Скачать или смотреть The Dark Truth About Modern Cyber Threats | Joshua Domagalski | CISO Astronomer | Defender's Log

The odds remain badly stacked against the defender.

The adversary only needs to find one vulnerability to breach the perimeter. The defender must secure every endpoint, every egress point, and every line of code, 24/7. This is the definition of an asymmetric challenge.

In Episode 10 of The Defender's Log, host David Redekop sits down with Joshua Domagowski, CISO of Astronomer. They dissect a critical reality: Cybersecurity is a human-made domain. Because we built it, we have the power—and the moral obligation—to control it.

Joshua outlines the transition from the "easy" path of offensive hacking to the complex, high-stakes world of strategic defense. The conversation moves beyond standard hygiene into the mechanics of survival in a Universal Threat Ecosystem (UTE):

Untrusted Code Execution: How to maintain sovereignty when your platform’s utility relies on running customer code.
The Insider Threat: Why security teams need to look at behavioral telemetry (like HR data) to spot anomalies before exfiltration occurs.
The Human Variable: Why "process" often fails without the right engineering mindset behind it.

The failure today is not a lack of tools; it is the imperfect application of strategy. We must move from a posture of reaction to a hardened state of default deny all. If you want to understand how a CISO manages risk in an environment of constant entropy, this discussion is mandatory listening.