Cyber Heard

It's Not the Tool, It's the Process

Bruno Bossola, Co-Founder & CTO at Meterian

2 October 2026 · 22 min

Bruno Bossola explains why dependency and supply chain risk keeps slipping past security teams, and why the fix is rarely another scanner but a proper process across the whole development lifecycle. He also sets out why AI coding assistants are quietly reintroducing vulnerable libraries at scale.

Application SecurityOpen SourceSupply Chain SecurityAI CodingSoftware Development Lifecycle

Listen and subscribe

Spotify Apple Podcasts YouTube RSS

More episodes

30 September 2026

More Tech Isn't the Answer: The Human Factor in Cyber

Joe Hubback

28 September 2026

Most Security Problems Are Really Access Control Problems

Thomas Owen

25 September 2026

Don't Sweat Quantum, Sweat Your Attack Surface

Alan Simpson

The 24-hour rule
Why slow Cyber Hiring is now a board risk

A 16-page invitise briefing for cyber, risk and people leaders. Why the hiring window has narrowed, what 24-hour mobilisation actually requires, and the four conditions that have to be true for next-morning on-site to mean something.

55%

of senior cyber roles take 6 months or longer to fill in the UK.

46 days

longer than other IT roles, senior cyber vacancies stay open.

68%

of large UK businesses now own cyber at board level.

It's Not the Tool, It's the Process

More episodes

The 24-hour rule Why slow Cyber Hiring is now a board risk

The 24-hour rule
Why slow Cyber Hiring is now a board risk