Being Exploitable While Your Risk Tolerance Changes and You Unblock Innovation - Myke Lyons - BSW #438

About this episode

Myke Lyons discusses the need for organizations to embrace AI in order to effectively prevent attacks and manage their risk tolerance.

AI has created a dilemma for security teams. Attackers are using AI to develop exploits to newly disclosed vulnerabilities faster than security teams can patch them. Security teams have not fully leveraged the capabilities of AI to autonomously prevent these attacks. Without a radical change in approach, organizations will be exposed to an exponentially increasing attack surface. How long can your organization tolerate being exploitable? Myke Lyons, CISO at Cribl, joins Business Security Weekly to discuss why organizations need to embrace AI to understand the behavior of attacks to effectively prevent them. For decades, we've focused on the Indicators of Compromise (IoCs) and have played whack-a-mole to try and patch them. Instead, we should focus on the Tactics, Techniques, and Procedures (TTPs) and leverage LLMs to understand the behavior of the attack. Once we understand the behaviors, we can implement preventative controls to minimize exposure. And yes, AI can also help us automate patching, when we're ready to trust it. In the leadership and communications segment, Your Risk Tolerance Has Changed. Does Your Leadership Team Know That? , The New Leadership Structures that…

People in this episode

Host: Matt Alderman

Guest: Myke Lyons

Topics covered

• AI in security
• vulnerability management
• risk tolerance
• innovation
• CISO leadership
• attack surface

Keywords

• AI
• security teams
• exploits
• vulnerabilities
• TTPs
• patching
• risk tolerance
• CISO
• innovation

Mentioned in this episode

Organizations: Cribl

More episodes of Business Security Weekly (Video)

• The Next Frontier: Autonomous Security and RSAC Interviews from Quantro & SandboxAQ - Mark Hughes, Mehul Revankar, Marc Manzano - BSW #445 · April 29, 2026 · 1h 10m
• From Shame to Fame: Changing Behaviors and RSAC Interviews from Tanium and Illumio - Craig Taylor, Tim Morris, Andrew Rubin - BSW #444 · April 22, 2026 · 1h 8m
• Not All CISO Gigs Are Created Equal and RSAC Interviews from ESET and Mimecast - Joanna Chen, Tony Anscombe, Rob Juncker - BSW #443 · April 15, 2026 · 1h 11m
• Zero Trust Readiness and Two RSAC 2026 Interviews from Fenix24 and Absolute Security - John Bruggeman, John Anthony Smith, Christy Wyatt - BSW #442 · April 8, 2026 · 1h 7m
• Executive Paralysis and Two Pre-Recorded RSAC 2026 Interviews from DigiCert and Okta - Ann Marie van den Hurk, Amit Sinha, Matt Immler - BSW #441 · April 1, 2026 · 1h 2m
• Say Easy, Do Hard - Crypto-Agility - BSW #440 · March 25, 2026 · 52 min