AI cybersecurity threats are evolving faster than most organizations can respond. Attackers are using AI across the full attack lifecycle, from reconnaissance and social engineering to autonomous drones and swarm attacks, and the forensic methods used to investigate breaches haven't kept up.
In CXOTalk episode 910, Rob T. Lee, Chief AI Officer at the SANS Institute, the "Godfather of Digital Forensics and Incident Response," and a veteran of the NSA, CIA, and Mandiant, breaks down exactly how AI-powered cyberattacks work and what incident response must look like going forward. Our guest co-host, Dr. David A. Bray, Distinguished Fellow at the Stimson Center and expert witness before Congress on AI policy, brings the strategic perspective on what boards, CEOs, and CISOs need to act on now.
If you're a business or technology leader responsible for cybersecurity strategy, this conversation will change how you think about the threats already targeting your organization.
Topics Discussed in This Episode
- How attackers use AI across the full cyberattack lifecycle, from reconnaissance to concealment.
- Why traditional digital forensics and incident response methods are failing against AI-driven threats.
- What shadow AI means for enterprise cybersecurity risk.
- How autonomous systems and swarm attacks are changing the threat landscape.
- What CEOs, CISOs, and board members need to understand about AI cybersecurity strategy.
- How policymakers should approach AI regulation in the context of national security.
Episode Participants
Rob T. Lee is Chief of Research and Chief AI Officer at SANS Institute, where he leads research, mentors faculty, and helps cybersecurity teams and executive leaders prepare for AI and emerging threats. Known as the “Godfather of DFIR,” Rob coined the terms DFIR (digital forensics and incident response) and CTI (cyber threat intelligence), and helped shape both fields.
Dr. David A. Bray is both a Distinguished Fellow and Chair of the Accelerator, Loomis Council at the non-partisan Henry L. Stimson Center. He is also a Distinguished Fellow with the Business Executives for National Security and a CEO and transformation leader for different “under the radar” tech and data ventures. He is Principal at LeadDoAdapt Ventures and has served in a variety of leadership roles in turbulent environments, including bioterrorism preparedness and response.
Michael Krigsman is a globally recognized analyst, strategic advisor, and industry commentator, known for his deep expertise in business transformation, innovation, and leadership. He has presented at industry events worldwide and written extensively on the reasons for IT failures. His work has been referenced in the media over 1,000 times and in more than 50 books and journal articles; his commentary on technology trends and business strategy reaches a global audience.
0 Commentaires