Field Notes

We just passed 1,000 subscribers on YouTube for Threats, Pitfalls & Risk Myths, The TPRM Podcast!

By Nate Lee, co-founder of TrustMind — 30 Jun 2026

Thank you to everyone who has watched, subscribed, shared, commented, or told someone else to check it out.

Haven’t caught it yet? We’re 17 episodes in, and the guest lineup has been incredible:

Alex Stamos joined us to talk about how AI is reshaping software development, security, trust, and the future of work.

Jason Chan walked through scaling security without slowing engineering down.

Rinki Sethi covered runtime security, identity, AI, leadership, and why every area of cybersecurity is ready for disruption.

Andrew Becherer helped separate real security from theater and building security programs that actually matter and scale.

Jadee Hanson kicked off the very first episode by moving beyond vendor review checklists toward continuous oversight, accountability, and trust.

Bob Lord joined us to challenge “hack lore,” security-by-advice culture, and why vendors — not users — need to own better security outcomes.

Mike Johnson broke down security at AI speed, including software supply chain risk, and big-data detection.

Aaron Stanley talked about building security programs that scale with the business instead of becoming drag on the business.

Alex Rice made the case for how trust, vulnerability disclosure, and collaboration are changing the way organizations think about risk.

Trey Ford Ford brought us into the economics of vulnerability discovery and forces teams to rethink validation, prioritization, and remediation.

Jerry Perullo challenged the idea that patching is a security strategy and pushed us to focus on real threats, business impact, resilience, and decision-making.

Ayoub Fandi joined us to rethink GRC in an AI world, moving from audit-driven workflows to risk-driven operating models built from first principles.

Michael Coates broke down why AI is compressing attacker and defender timelines, and why human-driven security models may not be fast enough anymore.

Conor Sherman talked through AI-driven attacks, autonomous defense, machine-speed response, and what modern security leadership needs to look like.

Jacob DePriest helped unpack the real risk of AI adoption: moving too fast, moving too slow, agent security, identity, authorization, and auditability.

Jake Bernardes made the case for agentic GRC and treating governance, risk, and compliance like an engineering problem.

Ross Young talked about security without waste, and how leaders can challenge legacy assumptions.

Sound like your cup of tea? Go on, click that link in the comments and smash that subscribe button! (Sorry, I've always wanted to do that 🤣 )