Identity, Patching, and Zero-Downtime Security - Keith Lawson - Cyber Smokehouse - Episode #25

Take your cybersecurity operations to the next level with powerful insights on managing high-volume vulnerability patches, securing healthcare IT/OT environments, and applying deep reinforcement learning to autonomous defense. It’s time to move beyond reactive security measures and build resilient, zero-downtime systems in live, life-safety environments. Who better to guide you through it than healthcare CISO, critical infrastructure veteran, and University of Michigan-Dearborn researcher, Keith Lawson?

You will learn how the surge in AI coding agents is driving a "tsunami" of software patches, strategies for managing identity as the modern perimeter, and how autonomous AI agents can adapt in real time to protect critical infrastructure. Get motivated to foster a zero-blame, collaborative culture that empowers your technical and non-technical teams to solve complex security challenges together.

Takeaways:

• The Vulnerability Tsunami: The adoption of AI coding agents by software vendors is generating a massive wave of bug fixes and corresponding exploits, requiring organizations to automate testing and speed up patching cycles.
• Identity as the Modern Perimeter: As healthcare and enterprise data shift to cloud and SaaS environments, human vulnerabilities and weak identity controls, rather than traditional network perimeters, have become the primary target for social engineering and exploitation.
• Zero-Downtime Patching in Healthcare: Securing complex hospital networks (spanning medical IoT, legacy software, and life-critical devices) requires strict pre-planning, automated testing, and a zero-tolerance approach for service disruptions.
• Applied Reinforcement Learning: Unlike static large language models (LLMs), reinforcement learning enables real-time, continuous online learning for autonomous cyber defense against zero-day threats.
• Fostering a Zero-Blame Culture: Effective security leadership relies on open collaboration, empowering staff across all departments, and maintaining a transparent, zero-blame environment so teams can report mistakes and fix root causes fast.

Quote of the Show:

"In security, I think open honesty and sharing is the best thing that we can do... To me, security is a team sport." - Keith Lawson

Links:

• LinkedIn: https://www.linkedin.com/in/j-keith-lawson/
• Website: blog.9600baud.net http://www.lhsc.on.ca

Ways to Tune In:

• Spotify: https://open.spotify.com/show/5LuXXqbK9k9rrVRFsdGzl0 
• Apple Podcasts: https://podcasts.apple.com/podcast/cyber-smokehouse/id1872442297 
• Amazon Music: https://music.amazon.com/podcasts/40a6c0da-242f-404b-8bd3-9f4997f19c47 
• iHeart Radio: https://iheart.com/podcast/319629841/ 
• Podchaser: https://www.podchaser.com/podcasts/cyber-smokehouse-6356550