
Loading summary
Nicole Jang
Ugh.
Wix Harmony Advertiser
I barely got any sleep last night.
Nicole Jang
What? Why?
Wix Harmony Advertiser
I spent hours fighting with AI all because I was trying to make a website. It started out okay, but then I got stuck just trying to change one button. Okay, okay, relax. Just try Wix Harmony. What's that? It's wix's new website builder. Lets you switch back and forth between AI tools and hands on editing anytime. So I'm not just prompting and praying?
Nicole Jang
Nope.
Wix Harmony Advertiser
Just. Just try it for free@wix.com Harmony.
Asana Advertiser
Working across teams is tough, but Asana helps you handle it. That's because Asana is where humans and AI coordinate work together. AI can spot roadblocks and assign work in a snap. So everything and everyone stays on track. That's how work gets handled. That's Asana. Visit us@asana.com that's a s a n a dot com.
Nicole Jang
When AI process, when you give a prompt, if you give a clear prompt, you have to process tokens. There's a cost associated with every prompt or every question. One thing OpenAI I believe has said is there are people. I'm one of those people. I'll be like, can you please do this thing for me? Thank you. And they said if you add please and thank you, it takes up more tokens. Just be direct. Just remove all the pleasantry. That's crazy for me. I'm Canadian. I say sorry, I say thank you, I say please all the time. Turn out that's not good for AI. Turnout is costly.
Ryan Alford
This is right about now with Ryan Alford, a Radcast Network production. We are the number one business show on the planet with over 1 million downloads a month, taking the BS out of business for over 6 years in over 400 episodes. You ready to start snapping next and cashing checks? Well, it starts right about now.
Companies are adopting generative AI tools faster than almost any technology we've seen. The productivity upside is real, but so are the risks. Today's guest is working at the intersection of AI adoption and cyber security, helping companies understand why the biggest threats aren't always hackers. They're human behavior. Nicole Jang is the co founder of Fable Security and today talking about how organizations can embrace AI without accidentally exposing their most valuable data. Nicole, welcome. Right about now.
Nicole Jang
Thanks for having me. Great to meet you.
Ryan Alford
I know you're in Boston today. We're in South Carolina. We got the east coast covered and we're going to talk all things AI security. It's funny, Nicole. This is something that's been on my mind. I was having flashbacks when the Internet started getting going and we started googling everything and we started putting all our stuff on social media. It dawned on me this is probably like a 2004 or 5. We sure are openly giving up a lot of information. What is happening, all this stuff. And now I've sort of had the same epiphany a few weeks ago, which is why I love having the opportunity to have you on the show. It's like, yeah, maybe we need to think about this a little more than we are. Not slow it down, but just be aware.
Nicole Jang
I'm sure we love looking at things we've posted 10, 15, 20 years ago is a good throwback, but also just like, oh wow, there's a lot of things on the Internet that we share.
Ryan Alford
Yeah, exactly. And so now we're telling AI our deepest secret so it can help us solve puzzles, write contracts, all that stuff. And it's like, well, where is that data going? I have a feeling you might tell us. But Nicole, I'm anxious on this topic because it's like so real for me, owning businesses and use it. Let's set the table. Give everyone a little bit of your background. What got you into Fable Security and cybersecurity and all that good stuff.
Nicole Jang
My name is Nicole Jang, co founder, CEO of Fable Security. We've built a human risk platform that shapes software secure employee behavior behind the scenes. We leverage a mix of AI ad tech approaches to understanding employee behavior in an enterprise. We deploy just in time personalized interventions when we see employees doing some things that might expose more risks than necessary for our organization. We do this better than typical annual security compliance training which is what the industry status quo looks like. Our approach is relevant, personalized. It really drives at the risky behavior at time when things are happening almost like that. Just in time, Coach. The reason why we started this business had a lot to do with with my previous background with me and my co founder Sandy came from a ad tech background. So making ads super relevant, super clickable, convert people from buying things not even know that they want. Our shared background also came from Abnormal Security is another startup. Before that we were founding members of We Leverage AI to look for phishing attacks. Phishing became super prevalent in today's age. AI unfortunately supercharges attackers like they literally have the tools to send you really targeted phishing threats. And SEI and I both realized that we really want to focus on the human layer to teach people to better defend themselves from not just bad phishing, but also all sorts of social engineering attacks, all sorts of Things that people may do. That introduces risk not just to enterprises, but also for themselves. And so that's the reason why I became super interested in not just cybersecurity, but ways to protect people and ensure that we can all be more productive and more effective as we work. You know what they say. Early bird gets the ultimate vacation home. Book early and save over $120 with VRBO. Because early gets you closer to the action, whether it's waves lapping at the shore or snoozing in a hammock that overlooks, well, whatever you want it to so you can all enjoy the payoff come summer with VRBO's early booking deals. Rise and shine. Average savings $141 select homes only.
Ryan Alford
Access to affordable credit helps me pay my employees, but I don't really need it infl killing me. But who cares? Big retailers are making record profits. That's why we support the Durbin Marshall credit card bill. See banks and credit unions help small businesses make payroll. This bill would cut the vital resources they need while increasing megastore profits. They deserve it, don't they?
Nicole Jang
Tell Congress stop the Durbin Marshall money
Wix Harmony Advertiser
grab for corporate megastores paid for by the Electronic Payments Coalition.
Ryan Alford
I'm glad we have people like you. Some people get annoyed by tech security back channels. Oh, they're putting the guardrails on everything. I tend to be rule breaker but I actually really appreciate the people that actually put the guardrails up that need to be there to help us from ourselves and especially from the bad guys. Thank you for the service to our cyber community. This stuff is I think about the like the curve of Internet and then social media and then the speed with which we could do these things with bandwidth increases. AI is on all that on steroids. It's like yeah, moving so fast. Are companies moving faster than their security frameworks?
Nicole Jang
When I look at customers that we serve today, we're seeing interesting diversions. Companies that haven't been in this industry for the past 10 years. Looking at cyber, I see a lot of companies going through digital transformation. So if you asked 10 years ago, it's like moving from on prem set up to cloud. Right? So that was a big shift. We're seeing companies that are forward thinking, they're more mature, they are really technology driven. They're getting so much more upside from AI. And then we're also seeing companies that might be generation. They've been around for over a hundred years. They have a solid business. They're maybe not as tech enabled or digital transformed They're a little bit slower. So we're seeing adoption curves in various ways. And so that's the shape of the companies. And then from a security perspective it's also around how companies view security. Everyone needs security, there are compliance requirements, there's a baseline, there's a lot of now common languages on what needs to be done from a security level. But I do see that companies who are really thinking about investing in digital AI technology transformation, they really double, triple down in their security investments and then some may still be checking the box. I really see the divergence of companies based on their tech savviness, their belief in modernizing now from a particular companies that are really adopting AI. You really do. I think it really depends on the people, people in the company. For example, if you're a very developer centric company, you just see like a ton of crazy things people can do with AI. They're tinker and they're trying and the organization allows them to do that. Right. They take on the risk for innovation and the trade offs might for some other ones they're worried about. For example, they're healthcare companies. You're worried about HIPAA Financial, you care about PCI pii. There are real like financial business consequences if you tinker too much. We also see other companies will create playground or sandbox for people to play. And then it's a balance of letting people try things out, innovate, but also like not break the bottom line for their business. We're seeing all of those but we are seeing more and more companies just their time is spent on trying AI being more productive. And if you're in this like MAR fundraise, some are at the beginning, at one end and some are kind of trailing. And I think that space will become larger as we go.
Ryan Alford
Some people have to go slower due to risk, risk tolerance data. And then some are stodgy and need to be moving faster. They're going to be irrelevant. And then there's the ones that are moving really quick that are really nimble. I can speak small business, but I talk to Cisco, I mean some of the largest corporations in the world. So I'll speak from kind of both ends of it. As a small business I had 2018-20 employees in 2021. I really grew faster than I wanted to. I worked in Manhattan, I had a team of a hundred people directly or indirectly reporting to me. I didn't want to, I didn't start my business going entrepreneur. I just did not want to manage that many people. Part of it was intentional kind of scale back. But what the last few couple three years has done is not replaced those people because I kind of scaled the business away from them. So it wasn't, oh, I just replaced all these people with AI. No. It allowed me to do some things to may accelerate the descaling because I could take on more. I now have agentic AI throughout my businesses as a small business and I know I'm probably ahead on the small business curve because I'm, I've worked nationally and have this background, but I also have started to pause and go, okay, where's all this data going? And I know OpenAI or chat GPT open AI. Okay, they've got security measures. I've read as much as I can stand with the legal jargon that's in all this stuff. It's funny because I own a publishing company on the podcast network side and then I own an agency and so I'm developing tools, thinking about that data and then I've got the podcast network side with publishing and I'm going, well, what about all this content? How's that being digested and then used and why aren't we getting paid for it? That's a whole other topic. There's a lot of people asking these types of questions right now, like myself at all levels, which is, this is great, I'm comfortable moving fast, but sometimes you don't know what you don't know. But I know I don't know something that I might should know about where all this data is going and what I need to be thinking about. That's why we got you here, Nicole. What do we need to be thinking about and what kind of sensitive information are people accidentally sharing with AI tools? Hey guys, if you've ever built a website before, you know how quickly it can turn into a time suck. Recently I've been playing around with wix's new hybrid editor called WIX Harmony. You basically start by telling it what you're trying to build. You prompt it to generate a professional grade site just like you want it. And here's the part I like. You can easily go back and forth between AI and hands on editing whenever you want. The AI agent Aria, is an expert in website design and business. You can answer questions or perform direct actions throughout the process, which has been huge for me when I'm trying to perfect the look of my website. We've also got built in tools for selling bookings and marketing. Pretty much all the stuff you actually need once the site's live. If you're building anything right now, a side project, brand, business, whatever. WIX Harmony honestly makes it easier to get out of your own way and start making stuff happen. Go to wix.com harmony that's wix.com harmony start your website today.
Nicole Jang
I have a couple of thoughts on this and I've been thinking quite a bit about it. If you think about AI in its like purest, purest form, not even technical jargons, what does AI do for you? AI is running. Ray is giving you insights faster than a human analyst. For you to read 20 blog posts, surface insight, you can now say read all of them, give me the insight, ask me questions. Ping pong, be my reasoning partner. AI can automate certain things for you before you have to do step one through 20 to get to a task. Now you can automate those things running in the background. These things are human instructed. The way you want some things to be done requires hyper clarity on the outcome you're looking for. And AI is just extracting data content information that you have in your system today. So when I think about the two risks, if you don't know what you're looking for and you ask a stupid question that exposes risk in ways that you may not. An employee does this, you go, why are they asking this question? Can they, should they be asking this question? Damn, if they ask this question, they might get the answers now. And the answer is so easy. This is like a net new set of things that folks are worried about. The other piece is I think AI also makes it if you think about it right? Every AI service want faster adoption. So they say integrate with all your tool stack. We can do all of these things. People don't think, no one thinks about permissioning, no one thinks about data, they think about adoption. Easy click, one click. If your house is not clean, like if your database is not clean, if your systems are not clean, a lot of companies don't think about that. You can ask a question and you get the answers because the underlying data is chaotic on its own. When I see our customers and maybe for you, Ryan, getting your jobs done, getting your task done, it's awesome. But then who did the data cleanup in the first place? There's also just this fundamental, regardless of AI, regardless of how we use, there is still a fundamental data hygiene, security hygiene thing that we gotta figure out. All these advancements, it's putting the security foundation into a massive test and attackers knows that. And so they really try to exploit now with additional vectors in a faster way through AI, through prompting that's why when I think about security practitioners, they might feel stressed knowing that their house needs to be in order to support all these evolution of technology superhero movies.
Ryan Alford
It's like, well, who has the superpowers? Who are the mutants? The good guys and the bad guys have the same superpowers. Who's using them best? The bad guys are using these tools to take all this other stuff to advance their criminal behavior, or they're sneaking around or whatever they're doing. No matter how nefarious or non nefarious it is. As the good guys, we got to use these same superpowers to both protect it and to use it for what we're ultimately using it for. It's like anything else. The bad guys seem to always be at least even and sometimes one step ahead of us. And not that we're all perfect. I'm 100% sure I'm not a criminal. I'd be called a cheater in a few board games every now and then, but that doesn't mean it was true. Nicole I just like to win.
Nicole Jang
It's like I feel like we're playing chess, right? Attackers can be offensive, we're defensive. And it's just the mindset is kind of different. And so that's why in cyber you also see offensive teams who's trying to break systems ahead of time. We can think like attackers too and actually AI unlocks that. Really, I think it's a huge value add for security teams, but also unfortunately, attack surface, expanse. We also just have to work really hard and be very creative when it comes to how to if you work
Grainger Advertiser
in university maintenance, Grainger considers you an MVP because your playbook ensures your arena is always ready for tip off. And Grainger is your trusted partner offering the products you need all in one place, from H. Vac and plumbing supplies to lighting and more. And all delivered with plenty of time left on the clock, so your team always gets the win. Call 1-800-GRAINGER visit grainger.com or just stop by Grainger for the ones who get a date. If you work in university maintenance, Grainger considers you an MVP because your playbook ensures your arena is always ready for tip off. And Grainger is your trusted partner offering the products you need all in one place, from H. VAC and plumbing supplies to lighting and more. And all delivered with plenty of time left on the clock, so your team always gets the win. Call 1-800-GRAINGER visit grainger.com or just stop by by Granger for the ones who get it done or Protect.
Ryan Alford
You mentioned something about how direct, what outcomes we want. And usually it's my own lack of clarity that causes the AI's bad behavior or bad outcome that I didn't want. But anyway, I digress. I just wanted to come on here on this episode. It made sense and admit that sometimes I'm mean to my AI person trying to get it to be more efficient.
Nicole Jang
When AI process, when you give a prompt, if you give a clear prompt, you have to process tokens. There's a cost associated with every prompt or every question. One thing OpenAI, I believe has said is there are people. I'm one of those people. I'll be like, can you please do this thing for me? Thank you. And they said if you add please and thank you, it takes up more tokens. Just be direct, just remove all the pleasantry. That's crazy for me. I'm Canadian. I say sorry, I say thank you, I say please all the time. Turn out, that's not good for AI. Turnout is costly and I'm from the
Ryan Alford
south, so I kind of do the same thing. I do. I have the pleasantries on the front end, but then when I'm mad at it, I'm like, you know, this is really costing me more time and hours today. Your whole purpose in life is to save me time and energy and all you've done is call it. Anyway, what I'm hearing from you is that's great, maybe you felt better. It's just costing you more money because you're just using tokens.
Nicole Jang
It's costing you money. But hey, if it works, it works for you. Like, ultimately it's about you. It's less about the AI, but yeah, just say, too many prompts, make it short, be efficient. Walk me through what you're going to do differently.
Ryan Alford
I love it. Hey, good tip for anyone out there. I'm not the only one. I'm the only one that admits things. As we close out here, Nicole, I always like quick tips, actionable stuff for anyone that's listening. Small medium, we got executives running big companies, we got entrepreneurs running startups. Maybe a handful of things, easy things people could do to maybe have a little more AI hygiene in their cybersecurity.
Nicole Jang
We're all going to be superior prompters as we acquire skills in the AI world. My recommendation is, number one, it's totally fine to be curious, but number two is also just ask the question of should I be concerned about the data AI, can you please sanitize my data, sanitize my queries and make sure that the AI can do the security minded work for someone. I think the second thing is, remember, don't give out your credit card information, don't give out your passport, don't give out your blood type. Ryan. Let's just do the same thing in the AI world and make sure that the information you care about, just ask for it to omit and AI will do the job for you regularly. Go through. Hey, are things shared that it really shouldn't be? AI can probably find out about that really quickly for you too and then you can take action. Those are good hygiene to just ask and prompt. Almost like part of your regular workflow.
Ryan Alford
Those are good. It's so funny. Everything's met meta with this because AI can assist in whatever thing we're trying to solve that might be related to AI. It's sort of, I don't know, this meta circle I always find myself in. I'm like, I'm trying to worry about this with AI, but can AI help me? And it seems like it can.
Nicole Jang
AI is like your reasoning partner and just does so much. I'm really excited about the outcome, the future of where this technology can go.
Ryan Alford
Nicole, tell everyone where they can. Learn more about Fable Security yourself and stay in touch or learn any of the sharings you might be having universally.
Nicole Jang
You can learn about us@fablesecurity.com, our website shows a lot about what we do when it comes to protecting human risk, understanding employee behavior and figuring out ways to share target interventions that can elevate your overall security hygiene. Whether it's AI adoption, whether it's sharing sensitive data, whether it's also just defending against external threat. Actors. We are based in San Francisco, California. Our office is right in the heart of downtown. We work in person. We love being there to collaborate. So if you're ever in town, our door is open.
Ryan Alford
I really appreciate you for coming on. Let's talk. Do it again soon.
Nicole Jang
Absolutely.
Ryan Alford
Let's stay in touch. Nicole, I'd love to have you on every now and then. This is a very topical thing, real thing as things evolve.
Nicole Jang
Yeah.
Ryan Alford
Have a fabulous rest of the day.
Nicole Jang
Thank you. Great to meet you. Thank you for having me on the show. Yeah, you're a good time. Take care.
Ryan Alford
Thanks. See ya.
This has been Right about now with Ryan Alford, a Radcast network production. Visit ryanisright.com for full audio and video versions of the show or to inquire about sponsorship opportunities. Thanks for listening.
Asana Advertiser
Working across teams is tough, but Asana helps you handle it. Asana, AI can spot roadblocks and assign work to keep everything on track. That's how work gets handled. Visit us at asana.com@vrbo we understand that
VRBO Advertiser
even the best of plans sometimes need a little support, so we plan for the plot twists. Every booking is automatically backed by our VRBO Care Guarantee, giving you confidence from the very start. Whenever you need help, it's ready before your stay, through the moments in between, and after your trip. Because a great trip starts with peace of mind and maybe a good playlist. But we've got the peace of mind part covered.
Podcast: Right About Now – Legendary Business Advice
Host: Ryan Alford, The Radcast Network
Guest: Nicole Jang, Co-founder & CEO, Fable Security
Release Date: March 17, 2026
This episode dissects the tension between leveraging AI for business productivity and the significant security risks that rapid adoption can invite—particularly those rooted in human behavior. Host Ryan Alford and guest Nicole Jang (Fable Security) dig deep into how organizations can harness AI without unintentionally exposing sensitive data, highlighting why the biggest cybersecurity threats come from within: employee choices, habits, and everyday interactions with AI tools.
Nicole Jang introduces Fable Security’s mission:
Key Quote:
“We deploy just in time personalized interventions when we see employees doing some things that might expose more risks than necessary for our organization. We do this better than typical annual security compliance training.”
— Nicole Jang [03:27]
Alford’s concerns about the pace of AI integration:
Jang’s observations:
Key Quote:
“Companies who are really thinking about investing in digital AI technology transformation... really double, triple down in their security investments and then some may still be checking the box.”
— Nicole Jang [06:43]
Alford’s real-world concerns:
Nicole Jang’s analysis:
Key Quotes:
“These things are human instructed. The way you want some things to be done requires hyper clarity on the outcome you’re looking for.”
— Nicole Jang [11:55]
“No one thinks about permissioning, no one thinks about data, they think about adoption... If your house is not clean... the underlying data is chaotic.”
— Nicole Jang [12:30]
Superpower metaphor:
Alford likens the AI/cyber contest to “superhero movies”—both attackers and defenders now wield the same tools, so stakes and tactics are elevated.
Jang’s perspective:
Key Quote:
“I feel like we’re playing chess, right? Attackers can be offensive, we’re defensive. And so that’s why in cyber you also see offensive teams who’s trying to break systems ahead of time. We can think like attackers too...”
— Nicole Jang [14:33]
Prompt efficiency tip:
Pleasantries in prompts ("please," "thank you") cost more tokens, raising both usage cost and inefficiency.
“Just be direct, just remove all the pleasantry. That’s crazy for me. I’m Canadian... Turn out that's not good for AI. Turnout is costly.”
— Nicole Jang [16:22]
Both host and guest admit to sometimes getting "mean" or impatient with AI, but realize direct prompts are more efficient (and cheaper).
Actionable Cyber Hygiene Checklist:
Key Quotes:
“Just ask for it to omit and AI will do the job for you. Regularly go through — hey, are things shared that really shouldn’t be? AI can probably find out... then you can take action.”
— Nicole Jang [17:42]
Alford comments on the recursive nature of AI safety:
"Everything’s meta with this because AI can assist in whatever thing we’re trying to solve that might be related to AI." [18:27]
Jang underscores AI’s positive role as a “reasoning partner” and security assistant:
“AI is like your reasoning partner and just does so much. I’m really excited about the future of where this technology can go.”
— Nicole Jang [18:43]
Fable Security: https://fablesecurity.com
Nicole Jang: Reach out via company site; Fable Security headquarters, San Francisco.
The episode is candid and practical, eschewing fluff for hard-earned, real-world insight. Both host and guest are relatable, often blending humor with urgency as they share lessons—making cybersecurity approachable for technical and non-technical listeners alike.
Who should listen?
Bottom Line:
AI can supercharge productivity, but people remain both the strength and the soft spot in any security posture. Think before you prompt—otherwise, you might be the human risk your company’s AI least expects.