The CyberCall Podcast
The Voice of Cybersecurity for MSPs & MSSPs!
The CyberCall is the weekly podcast where cybersecurity meets business reality. Hosted by Andrew Morgan, Founder of Right of Boom, this is the go-to show for Managed Service Providers (MSPs), virtual CISOs (vCISOs), and IT leaders navigating the complex world of cyber risk, compliance, and AI.
Each episode features raw, practical conversations with the sharpest minds in cybersecurity—from operators in the trenches to CISOs, researchers, policymakers, and toolmakers shaping the future. If you care about protecting your clients, growing your practice, and becoming the security partner businesses trust—this podcast is your playbook.
Co hosts: Phyllis Lee, VP of Content at CIS & Gary Pica, President of TruMethods
Episodes
37 episodes
The State of Pen Testing in 2025 & the Role of AI & Autonomous Solutions (with John Strand)
Today we’re talking about one of the biggest shifts in offensive security that MSPs, CISOs, and defenders cannot ignore.For years, pen testing was about human creativity — sneaking in where we “shouldn’t” be, showing you how you’d really...
•
1:01:28
ZTNA & SASE, the Next Era for MSPs
Today we’re tackling one of the biggest shifts in modern network security. VPNs are breaking under the weight of hybrid work, SaaS sprawl, and constant attack — and MSPs are being forced to rethink how they secure access itself.Enter Zer...
•
1:03:33
The Human Lag: Why AI Outpaces Operational Readiness
Artificial intelligence is evolving faster than most organizations can operationally absorb. We’ve automated analysis, accelerated response, and even delegated decisions to machines — but our people, processes, and governance are still running ...
•
1:01:11
Disinformation Security – Deepfakes & Social Deception
This week on The CyberCall, we’re turning up the heat on deepfakes & disinformation—why they’re no longer sci-fi, and how they’re already targeting MSPs and the Defense Industrial Base.I’m joined by
•
57:50
NIST Small Business Primer and Quick Start Guides
Today we’re talking about something that may sound government-heavy but is actually critical for MSPs and the SMBs they serve: the new NIST Small Business Primer for SP 800-171 Rev. 3.At its core, this guide is about prot...
•
1:01:07
Microsegmentation Demystified: What Every MSP & Client Should Know
Today we’re tackling microsegmentation—a solution that could change the game against ransomware.Ransomware thrives on lateral movement: one compromised device turns into an entire network takedown. Microsegmentation stops that by creatin...
•
1:03:02
AI’s Evolving Role in Attacks & Incident Reponse
Over the past couple of days, I was digging into the latest Anthropic Threat Report and one section really hit me.They wrote: ‘We’ve developed sophisticated safety and security measures to prevent misuse of our AI models....
•
1:01:04
Encryption to Extortion, the Evolution of Cloud Based Attacks
In this session we talk about Salesloft Drift and the implications of OAuth based attacks. Companies use Drift with Salesloft to automate lead capture + sales workflows into Salesforce.com. Enter Nation State threat actor UNC6395, who was able ...
•
1:02:02
When Cyber Hits the Fan: How Your Contracts Protect or Expose You
Last week, we dug into the surge of SonicWall VPN compromises. At first, there was speculation about a possible new zero day — but as the dust settled, we learned it was far more familiar: unpatched systems, misconfigurations, stale service acc...
•
59:42
Akira Ransomware’s Relentless Attack on SonicWall SSLVPNs
In this session of The CyberCall, we’re cutting straight into one of the most relentless threats MSPs and their clients are facing right now—targeted ransomware attacks exploiting SonicWall SSLVPNs, with signs the attackers are already shifting...
•
1:02:45
Selling IT & Cybersecurity Services to the CFO (the one who writes the checks)
When MSPs are selling IT and security services, the real decision often comes from the person who owns the budget and measures the risk — the CFO. In this session of The CyberCall, we’re getting inside that mindset.
•
1:00:43
From Tokens to Trust: Microsoft’s Biggest Security Shift Yet
This week, we’re diving into three huge shifts happening in the Microsoft ecosystem that every MSP should have on their radar:· Token Protection is now available for Entra ID P1 licenses — and it’s a game changer for ...
•
1:01:52
From Milestone to Mandate: What the Latest CMMC Update Means for Your MSP & Your Clients
Big news for the defense and MSP community:The 48 CFR CMMC final rule has officially reached OMB review. This is the second-to-last milestone before publication in the Federal Register — and we’re expecting to see the...
•
1:00:28
What Makes a Good vCISO & Delivering at Scale
Last week, we tackled a big one: 'Risk, Revenue, Responsibility: The Real Job of the vCISO — and it sparked an incredible conversation around how vCISOs are no longer just about frameworks and firewalls, but about protecting business...
•
1:01:17
Risk, Revenue, and Responsibility: The vCISO’s Real Job
In this episode of The CyberCall, we're cutting through the noise and rethinking the true purpose of the vCISO role. It’s not just about frameworks, policies, and tech stacks, it’s about tying risk to business outcomes (risk to revenue)....
•
1:01:30
The Ingram Micro Cyber Incident & Building Security Maturity - F12’s ISO 27001Journey
Supply chain attacks doubled according to the 2025 Verizon DBIR. This week the channel awakens to Ingram Micro being attacked by the SafePay Ransomware group. Incident Response (IR) expert, Chri...
•
1:03:30
The Intersection of AI, RPA & Cyber - What Your MSP Needs to Know
In this must-listen episode of The CyberCall, hosts Andrew Morgan, Phyllis Lee & Gary Pica are joined by Aharon Chernin, Founder & CEO of Rewst — to explore how Artificial Intelligence (AI), Robotic Process Automation (RPA), and Cyberse...
•
Season 1
•
Episode 1
•
59:50
CIS Controls - Version 8.1 Update Overview
With the release of NIST Cybersecurity Framework 2.0, CIS felt strongly that an update to The Controls was necessary to crossmap to CSF 2.0. Specifically the strongest driver, was the release of the Govern function.Co-hosts:<...
•
Season 2
•
Episode 19
•
52:09
CIS Control 18 - Penetration Testing - Sponsored by Hacket Cyber
Penetration testing is something that more companies and organizations should be considering a necessary expense. Pen Testing is an important aspect of discovery and identifying potential critical vulnerabilities within your organizations...
•
1:06:26
CIS Control 17 - Incident Response Management - Sponsored by Exigence
The biggest takeaway from CIS Control 17 is that planning and communication are critical when responding to an incident. The longer an intruder has access to your network, the more time they’ve had to embed themselves into your systems. ...
•
53:38
CIS Control 16 - Application Software Security - Sponsored by Manicode
CIS Control 16 - Application Software SecurityThe way in which we interact with applications has changed dramatically over years. Organizations use applications in day-to-day operations to manage their most sensitive data and control...
•
1:06:54
CIS Control 15 - Service Provider Management
LastPass and the recent Rackspace Exchange incident are two prime examples of "why" this Control is Critical!!Develop a process to evaluate service providers who hold sensitive data, or are responsible for critical IT platforms or proce...
•
1:02:48
CIS Control 14 - Security Awareness and Skills Training - sponsored by Phin Security
MSP/MSSPs should offer solutions to provide users with frequent security awareness training to increase its overall security posture. The information provided by the security awareness training should be relevant and provide insights into recen...
•
1:17:30
CIS Control 13 - Network Monitoring and Defense - sponsor by ConnectWise
Network monitoring and defense is one of only two controls that does not contain any Implementation Group 1 Safeguards in Controls version 8. This control is geared towards mature MSPs, MSSPs & organizations who have a mindset of ...
•
1:06:16
CIS Control 12 - Network Infrastructure Management - sponsored by Domotz!
Abstract: Network Infrastructure Management - Establish, implement, and actively manage network devices, in order to prevent attackers from exploiting vulnerable network services and access points. Network infrastructure dev...
•
Season 1
•
Episode 12
•
57:28