SANS Institute: AI Agents Are an Attack Surface. Does your CISO know? | CXOTalk #910

About this episode

The episode discusses the structural advantages AI gives to cyber attackers and the implications for cybersecurity defenses.

Cyberattacks that used to take months now take minutes. And your defenders still can't keep up. Rob T. Lee, Chief AI Officer of the SANS Institute, and David A. Bray, Chair of the Accelerator at the Stimson Center, explain why AI gives attackers a structural advantage. Attackers don't care if their AI breaks something. Your security team can't take that risk. That asymmetry changes everything. ✅ You'll discover: ✅ Why attackers will always remove the human in the loop faster than defenders can, and the risk calculus that creates ✅ How "death by 1,000 cuts" works: $300 per person times 10,000 targets via SIM farms equals a single ransomware payout ✅ The federated learning approach that lets organizations share threat intelligence without exposing their own data or vulnerabilities ✅ Why hackers are exploiting AI hallucinations by writing real code libraries for packages that models reliably hallucinate ✅ How to identify the right cybersecurity talent: hire for learning velocity and the "fiddling mindset," not static AI credentials ✅ Why boards must stop treating cybersecurity as prevention and start rewarding rapid detection and response ✅ The pre-compute vs…

People in this episode

Host: Michael Krigsman

Guests: Rob T. Lee, David A. Bray

Topics covered

• cybersecurity
• AI in security
• cyberattacks
• threat intelligence
• autonomous defense

Keywords

• AI agents
• cybersecurity talent
• ransomware
• threat intelligence
• autonomous cyber defense

Mentioned in this episode

Organizations: SANS Institute, Stimson Center

More episodes of CXOTalk

• Mozilla CTO: Why Most Enterprises Don't Control Their AI · June 9, 2026 · 57 min
• Enterprise AI: Shadow AI and Agentic Risk - CIO advice · May 16, 2026 · 42 min
• Autonomous Software Development at Enterprise Scale: Inside a 1,000-Developer Pilot (with Blitzy) | CXOTalk #918 · May 5, 2026 · 18 min
• How AI Swarms Weaponize Disinformation | CXOTalk #915 · May 4, 2026 · 57 min
• AI-Enabled Software Development: AI Coding at a Global Insurer, with Blitzy | CXOTalk #917 · May 4, 2026 · 21 min
• Agentic AI in the Enterprise 2026 | CXOTalk #916 · May 3, 2026 · 56 min