AI for red teaming and real attackers

Guests:

• No guests! Just Tim and Anton

Topics:

• Hard to believe we've been doing these since 2022, is that right?
• What did we see this year at RSA, apart from AI? And more AI? And more AI?
• What framework can we use to understand the approaches vendors take to AI and security? Just saying "AI washing" is not enough!
• How to tell "AI washer" from "AI tourist"?
• I sense that "securing AI" (and agents) is finally growing as fast as "using AI for security", do you agree?
• Is the AI vulnerability apocalypse coming? Soon?
• Have we seen any signs of AI backlash?

Resource:

• Video version
• EP223 AI Addressable, Not AI Solvable: Reflections from RSA 2025
• RSA 2025: AI's Promise vs. Security's Past — A Reality Check blog
• EP172 RSA 2024: Separating AI Signal from Noise, SecOps Evolves, XDR Declines?
• EP119 RSA 2023 - What We Saw, What We Learned, and What We're Excited About
• EP70 Special - RSA 2022 Reflections - Securing the Past vs Securing the Future
• EP255 Separating Hype from Hazard: The Truth About Autonomous AI Hacking
• EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance