Transcript
A (0:00)
Foreign. And welcome to another episode of the Risky Business podcast. My name is Patrick Gray. This week's show is brought to you by Spectrops. And they make, of course, Bloodhound and Bloodhound Enterprise and Spectre Ops. Very own Jarrett Atkinson will be along in this week's sponsor interview to chat about a few things. I mean, one of the things we're going to be talking about with him is something we're also going to be talking about in the news section, which is, you know, things are sort of pivoting back to a prevention paradigm and away from a detection response paradigm at the moment. And that's all happening because of AI and big changes to the threat landscape caused by AI. So that is an interesting sponsor review coming up after this week's news. Now, of course, Adam Boileau is still traveling this week, which means we've got a special guest co host joining James Wilson and I for this week's show. He ran security for Adobe, both product and internal. He ran security at Cisco. He also ran security at Salesforce. Adding to that we might put, he was the captain of the Titanic. He piloted the Hindenburg. He is Brad Arin and he joins us now. Brad, thanks for joining us.
B (1:09)
Glad to be here.
A (1:11)
What was your actual title? Because we're trying, because we always have called you a CISO for those three, but your title was not actually ciso, was it?
B (1:17)
Yeah. So Salesforce was Chief Trust Officer. Cisco was a combo Chief Security and Trust Officer, and then Adobe's Chief Security Officer.
A (1:26)
Excellent. Okay, but basically you did the role of that we normally associate with like what a CISO does.
B (1:30)
Yeah, Top Security leader. Top security leader.
A (1:33)
Top security. Top dog.
B (1:35)
Yeah, the, the, the throat to choke.
A (1:40)
Well put. All right, so let's get into this week's news now and we've got a couple of stories that pair nicely together. One is from Reuters and one is from the Record where we've got guvies like officials from both the U.S. government and the U.K. government coming out and saying, hey, you know, AI is going to result in a big deluge of patches arriving. So, you know, you all need to go out there and just start patching stuff quicker. This seems to me like somewhat magical thinking because I think if people could patch quicker, they would probably already be doing it. James, what is your gut reaction here?
