Full episode and show notes

Leadership, Security Strategy, Plan, Budget

Hard Truths: The Lies We Keep Buying in Cybersecurity – Andrew Rubin – RSAC26 #3

Cybersecurity isn’t broken because of a lack of technology—it’s broken because the industry avoids hard truths. Fear still drives budgets. AI is oversold as a cure‑all while foundations remain weak, and CISOs are held accountable without the authority to change outcomes. In this conversation, Illumio CEO and founder Andrew Rubin breaks down what must change to build real resilience—because the next breach won’t just impact the business, it could end a career. For more information about Illumio, please visit: https://securityweekly.com/illumiorsac. Read the interview summary from SC Media here: Illumio’s Andrew Rubin: The lies we keep buying in cybersecurity .

March 25, 2026

This episode is sponsored by

Full Segment Notes

Cybersecurity isn’t broken because of a lack of technology—it’s broken because the industry avoids hard truths. Fear still drives budgets. AI is oversold as a cure‑all while foundations remain weak, and CISOs are held accountable without the authority to change outcomes. In this conversation, Illumio CEO and founder Andrew Rubin breaks down what must change to build real resilience—because the next breach won’t just impact the business, it could end a career.

For more information about Illumio, please visit: https://securityweekly.com/illumiorsac

Read the interview summary from SC Media here: Illumio’s Andrew Rubin: The lies we keep buying in cybersecurity

Key Moments

0:00 - Introduction to RSAC 2026 & Cybersecurity Myths
0:21 - The Big Lie: “We Can Be 100% Safe”
0:57 - Accepting Breaches as Inevitable
01:37 - Why Cybersecurity Is Not Binary (Safe vs Breached)
02:00 - The Inventory Problem in Cybersecurity
02:21 - Understanding Risk Beyond Black-and-White Thinking
03:41 - Dwell Time & Why Detection Speed Matters
04:01 - AI Accelerates Attacks Beyond Human Speed
04:58 - The Misunderstanding of Cyber Risk
05:39 - Why Security Investments Don’t Match Real Risk
07:12 - The Importance of Basic Cyber Hygiene
07:44 - AI Speed vs Security Limitations
08:23 - How AI Gives Attackers a Massive Advantage
09:29 - Rethinking the Cybersecurity Playbook
10:18 - Why Traditional Security Models Won’t Work for AI
10:52 - The Need for Honest Industry Conversations
11:29 - Reactive vs Proactive Cybersecurity Mindsets
12:24 - Fixing Security Hygiene & Closing Attack Surface Gaps
12:55 - AI, MCP, and Expanding Network Complexity
13:13 - The Explosion of Attack Surface with AI Infrastructure
14:13 - Final Thoughts on the Future of Cybersecurity

Guest

CEO and Founder at Illumio

As Founder, CEO, and Board Member of Illumio, Andrew is responsible for the overall strategy and vision of the company. With deep expertise in Zero Trust, segmentation, network security, and regulatory and compliance management, Andrew is the Executive Sponsor of many of Illumio’s largest customers worldwide, including Citi, HSBC, Salesforce, and Microsoft. Andrew frequently participates in panels, articles, and podcasts for leading industry events and publications. Andrew was named to Goldman Sachs’ “100 Most Intriguing Entrepreneurs” seven times as part of its Builders & Innovators program and received Ernst & Young’s Bay Area Entrepreneur of the Year 2024.

Andrew serves as a Board Member of Emigrant Bank, as well as an advisor to several cyber and technology start-ups, and is an active angel investor. Andrew graduated from Washington University in St. Louis with a BSBA in Finance, and he is both a guest lecturer on entrepreneurship and a National Council member of the Skandalaris Center for Entrepreneurial Studies at the university.

Host

Stay in the Know, No Smoke and Mirrors – Join Our Newsletter

Get expert insights and technical breakdowns straight to your inbox.