Episode 19: Cloudflare Outage, AI-Powered Attacks & The Rise of GRC Engineering | Distilled Security Podcast
About this episode
The episode discusses a major Cloudflare outage, AI-driven cyberattacks, and the importance of GRC Engineering in modern security.
In this episode, we break down a major Cloudflare outage, explore how a nation-state used AI agents to automate a cyberattack, and discuss the growing risks around MCP integrations. We also highlight why GRC Engineering is becoming essential to modern security programs and wrap up with key regulatory updates, including CMMC changes affecting thousands of contractors. Topics covered: • Cloudflare outage impact and root cause • Nation-state attack using AI agents to automate intrusion steps • MCP (Model Context Protocol): power, risks, and examples • Why GRC Engineering is the future of compliance and automation • Updates on GDPR, ISO 27701, California AB 5866, and SEC rules • CMMC assessor shortages and what organizations must prepare for Spirit of the Episode • Knob Creek 21-Year Limited Release, rich caramel notes, heavy char, smooth for 100 proof Timestamps 0:02—Cloudflare Outage Stories & Global Impact 3:07—Root Cause, Not a Cyberattack & Third-Party Risk Reality 10:38 - China Uses Anthropic’s Claude + MCP for Automated Cyberattacks 14:17 - Full AI Attack Lifecycle Explained 27:18 - MCP: The API for AI & Its Security Risks 44:05 - Bourbon Break: Knob Creek 21-Year…
More episodes of Distilled Security Podcast
- Episode 23: Nobody read the report
- Episode 22: Is AI Good for Security, CIRCIA Starts the Clock, and the M&A Problem Nobody's Talking About
- Episode 21: AI Notetakers Are Illegal, GRC Tools Are Lying, and ISO 42001 Changes Everything
- Episode 20 : 2026 Kickoff: Security Resolutions, Key Deadlines, and Don’t Mislead the Feds
- Episode 18: TRISS Highlights, Cloud Chaos & SaaS Lessons Learned
- Episode 17: TPRM Is Worthless?! NY DFS Part 500, Security Negotiation Tips & Mezcal
Explore listener stats, chart rankings, contacts and more on the Distilled Security Podcast podcast page.