How Should CISOs Prioritise Risk in the Age of AI-Powered Cyberattacks?
About this episode
The episode discusses the impact of AI on cybersecurity, focusing on how CISOs should prioritize risk amidst evolving threats.
Two AI systems reached the offensive and defensive security space five weeks apart. Not because a vendor planned a product launch cycle, but because attackers and defenders are now using the same class of tool. The difference is that only one side built its own to fix things. Attackers are now weaponising a newly disclosed vulnerability in a median of under five days. Most organisations still take more than 60 days to remediate a critical one once a patch exists. In a growing share of cases, exploitation starts before the patch is even released. That gap isn't closing, and it has now become the whole problem. This is the subject of this episode of the Security Strategist Podcast , where host Richard Stiennon sits down with Brad Hibbert , COO and CSO at exposure management platform Brinqa , to talk about what changes when AI shows up on both sides of the fight. Mythos Thinks Like a Pen Tester Mythos, one of the offensive AI tools now circulating, doesn't just scan for known flaws. It reasons through a codebase the way a skilled human pen tester would analyse binaries, builds, and source across hundreds of instances simultaneously, around the clock. "It's like having a whole team…
More episodes of The Security Strategist
- Is Your SOC Below the AI Poverty Line?
- Shadow AI to Shadow Agents: What's Actually Changed in 2026?
- Autonomous Pen Testing & the Next Era of Security Testing
- AI Hype vs Reality: What Security Leaders Are Getting Wrong
- How the Mythos Era Is Reshaping the Future of the SOC
Explore listener stats, chart rankings, contacts and more on the The Security Strategist podcast page.