Enterprise AI Defenders

On the 43rd episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with John Frushour, VP & CISO at NewYork-Presbyterian Hospital System. NYP is one of the nation's largest academic medical centers, defending patient care across a massive hospital network. John explains why the real endpoint of a mature security program is understanding people, how attackers exploit trust and habit, and what it takes to make the entire workforce part of the defense.Quick hits from John:On the maturity of a security program: "The zenith of the maturity of a security program is baselining human behavior.”On what attackers actually target: "It's the compromise of that trust that keeps me up at night."On the strongest defense: "We want every frontline nurse, every clinician, every administrator, every back-office technician and financial analyst to carry the flag of information security.”Book recommendation: The Cuckoo's Egg by Cliff StollLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 42nd episode of Enterprise AI Defenders, host Evan Reiser (CEO and co-founder, Abnormal AI) is joined by Amy Herzog, VP & CISO at Amazon Web Services. AWS is the world's largest cloud provider, and its active defense systems process more than 400 trillion network flows every day. Amy explains why AI changes the speed and cost of security rather than its fundamentals, why vulnerability management is collapsing from a month to minutes, and why autonomous agents need their own identity and authorization models rather than the controls built for people.Quick Hits from Amy:On the scale that makes automation non-negotiable: "We process over 400 trillion network flows a day."On the end of the patch cycle: "We can't talk about 30-day patch cycles anymore."On why agents cannot be governed like people: "They are trained to seek a goal."Book Recommendation: Measure What Matters by John DoerrLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 41st episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Matt Bunch, VP & Global CISO at Tyson Foods, about how Tyson Foods is modernizing its security operations with AI, and why AI-speed threats make the basics more important, not less.Quick Hits from Matt:On AI adoption across every role: "We're using the mantra 'all in on AI.' And when we say all in, it is everyone all in on AI."On AI risk: "What is a prompt injection issue? It's a data validation issue. That's really all it is."On agentic AI governance: "We're going to have to put guardrails in place that don't exist today to understand what the models are doing, what the agents are doing. Are they really doing what we asked them to do, or are they trying to go outside of their defined scope?"Book Recommendation: The Art of Negotiating by Gerard I. NierenbergLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 40th episode of Enterprise AI Defenders, host Mike Britton (CIO, Abnormal AI) is joined by Keith Gordon, Chief Security Officer at CIBC. Keith shares how a top-25 US bank is hardening its client-facing defenses with in-house behavioral biometrics, why third parties are the next exposed layer in financial services, and how the bank is governing agentic identities as the next phase of identity-first defense.Quick Hits from Keith:On the operating principle: "We've got to build AI for security... But we also have to have security for AI."On the client as the new threat surface: "The client is the path of least resistance and the lowest on the maturity scale."On governing agents: “they’re a kind of micro-segmentation in the AI age"Book Recommendation: How to Win Friends and Influence People by Dale CarnegieLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 39th episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) sit down with Mark Ballister, CISO at Montefiore Health System, to discuss governing AI risk in a hospital system. Mark shares how his team flipped the default from "no" to "yes, with controls," why work-versus-web toggles are a quiet exposure point, and how his own security team produced 22,000 lines of AI-generated code for an internal risk-evaluation model.Quick Hits from Mark:On the AI governance posture: "We don't look to say no. We look to say yes, as long as we can put controls around it."On the Microsoft Copilot work-versus-web toggle: "By just clicking that button that says 'web,' you are no longer protected."On bringing AI inside the security team: "It wrote all…22,000 lines of code."Book Recommendation: The One Minute Manager by Ken Blanchard and Spencer JohnsonLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 38th episode of Enterprise AI Defenders, host Mike Britton talks with TJ Mann, Global Chief Information Security Officer at Lockton. TJ argues the fastest path to resilience is not chasing every shiny tool; it is treating identity, APIs, and SaaS configuration as the new frontline, because attackers “don’t need to breach your network anymore,” they need one compromised identity, integration, or misconfiguration. He also breaks down how AI shifts email and impersonation risk toward hyper-personalized social engineering, and why Lockton is investing heavily in employee awareness, muscle memory for reporting, and identity-first controls to keep fraud from becoming a business process.Quick hits from TJ:On AI-driven impersonation: “We are seeing… hyper personalized social engineering… deepfake voice or face or audio or video or both.”On what changed in cloud security: “Identity… is the new perimeter.”On what attackers really need now: “The bad guys don’t need to breach your network anymore. They just need to compromise one identity, one integration or one misconfiguration.”Recent Book Recommendation: Ikigai by Héctor García and Francesc MirallesLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 37th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton talk with Matt Posid, Chief Security Officer at KPMG US. AI accelerates the attacker’s playbook by increasing overall capability and reducing the time between vulnerability discovery and exploitation. Matt explains why KPMG consolidated cyber, insider risk, physical security, life safety, resilience, and third-party risk into one enterprise security program, and how defenders can keep up by pairing strong controls with AI-enabled workflows and clear governance.Quick hits from Matt:On how AI changes the threat curve: “AI is really good at a couple of things. It is really good at making people better, and it’s really good at making people faster.”On deepfakes and why fundamentals still work: “The controls we’ve had to protect against non AI-based attacks are still, in many cases, effective against the AI-based variants.”On the defender’s response, fight at AI speed: “If the bad guys are using certain tools, the good guys probably have to also, in order to keep up with the capabilities, the velocity that we need to defend.”Recent Book Recommendation: Unreasonable Hospitality by Will GuidaraLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 36th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton talk with Chris Leigh, VP and Chief Information Security Officer at Eversource Energy. Chris leads security for a regulated, high-stakes utility serving millions across New England. He also owns AI in an uncommon org design that he uses to prove a point: governance does not have to slow innovation if it is built like an engineering function, with repeatable guardrails and clear pathways to ship.Quick hits from Chris:​​On shipping AI faster with standardization: “And that’s allowed us to accelerate our time to delivery by orders of magnitude of three months, down to four weeks, down to two weeks for various sprints.”On preventing outages with drone inspection: “We’ve put some patterns out on this that allows us to better bring in the imagery and run it through our models and pick up damaged components or hotspots in the wires, which allows us to schedule and do repairs before we actually have power outages.”​​On transforming threat intel into action for the SOC: “Any IOCs get popped into our tools automatically.”Recent Book Recommendation: Outlive: The Science and Art of Longevity by Peter Attia, MDLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 35th episode of Enterprise AI Defenders, hosts Evan Reiser (co-founder and CEO, Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Adam Keown, Chief Information Security Officer at Eastman Chemical Company. Adam draws on a career in law enforcement and global enterprise security to explain how Eastman is safeguarding life-critical manufacturing through identity-first defense, AI-informed education, and resilience engineering, staying ahead of a dynamic threat landscape.Quick hits from Adam:On aligning cyber with manufacturing outcomes: “Cybersecurity here at Eastman has two main pillars: make sure the business continues running, and protect our intellectual property. That gives us an advantage in the market.”On evolving attack surfaces: “Identity is the new attack surface, and privilege is the blast radius.”On adaptive education: “One of the nicest compliments I’ve gotten was a VP saying: ‘Your security newsletter is so concise it’s faster to read than to file away’.”Recent Book Recommendation: How to Know a Person by David BrooksLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 34th episode of Enterprise AI Defenders, hosts Evan Reiser (co-founder and CEO, Abnormal AI) and Mike Britton (CISO, Abnormal AI) talk with Micah Czigan, Chief Information Security Officer at Georgetown University. Micah shares how Georgetown is navigating AI adoption with security-first thinking, tailored governance, and a mindset rooted in experimentation. From piloting secure internal AI tools to defending against deepfakes and hyper-personalized phishing, Micah’s approach protects people while embracing innovation.Quick hits from Micah:On AI-powered phishing: “Phishing emails now look personal. AI is building profiles and crafting messages that feel targeted, not blasted.”On governance that enables adoption: “Shadow AI happens when people don’t feel they have a path to yes. We’re focused on building that path.”On personalized AI defense models: “We're profiling advisory targets to understand risk not just by email but web activity too, and that’s all AI-powered.”Recent Book Recommendation: Nuclear War: A Scenario by Annie JacobsenLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 33rd episode of Enterprise AI Defenders, hosts Evan Reiser (CEO and co-founder, Abnormal AI) and Mike Britton (CIO, Abnormal AI) sit down with Lester Godsey, Chief Information Security Officer at Arizona State University, to discuss how ASU is building an ambitious, campus-wide AI strategy. With more than 200,000 users, ASU has deployed an in-house platform supporting 60+ language models and has granted all students and staff access to ChatGPT. Godsey outlines ASU’s strong governance framework, proactive security controls, and threat modeling to address risks such as prompt injection and insider misuse, while highlighting student-driven innovation through hackathons and grants that promote responsible AI experimentation in cybersecurity. Quick hits from Lester:On AI threat acceleration: "It’s not net new attacks, we’re just seeing them executed faster, more effectively. The deepfakes in 2024 aren’t funny anymore."On internal innovation: "We built our own platform supporting over 60 large language models, with walled garden controls and ethical guardrails."On AI’s future impact: “We’re training a model to ingest messy threat intel from all sources and separate the good from the bad. That’s how small teams can finally take action with confidence.”Recent Book Recommendation: It's Your Ship: Management Techniques from the Best Damn Ship in the Navy by D. Michael AbrashoffLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 32nd episode of Enterprise AI Defenders, hosts Evan Reiser (CEO, co-founder at Abnormal AI) and Mike Britton (CIO, Abnormal AI) talk with Yaron Levi, CISO at Dolby. They unpack the enduring basics of cyber, how agentic AI can help teams move faster, and why excellent security starts with the business mission. Yaroni argues that most incidents still trace to old problems and that progress in the AI era begins with operational discipline, explicit threat modeling, and automation, where it truly reduces risk. He lays out a pragmatic sequence that starts with business goals, maps how things can go wrong, selects countermeasures, and then reconciles ambitions with real budgets.Quick hits from Yaron:On AI’s role in defense at scale: “We need to be able to embrace and figure out how we can automate more, how we can leverage those technologies to help us defend better and really tackle that the technical debt mountain… maybe with some AI, agentic AI, maybe we have some chances to deal with it better.”On why breaches still happen: “Unpatched systems, misconfigurations, compromised credentials, RDP, open RDP, the RDP that somebody left out there.”On preventing AI agent blind spots: “Do you know what your inventory is? Back then it was devices, then cloud workloads and virtual machines and other Kubernetes or whatnot. And now it’s like agents, okay? If we’re going to suck at managing the agent’s inventory, the same way we [sucked at] managing, you know, device inventory, we are going to have a big problem.”Recent Book Recommendation: The Psychology of Money by Morgan HouselLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 31st episode of Enterprise AI Defenders, hosts Evan Reiser, CEO and co-founder of Abnormal AI, and Mike Britton, CIO at Abnormal AI, sit down with Sue Lapierre, Head of IT Governance & Information Security Officer at Prologis. With 1.3 billion square feet of logistics real estate and $3.2 trillion in goods moving through its facilities, Prologis faces extraordinary stakes. Sue shares how her security team is proactively responding, embedding AI safely across the business while running simulated deepfakes to stress-test resilience. She explains how zero trust begins with human awareness, how internal AI policies ensure transformational security, and why cybersecurity today demands curiosity, not fear.Quick hits from Sue:On zero trust being human-first: “We have to also think about zero trust, not only on the technical side, but on the human side.On internal GPT adoption and focus: “At the very beginning… we locked down all AI except our internal AI Prologis GPT. That helped to focus people into one vector.”​​​​​​​On simulating deepfake attacks: “We actually hired a third party that created deepfakes and targeted a variety of individuals… we wanted to test if someone fell for it, would they fall all the way… or do we have defenses that would stop it?”Recent Book Recommendation: Turn the Ship Around by L. David MarquetLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 30th episode of Enterprise AI Defenders, hosts Mike Britton and Evan Reiser talk with Martin Strasburger, Senior Vice President and Chief Security Officer at Duke Energy. Martin shares how Duke, serving over 11 million customers across the Southeast, protects vital physical and digital infrastructure in a time of accelerating energy demand and technological change. He emphasizes the critical role of intelligence‑driven defense in both cyber and physical spheres. From ballistic attacks on substations to AI-driven grid resilience and deepfake threats, Martin offers a nuanced perspective on how modern security challenges require both technological expertise and human intelligence.Quick hits from MartinOn his protective mission at Duke: "Being able to protect… our people, our data, our systems, keep that power on… that's a satisfying feeling when you're successful."On AI’s impact across the industry: “We’re piloting technology that can look across multiple facilities… and try to identify a group that is surveilling our facilities, doing pre-operational surveillance for a future attack, and intervene, interdict, and prevent an attack.”On deepfake and phone‑based threats: "The use of AI in social engineering is my biggest concern. So much of that is outside of my control as the security leader… When you’ve got a bad actor doing a call to somebody's mobile device, my only line of defense in that case is that person. Have we trained them? Are they aware that they shouldn’t fall for that phishing call?"Recent Book Recommendation: The Phoenix Project by Gene Kim, Kevin Behr, and George SpaffordLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 29th episode of Enterprise AI Defenders, host Mike Britton, Chief Information Security Officer at Abnormal AI, talks with Vaughn Hazen, Chief Information Security Officer at ​​the Canadian National Railway Company. CN is Canada’s largest rail operator and the only one that spans the Atlantic, Pacific, and Gulf coasts, running over 20,000 miles across North America. In this conversation, Vaughn shares what it takes to defend one of North America’s largest freight railroads in an era of deepfakes, automated phishing, and machine-speed threats. He discusses why secure processes (not just smart tools) are critical to cyber resilience, how AI is changing the threat landscape and workforce dynamics, and why treating email as a notification system is a foundational shift. Vaughn’s approach blends military discipline, telecom roots, and a strong belief in long-term readiness over reactive fixes.Quick hits from Vaughn:On the fragility of process in an AI-driven threat landscape: “Email should be a notification, not necessarily the process... there's just gotta be a robust process that makes it very, very difficult where you're gonna have to be able to compromise a slew of people in order to really breach that”.On the slow burn of real security preparation: “You can’t plant the seeds and expect to harvest in the same day… a lot of the stuff that we do to prepare for a potential event is stuff that we've got to be doing in advance”.On AI’s false promise of autonomy: “It’s not something that just works on its own... You've got to have people that are knowledgeable... to say, first of all, does this make sense? Are we seeing a hallucination?”.Recent Book Recommendation: The 7 Habits of Highly Effective People by Stephen R. CoveyLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 28th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal AI, talk with Rob Nolan, Vice President and Chief Information Security Officer at Expeditors. Expeditors is a Fortune 500 freight and logistics company, powering over 25% of all U.S. customs clearance. They enable global trade and supply chain resilience for many of the world's most recognizable brands. In this conversation, Rob shares how AI is changing the attack surface and the defensive playbook, why behavior and identity have become the new cybersecurity perimeter, and how AI helps enterprise defenders flip the script and regain their advantage.Quick hits from Rob:On the role of AI in defense: "The reality is that if I think about a solution that helps us defend against AI attacks, it's more AI."On defenders flipping the script with AI: "The next frontier is knowing what 'normal' looks like for our business—and letting AI call out what's not."On culture, training, and enablement: "We're much better off having an AI-intelligent workforce than one we've sheltered away from AI." Book Recommendation: The Great Mental Models by Rhiannon Beaubien and Shane ParrishLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 27th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal AI, talk with Gareth Packham, Chief Information Security Officer at Save the Children International. Save the Children is one of the world's largest nonprofit organizations focused on protecting the rights and well-being of children. Operating in over 100 countries, it delivers healthcare, education, and emergency response programs—often in high-risk, conflict-affected areas. In this conversation, Gareth shares insights on the life-or-death stakes of cybersecurity in humanitarian work, the rising danger of AI-powered impersonation and fraud, and why driving behavioral change—not just awareness—is the next frontier in protecting global organizations.Quick hits from Gareth:On the real-world consequences of cybersecurity failures at Save the Children: “Without sounding glib or flippant—it really isn't. It can be a matter of life and death. We have information on children and families… in the wrong hands, that could put them at risk of physical harm.”On the threat of AI-generated impersonation: “A few years ago, we were seeing business email compromise attempts asking to approve invoices. Now, it’s shifted to things like deepfake video. When someone says, ‘Let’s jump on a call,’ and you see a video of someone that looks and sounds like your CEO, you really need to challenge that.”On the limits of awareness training: “The challenge with a lot of awareness programs is that they’re static. People might remember the right answer on a quiz, but it doesn't mean they’ll act the right way under pressure. We need to stop checking boxes and start measuring actual behavior change.” Book Recommendation: Flow by Mihaly CsikszentmihalyiLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 26th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Kirsten Davies, former Chief Information Security Officer at The Estée Lauder Companies and Unilever and founder of The Institute for Cyber. Kirsten's storied career has given her a front-row seat to understanding the complexities of securing global organizations. In this conversation, Kirsten shares insights on the scale of enterprise cyber operations, the hidden challenges of AI-powered security innovation, and how human risk is still the biggest concern in the age of AI.Quick hits from Kirsten:On how AI is redefining attacker capabilities: “The sophistication of whaling, spear phishing—AI is being used very smartly, and it’s bypassing a lot of those traditional filters that we had back in the day. Now it feels like all of the email-based attacks are super sophisticated, very targeted, and they have really major repercussions on the back end.”On the need to rethink digital identity defense: “Think of how many service accounts there are now. They exploded in numbers—larger than people. The number of service and machine identities we have is astronomical… This is where the opportunity is on the defense side, where you don’t even have people involved anymore.”On why people are still the frontline: “It still goes back to relationships with people… good old-fashioned communication capability… It's still about building awareness. The human element of risk—that will never go away. That’s one of the reasons I started The Institute—so everyday citizens can have safer experiences while they traverse the digital universe.” Book Recommendation: Imagine Heaven by John BurkeLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 25th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Joshua Brown, former Vice President and Chief Information Security Officer at H&R Block. H&R Block is one of the largest tax preparation companies in the United States, with tens of millions of customers relying on its services each year. Managing security for a global tax enterprise requires defending against large-scale fraud, identity theft, and AI-powered social engineering attacks—all while ensuring compliance with strict regulatory requirements. In this conversation, Joshua discusses how AI is accelerating cyber attacks, the challenges of using AI for fraud detection in financial services, and the impact of automation on the next generation of cybersecurity teams.Quick hits from Joshua:On the state of fraud in financial services and how AI can help: “If you're talking about a normal year, you might see a thousand potentially fraudulent returns, and then suddenly it jumps up to a million or more. You don’t have enough analysts to look through that. It’s not possible. You have to do something with machine learning or AI to be able to narrow that down and help make faster decisions.”On balancing the need for efficiency and the need for future talent in cybersecurity: “I think businesses are so hungry for efficiency that they risk gutting their talent pipelines. If we’re not careful, we’re going to end up with a senior workforce and no way to develop new security talent.”On leadership strategy in security: “How you motivate a team is by connecting them with the why of what they’re doing and letting them figure out the how. That’s why you hire people smarter than you, right? It’s not so that everybody does things the way you do it.” Book Recommendation: Right Kind of Wrong by Amy EdmondsonLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 24th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Michael Baker, Vice President and Chief Information Security Officer at DXC Technology. DXC is a global IT services leader, providing infrastructure, consulting, and cybersecurity solutions for nearly half of the Fortune 500. With 125,000 employees operating across 70 countries, DXC delivers a vast portfolio of managed services. Securing both its own infrastructure and customer environments, DXC must defend against a rapidly evolving threat landscape while ensuring seamless global operations. In this conversation, Michael discusses how DXC manages its massive attack surface, the role of AI in automating SOCs, threat hunting & vulnerability management, and the future of AI-enhanced cybersecurity.Quick hits from Michael:On the rise of multimodal cyberattacks and AI-driven threats: “AI is just making [cyberattacks] harder and harder to spot. It’s not just email—it’s multimodal. We’re seeing it through WhatsApp, text, and email, all coming at once.”On how AI is lowering the barrier to entry for malware creation: “We’re seeing the democratization of malware development. AI has enabled coders everywhere. We can basically have citizen development of malware.”On the trending use of AI agents and automation in cybersecurity: “2025 is really the year we’re going to see AI agents start working across different functions, not just siloed within organizational components.” Book Recommendation: The Speed of Trust by Stephen M. R. CoveyLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 23rd episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Matt Modica, Vice President and Chief Information Security Officer at BJC HealthCare. BJC HealthCare is one of the largest non-profit healthcare organizations in the United States, operating 14 hospitals across Missouri and Illinois. BJC has over 30,000 employees and over 4,200 doctors across its network. In this conversation, Matt discusses the unique challenges of securing patient privacy in a digital world, new opportunities and risks in healthcare with recent AI advancements, and aligning security practices with an AI-enabled future.Quick hits from Matt:On the increasing effectiveness of AI powered attacks: “Voice technology and mimicking a person got very good. Pretending to be somebody else and trying to get credential access or compromise credentials, it's not just executives anymore. It's anybody with a credential. So the credential is valuable and they're being sold. It's just a matter of how criminals can best get the ID and password to be able to sell.”On critical areas where AI allows us to focus more attention: “We have time to do the things we've always talked about wanting to do. We've talked about wanting to do more threat hunting, about wanting to do more risk quantification. We've always talked about wanting to do a better job and be more proactive in shifting security left in our, in our agile environment, our workflows and things. So we have some time to do that now because we're making some of those things either automated or more efficient.”On the maintained need for humans in the loop with enterprise AI: “ When you're running a large enterprise, uptime is of utmost importance. If I change a firewall rule that blocks something legitimate, I'm going to hear about that. If that was done because it was a low security risk, but the automation decided to do that, then there’s a lot of ramifications there. I don't know if we'll ever get to a hundred percent full automation. I think we're always going to have to have someone validating accuracy. And the models and making sure that our risk tolerance as an organization is taken into consideration as we instrument those things or allow those things to take action on our behalf.” Book Recommendation: The One Minute Manager by Ken Blanchard and Spencer JohnsonLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 22nd episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Joe Silva, former Chief Information Security Officer at Jones Lang LaSalle. JLL is a commercial real estate company operating in 84 countries worldwide. The company has over 100,000 employees, $20 billion dollars in annual revenue,  and ranks #193 on the Fortune 500. Managing billions of square feet of property worldwide, JLL delivers a full suite of services, including — property management, leasing, capital markets, and real estate technology solutions. In this conversation, Joe dives into the realities versus the hype of AI in cybersecurity, AI’s role in shifting the balance between human judgment and automated systems, and AI’s potential to solve long-standing defender blind spots.Quick hits from Joe:On the new attack surface presented by AI: “If I look at how corporate functions at large enterprises, HR, finance, they were using RPAs (robotic process automations) to automate so much of this work, and now you look at AI agents as essentially hyper aware RPAs. It's a natural evolution. RPAs, which themselves created a massive attack surface and now we just start moving all of that to AI because we're completely taking the human out of the loop.”On the increasing negative impact of AI cyberthreats: “Criminals can leverage AI to create highly bespoke and tailored fraud to individuals whose identities they can stitch together across multiple data sets. Organizations will start feeling the impact of AI abetting criminal activity, and that will raise the consequences.”On areas that AI is moving the needle: “Gen AI is making it a lot easier for providers to make more information accessible and provide more context in tools…Where we see Gen AI being helpful is the ability to train machine learning models, and actually get more utility out of machine learning. We've been hearing ML and AI for the last 10 years as buzzwords associated with products and the utility of ML has improved due to AI.” Book Recommendation: Five Years to Freedom by James N. RoweLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 21st episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Tony Taylor, Chief Information Security Officer at Land O'Lakes. Land O'Lakes is an American member-owned agricultural cooperative. The co-op has 9,000 employees who process and distribute products for about 300,000 agricultural producers. Land O Lakes handles 12 billion pounds of milk annually and is one of the largest producers of butter and cheese in the United States. In this conversation, Tony shares his thoughts on AI transforming the cyber threat landscape, the paradox of AI empowering defenders while enabling attackers, and strategies for cyber defense in an AI-driven world.Quick hits from Tony:On the oversaturation of AI as a marketing term: “You can’t talk to a vendor today where they don’t talk about their AI. Everybody’s got an AI engine. For me as a consumer of that technology, I go, well, show me how that AI works.”On how AI can help address the talent shortage in cybersecurity: “We need to be able to bring in less mature or less experienced people and let them build that experience because the workforce isn’t there. I can’t go hire senior engineers all over the place because they’re not available.”On AI elevating the nature of work in cybersecurity: “AI will reduce workload, and I think it’s going to reduce the workload that nobody wants to do anyway...It’s going to allow people to work at a higher level.” Podcast Recommendation: SANS Stormcast by Johannes B. UllrichLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 20th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Gene Sun, Vice President and Chief Information Security Officer at FedEx. FedEx is a multinational courier delivery services company with over $90 billion in annual revenue and more than 500,000 employees globally. With billions of packages delivered every year, using the world’s largest cargo fleet, FedEx uses sophisticated technology to provide a unique delivery service to customers across the globe. In this conversation, Gene discusses industry shifts from isolated point solutions to powerful, AI-driven platform strategies, AI as a growing tool for attackers and defenders, and predictions for the future of AI-powered cyber defense.Quick hits from Gene:On the evolving workforce adapting to AI integration: “There is some kind of fear in society that AI will replace all the human beings doing the work. I have this saying, AI will not replace your job. People who know how to use AI will replace your job.”On consolidation and innovation in AI-driven cybersecurity: “There’s only so many players who can afford to stay in the AI race. I think only a couple of large cyber security platforms will survive and they will provide the fundamental platform for any additional innovation that will be created for security related AI models.” On AI lowering barriers for fraud: “Cybercriminals are using AI to generate counterfeit FedEx shipping labels. Previously, to create a counterfeit FedEx shipping label you needed to have programming skills to decode our tracking numbers to be able to generate readable barcodes. Now, AI has removed those technology requirements and criminals are increasing their velocity to perpetrate those crimes.” Recent Book Recommendation: Guns, Germs, and Steel by Jared DiamondLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 19th episode of Enterprise AI Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Eric Brohm, Chief Information Security Officer at Wyndham Hotels & Resorts. Wyndham is the world's largest hotel group, offering nearly 10,000 properties in 95 countries across 24 global brands. In this conversation, Eric shares his thoughts on how AI is fast becoming an indispensable tool for cybersecurity teams, the potential of AI in risk-based decision-making, and the growing trend of cybercriminals using AI.Quick hits from Eric:On the speed of AI adoption between attackers and defenders: “Attackers take up tools quicker than we do. They don't need to worry about test environments and, politically, selling the tools’ ROI for the business, right? They just go and they use it.”On AI as a tool to enhance security: “The industry of adversary emulation has been really big. I can point AI at my environment and it knows what security controls I have on the back end. It knows what my vulnerabilities are on the front end and says, “If I were an attacker, this is probably what I would do.” So that helps us drive smart investment based on AI helping us with those risks.” On the need for collaboration in cybersecurity: “Community is a key piece of why I love being in cybersecurity so much, and that collaboration is what we need to stay ahead of, or at least try to keep pace with whatever tools the attackers are using.” Recent Book Recommendation: Questions Are the Answer by Hal GregersenLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 18th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Stephen Harrison, Senior Vice President and Chief Information Security Officer at MGM Resorts International. MGM Resorts International is a global hospitality and entertainment leader, operating some of the most iconic destinations in Las Vegas and beyond. MGM boasts an annual revenue of over $16 billion and employs more than 70,000 people worldwide. In this conversation, Stephen shares his thoughts on cybersecurity complexities in the entertainment sector, the deployment of AI – in both safeguarding systems and enhancing attack methods, and the escalation of automated attacks targeting human error.Quick hits from Stephen:On the rapid pace of technology change and AI: “It's hard when we're at a period of time where there's never been faster acceleration of technology. And whatever you thought was cutting-edge AI last week, well, just check Twitter this week. You're probably wrong.”On adapting to rapid technological change: “If you’re running an enterprise security and you’re sort of putting up this gridiron fence saying, ‘No, our company is not going to use AI at a professional knowledge worker level.’ I think you’re probably doing a disservice.” On the evolving threat landscape: “Every innovation that comes out is also empowering threat actors…you have ransomware as a service right now. And I would expect by next year, sometime to see ransomware as a service evolve and become more like AI as a service for threat actors.” Recent Book Recommendation: Dare to Lead by Brené BrownLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 17th episode of Enterprise Software Defenders, host Evan Reiser (Abnormal Security) talks with Mark Ferguson, Chief Information Security Officer at Bombardier. Bombardier is a Canadian multinational aircraft company best known for producing premium business jets. It has over 17,000 employees and over $8 billion in annual revenue. In this conversation, Mark shares his thoughts on Bombardier's impressive scale, the complexities of cybersecurity in the aviation industry, and the role of AI in enhancing security operations.Quick hits from Mark: On cybercriminals using generative AI: “Cybercriminals’ work is all about volume. So it's about keeping the cost as low as possible and spreading the threat to the biggest volume possible. That's where AI will help them because it's going to enable them to widen the net for potential targets they can go after.”On the rise of sophistication in cybercrime: “The most sophisticated criminals are using company’s own people and IT systems. It's way easier now to trick someone and log in to a corporate system, versus break through the firewall or hack a satellite.”On AI Copilot’s ability to assist with cybersecurity: “Copilot came back within seconds and said this change happened by this person to this end point on this date and we were able to narrow in on what the change was and who made the change.” Recent Book Recommendation: Jan Ullrich: The Best There Never Was by Daniel FribeLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 16th episode of Enterprise Software Defenders, host Evan Reiser (Abnormal Security) and special guest host Steve Ward (Former CISO at The Home Depot and TIAA) talk with Roland Cloutier, former Global Chief Security Officer at TikTok. Roland is a seasoned cybersecurity expert who has led security programs at major organizations, including EMC, ADP, and, most recently, TikTok. Roland's journey from military aerospace defense to becoming a top CISO offers valuable insights into the evolving landscape of cybersecurity and the critical role of AI in enhancing security operations. In this conversation, Roland shares his thoughts on the evolution of cybersecurity in the AI era, the transformative impact of AI on security operations, and a glimpse into the future of converged security programs. Quick hits from Roland: On AI’s ability to assist enterprise security posture management: “Why do I have really smart people doing things like writing scripts that go across logs? That is insanity. We're going to get to deeper insight faster through AI. So as a practitioner, we're going to have better weapons to understand what's going on to apply defensive postures quicker.”On AI copilot’s enabling safer code creation: “There's massive hope in the use of AI around code defense. Code is going to be created differently and it'll be created with AI and with constructs. Therefore we have the opportunity to put security control capabilities or quality measures in capabilities at the time of code. It's going to automatically do privacy by design and security by design in a way we’ve never seen before. So from a compliance perspective, we're going to be able to operate as businesses in a much better way.” On the true impact of auto defense capabilities: “AI is going to now show up and code is going to be generated by the time someone thinks about it. But it doesn't have to go in a queue for us to check. We don't have to wait till something gets checked in. We can instrument the AI with our capabilities that says to automatically remove any OS pipe turning, and tell us what you did. Think about the modeling capabilities on a per second basis it can provide when it evaluates code.” Recent Book Recommendation: The Mission, The Men, and Me by Pete BlaberLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 15th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Tomás Maldonado, Chief Information Security Officer at The National Football League. The NFL, comprising 32 franchises, is the world's most valuable sporting league, with over 20 billion dollars in annual revenue and a growing global brand. In this conversation, Tomás shares his thoughts on the vital role of cybersecurity in the NFL, the impact of AI on emerging security threats, and his optimism on the potential for AI-driven incident response.Quick hits from Tomás:On AI advancing the malicious potential of threat actors: “Now, adversaries don't need to know whatever language you speak to attack. They can go into open generative AI platforms and say ‘Create a message that sounds like this in the language X.’ Then put whatever payload they want in there, and then they can mass mail that to people.”On the impact of AI to assist the efficacy of security professionals: “There's so much data to cull through to figure out who was patient zero and how it actually happened. If you're correlating all of that information into a centralized location, why not have AI spit out a timeline that says this is how Jane Doe's account was compromised? We know that these are the usual next steps for someone being compromised. Let’s help the user make better decisions.” On how AI might improve communication for security professionals: “There's a real opportunity for incident response and this division of communication, how to communicate effectively externally. There's a real path for interacting with users and helping them make better decisions as they interact with data and share that information.” Recent Book Recommendation: Start with Why by Simon Sinek Like what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 14th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Noah Davis,  Vice President & Chief Information Security Officer at Ingersoll Rand. Ingersoll Rand is a Fortune 500 global industrial manufacturing company with over 18,000 employees and 7 billion dollars of annual revenue. For over 160 years, Ingersoll Rand has been a leader in innovative air, fluid, energy, and medical technologies, providing mission-critical solutions to increase industrial productivity. In this conversation, Noah shares his thoughts on navigating the human threats of AI in cybersecurity, the duality of AI for attackers and defenders, and how AI is shaping the in-demand skills for the next generation of cybersecurity professionals.Quick hits from Noah:On how threat actors are using AI in new attacks: "They're going to take advantage of cyber savviness, or lack thereof. There was the one incident that happened in Hong Kong where they actually did a video conference call and it was a 25 million payout because he thought he was on the phone with the CFO and there was a video of it. And it was really convincing."On how enterprise defenses will evolve in response to AI: "What I have faith in is that the good guys will find ways to interject, to be able to identify [malicious threat attempts], determine the patterns if it seems scripted. And give you some percentage of confidence on, ‘we think this is fake,’ versus, ‘No, that's, that's definitely your CFO.’ You might even get a copilot to have you prompt like, ‘You should ask this question to see if this is a legitimate human.’ On keeping talented security professionals engaged in their work: "It's by taking out the noise of having to respond to every little bit and automating out the high volume, low value stuff. And then what we're actually dealing with, we're laser focused on the highest risk. The highest risk is fun, because that's where you see the new stuff, [like] the polymorphic malware that makes it past a bunch of other defenses. That's what gets my team jazzed up to look at."Recent Book Recommendations: Essentialism By Greg McKeown, Effortless by Greg McKeown, The Obstacle is the Way by Ryan Holiday, and Extreme Ownership by Jocko Willink and Leif BabinLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 13th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Jeremy Smith, Vice President and Information Security Officer at Avery Dennison. Avery Dennison is a multinational materials science company with over 34,000 employees and over $8 billion in annual revenue. They manufacture and distribute a variety of sophisticated branding labels and adhesives, including high-tech RFID inlays. In this conversation, Jeremy shares his thoughts on the evolution of cybersecurity at Avery Dennison, the advantages of AI-powered security tools, and how cutting-edge technology enables a successful defensive strategy.Quick hits from Jeremy:On threat actors use of AI: “You can do an investigation of a whole C suite in seconds with an AI chat bot, where before you'd have to go to a website and crawl it and search. Now you can find out so much information at the touch of your fingertips and the speed the attackers are going to be able to leverage with AI is going to have to be combated.”On the future of Enterprise AI: “I've seen a bunch of existing vendors in the security space that are now buying AI companies to just leverage that talent internally to develop their products further. It was a CEO of one company that we work with that was just saying there's going to be two kinds of companies. Ones that leverage AI and companies that are out of business.” On the true impact of AI: “Whether it be your network, your authentication and login activity, you kind of combine all of those data sets together and look for patterns of what's typical versus what is deviating from there, and I think that really is going to be the power of AI. Being able to analyze large quantities of data at scale and analyze it in ways that we've never been able to do before and give us insights we've never had before.” Recent Book Recommendation: Atomic Habits by James ClearLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 12th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Lynton Oelofsen, Chief Information Security Officer at Associated British Foods. ABF is a multinational food processing and retail conglomerate with 132,000 employees and over 21 billion dollars in annual revenue. The company plays a significant role in shaping the global consumer food and beverage landscape through its impressive portfolio of subsidiaries and associated brands. In this conversation, Lynton shares his thoughts on the evolving security needs of large enterprises, understanding the double-edged sword of generative AI adoption, and how AI tools can enhance the effectiveness of modern cybersecurity teams.Quick hits from Lynton:On preparing for AI-powered threats: "The reality is there is a skill augmentation in terms of the attack vector. The ability to leverage generative AI capability to write things at pace or to automate social engineering, and you're looking at things like that, your ability to be able to write crafted, well-positioned emails that are specific to what someone's doing...starts to become a real concern."On cybersecurity as a continuous battle: "It's like the Golden Gate Bridge analogy of you paint from one side and you get to the end and you pretty much have to start again. That's what vulnerability chasing around felt like." On collaborative security efforts: "No single entity can tackle the cybersecurity challenge alone. It's about collaboration, sharing knowledge, and leveraging collective strengths."Recent Book Recommendation: The Unicorn Project by Gene Kim, Kevin Behr, George SpaffordLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 11th episode of Enterprise Software Defenders, host Evan Reiser (Abnormal Security) and special guest host Steve Ward (Former CISO at The Home Depot and TIAA) talk with Betsy Wille, former CISO at Abbott. Abbott is a Fortune 100 global healthcare company that manufactures various healthcare products, including diagnostics, pharmaceuticals, and medical devices. In this conversation, Betsy shares her thoughts on the unique challenges of defending enterprise businesses, AI’s impact on the evolving threat landscape, and how cybersecurity teams can harness AI more effectively.Quick hits from Betsy: On the possibility of AI on access management: “I love the possibility of AI in the access management space, role based access, RBAC, and zero trust. I've seen so many programs and none of them really deliver at scale because we don't really know what people need to do their job, particularly in this digital world and proliferation of systems…There is a lot of opportunity for that to become true, we do have the ability to enable only what's needed.”On the emerging threats posed by AI attacks: “I do think we'll see fewer attacks of opportunity and many more specialized attacks. It takes a lot of work for the criminals to put together targeted attacks; it's a lot of resources, labor, and focus. That had been saved for the high financial gain targets. The rest of the attacks were more around a kind of soft target, a common attack to see where it lands. AI changes that so drastically. It becomes so much easier to create very individualized, customized attacks at organizations. Maybe with a very similar arc and approach, but customized on the front end of how you get in and make it very real to that organization.” On the potential for AI to transform how enterprises understand themselves: “There is potential for LLMs to translate cyber and technical complexity into something businesses understand. If you talk about something we haven't gotten materially better at over the last 10 or so years, it's talking to the business and translating it. The hardest thing when you come into an organization, especially at a leadership level, is just figuring out how the company makes money. We have to understand the business to protect it…We haven't developed those capabilities over time, but there's potential in the translation through the LLM.” Book Recommendation: The Art of Gathering by Priya ParkerLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 10th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Jason Stead, Chief Information Security Officer at Choice Hotels International. Choice Hotels is a global hospitality company with over 7,400 hotels worldwide and over $1.4 billion in annual revenue. In this conversation, Jason shares his thoughts on AI’s impact in the hospitality industry, the importance of AI skill development in the workforce, and how AI will shape the future of cybersecurity.Quick hits from Jason:On evolving threats in the hospitality industry: “There is not enough emphasis on these loyalty account compromises. We see that challenge in hospitality and other spaces today. And so we put in all these automated controls to identify non humans. Yes, there are click farms and you can outsource to people and brute force some of these things and look like a human coming in. But wait until you're able to scale that human behavior exponentially through AI. That is a problem that I think we all know is coming, but the tools are going to have to adjust quickly.”On AI’s impact for security teams: “It is not going to eliminate people. That is the big fallacy. People are worried that ‘I'm gonna lose my job.’ No, what happens is your SOC analyst one is now a SOC analyst two all of a sudden, and it creates a huge uplift for them, and it allows them to focus on the things that are really interesting. That is the real value in the immediate term for us.” On AI optimism for enterprises: “I think the power of AI is positive ultimately. There is a lot of doom and gloom about the threat actors using AI. And they are, they're using it today. It is going to evolve. It is going to be much harder. But there are really great entrepreneurs out there that have visions that we haven't even talked to.” Recent Book Recommendation: Quiet by Susan CainLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 9th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Patti Titus, chief privacy and information security officer at Markel. Markel is the insurance wing of Markel Group, a global insurance and investment company with over 17,000 employees and $12 billion in annual revenue. In this conversation, Patti shares her thoughts on the opportunities and challenges of AI’s growing popularity, the balance of AI regulation and innovation, and considerations for the next generation of AI threat response.Quick hits from Patti: On improving enterprise security training: “ChatGPT has given us a whole new landscape to think about how we are providing the right training and guidelines to our employees. Our adversaries are becoming more sophisticated at figuring out how to socially engineer people. It's becoming more pervasive.“On security and AI model governance: “Model governance is going to be a necessity. And inside that model, governance is a function of incident response. We are going to have to teach our people to be faster to report than the, ‘Oh, it's just phishing, I'm going to delete it.’ mentality. Don't do that. I want you to report everything. Because all the data that you provide to us enriches our threat perspective so that we can see what's really happening.” On the duality of AI’s potential: “Can AI become pervasive enough to recognize itself as a threat? And then can it, in turn, think about how that AI is being developed and predict the next step before its counterpart predicts the next step? You are getting into a game of cat and mouse, only much more sophisticated, like the cat and the mouse are playing chess.” Book Recommendation: The Six Types of Working Geniuses - Patrick M. LencioniLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 8th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with John Hoyt, Chief Information Security Officer at Clemson University. As a college and premier research institution founded in 1889, Clemson has over 28,000 students, nearly 6,000 faculty and staff, and operates a small city - leading to complex security and technology challenges. In this conversation, John discusses unique security requirements at Clemson, the evolving role of AI in cybersecurity, and the transformative potential of AI in academia.Quick hits from John: On the unique security requirements at Clemson: “It's a small city. We do have everything going on. You have researchers and students that live on your network. You have a power plant, you have water treatment, you have a police department, you've got everything. And you are trying to secure all of that and keep tabs on it.“On AI’s potential to help with threat detection on larger networks: “So how do you keep up with all those pieces to look for unusual patterns? You have to understand what normal is. And it helps you to be like a human intrusion detection engine. When you know, you have looked at these logs a thousand times and so “this” log stands out. And having AI help you with that for your organization is a bit scary, but I do think it is possible already. It is just something connecting those dots to help you.” On AI’s ability to give defenders an upper hand: “I think that we can get into setting traps for adversaries, like honeypots. It gets me excited the more we can do that. I've done a bit of that with some of these folks that are trying to scam our students. I sent them some documents with canary tokens, those are really interesting. AI could help us enhance that because it's a pain to manage and troubleshoot those things. But I like the proactive defense, where you're not just waiting for the bad thing to happen.” Book Recommendation: Storyworthy by Matthew DicksLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 7th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Viswa Vinnakota, Chief Information Security Officer at Xerox. Xerox is a foundational computing and technology company with over 20,000 employees and multiple spinoff companies operating at the frontier of modern technology. In this conversation, Viswa shares his thoughts on enterprise adoption of AI, the growing implications of AI’s accessibility, and AI’s impact on the future of cybersecurity.Quick hits from Viswa:On enterprise companies and AI adoption strategy: “When your employees and businesses start adopting generative AI or any kind of AI technologies,, we should always start with the policy. Security is just one part of AI’s risk, but there are a lot of things beyond security. Privacy issues, data security issues, and the ethical use of AI. So as an organization, it's not one person's job to decide how you need to use generative AI.”On AI’s rapid accessibility: “AI has been there for many years. The biggest change [in the last year] is it's available to everybody. It used to be more of a privileged thing in the past where only certain products had that capability to even build AI into their capabilities, and it's open and accessible to everybody. That shift is bringing new security challenges, and how do we mitigate the risks of adoption of AI within the organization.” On AI’s potential impact on cybersecurity: “The speed at which you respond to your cyber attacks is definitely important, what we call defensive AI. You can use AI to defend  your organizations, especially around how you analyze the incidents, threat intelligence, and collecting the threat intelligence. You can leverage AI in order to generate some patterns that can help you quickly do your analysis and respond back to the threats that you're actively facing in the organization. It definitely brings efficiency.” Podcast Recommendation: CISO Series Podcast by David Spark, Mike Johnson, and Andy EllisLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 6th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Rahul Naroola, Chief Information Security Officer at Dover. Dover is a Fortune 500 global manufacturing company with over 25,000 employees and $8 billion in annual revenue. In this conversation, Rahul shares his thoughts on AI-generated attacks, applications of AI to boost productivity, and realistic expectations for the future of AI security tools.Quick hits from Rahul:On the promise shown by AI cybertools: “You should be able to say, ‘I want you to tell me when there is a login attempt that happens that's unusual.’ The AI is supposed to elastically, figure out what that is, right? So that tremendously helps where we are not looking at a finite set of possibilities, but a much broader set of security possibilities. I think there's promise there. I think in the email space, which constantly morphs, there's a lot of promise there.”On the potential impact of AI on cybersecurity teams: “We can always teach technology to folks that are in your SOC or on your team. But if they don't have that business centric mindset, they don't understand the business that you are in. Like we're in manufacturing, they don't understand how we actually make stuff. What are the people that need to interact with and why?Getting an AI savvy person won't really take you that far. For me, we are not going to see changes in the team in terms of personnel for the most part. I think we have to really invest in training our teams so they can understand and recognize these new emerging technologies and be savvy on how to use it best to their advantage.” On AI’s impact beyond security: “I don't think it's just security. It's going to have a big impact on analytics and how analysis is done across the businesses, which honestly, from a SOC perspective, they're running a large data analytics engine anyways, that's really what they're doing. So I think both the data analytics side on the business side as well as on the security side, is gonna benefit with sort of the same core principles that AI offers.” Recent Book Recommendation: The Metail Economy by Joe BinesLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 5th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Paul Reyes, CISO and VP of cybersecurity at Vistra Corp. Vistra is a Fortune 500 company with over 5000 employees and 13.7 billion dollars in annual revenue, they are the largest competitive electricity generator in the United States. In this conversation, Paul shares his perspective on tangible ways organizations can leverage AI, the disruptive advantage of adopting AI, and the evolving cyberthreat landscape fueled by automated attacks.Quick hits from Paul:On the evolving cybersecurity landscape: “Clearly, what's at our fingertips right now is the rise of AI. I think there's been AI machine learning for quite some time, but the fact is that there is the Generative type of AI where it's also starting to think faster than we can. That is going to be a huge impact where you start seeing threats, vulnerabilities, and impacts to businesses a lot faster and a lot more thoughtful than we've ever seen before.”On the advantages of AI at enterprise scale: “We have an awesome team that looks at all of our fleet and uses machine learning in our own internal AI that drives how we predict the forecast of when we need to do maintenance appropriately so that we don't waste money. There are those companies looking at what tomorrow can bring and how we innovate ourselves with this new capability. I think AI just can constantly increase that ability for companies that know how to leverage it appropriately.” On utilizing AI tools in cybersecurity: “We always want somebody that's doing 24/7 monitoring. You want to be alerted. Sometimes you're outsourcing that service to external folks because you don't have enough people or jobs that they can stay in to be able to fulfill that. When you start looking at the various companies that are trying to augment that and leverage AI to do these common checks and balances and services, I totally agree that is a good way to leverage that [AI] and then bring that learning and knowledge base internally to your company so that you can then modify that output to search on what's specific to your business. Those are really good areas to focus on.” Recent Book Recommendation: Beyond Blame by Dave ZwiebackLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 4th episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Steve Ward, former CISO of Home Depot. Home Depot is a Fortune 20 multinational home improvement retailer with nearly 500,000 employees and over $150 billion in revenue. In this conversation, Steve shares his thoughts on defensive strategy in the cloud era, how AI can impact resource management in cybersecurity, and fighting fire with fire when combating emerging AI threats.Quick hits from Steve:On defensive strategy in the cloud era: “I think the attacks are going to be a thousand times faster than what we're seeing. I think the level of accuracy on interacting with a human is going to be really difficult for people to identify that this is an issue. If you just take email in general, you look at a common spelling error or a grammatical error and you're like, ‘ah, this isn't right,’ and you delete it, that goes away, right? The context of the email can now be generated in a way that is so accurate. I can do that across any SaaS app. I can lure you in any direction. I think fraud picks back up from it;  it makes it a lot easier to commit fraud.”On how AI can impact resource management in cybersecurity: “It means we can retrain [security analysts] or move them to other areas of focus that are going to help us, again, more on remediation, more on the response, more on red teaming, and trying to find things before someone else does. What I have already seen, even from the orchestration side with light AI, I think we're going to see numbers upwards of 80% of the alerts that come in a traditional SOC organization are going to go away.” On fighting fire with fire when combating emerging AI threats: “I think you're going to see the sophistication change. I'm not sure if it [AI] needs to be more sophisticated, I just think it needs to be smarter and the volume needs to be there. And that's going to be really incredible because what we're talking about in our private circles is you will not be able to identify and defend an AI attack with the last 20 years of solutions. You're going to have to use AI to defend against AI.” Recent Book Recommendation: Russians Among Us by Gordon CoreraLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 3rd episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Ryan Fritts, CISO at ADT. ADT is a renowned industry leader in security and automation solutions, protecting homes and businesses around the United States. In this conversation, Ryan discusses the hype vs. reality of AI in cybersecurity, the evolving security risks from adopting cloud computing, and considerations of AI regulatory frameworks.Quick hits from Ryan:On the promises vs realities of AI for cybersecurity: “[AI] actually poses more of a benefit to the attacker side from an intelligence perspective. The ability to generate an adversarial AI that can know what various controls might exist and how to best evade them is one that I think the adversarial component is going to be the thing that is most impactful for AI in cybersecurity.”On AI helping sift through an explosion of data: “The volume of data when you have this many systems in this volume of data sets, the data explosion really hurts. You can't make it a people problem and a tech problem. It's got to be holistic. You have to rethink the problem entirely, you can't approach it the same way, and the advancements that have kind of really been happening on the AI and analytics front have enabled more efficient deployment of resources.”On AI regulatory frameworks: “I think certainly there's some work out there with NIST and CMMC that they're pushing through the government contracting sector, but those aren't national regulatory standards. The SEC is pushing the disclosure framework, but clarity helps. In the absence of clarity, there's confusion.”Recent Book Recommendation: 1% Leadership by Andy EllisLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 2nd episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with Selim Aissi, Global CISO at Blackhawk Network. Blackhawk Network provides innovative solutions for global commerce. Leveraging cutting-edge technology, they offer a seamless platform that enables secure and convenient payment transactions, gift card distribution, and loyalty programs. In this conversation, Selim shares how Blackhawk Network is evolving as the perimeter of security moves towards identity, interesting emerging attack vectors, and an optimistic outlook on utilizing AI within cybersecurity.Quick hits from Selim:On the perimeter of security moving closer to identity: “The notion of the perimeter as we know it has evolved over the years. There are also other trends that add complexity to this, [including] tne is the massive use of APIs, especially public APIs, but also private APIs versus direct connect for VPN. A lot of information is shared over APIs these days…If there's a good percentage of employees operating out of hostile environments, that's a completely new dynamic that we've been dealing with now for three years. I think those are very important trends.”On emerging attack vectors: “What really triggered my interest over the past few months is by looking at some of the attacks that are based on extortion, specifically ransomware. The evasion techniques and the security tool defeaters that they have embedded, especially in the first and second payloads of the attack, are definitely some of the best that I've seen in my career.” On optimism for AI applications in cybersecurity: “I was thinking the other day about the optimum data protection tool that would learn where all of the data stores are, discover everything, all the types of data, do the data tagging, do the data lineage, data tracking, and come up with the best protection methodology. Whether it's de-contexting, tokenization, encryption, whatever method makes sense for that data store because you can't come in with a big hammer and encrypt all of the data. AI can play a huge role in something like that.” Recent Book Recommendation: Strategy: A History by Lawrence FreedmanLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.

On the 1st episode of Enterprise Software Defenders, hosts Evan Reiser and Mike Britton, both executives at Abnormal Security, talk with David Sherry, CISO at Princeton University. Princeton is one of the country's oldest higher education institutions, with over 8,000 students and 7,000 employees. Princeton is more than just a university; it's also a premier research center and, in many ways, a small city, so keeping its environment secure is complex. In this conversation, David shares his perspective on the unique challenges in protecting Princeton, security in the modern cloud era, and the exciting yet frightening potential of ChatGPT.Quick hits from David: On the unique aspects of protecting Princeton: “We have our administrative network, we have the research network, which is really highly controlled and secured, but still has a lot of flexibility and freedom to it. I need to support that by being the compelling alternative to the security model, but if they choose to go another way, we just make sure that on the last three of the cybersecurity framework, ‘detect, respond, recover’ is a lot easier here.”On Princeton’s long history of being a dynamic environment: “We don't say BYOD. We say BYODs because students can show up with 15 to 20 devices that they want to hit on the network. We also laugh that Princeton's been doing BYOD for 277 years except back in the day, they brought a musket and a shovel with them.”On security in the modern cloud era: “I’ve never not trusted the cloud. But it's all about trust. It's about contracts. It's about visibility and making sure that if you move offsite, you still have some control, oversight, command response, everything that goes along with it. Why should I be paying the power and electricity when someone else can?“On the potential of ChatGPT: “I don't think it's going to replace people. I do think it's going to be a sea of change, not unlike the internet or the iPhone. It's going to change the way I think business acts and even how people can react to it as well.“Recent Book Recommendation: This Is How They Tell Me the World Ends by Nicole PerlrothLike what you hear? Leave us a review and subscribe to the show on Apple, Spotify, and YouTube.Enterprise AI Defenders is a show where top security executives share specific ways AI changes the threat landscape and the defenses that hold up in real environments.Find more great insights from technology leaders and enterprise software experts at https://www.enterprisesoftware.blog/Enterprise AI Defenders is produced by Abnormal Studios.