Business Security Weekly

The episode delivers moderate insight density with some substantive information about domain security measurements and organizational challenges, but is heavily padded with introductory banter, personal anecdotes (retina surgery, Vegas stories), and extended sponsor segments. The domain security report itself provides concrete data (DMARC rising from 38% to 80%, DNSSEC from 3% to 11%), but these are delivered with explanation rather than novel analysis. The Balance Theory and WiCyS interviews add discussion of budget constraints and retention metrics, but lack the novelty and depth expected for a 68-minute show.

“We found that um, if you look at DMARC which encompasses STF and DKIM because it's the layer that it's a protocol that govern the behavior of SD and uh, uh dkim from the perspective of uh, uh protocol as well as reporting and enforcement we noticed m that it rose from 38% to 80% for the Global 2000 which is awesome.”

“So um, this is not also from our perspective as we manage domain name portfolios uh across the world. By the way, we're the largest corporate registrar.”

The content recycles standard cybersecurity frameworks and talking points. Domain security as a 'missing pillar' is presented as novel but amounts to restating that enterprises underinvest in DNS/domain controls - a known problem. The Balance Theory discussion about budget constraints and vendor evaluation is common CISO narrative. WiCyS's findings on attrition and glass ceilings in cybersecurity are from published research but not deeply challenged or reframed here. Few counterintuitive or first-principles arguments emerge.

“at csc, uh, we classify uh, domain security as well as DNS security as the missing pillar in the corporate security posture.”

“most cyber operators, if you walk the black hat floor, you know, they need tools to prevent threats and deal with, you know, the rising, you know, um, essentially new threat vectors and ways that people can be exploiting. With AI, we, uh, kind of take a different approach to the market.”

Guests have relevant operational credentials. Ahab Shraim is CTO at CSC Digital Brand Services managing domain portfolios at scale, providing legitimate practitioner perspective on domain security. Greg Baker (Balance Theory co-founder/CEO) addresses real CISO budget and vendor management challenges. Lynn Dohm (WiCyS executive director) leads a major nonprofit with workforce data. However, the interviews are brief and conversational rather than deeply technical, and no guest is brought in to challenge claims or provide adversarial perspective. Guests are friendly and aligned with the host's framing rather than brought in as independent experts.

“Ahab M. Schramm, Chief Technology Officer at CSC Digital Brand Services”

“Greg Baker, co founder and CEO at Balanced Theory”

The domain security report provides concrete metrics (38% to 80% DMARC adoption, 3% to 11% DNSSEC, 87 of 80 companies lacking measures, 88% of homoglyph domains owned by third parties, 16% of malicious domains targeting banking) and names specific attack platforms (FraudGPT at $80/month, WarmGPT, Fraud Wizard AI). Balance Theory cites spending optimization targets but no specific client cases or dollar figures. WiCyS references $127,000 ROI per employee and 32% attrition rate reduction but limited granular evidence. Ahab's discussion of attack types (domain hijacking, typosquatting, homoglyphs) is conceptual rather than grounded in specific incident analysis.

“We found that um, if you look at DMARC which encompasses STF and DKIM because it's the layer that it's a protocol that govern the behavior of SD and uh, uh dkim from the perspective of uh, uh protocol as well as reporting and enforcement we noticed m that it rose from 38% to 80% for the Global 2000”

“there is um, uh, terminology we use uh, on dormant domain name domain names that got either picked up by a labs domain name or um, a domain name that looks like uh, the actual viral domain names.”

Host questions are often generic and lack critical follow-up. When Ahab claims domain security is the 'missing pillar,' the host accepts the premise without asking for evidence of breach impact or ROI justification. Balance Theory discussion avoids pressure-testing claims about vendor evaluation or asking for specific failure cases. The WiCyS interview is warm and anecdotal but lacks substantive challenge on retention causation or whether mentorship alone explains the 32% attrition gap. Most exchanges are confirmatory rather than exploratory. Ahab's assertion that most SOCs are 'managed by the least paid person' goes unchallenged.

“So let's start. Hub. Right, so Ben and I just got back from Black Hat. AI is all over the place. I didn't see much around domain security. So give us some background on why domain security, why the report, why, why the emphasis?”

“Well, I mean, it's part of it. I mean, where we really sit is at the program level and trying to really understand if we're going to go deploy budget.”