Know Your Adversary | Rady Children's Hospital with Special Guest Sahan Fernando (Ep. 18)
Source: YouTube · SpecterOps · published Oct 15, 2026 · 34:35
Sahan Fernando, CISO of Rady Children's Health San Diego, joins Know Your Adversary to discuss attack path management, AI's impact on offensive security, and healthcare-specific risk 0:13-0:47.
Key Takeaways:
• Attack path management has expanded beyond AD to hybrid identities, cloud, and tools like GitHub, creating nested dependencies—GitHub relies on Entra, which relies on AD password sync 2:32-3:01
• AI is democratizing complex attack chains, dropping attacker cost toward zero; it also enables launching thousands of simultaneous attacks to overwhelm defenders—detection isn't response or remediation 6:12-8:23
• AI creates an accountability nexus for CISOs: it's harder to claim ignorance of attack path risk than with periodic pen tests and gap assessments 13:47-14:56
• Visualizing paths to domain admin in BloodHound makes abstract lateral movement risk concrete for non-technical CISOs 17:52-19:42
• For healthcare, downtime is existential: Rady is the regional level-one pediatric trauma center, and ransomware has been linked to infant mortality 25:04-27:19
The episode closes with plans to reconnect at Black Hat and DEF CON, with Sahan teasing upcoming news 33:34-33:46.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] [music] Hi, welcome back to the Know Your Adversary podcast. My name is Justin Kohler >> and I'm Jared Atinson >> and today we're joined by Sahan Fernando from Ray Children's Hospital. Sahan, awesome to see you. >> Thanks so much for having me. It's great to see the both of you again. >> Yeah, likewise. Before we get all into all the stuff we want to talk about today, can you just give us a like a background of you for the folks listening in? >> Absolutely. So the shorter version is I am chief information security officer for Ray Children's Health San Diego. We are one of the largest pediatric healthcare institutions in the United States. We focus predominantly for Southern California but provide services all throughout. and I've been here a little under 6 years. Before that, I had…