Brian Reed has been a CMO six times. He's also watched AI flatten marketing for the past two years and has said so out loud, including in a manifesto he published called AI is Flattening Marketing: Cue the Return of Mad Men. On this CyberCMO Confidential episode, Brian, Gianna, and Charles Gold get into why storytelling and community are the two things AI cannot commoditize. Brian also talks about how he built a “crusty OT guy” persona to validate messaging authenticity, and what community-driven marketing looks like when your buyers wear steel-toe boots and aren’t online very often.

Gemma Goldstein had a quiet Thursday in the office, a domain someone spotted for sale, and an idea. A few short weeks later, Check Point's Exposure Management team had a browser-based arcade game live at exposuremanagement.ai with 11,000 players and a leaderboard. The game launched as part of a broader campaign, and MQLs went up 100% that month. Gemma is careful not to credit the game alone. She and Gianna cover how the campaign came together across multiple channels, what she would do differently now, and how vibe coding an ROI calculator in an hour replaced a project quoted as taking weeks. About Gemma: Gemma Goldstein is Head of Growth for Exposure Management at Check Point, a role she carried over from Cyberint after they were acquired in 2024. Before Cyberint, she spent three years at Envy, a B2B digital marketing agency focused on cybersecurity. Her background spans SEO, paid media, content, and creative strategy.

Andy Ellis has a roundup of the security vendors at Black Hat this year.

Key Takeaways: We have entered into an AI world. While nearly half of booths didn’t directly mention AI or agents in their taglines, the effects of AI are everywhere. Multiple spaces (Identity, SaaS, AppSec, Data) have almost every vendor leading with AI; existing unsolved problem areas just got worse.

At the same time, there’s a clear trichotomy in the market: tools that tell you how bad things are; tools that stop adversaries, and tools that prevent problems from occurring. While you’d suspect that the tools that fix things would dominate, the tools that merely tell you how bad things are seem to be frustratingly plentiful.

Patrick Gorman started making YouTube videos during COVID to study for a certification with friends. He now has over 100,000 subscribers and runs a pentesting firm called ISP Security. This is a replay of our Behind the Cyber Creator AMA series. Patrick and Gianna talk about how he built his audience, why having followers doesn’t automatically mean having clients, and what he learned the hard way about being a public figure in cybersecurity.

Kelly O'Dwyer Manuel has been building analyst relations (AR) programs for a long time, and her first question is always the same when starting from scratch: what are you actually trying to accomplish? She joins Gianna and Andy T to talk through what AR looks like for a small team with a small budget, why most companies pay for analyst relationships before they are ready, and what a first year program should realistically look like.

A fake recruitment phishing campaign impersonates major brands and uses trusted HR platforms to steal Google account credentials.

The post Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials appeared first on TechRepublic.

The pitch for "Active Listening," an AI-powered advertising service that listened to consumers' real-world conversations through their smartphones and smart speakers and delivered targeted ads to those people within precise geographic areas, with consumers consent, was extremely compelling, but until it wasn't really what it claimed.

The Federal Trade Commission will require Cox Media Group and two smaller marketing firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers' smart devices and that consumers had opted into such targeting.

"Not only did the product these companies marketed not do what they claimed it did, but they also misled potential customers by claiming consumers had opted into this service when it's clear they did not," said Christopher Mufarrige, Director of the FTC's Bureau of Consumer Protection.

Every material element of that pitch was false.

Also read: FTC Probes AI Chatbots Designed as “Companions” for Children’s Safety

Was 'Active Listening' Actually Being Sold

The case centers on a marketing product introduced in 2023 that CMG sold to local businesses. Through presentations, website materials and sales pitches, the company promoted "Active Listening" as a way for advertisers to identify potential customers at the precise moment they were discussing products or services around smart devices.

According to the complaints, this service did not, in fact, listen in on consumers' conversations or use voice data at all and neither did the service accurately place ads in customers' desired locations. Instead, the service the companies provided consisted of reselling — at a significant markup — email lists obtained from other data brokers.

FTC investigators say the service was pitched as a breakthrough tool powered by "voice data" and AI. According to the government, CMG told clients its technology partner could aggregate and analyze voice data from smartphones, tablets and other devices to determine when consumers were in the market for particular products. When prospective clients pressed sales representatives on how exactly the technology worked, FTC filings say sales presentations became increasingly specific when potential customers questioned how the technology worked.

The Consent Fabrication

The fraudulent capability claim was compounded by a fraudulent consent claim. The companies told prospective clients that consumers had "opted in" to the Active Listening service. In fact, no consent was ever sought or obtained. The companies characterized routine click-through acceptance of app terms of service as affirmative opt-in consent to the collection of voice data — a characterization the FTC flatly rejected.

This consent fabrication mattered legally in both directions. It deceived the businesses buying the service into believing they were running a legally compliant targeted advertising campaign. And it obscured from consumers that their conversations were purportedly being harvested and monetized — which those consumers had never agreed to.

Also read: FTC Sues Adobe for ‘Trapping’ Users in Deceptive Subscription Practices

The FTC's Bluntest Finding

The most pointed element of the FTC's action is not the settlement amount. It is the Commission's explicit statement that the illegality ran deeper than the fraud itself.

The Commission noted that, had the service actually functioned as advertised, collecting voice data from consumers' homes without genuine consent would itself have violated Section 5 of the FTC Act. In other words, CMG and its partners were not just selling a fake product. They were selling a fake version of something that would have been illegal to sell as real.

Who Pays and Who Supplied the Deception

Under the proposed consent orders, CMG must pay $880,000, while MindSift and 1010 Digital Works will each pay $25,000. The funds will be used to provide redress to CMG customers harmed by the practices. MindSift and 1010 Digital Works also face a second count for providing CMG with the "means and instrumentalities" to deceive customers through misleading marketing materials and sales presentations.

The Active Listening enforcement action arrives at a moment when AI capability claims are proliferating faster than any regulator can evaluate them. Aattaching the phrase "AI-powered" to a product does not immunize that product from consumer protection law, and fabricating both technical capability and consumer consent simultaneously creates compounding liability — not just for the company selling the product but for the partners who built the sales materials that made the deception work.

AI models weight trust signals differently in cybersecurity. A comprehensive framework for building entity authority as a security vendor, covering third-party corroboration, author entities, community presence, research credibility, & authority flywheel that compounds citation share.

The post Building Entity Authority in Cybersecurity: The Trust Signals AI Models Actually Weight for Security Vendors appeared first on Security Boulevard.

💾

What started as two marketers looking for support has grown into a 4,000-member community and CyberMarketingCon, the go-to conference for anyone driving go-to-market in security. In this replay from Chris Hughes’ Resilient Cyber show, Gianna and Maria share what makes the Society different, why the event feels more like a reunion than a conference, and what’s waiting in Austin this December (or online if that’s easier): hands-on workshops, founder + investor sessions, and this year’s theme — the Marketing Time Machine.

RSAC has officially expanded its research team with 11 new hires, plus another major research release is dropping this October. Guests Ben Waring and Jessica Porter join us to break down what the expansion means for the industry and how RSAC is stepping into year-round thought leadership. They also take us inside the new RSAC digital community, where AI-powered tools, curated news briefs, and private peer groups keep cybersecurity pros connected long after the conference floor closes. On the startup side, it’s the 20th anniversary of Innovation Sandbox with submissions up nearly 40% and a new $5M investment fueling each finalist’s growth. Plus, for anyone eyeing the RSAC 2026 stage, Ben and Jessica share what makes a Call for Speakers submission stand out and what gets it cut. Listen to this episode before your next submission, pitch, or conference plan; you’ll thank yourself later.

Joseph Barringhaus didn’t set out to become a part-time app builder. He was tired of doing budgets in Google Sheets and decided to see if one of those new AI coding tools could do it better. It turned out it could, and that one experiment snowballed into a whole new way of working he calls vibe coding. In this conversation, Joseph and Gianna get into what vibe coding looks like in practice: quick tools that make a sales call easier, event games that buyers actually remember, and rough-and-ready prototypes that speed up work with designers. They also talk honestly about the risks (where AI still breaks), the temptation to chase too many shiny tools, and why Joseph swears by his “three bets” rule to keep marketing focused. 👉 Tune in to the full episode to hear Joseph’s stories firsthand from the budgeting app that started it all to the bold bets shaping how he runs marketing today.

Step inside the Torq Universe, a marketing world where the Big Hat isn’t just swag, it’s a storyline; the Sock Goblin explains why your SOC is drowning in false positives; and a falcon named Robert Girdle might swoop into the next conference booth. In this episode, Gianna teams up with Tessa The (Senior Field Marketing Manager at Torq) and Brittney Wittfeldt-Zec (Senior Social Media Manager at Torq) to unpack how Torq turned characters and inside jokes into a real growth engine: from 4K to 29K+ LinkedIn followers, cybersecurity pros cosplaying their merch, and a community that actually asks for more lore. Why does it matter? This isn’t marketing theater; it’s proof that buyers connect faster and deeper when your brand lives in a world they want to join. 👉 Tune in to hear how Torq bridges field and social, measures what sticks, and keeps expanding a universe that cybersecurity folks can’t stop talking about.

Ask Sarah Acker about her team at HUMAN Security, and you won’t just hear “brand” or “demand gen.” You’ll hear humans, cyborgs, and bots. That playful framing comes straight from how she describes the groups on her team, showing her mix of structure and creativity in cybersecurity marketing. In this conversation, Sarah walks us through HUMAN Security’s transformation from White Ops into a cybersecurity company, the realities of merging with PerimeterX, and why she believes the best marketing is equal parts “pretty” and “gritty.” Along the way, we cover FBI investigations, a Halloween parade float, and the persistence of old logos that still turn up on invoices years after a rebrand. If you’ve faced the challenges of rebrands, mergers, or balancing creativity with effectiveness in cybersecurity marketing, Sarah’s stories offer a clear look at what it takes to make it work.

Antu Buck didn’t plan to end up in customer marketing. She started in sales, carrying a bag as a BDR and enterprise rep, before realizing the part she loved most was building customer relationships. That path led her to McAfee, Intel Security, and now Gigamon, where she’s the Senior Director of Customer Marketing & Community. In this episode, Antu explains customer marketing, how it grew from “reference calls” into a core pillar of modern marketing, and why advocacy, community, and lifecycle programs all matter. We also discuss the common mistakes companies make when they treat community as a checkbox, how to prove ROI in a low-disclosure industry, and what it takes to turn a happy customer into a true superfan. Listen in as Antu previews her 30/60/90-day playbook for building a customer marketing program and catch the full plan live at ⁠CyberMarketingCon⁠.

CISOs get all the cold emails, but they’re not always the ones who decide if your product lives or dies. In this episode, Rob Solomon (CrowdStrike) and Jennifer Reed (Amazon Web Services, AWS) join hosts Gianna and Maria to explain why the real buying power often sits with solution architects and security engineers. They take us inside the AWS-CrowdStrike-NVIDIA Cyber Accelerator Program (Gianna is a mentor for the program), share how joint launches like Falcon for AWS Security Incident Response come together, and spell out what startups get wrong when pitching technical buyers. You will hear how to move past fear-based messaging, make adoption seamless, and why internal marketing matters as much as the external splash.

The Cyber Guild is built on community, helping people use technology to their advantage and ensuring that no one is left behind in the digital age. In this episode, Executive Director Debbie Sallis joins Gianna to share how that mission comes to life: through three targeted events helping people professionally develop in the cyber world. They host Uniting Women in Cyber, a flagship event that feels more like an experience than a conference; Cyber Connect, which pivoted in response to federal layoffs to support professionals in transition; and RISE, a mentorship program connecting seasoned leaders with those just starting their cybersecurity careers. With only four staff and a dedicated group of volunteers, Debbie shows how impact isn’t about scale or budget, it’s about showing up, creating space, and meeting the moment together. This episode is about how community, not scale, drives change in cybersecurity and how you can be part of it.

For Brandon Min, building Herd Security has meant tackling two challenges at once: helping companies create a culture of security while also figuring out how to market a startup on a scrappy budget. In this episode, he shares how Herd rethinks security awareness with micro-training that employees finish, why 90% of cyberattacks start with users, and what it takes to build “herd immunity” inside organizations. On the marketing side, Brandon walks us through testing ideas before building, finding overlooked SEO wins, and how, in his experience, a $50 guerrilla stunt brought in more leads than a trade show booth that cost 500x more. It’s a rare look at the crossroads of security culture and startup marketing, and it offers plenty of lessons for anyone trying to build attention and trust in cybersecurity.

Sri Sundaralingam has led teams at global enterprises and multiple startups in cybersecurity and enterprise software. He is now the CMO at Xage Security and has held leadership positions at Cisco, Symantec, ExtraHop, Shape Security, Mojo Networks, and Endace. He breaks down what carries over between big-company and early-stage environments and what you must relearn. In the episode, we explore hiring for creativity vs. experience, how to test a move from individual contributor (IC) to manager before you commit, and practical ways to handle politics while keeping work moving. Sri also shares how he frames Zero Trust and other technical concepts so buyers understand the value. Listen if you’re deciding between startup and enterprise, weighing IC vs. management, or want concrete hiring and communication tactics you can use this quarter.

Ransomware has evolved from one-off attacks to a fully operational criminal economy. Today, cybercrime groups operate with defined roles, shared infrastructure, and a growing reliance on AI to speed up intrusion, encryption, and extortion. Our guest this episode unveils insights from tracking the fraudulent side of the internet. Dr. Diane Janosek, CEO of Janos LLC and former senior executive at the National Security Agency (NSA), joins Gianna to unpack the structure and strategy behind ransomware-as-a-service. Drawing on her background in law, compliance, and national security, including her leadership at the National Cryptologic School, she breaks down how these syndicates function, what most companies get wrong in their response, and why even well-maintained backups aren’t the safety net they once were. We also explore how AI is accelerating the criminal kill chain, the real stats behind ransom payments (and regrets), and why ransomware is increasingly a tool of geopolitical disruption, not just financial gain. 🎬 The trailer for the film is included in this episode with permission. Courtesy of the Bold Stroke. All rights reserved. Dawn of Cyberwarfare – Produced by the Bold Stroke – Directed by Alisha Merkle & Fabrizio Dublino

You can’t copy Maya Doron. Not just because she’ll notice (and yes, she has receipts), but because everything she does on social at Wiz is built on something AI can’t touch: chaos, specificity, and a running list of what we’re calling Maya-isms. As Growth Marketing Manager at Wiz, Maya helps shape one of the most original brands in cybersecurity — from viral puppies and cloud cornflakes to musicals, memes, and “what’s in your tabs?” CISO interviews. In this episode, she joins Gianna to talk through what makes content real, what makes it work, and why going viral is never the goal. They get into the problems with AI-generated blandness, the return of photos on LinkedIn, how sensory marketing taps into memory even more deeply than visuals, and what it takes to build a brand people don’t just notice — they respect.