The impact of Mythos and Florida Man, confidence gaps, phishing, & AI adoption – Erich Kron, Deepen Desai, Chris Wallis – ESW #458
The Weekly Enterprise News
This week, in the enterprise security news,
- Copy Fail
- The hits keep coming for CVE, NIST and NVD
- Cyber attacks on breathalyzers
- insurance carriers pulling support for AI
- Florida Man pleads guilty
- ignore the humanities at your own peril
- offense and defense don’t scale the same
- is it okay to be left behind?
- scientists gave cocaine to salmon
Mind the Gap: Confidence, AI, and the Future of Exposure Management
Former ethical hacker, now founder and CEO of Intruder, Chris Wallis explores whether AI can bridge the divide between finding vulnerabilities and understanding real-world attack context as exploit windows continue to shrink. This conversation dives into the structural "confidence gap" uncovered in Intruder’s 2026 Security Middle Child Report, where executive risk appetite is increasingly decoupled from front-line operational reality.
Check out Intruder’s Security Middle Child Report at https://securityweekly.com/intruderrsac.
Modern Phishing Attacks Are Under Multi-Channel Siege
Recently, there has been a shift in cybercriminals’ behavior, marked by a surge in total phishing attack volume. These attacks are fueled by high-scale automation and a coordinated multi-channel siege targeting corporate collaboration tools. Trusted platforms such as email, Teams, calendars and others are in the cross-hairs, bypassing traditional phishing methods that have worked in the past.
This segment is sponsored by KnowBe4. Visit https://securityweekly.com/knowbe4rsac to learn more about them!
AI is Now Default Enterprise Accelerator
The Zscaler ThreatLabz 2026 AI Security Report reveals that enterprise AI adoption has surged by up to 93% year-over-year, yet 100% of tested AI environments remain vulnerable to breaches that can occur in as little as 16 minutes. It highlights a dangerous shift toward "machine-speed" threats, where attackers use generative AI to automate data exfiltration and create sophisticated deepfakes. To combat these risks, the report urges organizations to move beyond simple blocking and instead implement a Zero Trust architecture for safe, AI-native data protection.
This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to learn more about them!
Erich Kron, CISO Advisor at KnowBe4 is an author, a podcast host and regular contributor to cybersecurity industry publications. He is a veteran information security professional with over 30 years of experience in the medical, aerospace, manufacturing, and defense fields. His experience has fueled his passion for helping to address the human side of cybersecurity.
He is the former security manager for the US Army’s 2nd Regional Cyber Center and holds CISSP, CISSP-ISSAP, SACP, and many other certifications. Erich has worked with information security professionals around the world to provide the tools, training, and educational opportunities to succeed in Information Security.
As Chief Security Officer at Zscaler, Deepen Desai is responsible for running the global security research operations as well as working with the product group to ensure that the Zscaler platform and services are secure.
Chris Wallis is Founder and Chief Executive Officer (CEO) at Intruder. He has previously worked as Senior Security Specialist at WorldPay, Lead Security Consultant at Context Information Security and Security Consultant at Deloitte. Chris is an alumnus of the University of Bath.
Adrian Sanabria
- VULNERABILITIES: Copy Fail: 732 Bytes to Root on Every Major Linux Distributions – Xint
- VULN MGMT: NIST Can’t Keep Up. The Whole Digital Ecosystem Will Soon Feel It.
- VULN MGMT: The Real Remediation Pipeline Starts at Design Time
- SUPPLY CHAIN: Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US
- INSURANCE: 5 Key Findings From the InsurSec Report — and What You Can Do About Them
- INSURANCE: Insurance carriers quietly back away from covering AI outputs
- CRIMES: Florida Man Working as a Ransomware Negotiator Pleads Guilty to Conspiracy to Deploy Ransomware and Extort U.S. Victims – DataBreaches.Net
- ESSAYS: Ignore the humanities at your own peril
- ESSAYS: Offense Scales with Compute. Defense Scales with Committees.
- ESSAYS: I’m OK being left behind, thanks!
- AI NEWS: Microsoft To Shift GitHub Copilot Users To Token-Based Billing, Tighten Rate Limits
- PROJECTS: The Personal AI Stack: A Power User’s Guide
- SQUIRREL: Scientists Gave a Bunch of Salmon Cocaine. This Is What Happened Next