May 23, 2026

Kiteworks on the AI Security Lessons From RSA 2026

28 minutes

What happens when the cybersecurity industry stops debating whether agentic AI is a future problem and starts treating it as a present-day reality?

In this episode of Tech Talks Daily, I sit down with Tim Freestone to unpack the biggest shift coming out of this year's RSA Conference. After attending RSA for more than two decades, Tim describes 2026 as the year the energy returned to the cybersecurity world, driven by one unavoidable topic: agentic AI.

We explore why the conversation has rapidly evolved from curiosity to urgency, and why organizations are suddenly confronting an uncomfortable truth. AI agents are already operating inside businesses, often without visibility, governance, or control. Tim explains how shadow AI is spreading faster than many leadership teams realize, with employees experimenting with autonomous tools that connect directly to company data and external AI models.

Our conversation also looks at the growing gap between visibility and control. Security teams may be discovering agents across their networks, but stopping risky behavior is an entirely different challenge. Tim argues that companies focusing purely on infrastructure are already falling behind, and that the real battleground is now the data layer itself. We discuss why data governance, audit trails, and access controls are becoming central to the future of cybersecurity strategy.

Tim also shares his thoughts on state-sponsored AI threats, the rise of autonomous espionage operations, and why open-source AI models present a completely new level of risk for defenders. At the same time, he offers practical advice for IT and security leaders trying to figure out where to start amid the noise, complexity, and endless flood of new tools entering the market.

If your organization is trying to understand how AI changes cybersecurity, governance, compliance, and risk management, this conversation offers a clear look at what security leaders are actually worried about right now, and why the next 12 months may redefine how companies think about protecting data altogether.

Useful Links