이 에피소드에 관해
As AI becomes embedded in everyday business operations, technology leaders face a growing security challenge. Attackers can use AI to scale their operations, identify vulnerabilities and launch more attacks, while employees are using it to write code, build applications and automate tasks without always understanding the risks. For CIOs, CTOs and CISOs, the challenge is knowing how to embrace AI without giving it access to information, systems and networks it shouldn't reach.
In this episode of CXO Secrets, David McClelland sits down with Michael Jenkins, Chief Technology Officer at ThreatLocker, to explore how AI is changing the cybersecurity landscape and why zero trust is becoming increasingly important. Drawing on his experience in email security, IT and ransomware prevention, Michael shares how the threats facing organisations have evolved and why preventing attacks is more effective than repeatedly recovering from them.
Michael explains why the biggest risk with AI isn't necessarily its intelligence, but the level of access organisations give it. He discusses how employees can unintentionally introduce vulnerabilities by using AI-generated code, why banning AI can drive people towards unapproved tools, and how businesses can establish the right controls to support adoption safely. He also explores the importance of least privilege, the practical challenges of implementing zero trust, and why security needs to be embedded across an organisation rather than applied selectively.
Throughout the conversation, Michael shares his perspective on the future of AI-powered attacks, the importance of educating employees and why building a strong security culture requires consistency, collaboration and a willingness to challenge established ways of working.
Topics include:
- How AI is increasing the scale and volume of cyberattacks
- Why attackers can exploit AI-generated code even when it isn't perfect
- The security risks of employees building applications with AI
- Shadow AI and the dangers of using unapproved tools
- Why banning AI can create greater risks for data protection
- Why the real AI security problem is access, not intelligence
- Applying zero trust principles to AI agents, applications and employees
- Using least privilege to limit access to sensitive data and systems
- How organisations can enable AI adoption without compromising security
- Why AI-generated code still requires human review
- Moving from ransomware recovery to proactive attack prevention
- Lessons from investigating organisations repeatedly hit by ransomware
- Implementing zero trust without unnecessarily disrupting employees
- Why security education and clear communication are essential to successful change
- Preparing for an increase in AI-powered attacks and less predictable threat actors
- Why effective technology leaders encourage their teams to challenge established practices
