Phishing-Resistant by Default: What Microsoft’s Passkey Shift Means for You with Nathan McNulty (Patriot Consulting) and Eric Woodruff (Semperis)

Recorded live at Black Hat 2026, this episode features Sarah Gosler, Managing Director and Head of Cyber Resiliency and Human Defense at Wells Fargo. Sarah and Sean discuss why humans are the largest attack surface rather than the weakest link, how AI has industrialized social engineering, and why simple human-centric tools like safe words are becoming critical defenses against deepfakes.

This episode features Wylie Shanks, a cybersecurity consultant who currently leads an OT cybersecurity program for a large North American energy company’s business unit. With over 25 years of experience working with critical infrastructure organizations, he designs, defends, and recovers environments spanning enterprise IT to industrial control systems. His expertise spans security architecture, incident response, privileged access management, and cyber risk management—translating complex challenges into practical, auditable solutions. Wylie holds numerous certifications, including GIAC Security Expert (GSE), ISSAP, GIAC Response and Industrial Defense (GRID), and GIAC Cyber Incident Leader (GCIL).

This episode features Marc Jason Grens, President of Chaintrax, a compliance and blockchain forensics firm that has advised on ransomware incidents since 2017. In this episode, Marc explains why ransomware victims decide to pay, why that payment can violate US sanctions law if it isn't vetted first, and why tracking the money afterward is how law enforcement works to recover it.

This episode features Chris Steinke, Director of Product Strategy at Semperis, a technology executive with more than 20 years of experience across cybersecurity, digital identity, and infrastructure. In this episode, Chris explains why moving identity to the cloud creates a single point of failure, why backup and recovery alone aren't enough, and why the next frontier is making trust portable, so applications aren't locked to a single identity provider.

This episode features Phil Keibler, Vice President and CISO at Meijer, who has held CISO roles at Bass Pro Shops and Finish Line across nearly three decades in security leadership. Phil shares why CISOs who struggle to get budget usually have a storytelling problem, how he defines success in a role where stopping every attack is impossible, and why fundamentals matter more than chasing new tools.

In this episode, they walk through what the shared responsibility model actually means for Entra tenant data, how token-based attacks sidestep phishing-resistant authentication, and what happens when a threat actor hard-deletes objects and locks you out.

This episode features Jim Bowie, VP and CISO at Tampa General Hospital, joined by co-host Courtney Guss, Director of Crisis Management at Semperis. He discusses why healthcare is uniquely exposed during cyber incidents, why recovery is where most organizations are losing time, and how disciplined rehearsal is the highest-leverage move available to resource-constrained security teams.

This episode features Geoffrey Mattson, CEO of SecureAuth, joined by co-host Sarah Cecchetti, Director of Product Management at Semperis. He discusses why agentic …

In this episode, Mark explains how Gartner's research model works and what his team is prioritizing across identity verification, authorization, ITDR, and decentralized identity. He also breaks down what AI means for identity right now and why securing AI agents is harder than most teams realize.

In this episode, Angie dives into the organizational and cultural work that most identity programs skip. She shares why identity deserves its own program, how to apply OCM to bring resistant stakeholders on board, and why governance must come first. Angie's core argument is that if identity security creates too much friction, people will route around it, and that's where the real risk lives.