Cybersecurity News & Analysis by Cyber Sidekicks - Your Weekly Update’ · Christina Richmond | Rory Duncan - Cybersecurity Experts | Richmond Advisory Group

Finding the Evidence: Digital Forensics, AI & Incident Response with CyXcel's Danny Howett

·38 min·2 clips

Danny says 20–30% of the organizations he supported over a few years lacked cyber insurance.

1. Cyber Sidekicks focuses on October 2025 Cyber Security Awareness Month, the “Build a Cyber-Strong America” theme, and the new AI phrase “Work Slop.” 2. Christina Richmond and Rory Duncan host the show as Richmond Advisory Group’s principal analysts, and Danny Howitt joins as Technical Director at CyXL. 3. The episode asks why incident response, legal counsel, and forensics matter together when a cyber crisis hits. 4. Christina explains that “Work Slop” comes from a Harvard Business Review report about AI-generated work that looks useful but pushes cleanup work downstream. 5. Rory adds that “slop squatting” refers to hallucinated package names that malicious actors can turn into malware delivery. 6. Danny introduces CyXL’s model as a combination of proactive planning, incident response, and legal service under one roof. 7. He says CyXL’s “global legal service” can provide advice across a range of countries. 8. Christina and Rory discuss Cyberbit’s acquisition of RangeForce and describe it as a combined cyber range platform. 9. They describe RangeForce as focused on solo and team exercises, skills-gap analysis, and blue-team and red-team content. 10. They describe Cyberbit as emphasizing SOC enablement, advanced operator investigation, and real commercial tools in daily-work environments. 11. Danny says he spent 13 years as a detective with Bedfordshire Police working in CID. 12. He says his last five or six years in policing were in the Cybercrime Unit, supporting analysis of computers and mobile phones. 13. Danny says the organizations he supports often need help with root-cause analysis after an incident. 14. He says threat actors delete event logs and bash history, but the bigger issue is often that logs were never retained long enough. 15. He warns that quick recovery without preserving data can overwrite infected machines before forensic work is complete. 16. He says he has worked on cases where organizations were hit by ransomware again six months later after fixing systems too quickly. 17. Danny says roughly 20–30% of the hundreds of organizations he has supported did not have cyber insurance in place. 18. He links recent UK disruptions at Jaguar Land Rover, M&S, and the co-op to major supply-chain impact and a £1.5 billion government loan. 19. The conversation is interview-driven, practical, and technical, with Christina and Rory pressing Danny for concrete incident-response advice. 20. The episode will suit listeners who want incident-response, DFIR, and cyber-resilience detail, and skip it if they want lighter news only.

As heard by us

A grounded look at why cyber response works better with legal readiness close by.

Cyber Sidekicks brings the aftermath of a cyberattack into practical focus, as Christina Richmond and Rory Duncan talk with Danny about why incident response and legal advice may need to be handled together.

Read the full review in PlayNext →

Why you'd press play

Need to know who you might want beside you when a cyberattack becomes a legal and regulatory problem?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Cybersecurity News & Analysis by Cyber Sidekicks - Your Weekly Update’