In this episode of the First Impressions Podcast, we sit down with Vijay Sarvepalli and Christopher Cullen to unpack the chaotic reality of modern vulnerability coordination. From AI-generated bug reports and patching nightmares to insecure pickle files, Log4j flashbacks, and the race to secure open source software before attackers strike, the conversation dives deep into how security teams can “push left” and automate the path from vulnerability discovery to secure release. Equal parts technical insight, cautionary tale, and therapy session for anyone who survived Log4Shell, this episode explores why fixing vulnerabilities is still harder than finding them, and what the future of coordinated vulnerability disclosure might look like in an AI-driven world.

In the first episode of the 2026 season of the First Impressions Podcast, Mor Weinberger and Lior Kaplan preview their upcoming FIRST Conference session, “From Discovery to Fix: What 10,000 Open Source Projects Reveal About CVE Remediation.” The discussion explores why vulnerability remediation remains slow despite the growing speed of CVE discovery, especially as AI accelerates vulnerability research and exploit development. Drawing from research across thousands of open source projects, they examine the challenges of patch adoption, dependency management, and supply chain complexity. The episode also highlights practical ways organizations can reduce risk and improve remediation efforts ahead of FIRSTCON26 in Denver.

The FIRST Impressions Podcast returns for FIRSTCON26! This kick off episode brings Program Chair, Merike Kaeo, to the table to discuss the vision behind the 38th Annual FIRST Conference program and the goals and challenges faced. Centered around the theme “Peak Defense: Building Adaptive Systems for Modern Threats,” Merike shares how this year’s program was carefully designed to balance technical depth, operational strategy, incident response, and AI security topics while ensuring diverse perspectives and skill levels. The episode highlights the importance of community collaboration, knowledge sharing, and making cybersecurity capabilities more accessible for smaller and underserved organizations through automation, practical incident response planning, and stronger global cooperation.

In this episode of the FIRST Impressions Podcast, FIRSTCON25 Speaker, Matias Mesiä of NCSC-FI, discusses the high-impact 2024 data breach that targeted the City of Helsinki’s education department. With over 100,000 residents affected, Matias breaks down how the incident unfolded and the coordinated response involving NCSC-FI, city officials, service providers, and law enforcement. He shares the unique challenges of managing a major breach under intense media scrutiny. Tune in for key lessons on public-sector cybersecurity, crisis communication, and response readiness.

In this episode of the FIRST Impressions Podcast, Martin and Chris chat with FIRSTCON25 speaker, John Hollenberger of Fortinet. John offers a sneak peek into his session, "Building the Blueprint: Designing Effective Storyboards for Cybersecurity Tabletop Exercises." He explains how detailed storyboards can shape more impactful tabletop exercises by aligning objectives, scenarios, injects, and key decision points. Tune in to learn how to create exercises that are not only engaging but truly enhance organizational preparedness.

In this episode of FIRST Impressions, the hosts interview FIRSTCON25 speaker, Cornelia Puhze of SWITCH-CERT, a human-centered security professional and co-chair of the FIRST Human Factors in Security SIG. Cornelia dives into the world of social engineering, AI-driven manipulation, and how we can better educate people to protect themselves from scams without the burden of technical jargon. She emphasizes the power of gut instincts, breathing, and human intuition in recognizing and resisting criminal tactics. Tune in to explore how we can train ourselves to stay secure in a tech-driven world — naturally.

In this episode of FIRST Impressions, hosts Martin McKay and Chris John Riley speak with Desiree Sacher and Carson Zimmerman about their upcoming talk at the 2025 FIRST Conference in Copenhagen. Drawing from personal experience and scientific research, they unpack the complexities of burnout in cybersecurity — exploring its causes, impact, and sustainable solutions for both individuals and organizations

In this episode of FIRST Impressions, hosts Chris John Riley and Martin McKeay speak with John Stoner, Global Principal Security Strategist at Google Cloud. Together they discuss the importance of ongoing detection testing, the challenges of running emulations in production environments, and how to balance technical goals with organizational constraints. John previews his upcoming talk at the 2025 FIRST Conference, offering practical strategies for evolving security practices without boiling the ocean.

In this special FIRSTCON25 FIRST Impressions episode, our hosts, Chris John Riley and Martin McKeay interview Henrik Larsen, Program Chair of the 2025 FIRST Conference in Copenhagen. Henrik discusses the conference theme: “Fortresses of the Future: Building Bridges, Not Walls” and previews keynote speakers, Scandinavian influence, and cultural highlights of the host city. Tune in to learn what to expect this June and learn more about the diverse speaker lineup and the vibrant Copenhagen experience awaiting us!

In this FIRST Impressions podcast episode, we dive into the fascinating world of mobile network security with Umair Bukhari, Director and Head of Ericsson P-Cert. Umair shares insights on the evolution of telecom threat environments, from the early days of 1G to the cutting-edge advancements in 5G and beyond. In the interview, he highlights how these changes impact both users and network security, emphasizing the importance of secure, cloud-native technologies and zero-trust architecture. This episode is a must-listen for anyone interested in the future of telecom security and the ongoing battle between attackers and defenders in this critical field! Tune in to learn more.