286 - Yvette Florez - Enterprise Applications Manager CO State Government Agency by Alex Wood & Robb Reck

News from Impulse Space, Anthropic, Colorado DOT, CU Business School and more - as well as some great research and blogs from Red Canary, Zvelo, and Optiv. Also meet your new hosts Joe and Chelsea! Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends. This week’s news: Name the train: Colorado Front Range rail leaders ask public to vote on finalists Broncos push for ambitious stadium timeline, while city leaders weigh neighborhood desires Golf-themed coworking expands in Greenwood Village, eyes Cherry Creek Space company founded by SpaceX veteran expands to Colorado manufacturing hub Colorado business leaders are still negative about the future economy, though less so than last year Moving up the Assemblyline: Exposing malicious code in browser extensions Continuous Threat Exposure Management (CTEM) – What Is It and Why Do You Need It? The Security Intelligence Supply Chain Labor market impacts of AI: A new measure and early evidence Top 5 Signs Your Identity Program Isn’t Ready for 2026 Upcoming Events: SnowFROC 26 Denver ISSA - How Quantum Computing will unlock and unleash AI - 4/8 ISACA Denver - April Chapter Meeting (AGM) - 4/16 ISC2 Pikes Peak - 4/22 SANS Rocky Mountain - 4/20 * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guest this month is CJ Cox, COO of Black Hills Information Security, interviewed by Frank Victory. News from City of Denver, Block, Zvelo, Lares, FusionAuth, RADICL, Ping Identity, Red Canary and a lot more! We often talk about cybersecurity as a series of technical hurdles, but CJ frames it through Maslow’s Hierarchy of Needs. At the bottom? Paying the mortgage and surviving the 4th-quarter burnout. At the top? Self-actualization. Doing great work with cool people. But here’s the kicker: CJ argues that real security doesn't come from the name on your badge or the company you work for. It comes from your internal capability to learn and adapt. We’re experimenting with a new, long-form format on the podcast to explore these "human" elements of the industry—the leadership, the culture, and the "why" behind the "how."Check out the full episode where we discuss: Why BHIS says "No" to multi-million dollar buyouts. The "Borg" effect of corporate acquisitions. Why building a SOC is a three-year slog, not an "easy button." Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: Colorado ranks 28th for family-friendly home buyers in national study Block cuts 61 Colorado jobs in AI-driven automation push Denver turns to AI to help fix permitting speed, consistency Denver set to pause data center development as mayor joins call for moratorium Colorado man, cybersecurity experts and BBB warn about AI deepfake scams Building the Future of Defense Tech Your Token Proves Who You Are, Not What You Own The Visibility Gap: 5 Purple Team Tests Your EDR is Probably Missing AI Model Drift Is Inevitable. Trusted Intelligence Requires Human Supervision. Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app Upcoming Events: Check out the full calendar ISSA COS - March Chapter Meeting -3/10 ISSA Denver - March Chapter Meeting - 3/11 IdentiBeer - 3/18 Denver OWASP - MCP LFI in 60 minutes (or your money back) - 3/18 ISACA Denver - March Chapter Meeting (virtual) - 3/19 ISC2 Pikes Peak - 3/25 ISACA Denver - CISA Spring Training Classes - 3/28 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guest this monthCody Cornell, CEO and founder of Swimlane, interviewed by Frank Victory. News from Great American Beer Festival, Lumen, Zvelo, RADICL, Ping Identity, Red Canary and a lot more! Welcome back to the Colorado = Security podcast, where today we’re trading the icebreakers of Antarctica for the high-stakes world of global SecOps! Join us as Cody Cornell, the visionary CEO of Swimlane, reveals how he pivoted from the front lines of the Coast Guard to building the future of security automation. It’s time to find out if your organization is a fortress of governance or just a glass house waiting for a stone—let’s dive in!https://www.linkedin.com/in/codycornell/https://swimlane.com/https://www.linkedin.com/in/frank-victory/https://snowfroc.com/ Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: Great American Beer Festival relocates from downtown Denver Colorado now has 6 million people, even amid slowing population growth Denver-area telecom completes $5.75B cash sale to AT&T Louisville tech company nears public offering Energy, data center tax break debates set to kick off in the Colorado legislature this week Agentic AI Security Exposes the Limits of Zero Trust Swimlane Introduces Fleet of AI Agents and Agent-Builder RADICL Secures $31M to Accelerate the Future of Autonomous Cyber Defense for SMBs What is Zero-Knowledge Biometric Authentication? A Simple Guide for Security Teams Go jump in a lake: Measuring the data lake effect on your SIEM | Red Canary Upcoming Events: Check out the full calendar CSA Colorado - Enabling AI: Rules of the Road - 2/17 ISSA COS - February Trivia Night - 2/19 ISACA Denver - February Meeting with the IIA - 2/19 ISC2 Pikes Peak - 2/25 Denver ISSA - AI/ML Special Interest Group - 2/25 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guests this month are Matt Sharp , Ian O’Neill and Jason Godley at Xactly Corp, interviewed by Frank Victory. News from Inspirato, Optiv, Lares, Ping Identity, Red Canary and a lot more! The Security Triad: Turning Risk into Revenue: Step inside the boardroom to see how top-tier leadership turns cybersecurity from a "no" into a "go." In this high-energy conversation, Jason Godley (CFO), Ian O'Neill (Legal Counsel), and Matthew Sharp (CISO) pull back the curtain on the "Security Triad"—the collaborative engine driving Xactly’s massive business transformations. Discover how they’ve shifted security from a perceived bottleneck to a revenue powerhouse with a staggering 80%+ revenue attachment rate on enterprise deals. This is a masterclass in navigating the legal liabilities of Generative AI, mastering the "Speed of Trust," and using a best-in-class security posture to outpace the competition and win in the enterprise market. Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: Colorado’s First Treehouse Hotel Is Open (and Gorgeous) Local travel company acquiesces to $59 million purchase offer President Trump signs executive order in bid to block state AI regulations, including Colorado’s Colorado courts’ fragmented system for sharing evidence needs statewide fix, task force finds 2025 Industry Threat Profile Audit Success vs Operational Resilience: Understanding the Gap What Is Human-in-the-Loop AI and Why It Matters for Identity When adversaries bring their own virtual machine for persistence Upcoming Events: Check out the full calendar ISSA COS - January Chapter Meeting - 1/13 ISSA Denver - CTI Revolution Starts Now: Building a Business-Centric Intelligence Program - 1/14 ISACA Denver - SheLeadsTech 2026 Climb and Carry (7 CPE) - 1/23 ISSA COS - January Workshop - 1/24 ISC2 Pikes Peak - 1/28 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guest this month is Shane Cox, Director Cyber Fusion Center at MorganFranklin Cyber, interviewed by Frank Victory. News from Denver Summit FC, EchoStar, Atom Computing, Quantinuum, Ibotta, Optiv, FusionAuth, Swimlane, Red Canary and a lot more! Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: Denver Summit FC to debut at Empower Field at Mile high, eyes attendance record EchoStar founder Charlie Ergen returns as CEO amid $19.6B SpaceX spectrum deal Ibotta celebrates new downtown Denver headquarters Two Denver-area tech firms advance in $300M quantum competition Cyberattack on CodeRED forces Douglas County Sheriff’s Office to seek new alert network Threat Modeling of AI Applications Is Mandatory The Authentication Rabbit Hole: What I Learned From Vibe-Coding Auth with AI 92% Breaches Preventable with AI Automation Stay on top of GitHub vulnerabilities with Dependabot Configurator Upcoming Events: Check out the full calendar ISACA Denver - HOLIDAY PARRRTAAAAYYY - 12/11 Colorado = Security Gives Back - 12/13 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guest this month is Chazz Gifford, VP Information Security @ Intrado, interviewed by Frank Victory. News from Palantir, Lumen, the State of Colorado, Red Canary, Optiv, and a lot more! Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: Checkr, Chevron decisions push downtown vacancy up again in third quarter Palantir enters $200M partnership with telco Lumen to offer enterprise AI services Colorado plans to fully digitize paper and analog land records, some dating back to the 1860s, by next year Police used Flock cameras to accuse a Denver woman of package theft. She had her own evidence Governor Polis Proclaims October 2025 as Cybersecurity Awareness Month “Stay Safe Online” AWS down: How a single network outage rippled through businesses, institutions and the economy Colorado attorney general sues Trump administration over Space Command HQ relocation to Alabama Privacy Protections for Children's Online Data Navigating the Vast AI Security Tools Landscape Commanding attention: How adversaries are abusing AI CLI tools Upcoming Events: Check out the full calendar Denver ISSA - AI: The Good, The Bad, & The Ugly - 11/12 ASIS - That's a Wrap End of the Year Happy Hour Party - 11/12 ISC2 Pikes Peak - Chapter Meeting - 11/19 ISACA Denver - November Chapter Workshop with ISC2 - 11/20 ISC2 Pikes Peak - Chapter Meeting - 12/5 ISACA Denver - HOLIDAY PARRRTAAAAYYY - 12/11 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our featured guest this week is Greg Foss, Manager - Threat Detection @ Datadog, interviewed by Frank Victory. News from Echostar, Space Command, DenAI Summit, CU Boulder, Webroot, Red Canary, Zvelo, Optiv, Ping Identity, and a lot more! You can find Greg and Frank at the following events if you’d like to see them in purpose:Greg: Lunch keynote at the CSA Fall Summit 2025 October 29th Frank: BSides Colorado Springs - "Pyramid of Pain - Defenders Edition" October 25th SnowFROC 2026 - March 26 and 27 University of Michigan CyberSecurity Symposium - Challenges of Training the Next Generation of Cybersecurity Professionals - October 30th Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: EchoStar unloads wireless spectrum to Musk’s SpaceX for $17 billion Will Colorado lose 30,000 jobs when Space Command moves to Alabama? CU Boulder ranked No. 1 for launching startups based on university discoveries Guarding your family against the latest online threats Node problem: Tracking recent npm package compromises SaaS Risk Management for Vendors in the Age of AI Cybersecurity Capabilities for Maturing Your TPRM Programs Complying with NIST SP 800-63-4 Standards: Identity as the Roadmap Redefining incident response in the age of AI Upcoming Events: Check out the full calendar ISSA Denver - Denver ISSA Chapter Meeting at Secure World: How I Got Caught: A Deep Dive Into a 800K Fraud - 10/9 ISACA Denver - October Chapter Meeting - 10/16 ASIS Denver - ASIS ROCKY MOUNTAIN TRADE SHOW and NETWORKING - 10/21 ISSA Pikes Peak - Chapter Meeting - 10/22 CSA - CSA Fall Summit - 10/29 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our feature guest this week is Jason Hayes, President of Colorado CSA, interviewed by Frank Victory. News from Elitch Gardens, Xcel, EchoStar, Palantir, DaVita, Swimlane and a lot more! Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: New Colorado area code rolls out for dozens of counties After years of doubt, Elitch Gardens may stick around for a while Space Case: Donald Trump's Rocky Relationship With Colorado Xcel says it needs to spend $22 billion to keep up with potential demand from Colorado data centers by 2040 Englewood-based EchoStar gives up wireless network independence for enough cash to survive Palantir is Colorado’s highest-valued company — and at center of controversy — five years after move to Denver How They Got In — DaVita Inc. Colorado Adds AI-Generated Deepfakes to Revenge Porn, Child Exploitation Laws Colorado Delays AI Act Compliance: What Lawyers and Business Leaders Need to Know When the Government Can See Everything: How Palantir Is Mapping the Nation’s Data Swimlane Announces Strategic Leadership Appointments to Accelerate Push to Agentic AI Security Operations Upcoming Events: Check out the full calendar Denver CSA - CCZT - Study Group - Session 2 (Virtual) - 9/10 ISSA Denver - September Chapter Meeting - 9/10 Denver CSA - Beyond Patching - Prioritizing Cloud Workload Risk with Exposure Management - 9/16 Denver OWASP - Why you should hack your own APIs - 9/17 ISACA Denver - Full Day! September Chapter Meeting - 9/18 ISSA Pikes Peak - Chapter Meeting - 9/24 Deciphering human behavior to Get Security Done (GSD): Understanding yourself and others to win at security - 9/25 ISACA Denver - ISACA CommunITy Day 2025 - 10/4 ISSA Denver - Denver ISSA Chapter Meeting at Secure World: How I Got Caught: A Deep Dive Into a 800K Fraud - 10/9 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

Our feature guest this week is Josh Peltz, VP of the West for Zero Networks. News from Eldora, COOP Rideshare, Red Canary, Optiv, zvelo and a lot more! Come join us on the Colorado = Security Slack channel to meet old and new friends. Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at [email protected] This week’s news: New Colorado area code rolls out for dozens of counties Nederland to buy Eldora Mountain Resort with support of ski industry heavy hitters Time to buy? Denver housing market hits highest inventory in 14 years Colorado Driver-Owned Ridershare App Relaunches With Improved Service, Same Benefits for Drivers More shady QR codes found on Denver parking meters Colorado among states to pass privacy laws protecting brain data collected by devices Trump Administration’s AI Action Plan and New Executive Orders Offer Strategic Opportunities and Legal Risks for Private Businesses Understanding the threat landscape for MCP and AI workflows Cybersecurity Leadership in 2025: The Strategic Role of CISOs in an AI-Driven Era Addressing Legacy Phishing Detection Failure Upcoming Events: Check out the full calendar ISSA Denver - August Chapter Meeting - 8/13 Colorado = Security Picnic - 8/23 ISSA Pikes Peak - Chapter Meeting - 8/27 ISSA Denver - AI/ML SIG: Agentic AI - 8/27 ISSA Denver - Women in Cyber: From Crisis Response to Boardroom: Becoming a CISO the Unconventional Way - 9/3 View our events page for a full list of upcoming events * Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at [email protected]. Check out his other voice work here. * Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0