About this episode

Karen Heart discusses a file-system–first approach to security in the context of modern attacks and AI.

Rethinking Security from the OS Up in the Age of AI Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures. She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source. The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries. Segment Resources: https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078 ​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81 Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience…

People in this episode

Host: Adrian Sanabria

Guests: Karen Heart, Craig Sanderson, Sachin Jade, Phil Calvin, Travis Wong

Topics covered

• operating system security
• AI and security
• DNS resilience
• ransomware
• data exfiltration
• file-system security

Keywords

• security
• operating system
• AI
• ransomware
• DNS
• data exfiltration
• immutable controls
• file access
• privilege escalation

Mentioned in this episode

Organizations: Infoblox, NIST

Books & works: Zero-Day-Secure

More episodes of Enterprise Security Weekly (Audio)

• Making AI actually work in the enterprise and more RSAC Conference 2026 interviews - Camellia Chan, Aamir Lakhani, Jim Spignardo, Jody Brazil, Ely Abramovitch - ESW #455 · April 20, 2026 · 1h 40m
• We catch up on the news, including AI vuln hunting; also more RSAC interviews! - John Wilson, Mark Lambert, Georges Bossert, Samuel Hassine - ESW #454 · April 13, 2026 · 1h 37m
• Battling payment fraud with tokenization and executive interviews from RSAC 2026 - Jimmy White, Thyaga Vasudevan, Brian Oh, Mickey Bresman, Ashish Jain - ESW #453 · April 6, 2026 · 1h 46m
• Oops, all Interviews: Switching to Cyber, CISO Reflections, and the State of TPCRM - Alexandre Sieira, Lenny Zeltser, Helen Patton - ESW #452 · March 30, 2026 · 1h 50m
• Can AI help critical infrastructure, the state of the cyber market, and weekly news - Mike Privette, Kara Sprague - ESW #451 · March 23, 2026 · 1h 43m
• AI Governance, new book (Code War) from Allie Mellen, and the weekly news! - Jeremy Snyder, Allie Mellen - ESW #450 · March 16, 2026 · 1h 52m

Explore listener stats, chart rankings, contacts and more on the Enterprise Security Weekly (Audio) podcast page.