From Blue Team Challenges to AI Innovations: A Conversation with Jason Haddix

About this episode

The episode features a discussion with Jason Haddix on AI innovations in cybersecurity and the challenges faced by blue teamers.

In this episode of Simply Defensive, Josh Mason and Wade Wells sit down with Jason Haddix — CISO veteran, AI security thought leader, and founder of Arcanum Information Security — for a wide-ranging conversation on where AI is actually headed in cybersecurity, and what blue teamers need to know right now. Jason shares what he's learned from running AI scaling assessments inside major enterprises, why most organizations are still in the early stages of AI adoption, and how the industry needs to stop thinking about AI security like traditional web app security. He breaks down the stages of AI adoption (from custom bots to agents), explains why input validation is a losing game for LLM security, and makes the case for classifiers, guardrails, and LLM-based routing as the real defense-in-depth play for AI systems. Wade and Jason also revisit the Red Blue Purple AI course, talk through how RAG and context engineering are transforming what's possible for blue teamers, and discuss why the credential leakage problem is still one of the biggest vectors defenders aren't taking seriously enough. Topics covered: Why CTI struggles to prove value — and where it actually matters most Stealer…

People in this episode

Hosts: Wade Wells, Josh Mason

Guest: Jason Haddix

Topics covered

• AI in cybersecurity
• blue team challenges
• AI adoption stages
• credential leakage
• defending AI systems
• context engineering

Keywords

• AI security
• blue team
• credential leakage
• context engineering
• RAG
• LLM security
• defense-in-depth

Mentioned in this episode

Organizations: Arcanum Information Security

More episodes of Simply Defensive

• S6:E3 - Tom Dejong - Inside the BHIS SOC: Triage, Curiosity, and Career Growth · May 4, 2026 · 31 min
• S6E2: John Hammond on Security Research, Storytelling, Deception, and Getting Hired in Cybersecurity · March 17, 2026 · 39 min
• From Pre-Law to FLARE: How Josh Stroschein Became Google's Malware Analyst · December 1, 2025 · 40 min
• Building Zero Trust Tools: Inside ThreatLocker with Product Manager Yuriy Tsibere · November 24, 2025 · 36 min
• Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident · November 17, 2025 · 33 min
• Building Forensics Tools That Last | Brian Carrier (Autopsy, Sleuth Kit) · November 10, 2025 · 32 min