Personalizing Cybersecurity Training: The Key to Modern Defense Strategies Michael Waite

The primary focus of today's discussion revolves around the profound implications of artificial intelligence (AI) on the cybersecurity landscape, particularly emphasizing the heightened sophistication and frequency of cyberattacks. As we navigate through the intricacies of this evolving domain, we aim to elucidate how the advent of advanced AI technologies is transforming both the methods employed by threat actors and the strategies utilized for organizational defense. Our esteemed guest, Michael Waite, brings invaluable insights from his extensive experience in technology and cybersecurity, highlighting the necessity for a paradigm shift in how we approach security awareness and training. We delve into the critical need for personalized training programs that address specific risks associated with individual roles within an organization, moving away from outdated, one-size-fits-all methods. Ultimately, our dialogue seeks to foster a deeper understanding of the current threat landscape, advocating for a collaborative and informed approach to safeguarding not only corporate environments but also the personal digital lives of individuals.

In this episode of Security by Default, host Joe Carson sits down with Michael Waite from Dune Security to explore how AI is reshaping cybersecurity and why it’s time to rethink traditional awareness training.

As cyber threats become more sophisticated, personalized, and AI-powered, organizations can no longer rely on outdated, one-size-fits-all learning models. Joe and Michael break down what modern cybersecurity training should look like, how to engage employees more effectively, and why empowering people both inside and outside the office is essential to strong defense.

• How AI is transforming both cyber attacks and defensive strategies
• Why the volume and quality of phishing attempts continue to rise
• The limitations of traditional annual awareness training
• The shift toward personalized, role-based learning
• How real-time intervention improves security habits
• Why cybersecurity awareness must extend beyond the workplace
• Practical ways to engage employees and build a security-first culture
• The importance of collaboration and communication across teams
• How threat intelligence informs more effective training programs

• AI is rewriting the threat landscape.
• Attackers are faster, more convincing, and more scalable than ever.
• Generic awareness training is no longer enough.
• Personalization is essential to reducing real-world risk.
• Engagement drives stronger security culture and better outcomes.
• Cybersecurity begins at home, not just at work.
• Bite-sized, real-time lessons are more effective than long annual videos.
• Employees are part of the detection engine—and must be empowered accordingly.

• “Cybersecurity doesn’t start in the office.”
• “The one size fits all approach is dead.”
• “We need to democratize security.”
• “Let’s give individuals the tools they need.”
• “We need to make cybersecurity more fun.”
• “This is my favorite thing to talk about.”

00:00 – Introduction to the Chaos of Cybersecurity

03:05 – The Impact of AI on Cybersecurity

09:40 – Best Practices for Cybersecurity Awareness

18:51 – Personalizing Cybersecurity Training

27:00 – Engaging Employees in Cybersecurity

29:20 – Resources for Further Learning

Additional Resources:

https://www.linkedin.com/in/mr-michael-waite/

https://www.dune.security/

https://www.dune.security/threat-intelligence-report

The dialogue commences with a cordial greeting, establishing a warm rapport between the host, Joe Carson, and his guest, Michael Waite. The podcast elucidates the dynamic and tumultuous landscape of cybersecurity, accentuating the incessant evolution of technological advancements and the corresponding threats that arise therein. Joe articulates a desire to dispel the chaos that often pervades the security realm, striving instead to illuminate the positive strides being made to foster a safer digital environment. Michael subsequently shares his professional journey, revealing a notable transition from a decade-long consultancy with Accenture to a foray into the cybersecurity sector. This pivot was serendipitously catalyzed by a chance encounter during a flight, wherein a conversation with a fellow passenger sparked the inception of his entrepreneurial aspirations in security.