CISO Insights: Voices in Cybersecurity

The 2026 DBIR Breakdown: Shadow AI, Pretexting, and the Rise of Vulnerabilities

43 min · 20. mai 2026
episode The 2026 DBIR Breakdown: Shadow AI, Pretexting, and the Rise of Vulnerabilities cover

Beskrivelse

The 2026 Data Breach Investigations Report reveals a rapidly shifting threat landscape where the exploitation of vulnerabilities has officially overtaken credential abuse as the top initial access vector. Alongside this shift, defenders are battling the explosion of "Shadow AI" data leaks and sophisticated, synchronous "pretexting" attacks that bypass traditional email-centric security training. Despite these advanced AI-driven threats, the report emphasizes that surviving the modern cyber battlefield requires a refinement of cybersecurity fundamentals—like patch management and access control—rather than a complete revolution. https://cisomarketplace.com/blog/verizon-dbir-2026-ciso-guide-vulnerability-exploitation-credential-theft [https://cisomarketplace.com/blog/verizon-dbir-2026-ciso-guide-vulnerability-exploitation-credential-theft] 2026 Verizon DBIR [https://www.verizon.com/business/resources/reports/dbir/?CMP=OOH_SMB_OTH_22222_MC_20200501_NA_NM20200079_00001]   Sponsors: www.breached.company [http://www.breached.company] www.cisomarketplace.com [http://www.cisomarketplace.com]

Kommentarer

0

Vær den første til å kommentere

Registrer deg nå og bli medlem av CISO Insights: Voices in Cybersecurity sitt community!

Prøv gratis

Prøv gratis i 14 dager

99 kr / Måned etter prøveperioden. · Avslutt når som helst.

  • Eksklusive podkaster
  • 20 timer lydbøker i måneden
  • Gratis podkaster

Alle episoder

481 Episoder

episode Agents of Security: The Dual Reality of AI in Cybersecurity cover

Agents of Security: The Dual Reality of AI in Cybersecurity

This episode explores the contrasting performance of Large Language Models (LLMs) across different cybersecurity domains, highlighting a fascinating divide in their current capabilities. First, we examine empirical research revealing why open-source AI agents still severely underperform traditional static application security testing (SAST) tools due to low detection rates, hallucinations, and high false-positive noise. Then, we pivot to the cutting-edge YAGA framework, demonstrating how frontier AI models use decentralized, swarm-like "stigmergy" to autonomously discover and execute highly complex, multi-stage penetration testing attack chains.   Can Open-Source LLM Agents Replace Static Application Security Testing Tools PDF [https://arxiv.org/abs/2606.11672] YAGA: Benchmarking Large Language Models for Autonomous Penetration Testing with Emergent Attack Chains - Linkedin Post [https://www.linkedin.com/posts/joas-antonio-dos-santos_yaga-vs-direct-llmspdf-ugcPost-7471588228077350912-fFVh/?utm_source=share&utm_medium=member_desktop&rcm=ACoAAALTGb8BKai6iiEmCeahfbRijfE1nHtCxxM] Defending MLOps Against Autonomous AI Warfare Episode [https://cisoinsights.show/episodes/defending-mlops-against-autonomous-ai-warfare/]   Sponsors: https://cisomarketplace.com [https://cisomarketplace.com] https://breached.company [https://breached.company]

18. juni 202621 min
episode Breaking the Union Ceiling: The Path to Cybersecurity SuperIntelligence cover

Breaking the Union Ceiling: The Path to Cybersecurity SuperIntelligence

Current cybersecurity AI systems typically rely on single-agent scaffolds, yet research demonstrates that no individual orchestration layer is optimally suited for every type of threat. By uniting structurally diverse scaffolds through a shared "blackboard" substrate, different agents can exchange intermediate findings and compress each other's reconnaissance phases. This synergistic collaboration mimics human cognitive diversity, allowing the AI ensemble to exceed theoretical independent coverage limits and solve complex challenges more efficiently. Towards Cyber-security Super-intelligence Whitepaper PDF: [https://media.licdn.com/dms/document/media/v2/D4E1FAQHaLcQ1IR0FZQ/feedshare-document-sanitized-pdf/B4EZ6Bya.fHQA8-/0/1780293940601?e=1782226800&v=beta&t=1pLjKh5i39z51CEfcT66EdVZTWXEovVsFdYs5vLCgHc]   Sponsors: https://cisomarketplace.services/program [https://cisomarketplace.services/program] https://cisomarketplace.services/ai-services [https://cisomarketplace.services/ai-services]

16. juni 202656 min
episode Defending MLOps Against Autonomous AI Warfare cover

Defending MLOps Against Autonomous AI Warfare

In this podcast, we dive into the critical evolution of MLSecOps and how organizations must adapt to defend their dynamic machine learning pipelines against the OWASP ML Top 10 threats, including data poisoning and AI supply chain attacks. We explore actionable insights from DARPA's AI Cyber Challenge, highlighting how autonomous systems like Buttercup use multi-agent architectures and LLMs to revolutionize vulnerability discovery and automated patching. Finally, we map out the essential open-source tools, such as Sigstore and MLRun, alongside the new security personas required to build robust, secure-by-design AI applications from initial data engineering to continuous production monitoring. Visualizing Secure MLOps (MLSecOps): A Practical Guide for Building Robust AI/ML Pipeline Security [https://openssf.org/wp-content/uploads/2025/08/OpenSSF_MLSecOps_Whitepaper.pdf]   Sponsors: https://cisomarketplace.services/program [https://cisomarketplace.services/program] https://cisomarketplace.services/ai-services [https://cisomarketplace.services/ai-services]

15. juni 202640 min
episode The AI Accountability Gap: Prioritizing Catastrophic Risks cover

The AI Accountability Gap: Prioritizing Catastrophic Risks

In this episode, we dive into a landmark Delphi study where 272 international experts prioritize the most severe threats posed by artificial intelligence over the next five years, including AI-enabled cyberattacks, dangerous capabilities, and extreme power centralization. We explore the stark "moral hazard" at the heart of the AI ecosystem, revealing how the general public and critical sectors bear the greatest vulnerabilities while the upstream developers responsible for safeguards face intense competitive pressures to race ahead. Finally, we discuss why implementing pragmatic mitigations is crucial yet insufficient, as structural risks are deeply entrenched in global economic systems and retain a persistent likelihood of causing catastrophic global outcomes. Prioritization of Risks from Artificial Intelligence PDF [https://cdn.prod.website-files.com/669550d38372f33552d2516e/6a172558bd2947234379749f_a8684052fd49a64374c9a9d3e4e5ab59_Prioritizing%20the%20risks%20from%20Artificial%20Intelligence.pdf]   Sponsors: https://airiskassess.com/ [https://airiskassess.com/] https://cisomarketplace.services/program [https://cisomarketplace.services/program]

14. juni 202633 min
episode Zero Trust for AI Agents cover

Zero Trust for AI Agents

As autonomous AI models accelerate the speed of cyber threats, traditional security perimeters are failing, requiring organizations to adopt a Zero Trust architecture specifically designed for agentic systems. This framework adapts core Zero Trust principles to address novel vulnerabilities—such as prompt injection, tool hijacking, and memory poisoning—by enforcing strict identity-based isolation and shifting from traditional "least privilege" to "least agency". By implementing hard cryptographic barriers, automated incident response, and continuous behavioral monitoring, organizations can effectively contain an attacker's blast radius and operate securely even when a breach inevitably occurs.   Claude Zero Trust PDF [https://cdn.prod.website-files.com/6889473510b50328dbb70ae6/6a1611a04085d7cd3dadc924_Claude-eBook-Zero-Trust-for-AI-Agents-05182026.pdf]   Sponsors https://cisomarketplace.services/engagements/claude-cybersecurity-consulting [https://cisomarketplace.services/engagements/claude-cybersecurity-consulting] https://cisomarketplace.services/ai-services [https://cisomarketplace.services/ai-services] https://cisomarketplace.services/program [https://cisomarketplace.services/program]

11. juni 202652 min