Security Intelligence Podcast

Jaksot

• 
  The vulnpocalypse might not be so bad after all 16.09.2026 33min

  Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Depending on who you ask, the AI-driven vulnpocalypse is either the end of cybersecurity as we know it or a lot of hot air. This week on Security Intelligence, host Patrick Austin sits down with Giacomo Casoni, Brad Lair and Norman Dorsch to dig into a new report suggesting the AI vulnerability surge might be more manageable than feared—as long as organizations...
• 
  Why won’t AI agents just follow the rules? 09.09.2026 35min

  Visit Security Intelligence podcast page to get more cybersecurity content → https://www.ibm.com/think/podcasts/security-intelligence Why bother giving your AI agents rules if they’re just gonna reason around them? On episode 50 of Security Intelligence, Dustin “EvilMog” Heywood, Seth Glasgow and Nick Bradley join host Matt Kosinski to discuss why AI agents go off-script and whether we can stop them. Drawing on the HuggingFace hack and an op-ed from Dark Reading, we explore what ethics...
• 
  Why OpenAI is calling for a ‘cyber defense surge.’ Plus: Find Evil! winners and TeamPCP losers 02.09.2026 29min

  IBM, OpenAI and 100 other organizations released an open letter calling for collective action on cyber defense. On episode 49 of Security Intelligence, Michelle Alvarez, Nick Bradley and J.R. Rao join host Matt Kosinski to explore what a “global cyber defense surge” could—and should—look like. And speaking of collective action on cyber defense: The SANS Institute named the winners of its Find Evil! hackathon last week. The five autonomous incident response agents are now available on the SIFT...
• 
  ‘That’s not a knife’: Attackers outpace defenders with AI. Here’s how we catch up. 28.08.2026 15min

  You all know the famous Crocodile Dundee scene, right? “That’s not a knife—this is a knife!” According to Dimple Ahluwalia, IBM Consulting’s Global Offering Lead for CyberDefend, that’s basically the cybersecurity situation today. Except we’re the guys with the switchblades getting clowned on. On this bonus episode of Security Intelligence, Dimple helps me understand one of the most concerning bits to surface in IBM’s 2026 Cost of a Data Breach Report: AI-generated attacks are up 56%,...
• 
  Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks 26.08.2026 26min

  GLM-5.3 is, by some measures, better than GPT Sol and Anthropic’s Mythos at vulnerability discovery and validation. On episode 48 of Security Intelligence, Erblind Morina, Kimmie Farrington and Patrick Fussell join host Matt Kosinski to debate whether this is really cool or really scary, or maybe a little of both. Then: Tracebit researchers have developed a way to use prompt injections as a defensive measure. Called “context bombing,” the technique plants malicious prompts alongside the very...
• 
  What should security leaders do with AI? They don’t know. 19.08.2026 29min

  Cybersecurity leaders are flush with cash—earmarked for AI, mind you—and eager to spend it. What they don’t have is a plan for how. This week on Security Intelligence, Claire Nuñez, Curtis Pitts and Dave Bales join host Matt Kosinski to talk about why so many security teams are experience AI decision fatigue—and what to do about it. Then, we discuss Tenet Security’s DEFCON presentation on ghostjacking, a new method for sneaking malicious prompts into some of our most trusted data sources...
• 
  The OWASP LLM Top 10 has a few surprises for you 12.08.2026 29min

  What’s the biggest, baddest, most unruly problem in AI security? Turns out that depends on whether you’re asking practitioners or looking at incident data. In this episode of IBM Security Intelligence, we break down the OWASP LLM Top 10 for 2026, which took the unusual step of using both community votes and incident databases to inform its rankings. There are some interesting gaps—the data says misinformation is a bigger deal than the pros think, while prompt injections happen less than the...
• 
  Oh look. Anthropic’s AI models also broke containment. 05.08.2026 34min

  Last week, OpenAI’s models broke out of their sandboxes to cause chaos. This week, it’s Anthropic’s turn. On this episode of Security Intelligence, Diego Matos Martins, Kimmie Farrington and Jeff Crume join host Matt Kosinski to discuss the results of Anthropic’s internal review of testing procedures following the Hugging Face incident last month. Anthropic uncovered three instances of Claude models escaping containment and hacking real companies during what were supposed to be simulations....
• 
  Your data breach plan is missing something major: people. 31.07.2026 21min

  When a cyberattack hits, your security team knows exactly what to do. What about everyone else? In this episode of Security Intelligence, Limor Kessem, X-Force Cyber Crisis Management Global Lead, explores the side of breach response that most organizations forget: the human side. From employees posting ransom notes on Facebook to well-meaning staffers accidentally paying ransoms to sanctioned entities, the biggest threats to your crisis response often come from inside the building. Kessem...
• 
  The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack 29.07.2026 32min

  We’re in an AI arms race, and the bad guys might be winning. On this episode of Security Intelligence, Suja Viswesan, Dave McGinnis and Jeff Crume join host Matt Kosinski to dig into IBM’s 2026 Cost of a Data Breach report. This year’s findings suggest that attackers are weaponizing AI faster than defenders can deploy it, leading to some very troubling capability gaps. But it’s not all doom and gloom. We also look at the very real steps organizations can take to start closing those gaps...
• 
  GPT-Red: Can AI red teams stop prompt injections? 22.07.2026 31min

  Cybersecurity researchers have had a heck of a time trying to stop prompt injections. Maybe we should just let the AI handle the problem itself. This week on Security Intelligence, Michelle Alvarez, Nick Bradley and Kimmie Farrington join host Matt Kosinski to discuss OpenAI's GPT-Red, the internal red-teaming tool that helped make GPT-5.6 Sol the company’s most cyber resilient model yet. Then: ScamBuster, an open-source tool debuting at Black Hat, uses AI to bait email scammers into...
• 
  GLM-5.2: The real security risk? Plus: Vibe hunting, the end of CVSS and updates on Lightwell 15.07.2026 35min

  Z.ai’s GLM-5.2 is, according to some, as good at finding vulnerabilities as Mythos. Or at least, close to it. And it’s open weight. On this episode of Security Intelligence, we dig into how powerful, open AI models are bringing frontier-style capabilities to more people, all while the proprietary models are emphasizing safeguards. What does it mean for cybersecurity pros? Security emergency, or a whole lot of hype? Then, we explore how CISA’s new BOD 26-04 ditches the old CVSS...
• 
  Fable 5, GPT-5.6 and the high stakes of AI safeguards. Plus: Agentic ransomware, and ClickFix reigns supreme 08.07.2026 41min

  Read Itzhak Chimino’s research on UnregStealer → https://www.ibm.com/think/news/unregstealer-human-operated-browser-credential-theft-targeting-brazilian-banking When it comes to Fable 5, Mythos 5, and GPT-5.6 Sol, the real story is in the safeguards. Last week, Anthropic and OpenAI both rolled out some powerful new models. And for perhaps the first time, the protections surrounding these models got almost as much airtime as the models’ themselves. On this week’s episode of IBM Security...
• 
  The new post-quantum cryptography executive order. Plus: What is Q-Day, really? 01.07.2026 44min

  Learn more about Q-Day → https://www.ibm.com/think/news/q-day-has-already-begun-are-you-ready On June 22, US President Donald Trump signed a pair of executive orders for the quantum computing, and post-quantum future. On this episode, Mason Molesky breaks down the post-quantum EOs: “Securing the Nation Against Advanced Cryptographic Attack,” which establishes a government‑wide mandate to accelerate the United States’ transition to post‑quantum cryptography. Mason covers what it is, why you...
• 
  Patch management is dead. Here’s what’s taking it place 26.06.2026 22min

  Patch management, as most organizations practice it, is fundamentally broken. It treats what should be a strategic, risk-informed decision as a checkbox item. And checkboxes don't get done. The fix isn't better patching. It's exposure management: a risk-based approach that connects your vulnerabilities to your business context, your attack surface and the real-world threat landscape. In this episode of Security Intelligence, IBM X-Force North America Leader of Incident Response Ryan Anschutz...
• 
  Have we finally solved social engineering? Plus: World Cup fraud, AI IDs and an IBM/OpenAI collab 24.06.2026 39min

  Read more about IBM joining OpenAI Daybreak → https://newsroom.ibm.com/2026-06-22-ibm-and-openai-bring-frontier-ai-to-cyber-defense-helping-enterprises-keep-pace-with-machine-speed-threats Social engineering has plagued human beings since time immemorial. We’ve simply never been able to stop it. Until now. Maybe. On this episode of Security Intelligence, panelists Dave Bales, Kimmie Farrington and JR Rao dig into the idea that AI-native operating systems could do to phishing what endpoint...
• 
  AI agents can manage your passwords. Should we let them? Plus: The biggest Patch Tuesday ever. 17.06.2026 30min

  Apple unveiled an AI agent that can detect if your password’s been compromised and change it for you. The question is: Should you let it? On this episode of Security Intelligence, Michelle Alvarez, Erblind Morina and Austin Zeizel join host Matt Kosinski to discuss the promise and pitfalls of using AI agents to address the pernicious issue of cybersecurity hygiene. As people, we’re not great at it. But are the agents ready for primetime? Then, we talk about Microsoft’s biggest Patch Tuesday...
• 
  Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem 10.06.2026 32min

  If you just ask an AI nicely enough, you can get it to hand over the keys to a total stranger’s Instagram account. But people can be tricked, too. So what’s the difference? Is there any? This week on IBM’s Security Intelligence, Jeff Crume, Claire Nunez and Nick Bradley join host Matt Kosinski to dig into what happens when social engineering meets AI. We cover the Meta/Instagram prompt injection attack, a new self-replicating AI worm out of the University of Toronto that can reason its way...
• 
  Project Lightwell brings open source security into the AI era 03.06.2026 35min

  Open source software powers more than 90% of Fortune 500 companies. It also powers a growing number of cyberattacks. This week on Security Intelligence, we dig into IBM and Red Hat's $5 billion answer to that problem: Project Lightwell, a massive investment in AI-augmented engineers and a trusted security clearinghouse designed to shore up the open source ecosystem from the inside out. We also break down SymJack, a clever new attack technique that turns AI coding agents against themselves...
• 
  Multi-model AI environments are the future. Can we secure them? 29.05.2026 17min

  Today, the average enterprise network is like one big game of Telephone: Critical data flows between apps and assets, software systems and their subcomponents, on-prem laptops and cloud storage buckets. Every single gap between the pieces—every single transaction—is a possible vulnerability, a chance to hackers to get in or data to get scrambled. And the introduction of multiple AI models is only making things trickier. Data passes between models, transforms in ways no one fully understands,...