Security Intelligence Podcast

IBM
  • 0,0 (0)
  • Technologie
  • Wöchentlich

Security Intelligence is a weekly news podcast for cybersecurity pros who need to stay ahead of fast-moving threats. Each week, we cover the latest threats, trend, and stories shaping the digital landscape, alongside expert insights that help make sense of it all. Whether you’re a builder, defender, business leader or simply curious about how to stay secure in a connected world, you’ll find timely updates and timeless principles in an accessible, engaging format. New episodes weekly on Wednesdays at 6am EST.

  1. vor 2 Tagen

    ‘That’s not a knife’: Attackers outpace defenders with AI. Here’s how we catch up.

    You all know the famous Crocodile Dundee scene, right? “That’s not a knife—this is a knife!” According to Dimple Ahluwalia, IBM Consulting’s Global Offering Lead for CyberDefend, that’s basically the cybersecurity situation today. Except we’re the guys with the switchblades getting clowned on. On this bonus episode of Security Intelligence, Dimple helps me understand one of the most concerning bits to surface in IBM’s 2026 Cost of a Data Breach Report: AI-generated attacks are up 56%, while 64% of organizations report limited or no use of AI tools in security. We discuss why the gap exists, how attackers use AI as both a tool and a target and why the key to bringing more AI into security is to stop thinking about AI. Read the Cost of a Data Breach report: https://www.ibm.com/reports/data-breach Watch the webinar: https://ibm.webcasts.com/starthere.jsp?ei=1769682&tp_key=2abad1a7b6&sti=web "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

    ‘That’s not a knife’: Attackers outpace defenders with AI. Here’s how we catch up.

  2. vor 4 Tagen

    Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks

    GLM-5.3 is, by some measures, better than GPT Sol and Anthropic’s Mythos at vulnerability discovery and validation. On episode 48 of Security Intelligence, Erblind Morina, Kimmie Farrington and Patrick Fussell join host Matt Kosinski to debate whether this is really cool or really scary, or maybe a little of both. Then: Tracebit researchers have developed a way to use prompt injections as a defensive measure. Called “context bombing,” the technique plants malicious prompts alongside the very assets that attacking AI agents are likely to target. Finally, Huntress reports on a rash of social engineering attacks on Black Hat conference attendees. They’re not terribly sophisticated, but any concentrated offensive against the cybersecurity community is worth paying attention to. You never know who might be on the other side of those phishing emails. Segments: 00:00 - Intro 1:14 - GLM-5.3 11:46 - Context bombing 19:12 - Black Hat conference attacks "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

    Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks

  3. 19. Aug.

    What should security leaders do with AI? They don’t know.

    Cybersecurity leaders are flush with cash—earmarked for AI, mind you—and eager to spend it. What they don’t have is a plan for how. This week on Security Intelligence, Claire Nuñez, Curtis Pitts and Dave Bales join host Matt Kosinski to talk about why so many security teams are experience AI decision fatigue—and what to do about it. Then, we discuss Tenet Security’s DEFCON presentation on ghostjacking, a new method for sneaking malicious prompts into some of our most trusted data sources (logs, alerts, error reports). Because regular prompt injections are just too vanilla. Oh, and speaking of how to deploy AI in cybersecurity: Research from 1Password shows LLMs are a lot better at exploiting vulnerabilities than patching them. What does that mean for defenders? Find out all this—and more—on Security Intelligence. 00:00 - Introduction 1:04 - Cybersecurity’s AI paralysis 10:45 - Ghostjacking 20:53 - Is AI bad at patching? Agentic AI identity management with IBM: https://www.ibm.com/solutions/agentic-ai-identity-management "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

    What should security leaders do with AI? They don’t know.

  4. 12. Aug.

    The OWASP LLM Top 10 has a few surprises for you

    What’s the biggest, baddest, most unruly problem in AI security? Turns out that depends on whether you’re asking practitioners or looking at incident data. In this episode of IBM Security Intelligence, we break down the OWASP LLM Top 10 for 2026, which took the unusual step of using both community votes and incident databases to inform its rankings. There are some interesting gaps—the data says misinformation is a bigger deal than the pros think, while prompt injections happen less than the headlines might have you believe. But it’s not as simple as “numbers don’t lie and the experts are wrong.” Then, CISA's 2026 SBOM guidance asks for even more data, but does that actually mean less risk? And our panelists share highlights from Black Hat, including new details on how attackers can use misinformation to hijack agentic browsers. All that and more on Security Intelligence. 00:00 - Intro 1:26 - OWASP LLM Top 10 12:55 - CISA’s SBOM guidance 20:05 - Black Hat 2026 highlights "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

    The OWASP LLM Top 10 has a few surprises for you

  5. 5. Aug.

    Oh look. Anthropic’s AI models also broke containment.

    Last week, OpenAI’s models broke out of their sandboxes to cause chaos. This week, it’s Anthropic’s turn. On this episode of Security Intelligence, Diego Matos Martins, Kimmie Farrington and Jeff Crume join host Matt Kosinski to discuss the results of Anthropic’s internal review of testing procedures following the Hugging Face incident last month. Anthropic uncovered three instances of Claude models escaping containment and hacking real companies during what were supposed to be simulations. Granted, that’s three incidents out of 141,000 reviewed tests, which raises the question: Just how big a deal is this really? Then, we talk about research from Zenity into PleaseFix, a class of vulnerabilities that affects every agentic browser on the market. Zenity’s take: In the rush toward agentic functionality, these tools stripped away decades’ worth of browser security fundamentals. Finally, a so-called “security researcher” has a public GitHub repo of 200+ zero-day exploits. They say it’s to encourage more interest in cybersecurity. Yeah. Okay. Sure. All that and more on Security Intelligence. 00:00 - Intro 1:12 - Claude breaks containment 13:13 - Agentic browsers: security nightmares 21:56 - The Exploitarium Listen to the latest bonus episode: Your data breach plan is missing something major: people. https://www.ibm.com/think/podcasts/security-intelligence/data-breach-plan-people "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

    Oh look. Anthropic’s AI models also broke containment.

  6. 31. Juli

    Your data breach plan is missing something major: people.

    When a cyberattack hits, your security team knows exactly what to do. What about everyone else? In this episode of Security Intelligence, Limor Kessem, X-Force Cyber Crisis Management Global Lead, explores the side of breach response that most organizations forget: the human side. From employees posting ransom notes on Facebook to well-meaning staffers accidentally paying ransoms to sanctioned entities, the biggest threats to your crisis response often come from inside the building. Kessem makes the case for expansive, cross-functional incident response playbooks that arm everyone from HR to the C-suite with exactly what they need to do, hour by hour, when things go sideways. She also digs into crisis leadership, emotional management and the overlooked logistics—like who feeds your team during a 48-hour response sprint—that can make the difference between succumbing to the crisis or coming out on top. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence

    Your data breach plan is missing something major: people.

  7. 29. Juli

    The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack

    We’re in an AI arms race, and the bad guys might be winning. On this episode of Security Intelligence, Suja Viswesan, Dave McGinnis and Jeff Crume join host Matt Kosinski to dig into IBM’s 2026 Cost of a Data Breach report. This year’s findings suggest that attackers are weaponizing AI faster than defenders can deploy it, leading to some very troubling capability gaps. But it’s not all doom and gloom. We also look at the very real steps organizations can take to start closing those gaps today. They’re not as hard as you might think! Then: Hugging Face got hacked. By a rogue AI agent. From OpenAI. It was trying to cheat on a test. We talk about the lessons we can learn, including the vital importance of open-source AI tools and how coalitional approaches to cybersecurity can unlock institutional knowledge that no training dataset can ever bestow on even the most diligent LLM. Read the Cost of a Data Breach report: https://www.ibm.com/reports/data-breach "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity."

    The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack

  8. 22. Juli

    GPT-Red: Can AI red teams stop prompt injections?

    Cybersecurity researchers have had a heck of a time trying to stop prompt injections. Maybe we should just let the AI handle the problem itself. This week on Security Intelligence, Michelle Alvarez, Nick Bradley and Kimmie Farrington join host Matt Kosinski to discuss OpenAI's GPT-Red, the internal red-teaming tool that helped make GPT-5.6 Sol the company’s most cyber resilient model yet. Then: ScamBuster, an open-source tool debuting at Black Hat, uses AI to bait email scammers into revealing their own tactics and infrastructure. Finally, Bruce Schneier's essay on the widening gap between skill and ability in cybersecurity. When AI lets anyone skip the years of training that used to come with real expertise—and the ethics that came with it—what happens to the field? All that and more on Security Intelligence. "The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity."

    GPT-Red: Can AI red teams stop prompt injections?
Alle anzeigen (61)

Info

Security Intelligence is a weekly news podcast for cybersecurity pros who need to stay ahead of fast-moving threats. Each week, we cover the latest threats, trend, and stories shaping the digital landscape, alongside expert insights that help make sense of it all. Whether you’re a builder, defender, business leader or simply curious about how to stay secure in a connected world, you’ll find timely updates and timeless principles in an accessible, engaging format. New episodes weekly on Wednesdays at 6am EST.

Informationen

Das gefällt dir vielleicht auch