eWeek eSpeaks

There are a handful of genuinely interesting operational points - insurance carriers preferring to pay ransom over restoration costs, and attackers filing SEC breach notifications themselves - but these are surrounded by a lot of generic advice ('think like an attacker,' 'people are the weakest link,' 'test and verify') and extended product-pitch content. Insight-per-minute ratio is low.

“the insurance providers, not all of them, but some of them, were actually preferring to pay out the ransom than to restore from backup or to restore otherwise. because it's more expensive to do the full rebuild from the ground up than it would be to pay out the ransom”

“the attackers have actually filed a submission to the SEC, notifying them of a data breach, sharing the breached clients information, and figuring the process for the SEC to do the investigation”

The SEC self-reporting angle from attackers is a genuinely novel and underreported tactic worth highlighting, and the 'appraisal' framing for ransom pricing is a useful lens. Everything else - human element, layered security, fire-drill analogy - is recycled industry boilerplate with no contrarian or first-principles thinking.

“the ransomware operators know this. So they're setting their prices almost like an appraisal when they get into a client network”

“One of the operators called Lapsus, what they were doing is actually offering a significant bounty to anybody who would give them keys to the kingdom”

Rogerson is a working CEO of an actual penetration testing firm with apparent hands-on operational experience, which is more credible than a pure thought leader. However, the conversation skews heavily promotional for Packetlabs' services, limiting how much genuine practitioner depth surfaces.

“we've had several clients that we've been in their networks for weeks before they've detected us”

“we put our staff through a rigorous 24-hour evaluation... they're given 24 hours to demonstrate, can they break into systems”

A handful of real-world specifics - MGM's call-center breach, Lapsus's credential bounties with dollar figures, the SEC mandatory notification rule - add credibility, but quantitative data is almost entirely absent. Claims like 'enormous ramp of ransomware' and 'remarkable uptick' are asserted without numbers or sources.

“if you look back at MGM MGM has a tremendous security budget and they they were breached through someone calling into the call center”

“Here's 10, 20, $30,000 if you just give me your password”

The host asks broad, leading questions and consistently validates rather than probes ('That is nasty business, no doubt,' 'Important stuff to be sure'). There are no follow-up challenges, no pushback on vague claims, and the interview functions largely as a PR vehicle for Packetlabs rather than an interrogation of ideas.

“I'm sure obviously there's a huge market for that”

“That is nasty business, no doubt. We need to protect ourselves from those folks, no doubt about it”