The Get Cyber Resilient Show

The episode is a lightweight news-roundup/farewell hybrid. Technical points (in-memory malware persistence, OT availability-vs-confidentiality tradeoff, DMARC as a PCI DSS 4.0 requirement) are real but surface-level and sparsely developed; a significant portion of runtime is consumed by DJ jokes, self-congratulatory banter, and a lengthy farewell sequence that delivers zero operator value.

“a lot of the malware, a lot of the stuff that you're going to see on a mobile device, especially these days, really what they're trying to get into is like in memory payloads”

“it's integral that we actually put in security in the first place rather than having to try passion car work away backwards later on”

Almost every take is recycled industry common sense: reboot clears in-memory malware (lifted from NSA guidance), OT was designed for availability not confidentiality, phishing is still the top threat, use a password manager. The one mildly contrarian observation - that political success in cyber looks like nothing happening, which is electorally useless - is interesting but underdeveloped.

“good is nothing happens. And that doesn't work in politics. You know, politics is like the scary people are coming and, you know, everyone should, should be afraid all the time.”

“Probably no surprise. The headline news is that uh, phishing was the most common type of identity related incident in 2022. So you know, I don't even feel like that needs a fanfare”

There are no external guests whatsoever in this episode; the three participants are the show's own hosts, who present as content-marketing and generalist cybersecurity commentators at Mimecast rather than senior operators who have built or defended infrastructure at scale. The farewell format makes practitioner depth irrelevant by design.

“I'm Dan McDermott, your host for one last time, and I'm joined by our resident cybersecurity experts, Garrett o' Hara and Vinyuan”

“episode one came, uh, out on the 14th of October 2019. Would you believe that long ago? Um, yeah, it was. Myself and Gregor did the sort of air quotes news”

The episode does pepper in real data points - 529 surveyed professionals, CVSS 8.8 for the Schneider vulnerability, 56 vulnerabilities in the OT Icefall report, a March 31 2024 PCI DSS deadline, ~AUD40M over four years for the National Office of Cyber Security - but these figures are name-dropped rather than analysed, and no actionable context is built around them.

“they've sort of interviewed a bunch of people, 529 to be very specific, IT security and identity professionals from relatively large orgs. So those with over a thousand employees”

“this one, particularly like, has a CVSS vulnerability of 8.8 out of 10”

Every question is a soft toss ('Gar, can this really help our cyber resiliency?', 'Vin, what do we need to be aware of here?') with no follow-up challenges, no probing for mechanism or evidence, and no productive disagreement anywhere in the episode. The farewell segment replaces any remaining craft with mutual appreciation.

“Gar, uh, can this really help our cyber resiliency?”

“Fin, what do we need to be aware of here?”