Hacking Back, Legal Limits, and the Future of Cybersecurity Regulation

About this episode

Cristin Flynn Goodwin discusses the complexities of cybersecurity law and the implications of emerging technologies.

In this episode of Trust vs., cybersecurity law expert Cristin Flynn Goodwin joins the show to break down some of the most nuanced (and misunderstood) topics in cyber: active defense, regulation, and the legal implications of emerging tech like agentic AI. With over 17 years at Microsoft leading incident response and threat intel, Cristin shares what it really takes to disrupt nation-state actors, why “hacking back” is more emotional than practical, and how regulations like the EU Cyber Resilience Act are reshaping third-party risk. She also looks ahead to what may be the most complex challenge yet: governing AI agents in an identity-driven world.  Meet Ryan: https://www.linkedin.com/in/ryan-patrick-3699117a/ Meet Jeremy: https://www.linkedin.com/in/jeremyhuval Meet Cristin: linkedin.com/in/cristin-flynn-goodwin-24359b4 Cristin’s Podcast "Advancing Cyber": https://advancingcyber.com/

People in this episode

Hosts: Ryan Patrick, Jeremy Huval

Guest: Cristin Flynn Goodwin

Topics covered

• cybersecurity
• active defense
• regulation
• AI governance
• third-party risk

Keywords

• cybersecurity
• hacking back
• regulation
• AI
• third-party risk
• active defense

Mentioned in this episode

Organizations: Microsoft, EU Cyber Resilience Act

Books & works: Advancing Cyber

More episodes of Trust vs.

• Cybercrime Has Gone Cartel · December 18, 2025 · 29 min
• When Your AI Has a Login and a Mind of Its Own · November 6, 2025 · 38 min
• Why Compliance Fatigue Is a National Security Risk · October 23, 2025 · 42 min
• Why SOC 2 May Not Prove Security Anymore · October 9, 2025 · 41 min
• Chaos, Culture, and Cyber Resilience · September 25, 2025 · 37 min
• Uncle Ronnie and the Problem with AI Security · September 11, 2025 · 32 min