of the MITRE ATT&CK framework or the OWASP Top Ten is a great start, but a pentest could provide exponential value by applying a more strategic approach.
In this episode of CyberWire-X, the CyberWire’s Rick Howard and Dave Bittner discuss what it means to "shift left" with your penetration testing by working on a threat-informed test plan with guests and Hash Table members Bob Turner, the Field CSO of Fortinet, Etay Maor, the Senior Director for Security Strategy at Cato Networks, and Dan DeCloss, the Founder and CEO of our episode sponsor PlexTrac.
Available Results
Generated results are saved to your library for reuse and search.
Choose Template
Pick the result you want. You can review provider and model before generating.
A concise first-pass summary for understanding the episode quickly.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Repeatable methods, frameworks, mental models, processes, and systems.
A dedicated inventory of concrete resources named in the episode.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Explicit actions, next steps, habits, recommendations, and things to avoid.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.
A concise first-pass summary for understanding the episode quickly.
A detailed readable summary organized by chapter or topic.
A navigable map of subjects, topic flow, and suggested chapters.
A comprehensive, source-grounded extraction of the reusable knowledge in an episode.
Reusable atomic knowledge units extracted from the episode.
A comprehensive extraction focused on health practices, protocols, claims, and safety caveats.
A comprehensive extraction focused on opportunities, strategy, markets, and company building.
Scientific findings, mechanisms, studies, hypotheses, and the limits of the evidence discussed.
Technologies, AI models, technical methods, capabilities, limitations, and adoption implications.
Investment theses, assets, catalysts, valuation reasoning, time horizons, and risks.
Chronologies, actors, causes, consequences, turning points, and competing historical interpretations.
Policies, proposals, stakeholders, arguments, implementation constraints, and predicted effects.
Career paths, skills, hiring signals, workplace decisions, transitions, and limitations of the advice.
Behavioral mechanisms, biases, motivation, habits, emotions, interventions, and evidence limitations.
Economic mechanisms, incentives, indicators, market structure, forecasts, and uncertainty.
Leadership principles, team systems, organizational design, culture, feedback, and failure modes.
Audience, positioning, messaging, acquisition, retention, experiments, metrics, and failed approaches.
Teaching methods, learning strategies, practice, feedback, assessment, and effectiveness evidence.
Theses, premises, arguments, objections, values, thought experiments, and unresolved questions.
Communication patterns, conflict, boundaries, expectations, repair methods, and contextual limitations.
Books, papers, authors, courses, and other learning resources mentioned in the episode.
Repeatable methods, frameworks, mental models, processes, and systems.
Explicit actions, next steps, habits, recommendations, and things to avoid.
Memorable statements and important claims with attribution and source context.
A dedicated inventory of concrete resources named in the episode.
A dedicated analysis of warnings, limitations, trade-offs, weak evidence, and uncertainty.