--- title: "Cybersecurity" description: "Posts on medical device and enterprise cybersecurity: FDA premarket submissions, threat modeling, SBOMs, pentesting, and postmarket vulnerability work." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "Person", "@id": "https://christianespinosa.com/#person", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "image": "https://christianespinosa.com/__l5e/assets-v1/de07e44b-a8e0-4bcc-bcb0-13aec15421f1/headshot-front.jpg", "sameAs": [ "https://www.facebook.com/christian.espinosa.official", "https://x.com/Ironracer", "https://www.instagram.com/christian.espinosa.official/", "https://www.youtube.com/@ChristianEspinosaOfficial", "https://www.linkedin.com/in/christianespinosa/" ], "jobTitle": "Bestselling Author, Keynote Speaker, Entrepreneur", "worksFor": { "@type": "Organization", "name": "Blue Goat Cyber", "url": "https://bluegoatcyber.com/" } }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://christianespinosa.com/#website", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "publisher": { "@id": "https://christianespinosa.com/#organization" }, "inLanguage": "en-US" }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://christianespinosa.com/#organization", "name": "Christian Espinosa", "url": "https://christianespinosa.com/", "logo": { "@type": "ImageObject", "url": "https://christianespinosa.com/logo.svg" }, "founder": { "@id": "https://christianespinosa.com/#person" }, "sameAs": [ "https://www.facebook.com/christian.espinosa.official", "https://x.com/Ironracer", "https://www.instagram.com/christian.espinosa.official/", "https://www.youtube.com/@ChristianEspinosaOfficial", "https://www.linkedin.com/in/christianespinosa/" ] } ] --- [Skip to content](#main) [](/) [About](/about)[Speaking](/speaking)[Cybersecurity](/cybersecurity)[Programs](/programs)[Books](/books)[Media](/media) Writing Search Ctrl K[Connect](/connect) Category # Cybersecurity Practical cybersecurity for leaders, engineers, and the teams trying to keep up with the threat landscape. 50 posts - [ ![Five Seconds On Elbrus And The FDA Submission](/__l5e/assets-v1/5ac66560-c1df-4632-8157-df35dd32654c/elbrus-summit-self-arrest.jpg) Jun 22, 2026 ## Five Seconds On Elbrus And The FDA Submission Four hours before this summit photo on Mt. Elbrus, I almost died from five seconds of lost focus. Same mistake MedTech teams make on FDA cybersecurity submissions, and the self-arrest that gets you out of it. ](/blog/five-seconds-on-elbrus-and-the-fda-submission) - [ ![The Ultrasound That Found My Clots: Why Medical Device Cybersecurity Is Personal](/__l5e/assets-v1/b2c90f76-c946-41cb-ad4c-47b7780e8961/twenty-feet-numb-foot-trail.jpg) Jun 21, 2026 ## The Ultrasound That Found My Clots: Why Medical Device Cybersecurity Is Personal In 2022 a Doppler ultrasound found six blood clots in my left leg. That device saved my life. It's also why I treat medical device cybersecurity as a patient safety issue, not a compliance checkbox. ](/blog/the-ultrasound-that-found-my-clots) - [ ![What a 'Good' SBOM Actually Looks Like, And What Reviewers Reject](/__l5e/assets-v1/9a9ef5b5-9846-4454-8c1e-36e39ca0fddc/what-a-good-sbom-actually-looks-like-hero.webp) Jun 20, 2026 ## What a 'Good' SBOM Actually Looks Like, And What Reviewers Reject FDA reviewers see thousands of SBOMs. Most are wrong in the same handful of ways. Here's what a defensible Software Bill of Materials looks like for a medical device submission, and the patterns that trigger a deficiency. ](/blog/what-a-good-sbom-actually-looks-like) - [ ![If Your Reviewer Can't See the System, You Don't Have an Architecture](/__l5e/assets-v1/26ab90f3-bb8b-4e0d-bdf8-cb024ad013a4/architecture-views.jpg) May 28, 2026 ## If Your Reviewer Can't See the System, You Don't Have an Architecture Security Architecture Views are where most medical device submissions either earn trust or lose it. Here's what a clear, defensible architecture view looks like, and why most teams over-engineer the diagrams and under-engineer the boundaries. ](/blog/if-your-reviewer-cant-see-the-system-you-dont-have-an-architecture) - [ ![Why Postmarket Cybersecurity Is Where MedTech Actually Fails](/__l5e/assets-v1/046fcdc3-3485-47d3-951c-99d383dc08f4/why-postmarket-cybersecurity-is-where-medtech-actually-fails-hero.webp) Apr 8, 2026 ## Why Postmarket Cybersecurity Is Where MedTech Actually Fails FDA clearance is the floor, not the finish line. A look at why most medical device cybersecurity programs collapse after launch, and what the working postmarket programs do differently. ](/blog/why-postmarket-cybersecurity-is-where-medtech-actually-fails) - [ ![FDA Premarket Cybersecurity: What the 2026 Guidance Actually Requires](/__l5e/assets-v1/22932524-f39b-4375-bff7-2af7efa7cc0d/fda-premarket-cybersecurity-what-the-2026-guidance-actually-requires-hero.webp) Mar 12, 2026 ## FDA Premarket Cybersecurity: What the 2026 Guidance Actually Requires A plain-English breakdown of FDA's final 2026 premarket cybersecurity guidance, what the threat model, SBOM, labeling, and cybersecurity management plan actually have to look like for clearance. ](/blog/fda-premarket-cybersecurity-what-the-2026-guidance-actually-requires) - [ ![Total Product Lifecycle: The Framing That Fixes Most MedTech Submissions](/__l5e/assets-v1/a867b45b-fe2c-4ba0-9681-3ff8c54569cb/total-product-lifecycle-the-framing-that-fixes-most-submissions-hero.webp) Jan 22, 2026 ## Total Product Lifecycle: The Framing That Fixes Most MedTech Submissions Most medical device cybersecurity programs fail because they treat security as a premarket activity. The Total Product Lifecycle framing is what the FDA expects, and what makes the work durable. ](/blog/total-product-lifecycle-the-framing-that-fixes-most-submissions) - [ ![Threat Modeling Is the Work. Everything Else Is the Receipt.](/__l5e/assets-v1/295fd150-115e-4a0d-904f-1353bc456684/threat-modeling-is-the-work-everything-else-is-the-receipt-hero.webp) Nov 18, 2025 ## Threat Modeling Is the Work. Everything Else Is the Receipt. Most medical device cybersecurity submissions fail at the threat model, not because reviewers are picky, but because teams treat threat modeling as documentation. It's the engineering discipline that produces everything else. ](/blog/threat-modeling-is-the-work-everything-else-is-the-receipt) - [ ![What Is Threat Intelligence, and Why Is It Important in Supporting Your Cyber Team?](/__l5e/assets-v1/54ab4500-c1ea-449a-894a-420ccd0fefa3/b9e70767046d.jpg) Sep 17, 2023 ## What Is Threat Intelligence, and Why Is It Important in Supporting Your Cyber Team? In this post, we review what threat intelligence is, its current impact, and what it all means to your cyber team. ](/blog/what-is-threat-intelligence-and-why-is-it-important-in-supporting-your-cyber-team) - [ ![Silos Weaken Your Cybersecurity Posture, Collaboration Makes It Stronger](/__l5e/assets-v1/a6d916fd-2bce-424b-bfbf-9f7a7b3a9bbb/0f36312d190b.jpg) Sep 17, 2023 ## Silos Weaken Your Cybersecurity Posture, Collaboration Makes It Stronger How did cybersecurity become so siloed? And what can you do to break silos down? ](/blog/silos-weaken-your-cybersecurity-posture-collaboration-makes-it-stronger) - [ ![Is Your Cybersecurity Budget Limited? How to Do More with Less](/__l5e/assets-v1/b903bf93-451d-47ce-8a18-a4f45184471b/2f856c642815.jpg) Jul 17, 2023 ## Is Your Cybersecurity Budget Limited? How to Do More with Less In this post we explore the state of cybersecurity budgets and how changes in the way you manage your team can help you do more with less. ](/blog/is-your-cybersecurity-budget-limited-how-to-do-more-with-less) - [ ![Cybersecurity Strategy Pitfalls: How to Get Back on the Right Path](/__l5e/assets-v1/25b1302d-571a-45ff-b15a-d8b76bb19244/cybersecurity-strategy-pitfalls-how-to-get-back-on-the-right-path-hero.webp) May 11, 2023 ## Cybersecurity Strategy Pitfalls: How to Get Back on the Right Path An underlying theme in the pitfalls we’ll discuss is how cybersecurity professionals miss or don’t give much credit to the human element. ](/blog/cybersecurity-strategy-pitfalls-how-to-get-back-on-the-right-path) - [ ![Ransomware Attacks: New Ways to Exploit Old Vulnerabilities](/__l5e/assets-v1/ba877d46-a4d4-4a02-87ce-dd64a65de716/ransomware-attacks-new-ways-to-exploit-old-vulnerabilities-hero.webp) Apr 13, 2023 ## Ransomware Attacks: New Ways to Exploit Old Vulnerabilities Cybercriminals are leveraging old weaknesses with the latest in AI and machine learning to maximize ransomware impact. ](/blog/ransomware-attacks-new-ways-to-exploit-old-vulnerabilities) - [ ![The Latest on Supply Chain Security: How Cyber Professionals Can Move the Needle](/__l5e/assets-v1/c8d84b3f-4d2e-438e-953f-d63e9d6c7fae/the-latest-on-supply-chain-security-how-cyber-professionals-can-move-the-needle-hero.webp) Apr 13, 2023 ## The Latest on Supply Chain Security: How Cyber Professionals Can Move the Needle Supply chain attacks often involve third-party software because of privileged access and frequent communication with the vendor’s network. ](/blog/the-latest-on-supply-chain-security-how-cyber-professionals-can-move-the-needle) - [ ![What Is XOps, and How Is It Changing the Cybersecurity Talent Discussion?](/__l5e/assets-v1/c4e23b6b-0f2b-480e-870c-b11edf11977a/what-is-xops-and-how-is-it-changing-the-cybersecurity-talent-discussion-hero.webp) Jan 19, 2023 ## What Is XOps, and How Is It Changing the Cybersecurity Talent Discussion? XOps describes the uniting of DevOps, DevSecOps, AIOps, and MLOps. ](/blog/what-is-xops-and-how-is-it-changing-the-cybersecurity-talent-discussion) - [ ![Cyber Risk and Digital Transformation: The Gap Is Growing](/__l5e/assets-v1/de0d6373-e225-4761-aa06-a2ca3a96b5aa/cyber-risk-and-digital-transformation-the-gap-is-growing-hero.webp) Dec 24, 2022 ## Cyber Risk and Digital Transformation: The Gap Is Growing Cyber risk and digital transformation can work in harmony toward business objectives, but it requires a strong culture and strategy. ](/blog/cyber-risk-and-digital-transformation-the-gap-is-growing) - [ ![The Cyber Threat No One Talks About, the Absence of a Cybersecurity Culture](/__l5e/assets-v1/32f33fb4-ef46-4140-b8d1-b8106518daf7/79e397e07fe3.jpg) Dec 24, 2022 ## The Cyber Threat No One Talks About, the Absence of a Cybersecurity Culture While the concept of a cybersecurity culture isn’t new, it’s still an internal challenge for most technical cybersecurity teams. ](/blog/the-cyber-threat-no-one-talks-about-the-absence-of-a-cybersecurity-culture) - [ ![Why Organizations Should Pivot to DevSecOps](/__l5e/assets-v1/3422eda7-b7d2-46f3-944f-add4710c63ee/why-organizations-should-pivot-to-devsecops-hero.webp) Dec 4, 2022 ## Why Organizations Should Pivot to DevSecOps The underlying foundation of DevSecOps is security by design. Security is a consideration at the conception of the project, not an afterthought. ](/blog/why-organizations-should-pivot-to-devsecops) - [ ![Cybersecurity Trends Every Professional Needs to Know in 2026](/__l5e/assets-v1/0e113ce6-3330-435c-95c7-b4440011c47c/7fe2814304a2.jpg) Dec 1, 2022 ## Cybersecurity Trends Every Professional Needs to Know in 2026 The threats, tools, and shifts shaping cybersecurity in 2026: AI-driven attacks and defense, identity as the new perimeter, regulatory pressure, and the human factor. ](/blog/2023-cybersecurity-trends-what-every-cyber-professional-needs-to-know) - [ ![3 Reasons Why Current Cybersecurity Measures Aren’t Working and How to Fix Them](/__l5e/assets-v1/14329788-03bf-4fcf-af89-ea2ea25c2642/3-reasons-why-current-cybersecurity-measures-arent-working-and-how-to-fix-them-hero.webp) Nov 14, 2022 ## 3 Reasons Why Current Cybersecurity Measures Aren’t Working and How to Fix Them The real reason cybersecurity measures are failing is because of a people problem. It’s the core foundation of my book, The Smartest Person in the Room. ](/blog/3-reasons-why-current-cybersecurity-measures-arent-working-and-how-to-fix-them) - [ ![What the Latest Cybersecurity Breaches Can Teach Us](/__l5e/assets-v1/013c8f1c-b46f-4cd3-937c-883a5c15a6fc/what-the-latest-cybersecurity-breaches-can-teach-us-hero.webp) Oct 8, 2022 ## What the Latest Cybersecurity Breaches Can Teach Us There’s no shortage of cybersecurity breaches, with fear-inducing headlines. There is much to learn in these situations. ](/blog/what-the-latest-cybersecurity-breaches-can-teach-us) - [ ![What Is Zero Trust Architecture, and Why Should Your Organization Shift to It?](/__l5e/assets-v1/304b164b-ab80-41fb-9fd3-6aaa8bd79546/what-is-zero-trust-architecture-and-why-should-your-organization-shift-to-it-hero.webp) Sep 27, 2022 ## What Is Zero Trust Architecture, and Why Should Your Organization Shift to It? Zero trust architecture describes a strategic approach to cybersecurity that enables an organization to be secure by eliminating implicit trust and replacing it with continuous validation. Its beginnings sprung from the “never trust, always verify” principle. ](/blog/what-is-zero-trust-architecture-and-why-should-your-organization-shift-to-it) - [ ![Will AI and Machine Learning Help or Hurt Cybersecurity?](/__l5e/assets-v1/49c4603f-95d7-46f3-ab99-12134fe3fcc6/ccf7a32baea2.jpg) Sep 27, 2022 ## Will AI and Machine Learning Help or Hurt Cybersecurity? AI and machine learning are helping and hurting cybersecurity. Technical teams can marry these tools with their own skills to produce the best security posture. ](/blog/will-ai-and-machine-learning-help-or-hurt-cybersecurity) - [ ![What Is Total Intelligence, and How To Build a Cyber Team to Lead with It](/__l5e/assets-v1/3942af0a-6807-4eb8-a3e9-f5a315925f2d/0056af4da510.jpg) Jul 21, 2022 ## What Is Total Intelligence, and How To Build a Cyber Team to Lead with It When making any decision, intelligence certainly plays a key role. However, often it’s only the logical, rational side of intelligence that people rely on, especially in worlds like cybersecurity. ](/blog/what-is-total-intelligence-and-how-to-build-a-cyber-team-to-lead-with-it) - [ ![Remote Work Is Here to Stay: The Impact on Cybersecurity](/__l5e/assets-v1/b96c40e9-63c2-444c-a182-8080d14d178a/3b7f3be46267.png) Jul 3, 2022 ## Remote Work Is Here to Stay: The Impact on Cybersecurity In the rush to remote enable staff, we know cybersecurity was an afterthought. Many organizations hobbled together different technologies. ](/blog/remote-work-is-here-to-stay-the-impact-on-cybersecurity) - [ ![Top 10 Organized Cybercrime Syndicates](/__l5e/assets-v1/de0f70b8-d1dd-4d5c-a035-335986b04204/top-10-organized-cybercrime-syndicates-hero.webp) Sep 12, 2021 ## Top 10 Organized Cybercrime Syndicates In this blog post, we discuss ten of the most notorious organized cybercrime syndicates and how they operate. ](/blog/top-10-organized-cybercrime-syndicates) - [ ![3 Steps to Hide Data in an Image Using Steganography](/__l5e/assets-v1/18c0aa89-574f-45e3-96b4-4234e281a67f/945051984db2.jpg) Sep 4, 2021 ## 3 Steps to Hide Data in an Image Using Steganography In this post we'll explain a simple method to hide data (any type of data - text, image, malware, etc.) in a JPEG. ](/blog/3-steps-to-hide-data-in-an-image-using-steganography) - [ ![2 Simple Ways to Extract GPS Coordinates from Images](/__l5e/assets-v1/77ad1c91-710b-4279-910e-dccfd0be35d0/2-simple-ways-to-extract-gps-coordinates-from-images-hero.webp) Sep 4, 2021 ## 2 Simple Ways to Extract GPS Coordinates from Images In this post, we'll cover two simple ways to extract Exif (Exchangeable image file) data, which includes GPS coordinates, from images. ](/blog/2-simple-ways-to-extract-gps-coordinates-from-images) - [ ![Top 10 Penetration Testing Decision Factors](/__l5e/assets-v1/54b23b1a-59f6-425a-8165-fa591bcdb0c5/fbed60cd7016.jpg) Sep 4, 2021 ## Top 10 Penetration Testing Decision Factors This article contains ten items you should consider when selecting an organization to perform a penetration test against your environment. ](/blog/top-10-penetration-testing-decision-factors) - [ ![6 Famous Hackers that Got Caught](/__l5e/assets-v1/9f1cbc1b-bc48-4874-baaa-e25c2c6c0b7c/05cb8f8144ea.jpg) Sep 4, 2021 ## 6 Famous Hackers that Got Caught The best hackers we never hear about. Here are the stories of six of the most famous hackers and how they were caught. ](/blog/6-famous-hackers-that-got-caught) - [ ![Penetration Testing History](/__l5e/assets-v1/17a36390-3422-47c9-9b11-77d78fb926d5/561cca0b66e5.jpg) Sep 4, 2021 ## Penetration Testing History The concept of penetration testing has been around since human beings first began trying to understand their enemies' thought processes. ](/blog/penetration-testing-history) - [ ![Leetspeak: The History of Hacking Subculture's Native Tongue](/__l5e/assets-v1/077b7b74-7f9c-4ebe-8104-a64e0d7ca76a/leetspeak-the-history-of-hacking-subcultures-native-tongue-hero.webp) Sep 4, 2021 ## Leetspeak: The History of Hacking Subculture's Native Tongue You've probably seen leetspeak, also known as 1337 or “l33t,” somewhere on the Internet or in a movie about computer hacking. ](/blog/leetspeak-the-history-of-hacking-subcultures-native-tongue) - [ ![Hacking Medical Devices for Profit and Terror](/__l5e/assets-v1/0489eb62-abed-472a-b89d-70bccbd477b9/hacking-medical-devices-for-profit-and-terror-hero.webp) Sep 4, 2021 ## Hacking Medical Devices for Profit and Terror Covers background on why medical device security is something to pay attention to, the four attack objectives, and solutions. ](/blog/hacking-medical-devices-for-profit-and-terror) - [ ![Cybersecurity Risk Needs to be Simplified](/__l5e/assets-v1/1fe08f2c-d5e8-45a0-833f-2079715325ce/cybersecurity-risk-needs-to-be-simplified-hero.webp) Sep 4, 2021 ## Cybersecurity Risk Needs to be Simplified Complexity is the enemy of execution. Unnecessary complication is tied to ego & lack of clarity. In cybersecurity everything is overly complicated. ](/blog/cybersecurity-risk-needs-to-be-simplified) - [ ![Questions to Ask a vCISO](/__l5e/assets-v1/41b2490e-f77a-482c-ab49-1051ee5c215f/questions-to-ask-a-vciso-hero.webp) Sep 4, 2021 ## Questions to Ask a vCISO Many companies rush into finding fractional vCISO services and end up with a relationship they did not expect. Ask the right questions first. ](/blog/questions-to-ask-a-vciso) - [ ![Top 10 Largest Healthcare Data Breaches by Number of Records Stolen](/__l5e/assets-v1/46935594-b1a4-423d-acbf-fcb08859ec4c/top-10-largest-healthcare-data-breaches-by-number-of-records-stolen-hero.webp) Sep 3, 2021 ## Top 10 Largest Healthcare Data Breaches by Number of Records Stolen Healthcare data breaches have increased in both scale and regularity during the last decade, with the worst affecting up to 80 million people. ](/blog/top-10-largest-healthcare-data-breaches-by-number-of-records-stolen) - [ ![Explanation of Cybersecurity Hashing and Collisions](/__l5e/assets-v1/fb018841-3305-449c-a73d-140b25bb237f/explanation-of-cybersecurity-hashing-and-collisions-hero.jpg) Aug 29, 2021 ## Explanation of Cybersecurity Hashing and Collisions This post is a transcript of Christian Espinosa's explanation of cybersecurity hashing and collisions, including an MD5 collision demo. ](/blog/explanation-of-cybersecurity-hashing-and-collisions) - [ ![Explanation of the Cybersecurity CIA Triad](/__l5e/assets-v1/be4ae1a7-d388-41cf-83dd-8151b166a6ae/0b058f6e8a8d.jpg) Aug 29, 2021 ## Explanation of the Cybersecurity CIA Triad This post is a transcript of Christian Espinosa's explanation of the cybersecurity CIA triad including the opposite, DAD. ](/blog/explanation-of-the-cybersecurity-cia-triad) - [ ![Black Box Penetration Testing Explained](/__l5e/assets-v1/e4586cb9-cad8-4a85-9af2-56bbb158d032/black-box-penetration-testing-explained-hero.webp) Aug 29, 2021 ## Black Box Penetration Testing Explained This post is a transcript of Christian Espinosa's explanation of Black Box Penetration Testing and how White, Gray, and Black relate. ](/blog/black-box-penetration-testing-explained) - [ ![Gray Box Penetration Testing Explained](/__l5e/assets-v1/3ea06c10-b401-4f82-912e-7f2d26acbbda/gray-box-penetration-testing-explained-hero.webp) Aug 29, 2021 ## Gray Box Penetration Testing Explained This post is a transcript of Christian Espinosa's explanation of Gray Box Penetration Testing and how White, Gray, and Black relate. ](/blog/gray-box-penetration-testing-explained) - [ ![White Box Penetration Testing Explained](/__l5e/assets-v1/5f743bc7-e070-4ca7-af22-2e9fc2d54d22/white-box-penetration-testing-explained-hero.jpg) Aug 27, 2021 ## White Box Penetration Testing Explained This post is a transcript of Christian Espinosa's explanation of White Box Penetration Testing and how White, Gray, and Black relate. ](/blog/white-box-penetration-testing-explained) - [ ![Adapting in Cybersecurity: Why Agility Matters](/__l5e/assets-v1/17dbc180-cdc2-4486-99b9-610a89f5b34f/adapting-in-cybersecurity-why-agility-matters-hero.webp) Mar 24, 2021 ## Adapting in Cybersecurity: Why Agility Matters Adapting in cybersecurity and being agile have long been hallmarks of the field. After all, there’s always a new threat or risk, so the industry is certainly not static. ](/blog/adapting-in-cybersecurity-why-agility-matters) - [ ![Risk Comprehension Is a Basic Cybersecurity Skill, Yet Most Practitioners Lack It](/__l5e/assets-v1/f93564e3-e6d8-44e9-aaaa-b97624f44df5/risk-comprehension-is-a-basic-cybersecurity-skill-yet-most-practitioners-lack-it-hero.webp) Feb 10, 2021 ## Risk Comprehension Is a Basic Cybersecurity Skill, Yet Most Practitioners Lack It Risk assessment is essential to proactive and reactive cybersecurity plans, yet most cybersecurity professionals do not understand risk. ](/blog/risk-comprehension-is-a-basic-cybersecurity-skill-yet-most-practitioners-lack-it) - [ ![Your Cybersecurity Framework Is Overcomplicated - Here's Why](/__l5e/assets-v1/b23a18dd-7eec-46be-a689-2877b2de8d78/d16bf6b87e75.jpg) Feb 4, 2021 ## Your Cybersecurity Framework Is Overcomplicated - Here's Why Let’s be frank and honest, your cybersecurity framework is overcomplicated. Simplicity is better than complexity. ](/blog/your-cybersecurity-framework-is-overcomplicated-heres-why) - [ ![Your Cybersecurity Methods Are Failing - Here’s Why](/__l5e/assets-v1/fdae523c-39db-4166-83ee-b0f37a068460/726b29a19273.jpg) Feb 2, 2021 ## Your Cybersecurity Methods Are Failing - Here’s Why As much as every organization wants to believe they are cyber secure, the reality paints a different story. ](/blog/your-cybersecurity-methods-are-failing-heres-why) - [ ![The Cybersecurity Status Quo Needs to Change](/__l5e/assets-v1/5637ec7a-bc83-42ca-99dc-0d301108ac11/the-cybersecurity-status-quo-needs-to-change-hero.webp) Jul 21, 2020 ## The Cybersecurity Status Quo Needs to Change With cybersecurity, there is a status quo, this movement that we just keep following, but it's not helping. It's time to challenge the cybersecurity status quo. ](/blog/the-cybersecurity-status-quo-needs-to-change) - [ ![Ransomware – Should You Pay?](/__l5e/assets-v1/6739ab99-8557-4c07-8b5c-b79b02e67cc0/d3095526dda5.jpg) Jul 3, 2020 ## Ransomware – Should You Pay? What do you do if you get ransomware in healthcare or critical infrastructure? Should you pay the ransom? How do you prevent ransomware? ](/blog/ransomware-should-you-pay) - [ ![Aviation Cybersecurity – Hacking Aircraft](/__l5e/assets-v1/202f044c-8938-4e28-97a0-d2d023d97281/aviation-cybersecurity-hacking-aircraft-hero.webp) Jun 3, 2020 ## Aviation Cybersecurity – Hacking Aircraft The risk of successful hacks of aircraft is increasing. Aircraft are complex systems with long supply chains and legacy systems and protocols. ](/blog/aviation-cybersecurity-hacking-aircraft) - [ ![Why Small Businesses Are Still the #1 Cybercrime Target in 2026](/__l5e/assets-v1/13cc7366-511f-4407-9a1d-49568b872401/332629a66660.jpg) Jan 24, 2020 ## Why Small Businesses Are Still the #1 Cybercrime Target in 2026 Small and mid-sized businesses absorb the majority of cyberattacks. Here's why attackers target them, what's changed since 2020, and the practical defenses that actually work. ](/blog/70-of-cyber-attacks-will-be-against-small-businesses-in-2020) - [ ![Medical Device Hacking and the Vulnerability of Connected Medical Devices](/__l5e/assets-v1/37227301-dd7f-4cd8-b54b-2b85e4729102/medical-device-hacking-and-the-vulnerability-of-connected-medical-devices-hero.jpg) Nov 13, 2018 ## Medical Device Hacking and the Vulnerability of Connected Medical Devices Christian Espinosa is interviewed by Kim Komando on hacking medical devices. From pacemakers to hospital equipment, nearly anything can be hacked. This risk is real. ](/blog/medical-device-hacking-and-the-vulnerability-of-connected-medical-devices) [← All posts](/blog) Christian Espinosa Bestselling author, keynote speaker, and Founding CEO of [Blue Goat Cyber](https://bluegoatcyber.com/). Helping technical leaders develop the soft skills that turn brilliance into impact. [](https://www.linkedin.com/in/christianespinosa/)[](https://x.com/Ironracer)[](https://www.instagram.com/christian.espinosa.official/)[](https://www.youtube.com/@ChristianEspinosaOfficial)[](https://www.facebook.com/christian.espinosa.official) Explore - [About](/about) - [Timeline](/timeline) - [Speaking](/speaking) - [Cybersecurity](/cybersecurity) - [Programs](/programs) Read - [Books](/books) - [Guides](/guides) - [Blog](/blog) - [Media](/media) - [Podcast Interviews](/podcasts) - [Success Stories](/success-stories) Connect - [Contact Christian](/connect) - [LinkedIn ↗](https://www.linkedin.com/in/christianespinosa/) - [Blue Goat Cyber ↗](https://bluegoatcyber.com/) - [Resources](/resources) © 2026 Christian Espinosa. All rights reserved. [Privacy](/privacy-policy)[Terms](/terms-of-use)