Cyber Compliance & Beyond

Threat hunting is one of cybersecurity's most talked‑about, and misunderstood, disciplines. In this episode, Cole French and guest Ben Lieberman breaks down what threat hunting really looks like inside complex, high‑volume environments and why fundamentals matter more than flashy techniques. We dig into how telemetry is collected, how attackers blend into normal activity, and why red and blue teams often view threats differently.  At its core, threat hunting is about mindset: understanding attacker behavior, knowing what "normal" looks like, and cutting through massive data to spot what truly matters.  You'll learn:   Why attackers often rely on simple, well‑known techniques The challenges of working with massive telemetry and alert volume  How tools like Splunk and Security Onion help find real signals  Why red teams sometimes test the wrong things  The importance of baselining and building detections around real behavior 

As AI is reshaping the threat landscape, the timeline for vulnerability discovery has collapsed. In this episode, guest Matt Stern breaks down how attackers are using AI to find and exploit weaknesses in minutes, and what organizations must do to keep pace.  We explore how modern AI‑driven testing can scan code, APIs, and mobile apps at scale, surface logic flaws traditional tools miss and help teams secure software before release. Matt also explains how continuous AI‑powered pen testing reduces blind spots, cuts alert noise, and allows humans to focus on advanced threats.  Finally, we look at the next frontier of agentic AI — guardrails, documentation checks, and automated reviews that help organizations prepare for a world where both attackers and defenders operate at machine speed. 

Following Part 1's deep dive into GTG-1002 and the rise of autonomous cyber operations, Part 2 shifts toward what leaders must do to get ahead of next-generation AI-enabled threats. Guest Nury Turkel explains how regulatory risk forms long before official rulemaking, often emerging first through congressional hearings, agency speeches, draft legislation, and national-security analyses. Nury argues that organizations gain an advantage by tracking long-term trendlines—such as bipartisan momentum and multi-agency action—rather than reacting to headlines, and by cultivating geopolitical literacy and responsible leadership. The conversation concludes with emerging AI-related risks to the defense industrial base and practical steps leaders can take to reduce technical debt, strengthen resilience, and stay ahead of next-generation threats. References: Wall Street Journal: China Tells Its AI Leaders to Avoid U.S. Travel Over Security Concerns (paywall) Bloomberg: China Expands Travel Curbs to Top AI Talent at Private Firms (paywall) Reuters: China Restricts Overseas Travel for Top AI Talent at Alibaba, DeepSeek

AI-enabled cyber operations have moved from theory to reality, with the GTG-1002 incident marking the first widely recognized case of an AI system independently executing a multi-step intrusion. In this 2-episode conversation, Nury Turkel explains how this shift is reshaping national security—from adversaries using AI to accelerate reconnaissance and credential misuse to the growing geopolitical stakes between the U.S. and China in advanced AI development. The episode highlights how governments and organizations must rethink readiness, regulation, and innovation as AI becomes both a transformative capability and a destabilizing force in global competition. References: Wall Street Journal: The First Large-Scale Cyberattack by AI (paywall) Anthropic Report on GTG-1002: Disrupting the first reported AI-orchestrated cyber espionage campaign (download)

AI is rapidly transforming how organizations identify, classify, and protect sensitive information, yet many are only beginning to understand what this means for CMMC, CUI, and their broader security programs. In this episode, we explain why understanding your data has become one of the most urgent challenges in modern cybersecurity and how AI‑driven tools can quickly reveal hidden sensitive information. This new intelligence helps organizations accurately define the true boundaries of their enclave and reduce assumed scope by pinpointing who actually interacts with CUI. We also cover how: Traditional tools like DLP, firewalls, and endpoint security often produce overwhelming, low‑value alerts. Adding richer, context‑aware data intelligence makes policies more precise and reduces alert fatigue. Enhanced intelligence strengthens enforcement as sensitive files move across the environment. It also improves operations by identifying stale or redundant data and reducing risks as organizations adopt AI. Strong AI guardrails are essential, including managing model permissions, inputs, outputs, and using MCP server‑based controls to block improper data flow.