
The episode discusses the failures of traditional endpoint security tools in the AI era and the rise of endpoint behavior modeling to combat insider threats.
Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI , and former Microsoft Security Copilot leader) to discuss why traditional endpoint security tools are failing in the AI era . Brandon talks about the reality of modern "Insider Risk." Attackers are no longer relying on malware; they are "living off the land" by using legitimate enterprise software (like Zoom or Microsoft Office) to look like everyday employees . Why EDR tools can see that Zoom is running, but are completely blind to a user granting remote control to an outsider . We also explore the explosion of Shadow AI, highlighting a real-world HIPAA violation where an HR employee tried to feed patient records into Meta AI via WhatsApp . If your SOC team is drowning in alerts from "dumb control points," this episode talks about how to move from reactive pattern matching (legacy DLP) to proactive behavioral intent modeling at the endpoint Guest Socials - Brandon's Linkedin Podcast Twitter…
Host: Ashish
Guest: Brandon Dixon
Organizations: Ent AI, Microsoft, Zoom, Microsoft Office, Meta AI, WhatsApp, Cloud Security Podcast
Explore listener stats, chart rankings, contacts and more on the Cloud Security Podcast podcast page.