Why Solve Your Problems When We Can Just Scare You?
Summary
Hosts David Spark and Mike Johnson join Netta Noman, CISO at Estée Lauder, to discuss AI’s impact on security talent pipelines and the risks of non-human identities. They debate two "What’s Worse" scenarios involving shadow IT and contractor negligence, highlighting the ambiguity of modern threats. The group also critiques the industry’s over-reliance on visibility tools, advocating instead for automated remediation and safe experimentation sandboxes to balance agility with security.
Topics discussed
Intro: Lighting up the threat landscape with data
Host banter: Scanning old family photos with Kodak
AI's impact on junior roles and the apprenticeship model
Accountability for AI agents and non-human identities
Sponsor message: Native cloud security controls
What's Worse: Shadow AI apps vs. contractor VPN misuse
Shifting from vulnerability finding to auto-remediation
Behavioral security: Constraining user power and safe sandboxes
Outro: Mental health, hiring, and show credits
Listen ad-free on Castria