Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling

About this episode

The episode discusses the failures of traditional endpoint security tools in the AI era and the rise of endpoint behavior modeling to combat insider threats.

Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI , and former Microsoft Security Copilot leader) to discuss why traditional endpoint security tools are failing in the AI era . Brandon talks about the reality of modern "Insider Risk." Attackers are no longer relying on malware; they are "living off the land" by using legitimate enterprise software (like Zoom or Microsoft Office) to look like everyday employees . Why EDR tools can see that Zoom is running, but are completely blind to a user granting remote control to an outsider . We also explore the explosion of Shadow AI, highlighting a real-world HIPAA violation where an HR employee tried to feed patient records into Meta AI via WhatsApp . If your SOC team is drowning in alerts from "dumb control points," this episode talks about how to move from reactive pattern matching (legacy DLP) to proactive behavioral intent modeling at the endpoint Guest Socials -⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠ Brandon's Linkedin Podcast Twitter…

People in this episode

Host: Ashish

Guest: Brandon Dixon

Topics covered

• EDR failures
• AI security
• insider threats
• endpoint behavior modeling
• Shadow AI
• HIPAA violations

Keywords

• EDR
• AI security
• insider risk
• behavioral intent modeling
• Shadow AI
• HIPAA violation

Mentioned in this episode

Organizations: Ent AI, Microsoft, Zoom, Microsoft Office, Meta AI, WhatsApp, Cloud Security Podcast

More episodes of Cloud Security Podcast

• Native Cloud Firewalls Falling Short in a Multicloud World · June 11, 2026 · 37 min
• How AI Agents Will Negotiate Your Vendor Contracts · May 27, 2026 · 38 min
• How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability · May 5, 2026 · 45 min
• AISPM Isn't Enough: How to Apply Zero Trust to AI Agents · April 29, 2026 · 54 min
• The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days · April 21, 2026 · 27 min
• Solving Prompt Injection & Shadow AI for AI Malware · April 7, 2026 · 37 min