S8E1 - Offensive Security in the Age of AI with Corey LeBleu

In the Season 8 premiere of The Virtual CISO Moment, host Greg Schaffer sits down with Corey LeBleu, Founder and CEO of Relix Security, to explore how offensive security and penetration testing are evolving in a world shaped by cloud platforms, AI, and “vibe coding.”With more than two decades of hands-on experience in application and network penetration testing—including leadership roles at Verizon and boutique consultancies—Corey shares a practitioner’s view of what high-value penetration testing really looks like, and why too many organizations still confuse checkbox scans with meaningful security assurance.The conversation covers:How penetration testing has changed—and hasn’t—in the age of AIThe risks introduced by low-code/no-code platforms and AI-generated workflowsWhy misconfigured tools and automated scans can create a false sense of securityWhat CISOs and vCISOs should demand from penetration test reports to drive real business valueThe difference between vulnerability scanning, penetration testing, and “continuous testing” hypeEmerging AI-specific attack vectors, including prompt injection and model abuseCommon client misconceptions about penetration testing and testing frequencyTranslating technical findings into business risk executives can act onManaging stress in offensive security and cybersecurity leadership rolesWhether you’re advising clients as a vCISO, running a security program, or evaluating penetration testing vendors, this episode offers grounded guidance on separating signal from noise—and ensuring offensive security investments actually improve risk posture.