Future of Threat Intelligence

Future of Threat Intelligence

By Team CymruBusiness
Download on the App Store

Future of Threat Intelligence episodes

  • Transcend's Aimee Cardwell on Turning Security into a Growth Driver

    Most security leaders position themselves as guardians against risk, but Aimee Cardwell, CISO in Residence at Transcend and Board Member at WEX, built her reputation on a different approach: balancing risk to accelerate business growth. Her unconventional path from Fortune 5 CIO to CISO of a 1,200-person security team at UnitedHealth Group showcases how technical leaders can become true business partners rather than obstacles.

    Managing two company acquisitions every month, Aimee tells David how she developed a shifted-left security integration process that actually accelerated deal timelines while improving security outcomes. Her framework for risk appetite conversations moves executives beyond fear, uncertainty and doubt into productive discussions about cyber resilience, changing how organizations think about security investment and business enablement.

     

    Topics discussed:

    • How healthcare data regulations create complex compliance frameworks where companies must selectively forget customer information based on overlapping regulatory requirements.
    • The transferable advantages CIOs bring to CISO roles, particularly in software development lifecycle security and communicating complex technical concepts to non-technical stakeholders.
    • Shifting security strategy from risk prevention to intelligent risk balancing, enabling business growth while maintaining appropriate protection levels.
    • Managing large-scale acquisition security integration through pre-closing requirements that accelerate post-acquisition security improvements.
    • Establishing organizational risk appetite through worst-case scenario planning that moves leadership past emotional responses into rational decision-making frameworks.
    • Developing cyber resilience strategies that assume incident occurrence and focus on recovery speed and impact minimization rather than just prevention.
    • Scaling security controls based on business growth milestones, avoiding upfront overinvestment while ensuring appropriate protection as companies expand.
    • Building consensus-driven risk acceptance frameworks while managing competing perspectives from multiple C-level executives and board members.
    • Key Takeaways: 

      • Implement pre-closing security requirements for acquisitions, shifting security integration 45 days before deal completion to accelerate post-acquisition timelines.
      • Frame risk conversations around worst-case scenario analysis, using real examples and stock performance data to move executives past emotional responses and build resiliency.
      • Develop tiered security controls that scale with business growth, implementing basic protections early and adding complexity as revenue and user bases expand.
      • Position regulatory compliance as a competitive advantage and trust-building mechanism rather than a business constraint.
      • Create "how do we get to yes" frameworks that start with business objectives and work backward to appropriate risk mitigation strategies.
      • Use customer trust metrics and retention data to demonstrate security's direct contribution to business growth and competitive positioning.
      • Leverage software development lifecycle experience to integrate security into engineering processes rather than treating it as an external validation step.
      • Listen to more episodes: 

        Apple 

        Spotify 

        YouTube

        Website

        28 min
      • Digital Asset Redemption's Steve Baer on Criminal Business Models

        The economics of ransomware reveal a sophisticated criminal enterprise that most security leaders dramatically underestimate. Steve Baer, Field CISO at Digital Asset Redemption, operates at the intersection of cybercrime and legitimate business, where his team's human intelligence gathering in Dark Web communities provides early warning systems that traditional security infrastructure cannot match. His insights into criminal business models, negotiation psychology, and the financial flows funding modern cybercrime offer a perspective rarely available to security practitioners.

        Steve walks David through Digital Asset Redemption's evolution from facilitating compliant cryptocurrency payments to building comprehensive threat intelligence capabilities using native speakers who maintain long-term relationships with criminal actors. His team's approach has enabled them to identify targeting intelligence before attacks occur and, in one notable case, leverage personal information about an attacker to secure free decryption keys for a nonprofit organization.

        Topics discussed:

        • The ransomware-as-a-service ecosystem where criminal affiliates can launch operations for $40-200 monthly subscriptions and achieve 10% success rates, generating millions in revenue.
        • How Dark Web markets extend beyond stolen credentials to include zero-day vulnerabilities starting at $100,000, access broker services targeting specific organizations, and complete compromise kits for enterprise security tools.
        • The organizational structures of criminal enterprises that mirror RICO-era mafia operations through loose affiliations rather than hierarchical control, making traditional law enforcement approaches ineffective.
        • Negotiation psychology and tactics used in ransom discussions, including the business incentives that motivate threat actors to provide working decryption keys and maintain operational reputation.
        • Financial models underlying cybercrime operations, including revenue sharing with affiliate programs, bonus structures for successful targeting, and the necessity of cryptocurrency laundering services.
        • Market indicators for measuring criminal enterprise growth, including quarterly analysis of unique threat actor groups, highest ransom demands, and seasonal patterns in retail-focused attacks.
        • Human intelligence gathering techniques using multiple personas and native language speakers to build long-term relationships within criminal communities for early warning capabilities.
        • The economic realities that enable small criminal teams to generate substantial revenue while operating from countries where attacking American institutions is legally encouraged rather than prosecuted.
        • Why technical compliance frameworks provide insufficient protection against adversaries who can purchase complete compromise capabilities for mainstream security technologies.
        • Key Takeaways: 

          • Implement human intelligence capabilities to complement technical security controls, recognizing that criminal innovation often outpaces defensive technology deployment.
          • Understand the true economics of ransomware operations, where criminal affiliates can achieve substantial returns with minimal upfront investment through established service models.
          • Prepare comprehensive incident response plans that include professional negotiation capabilities, legal frameworks for attorney-client privilege, and understanding of criminal psychology.
          • Monitor Dark Web markets not just for credential exposure but for targeting intelligence, access broker activity, and the availability of compromise kits specific to your security stack.
          • Establish relationships with specialized incident response firms before needing them, understanding that ransom negotiations require specific expertise and cannot be effectively handled internally.
          • Focus security education on understanding adversarial capabilities and business models rather than solely on compliance requirements or singular technology solutions.
          • Listen to more episodes: 

            Apple 

            Spotify 

            YouTube

            Website

            25 min
          • McAfee's Manisha Agarwal-Shah on Testing Ransomware Plans Before You Need Them

            Most security leaders are fighting yesterday's ransomware war while today's attackers have moved to data exfiltration and reputation destruction. Manisha Agarwal-Shah, Deputy CISO at McAfee, brings 18 years of cybersecurity experience from consulting through AWS to explore why traditional ransomware defenses miss the mark against modern threat actors. Her framework for building security teams prioritizes functional coverage over deep expertise, ensuring organizations can respond to crises even when leadership transitions occur.

            Manisha tells David how privacy regulations like GDPR actually strengthen security postures rather than create compliance burdens. She also shares practical strategies for communicating technical threats to C-suite executives and explains why deputy CISO roles serve organizational continuity rather than ego management. Her insights into ransomware evolution trace the path from early scareware through encryption-based attacks to today's supply chain infiltration and data theft operations.

             

            Topics discussed:

            • The evolution of ransomware from opportunistic scareware to sophisticated supply chain attacks targeting high-value organizations through trusted vendor relationships.
            • Building security team structures that prioritize functional coverage across cyber operations, GRC, and product security rather than pursuing deep expertise in every domain.
            • The strategic role of deputy CISO positions for organizational continuity and crisis leadership when primary security executives are unavailable or in transition.
            • How privacy regulations like GDPR, HIPAA, and PCI DSS create security baselines that complement rather than conflict with proactive defense strategies.
            • Communicating technical ransomware risks to non-technical executives through business impact frameworks and regular steering committee discussions.
            • AI-driven behavioral anomaly detection capabilities for identifying unusual file encryption patterns and suspicious process activities before damage occurs.
            • Comprehensive ransomware response planning including executive battle cards, offline playbook storage, and tested communication channels for network-down scenarios.
            • The shift from encryption-based ransomware to data exfiltration and reputation damage attacks that bypass traditional backup and recovery strategies.
            • Cloud security posture management implementations for organizations operating in hybrid on-premises and cloud environments.
            • Data retention and minimization strategies that reduce blast radius during security incidents while maintaining regulatory compliance requirements.
            •  

              Key Takeaways: 

              • Document a comprehensive ransomware response plan that includes executive battle cards for each C-suite role and store it in offline, restricted locations accessible when networks are compromised.
              • Test your ransomware playbook regularly with all key decision makers in simulated scenarios to ensure everyone understands their roles and responsibilities during actual incidents.
              • Build security teams with functional coverage across cyber operations, GRC, and product security rather than pursuing deep expertise in every domain when resources are limited.
              • Establish deputy CISO roles for organizational continuity and crisis leadership, ensuring someone can engage executives and coordinate incident response when primary leadership is unavailable.
              • Communicate technical ransomware threats to non-technical executives through business impact frameworks that translate technical risks into financial and reputational consequences.
              • Implement AI-driven behavioral anomaly detection systems that can identify unusual file encryption patterns and suspicious process activities before ransomware damage occurs.
              • Deploy immutable backup solutions as one layer of defense, but recognize they won't protect against data exfiltration and reputation-based ransomware attacks.
              • Leverage privacy regulations like GDPR, HIPAA, and PCI DSS as security baselines that provide data minimization, retention limits, and protection requirements.
              • Create pre-established relationships with cyber insurance brokers, forensics providers, breach response teams, and public relations firms before ransomware incidents occur.
              • Focus on cloud security posture management tools to identify misconfigurations and external exposures in hybrid cloud environments targeted by threat actors.
              • Listen to more episodes: 

                Apple 

                Spotify 

                YouTube

                Website

                21 min
              • EP 24 — McKinstry's Jeff Hughes on Energy Strategies for Mid-Market

                Jeff Hughes brings a 15-year perspective on why solar consistently delivers returns while battery storage requires completely different evaluation criteria based on whether you're optimizing for savings or resilience. Jeff also explains why the Inflation Reduction Act fundamentally shifted energy project financing toward ownership models and how organizations can scale renewable energy programs without the common pitfall of trying to deploy across entire portfolios simultaneously.

                 

                As National Senior Director of Distributed Energy Resources at McKinstry, Jeff has deployed clean energy solutions across public and private sectors, giving him rare insight into what separates successful programs from expensive mistakes. His insights on utilities as partners rather than competitors, plus emerging technologies like micro grids and EV infrastructure catalysts, provide a roadmap for the next phase of commercial clean energy adoption.

                 

                Topics discussed:

                 

                • The fundamental difference between solar economics that work everywhere versus battery storage applications that require specific use case justification.
                • How energy-as-a-service models allow organizations to deploy renewable energy without upfront capital while maintaining predictable payment structures over time.
                • Portfolio-wide site evaluation strategies that identify which properties offer the shortest payback periods and highest returns on renewable energy investments.
                • Why Fortune 500 virtual power purchase agreements work for large organizations but distributed generation delivers better results for mid-market companies.
                • The critical distinction between performance guarantees that cover parts and labor versus comprehensive guarantees that include actual energy production shortfalls.
                • How single end-to-end system providers eliminate the accountability gaps that occur when engineering, construction, and maintenance are fragmented across multiple vendors.
                • The evolution of utility relationships from adversarial to collaborative, including data sharing across the meter and coordinated energy optimization strategies.
                • Why the Inflation Reduction Act's tax credit transferability and direct pay options fundamentally shifted energy project financing toward ownership models.
                • The slow-down-to-go-fast approach for scaling renewable energy programs through pilot projects before deploying programmatically across entire portfolios.
                • How EV infrastructure deployment is becoming the catalyst for battery storage and solar integration in commercial real estate applications.
                • The role of micro grids and advanced controls in creating islanded energy ecosystems that combine solar, battery storage, and EV charging infrastructure.
                • Why data centers are driving innovation in long-duration battery storage and alternative energy technologies beyond traditional renewable sources. 
                • 28 min
                • Team Cymru's Threat Researchers on Operation Endgame Intelligence

                  Team Cymru's threat researchers have spent years developing an almost psychological understanding of cybercriminals, tracking their behavioral patterns alongside technical infrastructure to predict where attacks will emerge before they happen. Josh and Abigail share with David how their multi-year tracking of Russian cybercrime groups enabled critical contributions to Operation Endgame. Their work demonstrates how sustained intelligence gathering creates opportunities for law enforcement victories that reactive security cannot achieve.

                  Drawing from Josh's eight years at Team Cymru and background in law enforcement national security investigations, and Abigail's specialization in Russian cybercrime tracking, they reveal how NetFlow telemetry provides unprecedented visibility into criminal operations. Their approach goes far beyond traditional indicator-based threat intelligence, focusing instead on understanding the human patterns that drive criminal infrastructure deployment and management.

                  Topics discussed:

                  • The evolution of Team Cymru's threat research mission from ad hoc investigations to formalized self-tasking teams.
                  • How NetFlow telemetry enables upstream infrastructure mapping that reveals criminal backend systems invisible to traditional security tools.
                  • The behavioral analysis techniques that distinguish between different criminal operators based on work schedules, personal browsing habits, and infrastructure access patterns.
                  • Why collaboration between private sector researchers and law enforcement requires transparency and trust-building rather than hoarding intelligence behind restrictive sharing classifications.
                  • How Operation Endgame demonstrated the effectiveness of combining multiple organizational perspectives on the same threats, with each contributor providing unique visibility into different attack components.
                  • The measurement challenges in threat research success when outcomes depend on external decision-makers and sensitive operations may not publicly acknowledge private sector contributions.
                  • Why financially motivated threat actors are shifting from mass spray-and-pray campaigns to more targeted, higher-payout operations.
                  • How click-fix attacks exploit human psychology by convincing victims to execute malicious commands themselves.
                  • The dual-edged impact of AI on cybercrime, lowering barriers to entry for malicious actors while simultaneously enabling more sophisticated social engineering and automation capabilities.
                  • Why security awareness training must evolve beyond identifying typos and obvious phishing indicators to address AI-generated content and sophisticated impersonation techniques.
                  • Key Takeaways: 

                    • Build long-term tracking capabilities that focus on understanding threat actor behavior patterns rather than chasing individual indicators or campaigns.
                    • Implement NetFlow telemetry analysis to identify upstream infrastructure connections that reveal criminal backend systems before they're deployed operationally.
                    • Develop collaborative relationships with law enforcement and private sector partners based on transparency and shared mission objectives.
                    • Create threat research teams with self-tasking authority to focus on societally important threats rather than customer-driven priorities that may miss critical criminal activity.
                    • Establish behavioral profiling techniques that distinguish between different criminal operators based on work patterns, personal interests, and infrastructure access methods.
                    • Invest in sustained intelligence gathering capabilities that track threat actors across multiple campaigns and infrastructure changes over extended periods.
                    • Prepare for the increasing sophistication of click-fix attacks by educating users about command execution risks and implementing controls that detect suspicious copy-paste activities.
                    • Develop AI-aware security awareness training that addresses deepfake voice calls, sophisticated impersonation techniques, and realistic-looking malicious websites.
                    • Build measurement frameworks for threat research success that account for external decision-making timelines and sensitive operation requirements.
                    • Listen to more episodes: 

                      Apple 

                      Spotify 

                      YouTube

                      Website

                      28 min
                    • EP 23 — Congruent Ventures' Abe Yokell on How Climate Risk Is Mispriced in CRE Assets

                      As one of Omnidian's first investors and current board member, Abe Yokell, Co-founder & Managing Partner at Congruent Ventures, brings a unique perspective to commercial real estate sustainability. Abe explains why technology-enabled service models are essential for scaling distributed energy resources and how stakeholder misalignment continues to block wider CRE sustainability adoption despite superior economics.

                       

                      Abe tells Sean how successful climate tech companies solve real economic problems rather than just environmental ones. He shares frameworks for identifying which sustainability investments will deliver outsized returns and why the current macro environment creates both challenges and opportunities for climate venture capital. Abe also discusses how climate risk remains dramatically underpriced in real estate markets worth trillions of dollars, creating inevitable repricing pressure that could emerge gradually over decades or suddenly within years. 

                       

                      Topics discussed:

                       

                      • How the 2008 financial crisis created the foundation for today's climate tech success by driving down physical asset costs while mainstream ventures fled the sector.
                      • The economics versus financing paradox in commercial solar where superior unit economics meet impossible credit underwriting compared to residential and utility-scale deployment.
                      • Why technology-enabled service models are essential for solar O&M profitability using remote diagnostics to achieve one-truck-roll economics rather than expensive repeat site visits.
                      • The stakeholder misalignment challenge in triple-net lease structures where building owners bear sustainability investment costs while tenants capture operational savings.
                      • How distributed energy resources including EVs, batteries, and solar require orchestration platforms to harmonize with utility systems under unprecedented demand pressure from electrification and data center growth.
                      • The venture capital methodology of evaluating founder market fit and accessible markets versus large but inaccessible energy market opportunities that don't support venture outcomes.
                      • How the current macro environment creates a have and have-not dynamic in venture capital with AI receiving disproportionate capital while climate tech faces LP allocation challenges.
                      • The evolution of climate tech from ideological to economic drivers where intelligent financial decisions align with environmental outcomes regardless of policy environment.
                      • Why commercial and industrial rooftops represent one of the largest untapped solar resources in the United States despite superior economics compared to other deployment classes.
                      • 38 min
                      • EP 22 — Activate Capital's Eric Meyer on Portfolio Construction for Energy Edge

                        The convergence of AI load growth and distributed generation is creating a once-in-a-generation opportunity for commercial real estate owners. Eric Meyer, Partner at Activate Capital, reflects on how, after a decade of utilities fighting distributed solar, 4% annual demand growth is forcing an "all solutions on deck" mentality that changes the competitive landscape.

                         

                        Eric outlines Activate's unique approach to climate investing for Sean: rather than betting on early-stage technologies, they target growth-stage businesses with proven product-market fit and real revenue streams. Their portfolio construction strategy around distributed energy assets provides a blueprint for understanding how the energy transition will actually unfold at scale.

                         

                        Topics discussed:

                        • AI-driven load growth is ending the utility "death spiral" narrative and creating collaborative opportunities between utilities and distributed generation developers.
                        • A growth-stage investment approach targeting businesses with real product-market fit rather than early-stage climate technologies, requiring billion-dollar exit potential.
                        • The portfolio construction strategy around distributed energy assets, spanning financing, flexibility, power electronics, and asset management to capture the full value chain.
                        • Why battery storage adoption in commercial applications significantly lags residential deployment despite similar economic fundamentals and potential solutions.
                        • How interconnection queue bottlenecks favor solar and wind over natural gas generation, creating 2-year versus 5-year development timelines.
                        • Why Omnidian represents a unique "snowflake" position in distributed asset management, providing IoT-enabled monitoring and maintenance that traditional approaches cannot match economically.
                        • How public equity markets are currently mispricing climate risk and opportunity, with infrastructure equipment providers trading at 10x book value while renewable energy platforms trade near book value.
                        • The emergence of distributed capacity procurement programs where utilities rate-base billions in distributed infrastructure to bypass traditional siting constraints.
                        • Why firming intermittent renewable resources through battery storage represents the next phase of grid evolution beyond pure generation deployment. 
                        • 40 min
                        • EP 21 — ASG’s Dan Golding on CRE’s Fake Data Center Problem

                          The AI boom has triggered the most dramatic transformation in data center history, but it's also created an epidemic of “fake” projects that threaten to undermine the entire sector. Daniel Golding, Chief Technology Officer, Appleby Strategy Group, has coined the term "fake data center" to describe the 90% of proposed AI infrastructure projects that exist only on paper. In his conversation with Sean, Dan reflects on how AI workloads have shattered 25 years of predictable data center development, with single racks now consuming 120 kilowatts — equivalent to powering 30 houses — compared to 10 kilowatts for traditional cloud computing.

                           

                          This extreme power density has forced operators to abandon air cooling systems entirely in favor of liquid coolants, while project costs have skyrocketed to $5 billion for a single AI-capable building, eliminating speculative development and requiring 100% pre-leasing before ground breaking. Dan also touches on why fiber connectivity often determines project success more than power availability, and why small modular nuclear reactors represent the only sustainable solution for AI's massive energy requirements that only hyperscalers like Google, Meta, and Microsoft have the capital to fund.

                           

                          Topics discussed:

                           

                          • The “fake” data center epidemic where 90% of proposed AI infrastructure projects lack actual land control, power allocation, or network connectivity despite seeking significant media attention.
                          • How AI workloads have increased power density from 10 to 120 kilowatts per rack, forcing the abandonment of air cooling systems in favor of liquid coolant solutions.
                          • The network effect phenomenon in data center land valuation, where proximity to existing facilities and internet exchange points creates exponential rather than linear value increases.
                          • Why the donut model of internet interconnection eliminated traditional hierarchical ISP structures and enabled massive dark fiber deployments between data center campuses.
                          • The elimination of speculative development in AI data centers due to billion-dollar price tags that hobble elasticity.
                          • Why network connectivity represents the most overlooked aspect of site selection, with fiber infrastructure often determining project viability more than power availability.
                          • Small modular nuclear reactors as the essential long-term solution for AI's energy requirements, with hyperscalers positioned as the only entities capable of funding initial deployment. 
                          • 33 min
                          • Lemonade's Jonathan Jaffe on Trading Feedback for Security Technology

                            Jonathan Jaffe, CISO at Lemonade, has built what he predicts will be "the perfect AI system" using agent orchestration to automate vulnerability management at machine speed, eliminating the developer burden of false positive security alerts. His unconventional approach to security combines lessons learned from practicing law against major tech companies with a systematic strategy for partnering with security startups to access cutting-edge technology years before competitors.

                            Jonathan tells David a story that showcases how even well-intentioned people will exploit systems if they believe they won't get caught or cause harm, which has shaped his approach to insider threat detection and the importance of maintaining skeptical oversight of automated security controls. His team leverages AI agents that automatically analyze GitHub Dependabot vulnerabilities, determine actual exploitability by examining entire code repositories, and either dismiss false positives or generate proof-of-concept explanations for developers.

                            Topics discussed:

                            • The evolution from traditional security approaches to AI-powered agent orchestration that operates at machine speed to eliminate false positive vulnerability alerts.
                            • Strategic partnerships with security startups as design partners, trading feedback and data for free access to cutting-edge technology while helping shape market-ready products.
                            • Policy-based security enforcement for cloud-native environments that prevents the need to manage individual pods, containers, or microservices through automated compliance checks.
                            • How legal experience prosecuting tech companies provides unique insights into adversarial thinking and the psychology behind insider threats and system exploitation.
                            • Implementation of AI vulnerability management systems that automatically ingest CVEs, analyze code repositories for exploitable methods, and generate proof-of-concept explanations for developers.
                            • Risk management strategies for adopting startup technology by starting small in non-impactful areas and gradually building trust through demonstrated value and reliability.
                            • Transforming security operations from reactive vulnerability patching to proactive automated threat prevention through intelligent agent-based systems.
                            • Key Takeaways: 

                              • Implement policy-based security enforcement for cloud environments to automate compliance across all deployments rather than managing individual pods or containers manually.
                              • Partner with security startups as design partners by trading feedback data for free access to cutting-edge technology while helping them develop market-ready products.
                              • Build AI agent orchestration platforms that automatically ingest GitHub Dependabot CVEs, analyze code repositories for exploitable methods, and dismiss false positive vulnerability alerts.
                              • Begin startup technology adoption in low-risk or non-impactful areas to build trust and demonstrate value before expanding to critical security functions.
                              • Establish relationships with venture capital communities to gain early access to portfolio companies and emerging security technologies before mainstream adoption.
                              • Apply healthy skepticism to security controls by recognizing that even well-intentioned employees may exploit systems if they believe they won't cause harm or get caught.
                              • Focus AI development efforts on automating time-intensive security tasks that typically require many days of manual developer work into machine-speed operations.
                              • Evaluate business risk first before pursuing legal or compliance actions by calculating whether the effort investment justifies potential outcomes and settlements.
                              • Listen to more episodes: 

                                Apple 

                                Spotify 

                                YouTube

                                Website

                                21 min
                              • Digital Turbine's Vivek Menon on AI Acceleration vs Attack Expansion

                                The security industry's obsession with cutting-edge threats often overshadows a more pressing reality: the vast majority of organizations are still mastering basic AI implementation. Vivek Menon, CISO & Head of Data at Digital Turbine, brings his insights from the RSA expo floor to share why the agentic AI security rush may be premature, while highlighting the genuine opportunities AI presents for resource-constrained security teams.

                                Vivek shares with David how smaller organizations can leverage AI automation to achieve enterprise-level security capabilities without corresponding budget increases. His balanced approach to AI security threats demonstrates why defenders maintain strategic advantages over attackers, despite the expanded attack surface that dominates industry discussions.

                                 

                                Topics discussed:

                                • Why the agentic AI security market represents a classic "horse before the cart" scenario, with vendors solving problems for the 1% of enterprises building agents while 99% are still evaluating basic AI adoption.
                                • How the rush toward AI agents is forcing long-overdue conversations about non-human identity management, which lacks pace and scale in implementation.
                                • The strategic advantage defenders maintain in AI-powered security conflicts, leveraging time-based preparation capabilities while attackers face immediate success requirements with limited development windows.
                                • The dual nature of AI security impact, balancing genuine attack surface expansion against significantly enhanced defensive capabilities.
                                • Distinguishing between legitimate security innovation and buzzword-driven marketing, focusing on practical implementation readiness over theoretical capability demonstrations.
                                • How programmatic advertising technology companies navigate unique security challenges while maintaining operational efficiency in highly automated, data-driven business environments.
                                •  

                                  Key Takeaways: 

                                  • Evaluate vendor AI solutions by asking what percentage of your industry actually uses the underlying technology before investing in security tools for emerging threats.
                                  • Prioritize non-human identity management initiatives now, as the shift toward AI agents will expose existing gaps in identity governance at scale.
                                  • Leverage AI automation to achieve enterprise-level security capabilities without proportional budget increases, especially for resource-constrained organizations.
                                  • Adopt AI as a defensive accelerator rather than viewing it primarily as an attack surface expansion problem.
                                  • Invest time in comprehensive threat protection strategies, capitalizing on defenders' advantage over attackers who must succeed immediately.
                                  • Assess your organization's AI maturity before implementing agentic AI security solutions, ensuring you're solving actual rather than theoretical problems.
                                  • Focus security budgets on mainstream technology threats affecting 99% of enterprises rather than cutting-edge solutions for the 1%.
                                  • Listen to more episodes:

                                    Apple 

                                    Spotify 

                                    YouTube

                                    Website

                                    6 min

                                  About Future of Threat Intelligence

                                  From the publisher's feed

                                  Welcome to the Future of Threat Intelligence podcast, where we explore the transformative shift from reactive detection to proactive threat management. Join us as we engage with top cybersecurity…

                                  More shows like Future of Threat Intelligence

                                  Risky Business by Risky Business Media

                                  Risky Business

                                  374 Listeners

                                  Risky Bulletin by Risky Business Media

                                  Risky Bulletin

                                  46 Listeners