Between the Two Tylers – ESW #225
This week, Rickard Carlsson, CEO at Detectify, joins us to talk about collaboration as the modern approach application security.
In the Enterprise News for this week: HackerOne Enhances Security Testing Platform, Palo Alto Networks Expands Unit 42 Cybersecurity Consulting Group, Thoma Bravo to take cyber security firm Proofpoint private, BlackRock, Tudor Group Back Cybersecurity Startup Deep Instinct, and more!
Authentication and authorization might sound similar, but they are two distinct security processes. Joe Carson, Chief Security Scientist at Thycotic, joins us to discuss why privileges, not identities, are one of the biggest challenges for identity and access. Joe will share Thycotic's simple approach to solving privileged access.
Segment Resources:
Visit https://securityweekly.com/detectify to learn more about them!
Visit https://securityweekly.com/thycotic to learn more about them!
Visit https://www.securityweekly.com/esw for all the latest episodes!
Follow us on Twitter: https://www.twitter.com/securityweekly
Like us on Facebook: https://www.facebook.com/secweekly
Full Audio
Segments
1. Collaboration Rules! Challenging Transparency in Modern App Sec – Rickard Carlsson – ESW #225
Rickard Carlsson, CEO at Detectify, joins us to talk about collaboration as the modern approach application security. During the discussion, we'll cover:
- why organizations should challenge transparency and open up their security practices and information internally,
- how to approach security as a collaborative effort (with some real-life examples),
- and Detectify’s vision of building a hub where security information and research is shared across the globe.
Segment Resources:
We recently published the ebook “A guide to modern web application security” for SaaS and tech organizations looking to bring their security up to speed with development. Download it here: https://blog.detectify.com/2021/04/09/modern-application-security-requires-speed-scale-and-collaboration/
This segment is sponsored by Detectify.
Visit https://securityweekly.com/detectify to learn more about them!
Announcements
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Guest

Entrepreneurial tech nerd Rickard Carlsson has grown Detectify from a group of ethical hackers with an idea on how to make the internet safer, to an international industry challenger of 140+ people. Rickard has a background in tech and management consulting, and has lived and worked in Sweden, India and the US.
Hosts


2. HackerOne Enhances Platform, PANW Expands Unit 42, & More Funding – ESW #225
In the Enterprise News for this week: HackerOne Enhances Security Testing Platform, Palo Alto Networks Expands Unit 42 Cybersecurity Consulting Group, Thoma Bravo to take cyber security firm Proofpoint private, BlackRock, Tudor Group Back Cybersecurity Startup Deep Instinct, and more!
Announcements
Security Weekly listeners save $100 on their RSA Conference 2021 All Access Pass! RSA Conference will be a fully virtual experience from May 17th-20th, 2021. Security Weekly will be live streaming Monday-Thursday in the virtual broadcast alley, interviewing some of the top sponsors and speakers for the event. To register using our discount code, please visit https://securityweekly.com/rsac2021 [securityweekly.com] and use the code 5U1CYBER! We hope to "see" you there!
Hosts

- 1. Pivot3 Simplifies and Unifies Management of Physical Security Infrastructure with New Surety Software
- 2. Safe-T Group’s ZoneZero cybersecurity solution approved for federal government purchase by US GSA
- 3. HackerOne Enhances Security Testing Platform
- 4. Atos unveils global R&D Lab to drive innovation in Cybersecurity, High Performance Computing and Quantum
- 5. Palo Alto Networks Expands Unit 42 Cybersecurity Consulting Group – MSSP Alert
- 6. Thoma Bravo to take cyber security firm Proofpoint private
- 7. Coalfire Acquires Neuralys Pen Testing Platform
- 8. Cybersecurity unicorn Illumio in talks to raise funds from Thoma Bravo at $2.9B valuation – Silicon Valley Business Journal
- 9. BlackRock, Tudor Group Back Cybersecurity Startup Deep Instinct
- 10. AppOmni Closes $40 Million Funding Round Led by Scale Venture Partners
- 11. Israeli Cybersecurity Startup Perception Point Raises $28M
- 12. AirEye Raises $8M Series A to Extend Network Security into the Unprotected Digital Airspace
- 13. CyberHat Secures $15 Million to Expand its CYREBRO Enterprise-Level Cybersecurity Protection to Small and Medium Sized Businesses – Security Boulevard
- 14. Cigent Announces $7.6M Series A Funding Round; In-Q-Tel, CyberJunction, WestWave Capital Participate
- 15. AccuKnox Secures $4.6M in Seed Funding to Meet Growing Demand for Zero-Trust Kubernetes Security Solutions
- 16. Darktrace slashes valuation price estimate ahead of IPO: report
- 17. KnowBe4 Exceeds Share Price Expectation With IPO


3. Authentication vs. Authorization: Why Privileged Access Matters – Joseph Carson – ESW #225
Authentication and authorization might sound similar, but they are two distinct security processes. Joe Carson, Chief Security Scientist at Thycotic, joins us to discuss why privileges, not identities, are one of the biggest challenges for identity and access. Joe will share Thycotic's simple approach to solving privileged access.
This segment is sponsored by Thycotic.
Visit https://securityweekly.com/thycotic to learn more about them!
Announcements
Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!
Guest

Joseph Carson is a cybersecurity professional with 25+ years’ experience in enterprise security, an InfoSec Award winner, author of Privileged Access Management for Dummies and Cybersecurity for Dummies. He is a CISSP and an active member of the cyber-community, speaking at conferences globally. He’s an advisor to several governments, as well as critical infrastructure, financial and maritime industries. Joseph is a host in the award-winning podcast 401 Access Denied where he interviews cybersecurity thought leaders on educational topics.
Hosts
