Cybersecurity without the panic theater.
Real CyberSecurity treats cybersecurity as everyday operational work, not abstract panic. Greg Young and Bill Malik range from breach disclosure and election systems to spam, Splunk, third-party risk, and security myths.
PRESS PLAY
Real CyberSecurity presents cybersecurity as a set of working problems rather than a theater of constant alarm. Greg Young and Bill Malik talk through the business, process, and technical sides of security with a tone that is relaxed but rarely vague. The show is strongest when it connects the incident of the week to an older pattern. A breach becomes a discussion about help desks, privileged access, social engineering, and organizational readiness. Election security leads toward registration processes, poll books, disinformation, physical safeguards, and the unglamorous work of securing people and materials. Risk conversations stay grounded in what can be defended, measured, or usefully assessed. That makes episodes on GRC and third-party risk feel less like checklist talk and more like a debate over how decisions are actually made. The catalog also returns to security myths, misconceptions, startup funding challenges, spam, open source trust, vendor strategy, AI, and the recurring gap between tool promises and operational reality. It is conversational. It is also pointed. The speakers are comfortable joking about Skynet, old conference tools, Faraday cages, and the history of spam, then moving directly into why a control, process, or claim may fail in practice. The result is not a headline recap. It is a seasoned read on how cybersecurity lands inside institutions with budgets, cultures, incentives, and legacy systems. Guests such as Jeff Wheatman and Professor Eugene Spafford bring focused discussions of risk, GRC, and security misconceptions into that same practical lane. The show suits listeners who want experienced cybersecurity analysis without motivational gloss or panic framing. Its edge comes from plain judgment: less fear, more scrutiny, and a bias toward what organizations can actually do next.
Made for: Suits a listener who wants cybersecurity discussed through operations, governance, risk, and real organizational behavior. It also fits people who prefer experienced, conversational analysis over hype cycles.
What sets it apart: Real CyberSecurity stands apart by tying current security topics to older lessons, workplace realities, and practical constraints. The show can talk about breach headlines, election systems, and risk models without losing the human side of why security succeeds or fails.
The Real Cybersecurity Podcast decrypts the issues and business of technology security. But instead of just scaring you, these industry veterans provide real advice and analysis for organizations trying to make security real today. Hosted by Greg Young and Bill Malik.
Two open doors undo a Faraday cage; you know this is your kind of security story.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical election-security discussion that keeps poll books, workers, devices, and deepfake hype in the same frame.
Election security gets a grounded, useful treatment as Greg Young and Bill Malik move from registration-process security and the choice between offline and online electronic poll books into the less glamorous work of poll workers, devices, documents, and tamper-proof seals.
A help-desk reset, Cisco's Splunk deal, and a Donald Duck joke sharpen a practical look at cybersecurity pressure points.
Real Cybersecurity frames a messy cybersecurity news week around a blunt theme: big security failures often begin with ordinary process breakdowns.
A grounded look at where risk math gets shaky and how teams can choose what deserves attention first.
Real Cybersecurity uses third-party risk and GRC to ask how precise cybersecurity decisions can really be. Greg Young and Bill Malek's conversation with Jeffrey Wietman, whose role at BlackKite anchors the subject, ranges from the still-distant idea of a digital twin for a whole…
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
Greg Young and Bill Malek open Real CyberSecurity with a White House Faraday-cage story, then jump to 23andMe's breach estimate rising to 6 million and the SEC 8-K that disclosed it.
Greg Young and Bill Malik focus on the Canadian Centre for Cyber Security’s unclassified guidance on electronic poll book systems, including ITSM 10.101 and the choice between offline and online models.
Greg Young and Bill Malick open Real Cybersecurity episode 69 with Microsoft's 30 terabytes of user data lost, MGM's hack, Google Authenticator's social-engineering weakness, and Cisco's largest acquisition to date.
Real CyberSecurity hosts Greg Young and Bill Malek interview Jeffrey Wietman of BlackKite about third-party risk, GRC, supply-chain resilience, and cyber-risk quantification.
A poorly written patch can become the best denial-of-service attack no attacker ever wrote.
Interview with Professor Eugene Spafford about his book on cybersecurity myths and misconceptions.
Hosts discuss the origin of the term 'spam' and its relevance to cybersecurity, blending humor with industry insight.