IBM's Security Intelligence podcast discusses key cybersecurity trends for 2026, including the shift to operational resilience, Microsoft's expanded bug bounty for third-party code, the long-tail impact of the LastPass breach, OpenAI's use of AI for automated red teaming against prompt injections, and the commercialization of ClickFix attacks.
Explore Jeff Crume's cybersecurity predictions for 2026 and beyond, detailing the dual impact of AI in security, the rise of autonomous AI agents, the futility of deepfake detection, and the critical importance of post-quantum cryptography and passkeys for future defense.
The video explores the risks of Agentic AI, which acts rather than just chats, and the emergence of 'Shadow AI'—unofficial, unmonitored AI systems. It proposes a unified control plane for AI security and governance, using a continuous loop of discovery, assessment, governance, and auditing to ensure safe automation. The concepts are illustrated with practical use cases in healthcare and public services.
Sumeet Jeswani of Google discusses the critical shift from AI-powered to AI-orchestrated cyber attacks, where autonomous agents now lead complex security breaches. The summary explores new manipulation techniques like prompt and data injection, and outlines a multi-layered defense strategy rooted in the principles of least agency, defense-in-depth, and building security into AI systems from the ground up.
This podcast episode dives into critical cybersecurity topics, starting with Gartner's warning to ban AI browsers in the workplace due to significant security risks, like zero-click exploits. The conversation then broadens to the role of AI model providers in the threat intelligence community, questioning their responsibility in sharing data after attacks. The panel also analyzes MITRE's latest list of top software weaknesses, the pros and cons of using social logins (SSO), and a novel 'bring-your-own-virtual-machine' attack vector that challenges traditional endpoint security.
A discussion on the security risks of new AI browsers like ChatGPT Atlas, the rise of malware distribution through trusted platforms like YouTube, the emergence of "post-infrastructure" malware like GlassWorm, corporate negligence in mobile security, and the critical lessons in resiliency from the recent AWS outage.