Skip to content

CYBR.SEC.CAST Episode 66: Wendy Nather

In CYBR.SEC.CAST Episode 66, Wendy Nather explains why cybersecurity’s biggest lessons aren’t coming from breaches, but from the near-misses no one talks about.

Cybersecurity has built its learning model around breaches, but as Wendy Nather explains, the real value lies in the incidents that almost happened. In this CYBR.SEC.CAST episode with hosts Michael Farnum and Sam Van Ryder, she makes the case for shifting focus to near-misses: the attacks stopped by a single decision, control, or moment of awareness. These unseen saves reveal how defenses actually work in real time, yet they rarely get shared due to trust, legal, and cultural barriers. Until the industry starts capturing and learning from these quieter wins, it will continue optimizing for failure instead of understanding success.

SHOW NOTES:

Things Mentioned:

EPISODE 66 Timestamps:

  • 00:00 – 01:30 – Intro, guest setup, and Wendy Nather background
  • 01:30 – 07:00 – CyberSecCon announcements and community initiatives
  • 07:00 – 09:30 – Wendy’s early career: liberal arts → sysadmin → Switzerland
  • 09:30 – 12:30 – Transition into cybersecurity and global security leadership
  • 12:30 – 15:30 – Analyst career, Duo Security, Cisco, and 1Password
  • 15:30 – 18:30 – Career philosophy: ditching the ladder, focusing on impact
  • 18:30 – 22:00 – Current role: advising, speaking, training, and strategy work
  • 22:00 – 25:30 – RSA talk intro: “Less Blood, More Bits” concept
  • 25:30 – 31:00 – The power of near-miss stories and why they matter
  • 31:00 – 36:00 – Real-world near-miss examples and lessons learned
  • 36:00 – 41:00 – Threat intelligence sharing challenges and trust barriers
  • 41:00 – 45:00 – ISACs vs. informal “steak and ale” intelligence sharing
  • 45:00 – 49:00 – Why scaling trust and sharing remains unsolved
  • 49:00 – End – Wrap-up and closing thoughts

Do you have a question for the hosts? Reach out to us at media@cscgroupllc.com 

Keep up with CYBR.SEC.CON.:

Keep up with CYBR.SEC.Media:

Check out our Conferences and Events:

Support or apply to our Scholarship Program:

Subscribe to the podcast: 

In this episode:

Latest

M&A Cybersecurity: Searching For Lego In The Dark

M&A Cybersecurity: Searching For Lego In The Dark

Cybersecurity is not something that is necessarily intuitive for the vast majority of people. That’s where the problems creep into scope. Much like walking in the dark towards the kitchen, there is the ever-present danger of a piece of Lego lurking in the carpet.