The CyberCall Podcast
The Voice of Cybersecurity for MSPs & MSSPs!
The CyberCall is the weekly podcast where cybersecurity meets business reality. Hosted by Andrew Morgan, Founder of Right of Boom, this is the go-to show for Managed Service Providers (MSPs), virtual CISOs (vCISOs), and IT leaders navigating the complex world of cyber risk, compliance, and AI.
Each episode features raw, practical conversations with the sharpest minds in cybersecurity—from operators in the trenches to CISOs, researchers, policymakers, and toolmakers shaping the future. If you care about protecting your clients, growing your practice, and becoming the security partner businesses trust—this podcast is your playbook.
Co hosts: Phyllis Lee, VP of Content at CIS & Gary Pica, President of TruMethods
The CyberCall Podcast
The AI Threat Hype vs. the BEC Reality
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Everywhere you look right now, we're hearing about AI-powered cyberattacks and what attackers might be capable of next. But while we're preparing for the attack of tomorrow, what are MSPs actually fighting today?
Nathan Taylor at Sourcepass told me it's been non-stop business email compromise and Microsoft 365 hardening. And one attack in particular is exploding: device-code phishing.
What's concerning is that attackers aren't necessarily exploiting some new vulnerability. In many cases, they're abusing legitimate Microsoft authentication workflows, stealing sessions and tokens, and turning trusted identities against us.
So today I want to separate the hype from what's actually happening in the field.
How are attackers getting into M365 environments? Why isn't MFA always stopping them? What are MSPs getting wrong when hardening Microsoft 365? And what should we be doing differently right now?