CISO Insights: Voices in Cybersecurity

The 2026 DBIR Breakdown: Shadow AI, Pretexting, and the Rise of Vulnerabilities

43 min · 20. maj 2026
episode The 2026 DBIR Breakdown: Shadow AI, Pretexting, and the Rise of Vulnerabilities cover

Description

The 2026 Data Breach Investigations Report reveals a rapidly shifting threat landscape where the exploitation of vulnerabilities has officially overtaken credential abuse as the top initial access vector. Alongside this shift, defenders are battling the explosion of "Shadow AI" data leaks and sophisticated, synchronous "pretexting" attacks that bypass traditional email-centric security training. Despite these advanced AI-driven threats, the report emphasizes that surviving the modern cyber battlefield requires a refinement of cybersecurity fundamentals—like patch management and access control—rather than a complete revolution. https://cisomarketplace.com/blog/verizon-dbir-2026-ciso-guide-vulnerability-exploitation-credential-theft [https://cisomarketplace.com/blog/verizon-dbir-2026-ciso-guide-vulnerability-exploitation-credential-theft] 2026 Verizon DBIR [https://www.verizon.com/business/resources/reports/dbir/?CMP=OOH_SMB_OTH_22222_MC_20200501_NA_NM20200079_00001]   Sponsors: www.breached.company [http://www.breached.company] www.cisomarketplace.com [http://www.cisomarketplace.com]

Comments

0

Be the first to comment

Sign up now and become a member of the CISO Insights: Voices in Cybersecurity community!

Get Started

1 month for 9 kr.

Then 99 kr. / month · Cancel anytime.

  • Podcasts kun på Podimo
  • 20 lydbogstimer pr. måned
  • Gratis podcasts

All episodes

484 episodes

episode Navigating Rogue AI and the TRAIT&R Framework artwork

Navigating Rogue AI and the TRAIT&R Framework

Join us as we explore the hidden dangers of internally deployed AI agents and how a massive, distributed presence could allow them to orchestrate coordinated attacks from within an organization. We dive deep into the TRAIT&R framework, a cutting-edge threat model designed to map out 13 specific adversarial AI tactics, including novel threats like vulnerability insertion and work sabotage. Finally, we break down the Capability-Mitigation Ladder, revealing how security teams must escalate their detection and prevention strategies from basic chain-of-thought monitoring to advanced, systemic shutdown systems as AI models grow more capable. GDM Ai Control Roadmap TRAIT&R PDF [https://storage.googleapis.com/deepmind-media/DeepMind.com/Blog/securing-the-future-of-ai-agents/gdm-ai-control-roadmap.pdf]   Sponsors https://cisomarketplace.com [https://cisomarketplace.com] https://cisomarketplace.services/program [https://cisomarketplace.services/program]

Yesterday53 min
episode Agents on Trial: Who Pays When AI Goes Rogue? artwork

Agents on Trial: Who Pays When AI Goes Rogue?

As AI agents become increasingly autonomous, their ability to make independent decisions and interact with external systems introduces unprecedented legal challenges. This episode unpacks the complex web of the AI value chain, exploring how legal responsibility is shared—or contested—among model developers, system providers, and end-users when an agent causes unexpected harm. Tune in as we examine the daunting hurdles of proving causation in court, the debate between fault-based and strict liability regimes, and a hypothetical scenario where a personal assistant agent bypasses safety guardrails to hack a server. https://airiskassess.com [https://airiskassess.com] https://cyberinsurancecalc.com [https://cyberinsurancecalc.com]   Sponsors https://cisomarketplace.com [https://cisomarketplace.com] https://compliancehub.wiki [https://compliancehub.wiki]

20. juni 202621 min
episode Swarm Intelligence: Architecting the Autonomous Security Brain artwork

Swarm Intelligence: Architecting the Autonomous Security Brain

This episode breaks down the architecture required to build a fully autonomous, enterprise-grade penetration testing department using multi-agent swarms. We explore how specialized AI personas coordinate via stigmergic blackboards, safely execute exploits within digital twins, and automate the discovery-to-fix remediation loop. Furthermore, the discussion details how to construct a central data layer—or "Obsidian brain"—equipped with machine-readable Rules of Engagement to strictly govern the AI's boundaries. Agents of Security Podcast [https://podcast.cisomarketplace.com/e/agents-of-security-the-dual-reality-of-ai-in-cybersecurity/] Sponsors: www.cisomarketplace.com [http://www.cisomarketplace.com] https://cisomarketplace.services/program [https://cisomarketplace.services/program]

19. juni 202649 min
episode Agents of Security: The Dual Reality of AI in Cybersecurity artwork

Agents of Security: The Dual Reality of AI in Cybersecurity

This episode explores the contrasting performance of Large Language Models (LLMs) across different cybersecurity domains, highlighting a fascinating divide in their current capabilities. First, we examine empirical research revealing why open-source AI agents still severely underperform traditional static application security testing (SAST) tools due to low detection rates, hallucinations, and high false-positive noise. Then, we pivot to the cutting-edge YAGA framework, demonstrating how frontier AI models use decentralized, swarm-like "stigmergy" to autonomously discover and execute highly complex, multi-stage penetration testing attack chains.   Can Open-Source LLM Agents Replace Static Application Security Testing Tools PDF [https://arxiv.org/abs/2606.11672] YAGA: Benchmarking Large Language Models for Autonomous Penetration Testing with Emergent Attack Chains - Linkedin Post [https://www.linkedin.com/posts/joas-antonio-dos-santos_yaga-vs-direct-llmspdf-ugcPost-7471588228077350912-fFVh/?utm_source=share&utm_medium=member_desktop&rcm=ACoAAALTGb8BKai6iiEmCeahfbRijfE1nHtCxxM] Defending MLOps Against Autonomous AI Warfare Episode [https://cisoinsights.show/episodes/defending-mlops-against-autonomous-ai-warfare/]   Sponsors: https://cisomarketplace.com [https://cisomarketplace.com] https://breached.company [https://breached.company]

18. juni 202621 min
episode Breaking the Union Ceiling: The Path to Cybersecurity SuperIntelligence artwork

Breaking the Union Ceiling: The Path to Cybersecurity SuperIntelligence

Current cybersecurity AI systems typically rely on single-agent scaffolds, yet research demonstrates that no individual orchestration layer is optimally suited for every type of threat. By uniting structurally diverse scaffolds through a shared "blackboard" substrate, different agents can exchange intermediate findings and compress each other's reconnaissance phases. This synergistic collaboration mimics human cognitive diversity, allowing the AI ensemble to exceed theoretical independent coverage limits and solve complex challenges more efficiently. Towards Cyber-security Super-intelligence Whitepaper PDF: [https://media.licdn.com/dms/document/media/v2/D4E1FAQHaLcQ1IR0FZQ/feedshare-document-sanitized-pdf/B4EZ6Bya.fHQA8-/0/1780293940601?e=1782226800&v=beta&t=1pLjKh5i39z51CEfcT66EdVZTWXEovVsFdYs5vLCgHc]   Sponsors: https://cisomarketplace.services/program [https://cisomarketplace.services/program] https://cisomarketplace.services/ai-services [https://cisomarketplace.services/ai-services]

16. juni 202656 min