Participation in OpenAI's Daybreak program and Anthropic's Cyber Verification Program advances vulnerability research, security testing, and proactive threat defence.
This week on the podcast we cover the key takeaways from the just-released Cyber Hygiene Report from WatchGuard. After that, we discuss a recent alert from CISA and other international security agencies on state-sponsored attacks against network equipment. We end with an interesting research post on exfiltrating data from Claude's memory.
For years, the cybersecurity industry has assumed that the primary challenge was to see more, detect better, and deploy increasingly sophisticated tools. That paradigm no longer reflects the reality of today's cybersecurity operations. Organizations have never had so much visibility into their attack surface or so many capabilities to identify threats. However, the rapid evolution of AI is increasing the speed and complexity of attacks to a point where detection alone is no longer enough.
Artificial intelligence is quickly becoming one of the most transformative technologies in cybersecurity. Unfortunately, it's not transforming the industry exclusively for defenders. Attackers are already experimenting with AI to accelerate reconnaissance, analyze software for vulnerabilities, develop fully-functional exploits, and automate nearly all parts of the attack lifecycle.
The cybersecurity conversation usually revolves around attacks. We talk about ransomware, phishing, and critical vulnerabilities—but there is a much less visible problem that is limiting many organizations' ability to respond: operational complexity. Today, a single company might rely on dozens of security tools, manage workloads spread across multiple cloud providers, handle hundreds or thousands of digital identities, and support employees connecting from absolutely anywhere.
Every time a client gets breached through a cloud app, it's the MSP who gets the call. Compromised Microsoft 365 accounts, unauthorized AI tools, and misconfigured sharing settings. Attackers aren't breaking in anymore. They're logging in through gaps that your endpoint, firewall, and MDR tools were never designed to see.
For years, the VPN has been the default answer to remote access. It solved a problem organizations faced when employees primarily worked from offices and only occasionally connected from home. That world no longer exists. Today, employees work from everywhere. Applications run across SaaS platforms, public cloud, private cloud, and on-premises environments. Security teams are expected to provide seamless access while protecting against increasingly sophisticated attacks.
Security teams today face an overwhelming volume of alerts, making it increasingly difficult to distinguish genuine threats from everyday noise. As attackers become more adept at blending into legitimate activity, organizations need smarter ways to prioritize, investigate, and respond.
This week on the podcast, we review an after action report from CISA on a security incident they responded to back in May. After that, we cover a vulnerability in Amazon's Q Extension for VSCode before covering a research post from Microsoft on Giga Wiper.