AI adoption is moving faster than most security strategies can keep up, and many teams are still treating it like a contained tool instead of a shared risk.

On this minisode of Ctrl + Alt + AI, host Dimitri Sirota brings together key insights from past conversations with Trevor Hughes, President of the IAPP; Heather Ceylan, SVP & Chief Information Security Officer at Box; and Aqsa Taylor, Chief Security Evangelist at Exaforce, to break down what leaders are consistently getting wrong about AI risk. Drawing from discussions with security and data experts, Dimitri connects the dots across identity, access, and data exposure to show how AI is quietly expanding the attack surface.

This short-form episode focuses on the patterns emerging across organizations, from unseen AI usage to gaps in data control, and what that means for security teams trying to respond in real time.

In this episode, you’ll learn:

• Why AI adoption is happening without centralized visibility

• How data exposure increases once it enters AI systems

• Why traditional security timelines no longer match AI-driven risk

Things to listen for:

(00:00) Why AI risk is often underestimated

(00:45) AI adoption without visibility across teams

(01:30) The shift from tools to shared risk

(02:20) How AI expands access to sensitive data

(03:40) Why response time is now a critical gap

(05:10) Patterns across recent security conversations

(06:30) Data control before AI ingestion

(08:00) What security leaders need to rethink

Listen to the full episodes here:

• How AI Risks Are Changing Privacy and What Security Leaders Must Do About It feat. Trevor Hughes

• Why Agent Identity Is Now a Security Priority feat. Heather Ceylan

• Why AI Breaks Traditional Security Playbooks feat. Aqsa Taylor