Being Exploitable While Your Risk Tolerance Changes and You Unblock Innovation - Myke Lyons - BSW #438

About this episode

Myke Lyons discusses the need for organizations to embrace AI in cybersecurity to effectively prevent attacks.

AI has created a dilemma for security teams. Attackers are using AI to develop exploits to newly disclosed vulnerabilities faster than security teams can patch them. Security teams have not fully leveraged the capabilities of AI to autonomously prevent these attacks. Without a radical change in approach, organizations will be exposed to an exponentially increasing attack surface. How long can your organization tolerate being exploitable? Myke Lyons, CISO at Cribl, joins Business Security Weekly to discuss why organizations need to embrace AI to understand the behavior of attacks to effectively prevent them. For decades, we've focused on the Indicators of Compromise (IoCs) and have played whack-a-mole to try and patch them. Instead, we should focus on the Tactics, Techniques, and Procedures (TTPs) and leverage LLMs to understand the behavior of the attack. Once we understand the behaviors, we can implement preventative controls to minimize exposure. And yes, AI can also help us automate patching, when we're ready to trust it. In the leadership and communications segment, Your Risk Tolerance Has Changed. Does Your Leadership Team Know That? , The New Leadership Structures that…

People in this episode

Host: Matt Alderman

Guest: Myke Lyons

Topics covered

• AI in security
• risk tolerance
• cybersecurity innovation
• attack surface
• preventative controls

Keywords

• AI
• cybersecurity
• vulnerabilities
• patching
• TTPs
• IoCs
• attack behavior

Mentioned in this episode

Organizations: Cribl

More episodes of Business Security Weekly (Audio)

• The Next Frontier: Autonomous Security and RSAC Interviews from Quantro & SandboxAQ - Marc Manzano, Mark Hughes, Mehul Revankar - BSW #445 · April 29, 2026 · 1h 10m
• From Shame to Fame: Changing Behaviors and RSAC Interviews from Tanium and Illumio - Andrew Rubin, Craig Taylor, Tim Morris - BSW #444 · April 22, 2026 · 1h 8m
• Not All CISO Gigs Are Created Equal and RSAC Interviews from ESET and Mimecast - Rob Juncker, Joanna Chen, Tony Anscombe - BSW #443 · April 15, 2026 · 1h 11m
• Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security - John Bruggeman, Christy Wyatt, John Anthony Smith - BSW #442 · April 8, 2026 · 1h 7m
• Executive Paralysis and Two Pre-Recorded RSAC 2026 Interviews from DigiCert and Okta - Amit Sinha, Ann Marie van den Hurk, Matt Immler - BSW #441 · April 1, 2026 · 1h 2m
• Say Easy, Do Hard - Crypto-Agility - BSW #440 · March 25, 2026 · 52 min