The Experts Insights Podcast brings you insights and knowledge from cybersecurity and technology experts.
Each episode, we conduct in-depth interviews with top cybersecurity leaders from leading vendors, practitioners and security teams. Guests include CEOs, Directors, CISOs and more from innovative tech companies. We dive deep into the cybersecurity issues and trends that matter to your business.
podcasts.expertinsights.com (https://podcasts.expertinsights.com?utm_medium=podcast)
AI Is Rewriting the Attacker Playbook: Juraj Janosik on Phishing, Automation, and Shadow AI
AI has made attacks both more frequent and more convincing. In this episode, Juraj Janosik, VP of AI at ESET, explains how attackers use AI to sharpen phishing and Business Email Compromise (BEC), making their messages hard to tell apart from genuine communication. He covers how automation has lowered the barrier to entry for unskilled attackers and reduced ransomware dwell time to a couple of hours.
Juraj also sets out what defenders can do about it. He argues that AI-powered tools alone won’t protect you, and makes the case for layered defenses built on strong security telemetry, human oversight, and consistent patching of known vulnerabilities, which remain attackers’ favorite way in. He also looks inward at the risks of rapid AI adoption, including shadow AI and employees leaking data through unsanctioned tools, and explains why training and clear governance are the best ways to reduce those risks.
Tune in to learn:
* How AI has raised the quality of phishing and BEC attacks
* How to spot AI-driven social engineering, starting with context and urgency
* Why automation has cut the time from initial access to encryption down to hours
* Why unpatched known vulnerabilities, not zero days, drive most attacks
* How to govern AI use internally and reduce shadow AI risk
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit podcasts.expertinsights.com (https://podcasts.expertinsights.com?utm_medium=podcast&utm_campaign=CTA_1)
27 Aug 2026
#96. Phishing 3.0: Why AI and Deepfakes Are Rewriting the Attack Playbook with IRONSCALES
Few areas of cybersecurity have been reshaped by AI as fast as phishing. In just three years, generative AI has rewritten the economics of the attack, stripping out the red flags security teams have trained users to spot for decades, and pushing attackers into new channels like Microsoft Teams, voice, and video.
In this episode, Steve Malone, Chief Product and Strategy Officer at IRONSCALES, joins the podcast to unpack how the threat has evolved through what IRONSCALES calls “Phishing 3.0,” and what security leaders should actually be doing about it. Steve has spent two decades in email security, including senior product leadership roles at Mimecast and Egress, giving him a front-row seat to how attacks, and defenses, have changed.
Topics covered:
* Why speed and quality, not new attack methods, are what’s really changed about phishing
* What IRONSCALES’ 2025 Cost of Phishing report reveals about the gap between faster incident handling and rising overall costs
* The evolution from phishing 1.0 (malicious attachments) to 2.0 (BEC and social engineering) to 3.0 (AI-generated, multi-channel attacks)
* Why old advice like “spot the typo” or “call to verify” no longer holds up against deepfakes
* How Ironscales’ native API integration, adaptive AI and Agentic Virtual SOC reduce the volume of incidents reaching human analysts
* IRONSCALES’ red teaming agent, and how it powers hyper-personalized detection and security awareness training
* Real-time deepfake detection for Microsoft Teams meetings, and the emerging threat of deepfakes in recruitment
* Steve’s advice for CISOs on rethinking security metrics, hardening business processes and questioning vendors about their AI capabilities
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit podcasts.expertinsights.com (https://podcasts.expertinsights.com?utm_medium=podcast&utm_campaign=CTA_1)
20 Aug 2026
#95. Black Hat 2026: AI Agents, Frontier Models, and the Quantum Countdown
This is a roundup episode pulling together four conversations we recorded at Black Hat USA 2026, each looking at a different piece of the same story: AI is changing what attackers and defenders can do, and most organizations are behind on both fronts.
Daniel Blackford, VP and Head of Threat Research at Proofpoint, breaks down why ransomware timelines are collapsing from weeks to hours, and walks through “half-click,” a Russian state-sponsored exploit that ran just from an email loading in a preview pane, no click required.
Dhawal Sharma, EVP of AI Security and Strategic Initiatives at Zscaler, explains why securing AI agents is a fundamentally different problem from securing human users, and why standard DLP policies miss an agent that’s doing something it was never intended to do.
Deepen Desai, Zscaler’s Chief Security Officer, shares results from Project Glass Wing, including a frontier model that bypassed its own security patch three times out of five, and makes the case for deception as the highest-value control against AI-driven attacks.
Todd Moore, Global VP and GM of data security products at Thales, explains why 2029 is closer than it sounds for quantum-safe cryptography, and what security leaders should be doing about it right now, not in three years.
This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit podcasts.expertinsights.com (https://podcasts.expertinsights.com?utm_medium=podcast&utm_campaign=CTA_1)
Inside a recent episode
#58 – Inside Google’s View on Evolving Cyber Risks (John Hultquist, Google Cloud)
Published 22 May 2025 · Transcript excerpt
[…] They're particularly interested in security devices that sit on the network edge. Is there a difficult to monitor, and is it opportunity for them to essentially get a beach head in the network and then move with a ladder, like where you can't necessarily see them or it's really difficult to say that's a huge piece of what we're saying as far as defending our customers and users against that sort of, or those sorts of actors. The other thing that, you know, we're really worried about is the criminal threat, right? I think one of the opportunities or the sort of real drivers of the criminal threat that we've seen lately, it's been that sort of an infosteal or space, so infostealers were really huge back in the day of fraud when fraud was like the, the, the printout criminal problem, and they kind of fell off. […]
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
