The Watchtower

As AI accelerates the pace of cybersecurity and pushes more complex decisions onto security professionals, managing burnout is becoming an essential leadership skill.Bronwyn Boyle, CISO at PPRO, and Don Gibson, cybersecurity leader at Anglo American, explore how AI is changing the cognitive demands of cybersecurity, why even experienced leaders can miss the signs of burnout, and how psychological safety, better workplace practices, and a no-blame culture can help build more resilient security teams.In this episode of The Watchtower, they join host Ash Hunt to discuss how expectations of CISOs are changing, why acknowledging burnout is no longer necessarily a sign of weakness, and what it takes to create a security culture that supports its people rather than simply asking them to withstand more pressure. ConnectBronwyn Boyle on LinkedInDon Gibson on LinkedInAsh Hunt on LinkedIn Chapters00:00 Is Calling Out Burnout a Career Risk?03:40 How Cybersecurity Leadership Has Changed05:58 AI and the Growing Pressure on CISOs10:06 How AI Is Shifting Cognitive Load14:08 New Threats and Changing Security Practices16:50 The Evolving Role of the CISO18:37 Recognizing the Warning Signs of Burnout23:06 The Personal Cost of Cybersecurity27:14 Creating a Culture of Psychological Safety31:02 Supporting Teams Through Pressure34:52 Rethinking How Security Teams Work37:04 The Exhausting Pace of Change41:58 Building a No-Blame Security Culture45:09 Practical Ways to Manage Stress and Burnout49:47 Why Community and Peer Support Matter  Presented by Cyera. Produced by Mission.org. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Are we building enterprise AI backwards? As organizations race to adopt bigger, more powerful AI models, Alex Attumalil, Global CISO at Under Armour, believes the real transformation may come from thinking smaller.In this episode of The Watchtower, Alex joins Ash Hunt to explore why general-purpose LLMs aren't enough to transform complex business processes, how smaller, specialized AI models could reshape the enterprise, and why business leaders, rather than technology teams, should be driving AI adoption.They also examine how AI is changing cybersecurity itself. From sophisticated phishing attacks that are forcing organizations to rethink decades of security training to AI-powered security operations that can deliver faster, more consistent decisions, Alex shares how security leaders must adapt to a rapidly changing threat landscape.And as automation continues to evolve, what happens when AI can identify software vulnerabilities before they ever reach production? ConnectAlex Attumalil on LinkedInUnder ArmourAsh Hunt on LinkedInThe Watchtower Learn MoredatasecAI by Cyera Chapters0:00 One giant brain, or lots of small ones?1:18 Meet Alex Attumalil, Global CISO at Under Armour2:19 The two-front war: defending AI, and defending against AI4:47 The decade of phishing training that just became obsolete7:32 Running security consistently across a global business10:38 The only SecOps metric that matters: time to action15:32 'Democratizing the response' — AI's hidden payoff16:53 Why your tech team is the wrong owner for AI22:44 The micro-LLM thesis: enterprise AI as microservices24:53 Repatriation: bringing tuned AI back into the data center25:30 Why LLMs keep giving you different answers28:14 SLMs are quietly beating LLMs in the enterprise30:52 Where the CISO role goes next34:44 Could software ever have no vulnerabilities?37:05 Every enterprise does two things. The rest is scaffolding. Presented by Cyera. Produced by Mission.org. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

If Convenience Wins, We Lose.Evan Gordenker led more than 160 insider investigations at Unit 42, including work on DPRK IT-worker operations, before taking over insider threat and data security at Airwallex.Evan joins Ash Hunt to showcase how intent is often the wrong place to start. Whether the risk comes from an employee, an AI agent, or an adversary using legitimate credentials, the real question is what trusted access allows them to do.Evan explains why convenience sits at the center of human and agentic risk, how AI agents expose the limits of access models built for people, why security teams need finer-grained control over credentials and permissions, and why the DPRK IT-worker playbook keeps working without changing much at all. ConnectEvan Gordenker on LinkedInAirwallex Chapters0:00 The insider threat you're worried about isn't a person1:19 How Evan fell into cybersecurity via the Tokyo Olympics4:20 What the industry gets wrong about who the insider actually is5:25 Why the 'secret police' framing kills your program8:00 Intent doesn't matter — controls do9:30 What a real, messy insider investigation actually looks like12:30 One sentence in an incident report can end a career15:01 Would you classify an AI agent as an insider?16:33 The one-password experiment — how agents test every credential19:39 4 years into agentic systems. Still built for humans only.23:54 If security runs insider risk alone, you're toast28:35 The DPRK IT-worker threat — and why it hasn't had to evolve32:54 How Fortune 500s started frustrating North Korean operators36:48 The one through-line: convenience42:50 Why InfoSec has never mattered more than right now Presented by Cyera. Produced by Mission.org. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Should detection and response remain the center of security when AI, data, and identity are converging at machine speed?Detection and response has long been an organizing principle of enterprise security. Francis Odum, Founder and CEO of Software Analyst Cyber Research, argues that model is being pushed to its limits as AI agents act autonomously and attack timelines compress.In this episode, Francis and Ash Hunt explore why existing identity controls may not be enough for AI agents, why every AI security vendor sounds identical right now, and how security controls have to change for agentic systems.  ConnectFrancis Odum on LinkedInSoftware Analyst Cyber ResearchAsh Hunt on LinkedIn Chapters0:00 Can Human-Speed Security Stop Machine-Speed Threats?1:15 Francis Odum on What's Changing in Cybersecurity3:53 Cybersecurity Was Built for Humans — Not Agents8:44 Why Every AI Security Vendor Sounds the Same11:08 Why Platforms May Win the AI Security Race14:31 What Happened to the First Wave of AI Security Startups19:20 Why Non-Human Identities Were a "Head Fake"22:00 Should AI Agents Have Their Own Identity?25:58 The Authorization Problem AI Agents Create28:29 What Hugging Face Revealed About Agent Controls32:15 Can Detection and Response Keep Up With AI?34:27 How AI Makes Attacks Faster and Cheaper36:02 Why Security Has to Become More Preemptive41:03 The New Agentic Supply Chain Risk43:27 Why Agentic Failures May Not Look Like Cyberattacks45:13 What SACR Is Researching Next  Presented by Cyera. Produced by Mission.org. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

If you focus entirely on the external AI-fraud threat, you're going to get burned by what's already inside your organization. AI is making external fraud more convincing - deepfake CEOs on service-desk calls, synthetic video, generative BEC. But the same tools also scale internal fraud, from fake invoices and fabricated expenses to ghost employees. Mason Wilder, Research Director at the Association of Certified Fraud Examiners, joins Ash Hunt to unpack why it's never been easier to commit fraud, how organized crime is changing the landscape, and why the old walls between cybersecurity, fraud, and AML are starting to break down - and where companies should actually be investing to keep up. Connect Mason Wilder on LinkedIn ACFE ACFE Anti-Fraud Technology Benchmarking Report ACFE Report to the Nations Chapters 0:00 The AI Fraud Threat Inside Your Company 1:03 From Overnight SOC Shifts to the ACFE 2:56 Why Fraud Has Never Been Easier 4:55 What the 2026 AI-Fraud Survey Revealed 5:25 Why Only 7% Feel Prepared for AI-Powered Fraud 6:12 Why Cyber, Fraud, and AML Can't Stay Siloed 9:33 How Deepfake Fraud Started in 2018 11:54 From Social Engineering to Automated Attacks 13:41 Where Companies Should Invest Against AI Fraud 16:53 The Internal Fraud Risk Getting Overlooked 20:00 Why Internal Fraud Doesn't Go Away 22:52 Why Tips Still Catch 43% of Fraud 26:18 Turning Employees Into a Fraud Detection Layer 28:17 What Agent-to-Agent Fraud Changes 34:59 How Singapore Is Shifting Fraud Liability 37:11 What Deepfake Detection Really Looks Like 42:24 Why Cyber and Fraud Are Ultimately on the Same Team Presented by Cyera. Produced by Mission.org. Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.