Related events

Cybercast

Stay ahead in the SOC: Contain threats with confidence and control

AI for better SecOps: A Black Hat preview

alliemellenthumb

Security is about humans, but automation and machine learning is necessary 

Security Operations

AdobeStock_2197939855 (1)

Identity

Data Security

Event logging

Compliance Management

Small business

Brief

Tenfold Community Edition adds new features for small organizations

Practioner Decision Guide_Attack-surface-management

Blue team

Incident Response

Nexus

SIEM

SOAR

Practitioner Decision Guide

Proving your MDR works: testing detection coverage and response effectiveness

Exaforce's Chief Security Evangelist, Aqsa, joins us to discuss the current state of the AI SOC and why it covers so much more than it did over 2 years ago, when our podcast first started covering this market. Exaforce also recently released AI Security and its ExaGo mobile app - we're very excited about the possibility of analyzing incidents at the grocery store!

Exaforce's Chief Security Evangelist, Aqsa, joins us to discuss the current state of the AI SOC and why it covers so much more than it did over 2 years ago, when our podcast first started covering this market. Exaforce also recently released AI Security and its ExaGo mobile app - we're very excited about the possibility of analyzing incidents at the grocery store!

This segment is sponsored by Exaforce. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/exaforce">https://securityweekly.com/exaforce</a> to learn more about them!

This segment is sponsored by Exaforce. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/exaforce">https://securityweekly.com/exaforce</a> to learn more about them!

The AI industry's sandbox escapes have had a big impact on everyone and unsurprisingly, there's a bill proposing to ban some AI products and pause the development of others.

The AI industry's sandbox escapes have had a big impact on everyone and unsurprisingly, there's a bill proposing to ban some AI products and pause the development of others.

It seems that, increasingly, as pro-AI and anti-AI groups become more polarized and divided, you could start an entire podcast that does nothing but fact-check both sides. We're an emotional species and it seems the more heated debate gets, the more folks on both sides are willing to straight-up fabricate things to help argue their points.

It seems that, increasingly, as pro-AI and anti-AI groups become more polarized and divided, you could start an entire podcast that does nothing but fact-check both sides. We're an emotional species and it seems the more heated debate gets, the more folks on both sides are willing to straight-up fabricate things to help argue their points.

Today's focus is this YouTube video: <a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=WXsTCJl7sU4">https://www.youtube.com/watch?v=WXsTCJl7sU4</a>

Today's focus is this YouTube video: <a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=WXsTCJl7sU4">https://www.youtube.com/watch?v=WXsTCJl7sU4</a>

It's the most on-the-nose type of propaganda - straight up claiming the government is going to break into your house and take your GPUs and LLMs. Could the bill proposed by Bernie Sanders and Greg Casar be characterized as extreme? Sure, but it's nowhere near as extreme as the title of the video, "They're Banning AI Servers at Home" suggests.

It's the most on-the-nose type of propaganda - straight up claiming the government is going to break into your house and take your GPUs and LLMs. Could the bill proposed by Bernie Sanders and Greg Casar be characterized as extreme? Sure, but it's nowhere near as extreme as the title of the video, "They're Banning AI Servers at Home" suggests.

The hardest things to swallow about the video:

The hardest things to swallow about the video:

<ol class="wp-block-list">
<li>it characterizes Bernie Sanders as "the government", as if he's representative of most of the US government rather than an outlier that has little to no chance to get a bill like this passed</li>


<li>it never mentions the fact that the bill establishes a model cutoff, measured in training effort (10^25 flops, which doesn't include the open weight models you're using at home, unless you have an 8x cluster of DGX Sparks - $40k+ worth of AI compute)</li>
</ol>

<ol><li>it characterizes Bernie Sanders as "the government", as if he's representative of most of the US government rather than an outlier that has little to no chance to get a bill like this passed</li><li>it never mentions the fact that the bill establishes a model cutoff, measured in training effort (10^25 flops, which doesn't include the open weight models you're using at home, unless you have an 8x cluster of DGX Sparks - $40k+ worth of AI compute)</li></ol>

Finally, in the enterprise security news,

Finally, in the enterprise security news,

<ol class="wp-block-list">
<li>we check the vibes</li>


<li>massive, connected funding</li>


<li>NVIDIA OpenShell</li>


<li>cars are still hackable</li>


<li>a ransomware arrest turned into a murder investigation</li>


<li>AI welfare</li>
</ol>

<ol><li>we check the vibes</li><li>massive, connected funding</li><li>NVIDIA OpenShell</li><li>cars are still hackable</li><li>a ransomware arrest turned into a murder investigation</li><li>AI welfare</li></ol>

All that and more, on this episode of Enterprise Security Weekly.

All that and more, on this episode of Enterprise Security Weekly.

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15206″} podcast from PPWorks

AI benefits/risks

State of the AI SOC, regulating AI, and can AI agents feel pain? – Aqsa Taylor – ESW #479

alert_warning_AdobeStock_317915513

Cybersecurity concerns rise for physical access control systems

AI processor chip in modern data center server corridor with glowing digital data connections, idea for artificial intelligence computing, cloud technology and big data infrastructure

AI processor chip in modern data center server corridor with glo

MSPAlliance updates certification standard to include AI and third-party services

Career Playbook_Security-operations

Career Playbook

Understanding the role of a SOC Analyst

Interview with Christopher Crawley - The Value of SecOps

<h3>Interview with Christopher Crawley - The Value of SecOps</h3>

This week, we talk to Chris Crawley about his new book, The Value of Cybersecurity Operations. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general. This book was written to more broadly arm practitioners with the information they need to communicate why security operations are necessary to leadership.

This week, we talk to Chris Crawley about his new book, The Value of Cybersecurity Operations. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general. This book was written to more broadly arm practitioners with the information they need to communicate why security operations are necessary to leadership.

The book is available in several forms: eBook, hardcover, softcover, and an audiobook read by Chris himself!

The book is available in several forms: eBook, hardcover, softcover, and an audiobook read by Chris himself!

You can pick all versions up here: <a rel="noreferrer noopener" target="_blank" href="https://shop.montance.com/collections/all">https://shop.montance.com/collections/all</a> and Security Weekly listeners get 50% off with code sw-50!

You can pick all versions up here: <a rel="noreferrer noopener" target="_blank" href="https://shop.montance.com/collections/all">https://shop.montance.com/collections/all</a> and Security Weekly listeners get 50% off with code sw-50!

The Evolving Exploitation of Trust with Josh Davies, Security Strategist at Fortra

<h3>The Evolving Exploitation of Trust with Josh Davies, Security Strategist at Fortra</h3>

Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.

Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.

<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.youtube.com/watch?v=3NwwwJdRIzc&amp;list=PLTWUEP9e5aG6tR_j-czWdCeIneKeWCZhm">Art of Security Podcast</a></li>


<li><a rel="noopener" target="_blank" href="https://www.fortra.com/security/research">Fortra Research</a></li>
</ul>

<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=3NwwwJdRIzc&amp;list=PLTWUEP9e5aG6tR_j-czWdCeIneKeWCZhm">Art of Security Podcast</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.fortra.com/security/research">Fortra Research</a></li></ul>

This segment is sponsored by Fortra. Access FIRE Research here: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a>

This segment is sponsored by Fortra. Access FIRE Research here: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a>

Why Agentic AI Security Requires a Defense-In-Depth Strategy with Kaushik Shanadi, CTO and Co-Founder of Helmet Security

<h3>Why Agentic AI Security Requires a Defense-In-Depth Strategy with Kaushik Shanadi, CTO and Co-Founder of Helmet Security</h3>

Many organizations are approaching agentic AI security by stitching together individual controls, assuming that identity, network, endpoint, or application security alone is enough. Each address only one part of the problem. As AI agents become more autonomous, move across systems, and take actions on behalf of users, organizations need a true defense-in-depth strategy that combines every layer of the security stack. Kaushik can discuss how each security layer provides a different piece of the puzzle and how individually, none of the controls are sufficient. But together, they create the layered governance needed to securely deploy agentic AI.

Many organizations are approaching agentic AI security by stitching together individual controls, assuming that identity, network, endpoint, or application security alone is enough. Each address only one part of the problem. As AI agents become more autonomous, move across systems, and take actions on behalf of users, organizations need a true defense-in-depth strategy that combines every layer of the security stack. Kaushik can discuss how each security layer provides a different piece of the puzzle and how individually, none of the controls are sufficient. But together, they create the layered governance needed to securely deploy agentic AI.

For more information about Helmet Security, please visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/helmetbh">https://securityweekly.com/helmetbh</a>

For more information about Helmet Security, please visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/helmetbh">https://securityweekly.com/helmetbh</a>

Above Security on Why Legacy Tools Don’t Cut It for Modern Insider Risk with Tricia Howard, Head of Marketing at Above Security

<h3>Above Security on Why Legacy Tools Don’t Cut It for Modern Insider Risk with Tricia Howard, Head of Marketing at Above Security</h3>

As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.

As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.

<ul class="wp-block-list">
<li>Blog Post: <a rel="noopener" target="_blank" href="https://www.above.security/blog-posts/redefining-insider-threat">Redefining Insider Threat</a></li>


<li>Blog Post: <a rel="noopener" target="_blank" href="https://www.above.security/blog-posts/above-security-what-i-wanted-ueba-to-be-years-ago">What I wanted UEBA to be, Years Ago</a></li>
</ul>

<ul><li>Blog Post: <a rel="noreferrer noopener" target="_blank" href="https://www.above.security/blog-posts/redefining-insider-threat">Redefining Insider Threat</a></li><li>Blog Post: <a rel="noreferrer noopener" target="_blank" href="https://www.above.security/blog-posts/above-security-what-i-wanted-ueba-to-be-years-ago">What I wanted UEBA to be, Years Ago</a></li></ul>

To learn more about Above Security and insider risk management in the era of agentic AI, visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/abovebh">https://securityweekly.com/abovebh</a>

To learn more about Above Security and insider risk management in the era of agentic AI, visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/abovebh">https://securityweekly.com/abovebh</a>

The Identity Crisis Your Security Team Didn't See Coming: Governing AI Agents with Darren Guccione, CEO and Co-Founder of Keeper Security

<h3>The Identity Crisis Your Security Team Didn't See Coming: Governing AI Agents with Darren Guccione, CEO and Co-Founder of Keeper Security</h3>

AI agents outnumber human identities in enterprise environments, and traditional security software was never built to govern them. 89% of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder.

AI agents outnumber human identities in enterprise environments, and traditional security software was never built to govern them. 89% of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder.

In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.

In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.

<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.keepersecurity.com/privileged-access-management/">Privileged Access Management</a></li>


<li><a rel="noopener" target="_blank" href="https://www.keepersecurity.com/resources/insight-report-identity-security-at-machine-speed/">Identity Security at Machine Speed</a></li>
</ul>

<ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.keepersecurity.com/privileged-access-management/">Privileged Access Management</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.keepersecurity.com/resources/insight-report-identity-security-at-machine-speed/">Identity Security at Machine Speed</a></li></ul>

To learn more about Keeper Security, visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/keeperbh">https://securityweekly.com/keeperbh</a>

To learn more about Keeper Security, visit: <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/keeperbh">https://securityweekly.com/keeperbh</a>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15204″} podcast from PPWorks

Phishing

Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478

Security Operations

Related events

Stay ahead in the SOC: Contain threats with confidence and control

AI for better SecOps: A Black Hat preview

Stay ahead in the SOC: Contain threats with confidence and control

Related Videos

Security is about humans, but automation and machine learning is necessary

Tenfold Community Edition adds new features for small organizations

Proving your MDR works: testing detection coverage and response effectiveness

State of the AI SOC, regulating AI, and can AI agents feel pain? – Aqsa Taylor – ESW #479

Cybersecurity concerns rise for physical access control systems

MSPAlliance updates certification standard to include AI and third-party services

Understanding the role of a SOC Analyst

Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478

MDR explained: what it is, what it is not and what outcome it delivers

Fast Five

Selected by the SC Media Editorial team every Tuesday.