Three clocks are speeding up: the business, the attackers, and the defenders. Dr. Jeff Crume explains why the defender clock has to catch up and how to defend at AI speed. Follow Qualys on BrightTALK for more Cyber Risk Series talks: https://www.brighttalk.com/channel/11673 Explore the Qualys Enterprise TruRisk Platform: https://www.qualys.com/etm Build your Risk Operations Center (ROC) today: https://www.qualys.com/roc Dr. Jeff Crume, security architect and adjunct professor at NC State University, has spent almost 44 years in IT and frames AI as three accelerating clocks. On the business side, adoption is racing ahead and shadow AI is everywhere, so security teams have to say how, not no. On the attacker side, AI raises the volume and velocity of attacks, from flawless phishing to vulnerability discovery and exploit generation, including a 27-year-old OpenBSD vulnerability found by a frontier AI model. On the defender side, he argues for continuous AI-assisted scanning, smarter prioritization, and automating as much as possible but not more, with a human in the loop for the calls that carry business consequences. He compares how fast attackers move after initial access with the 247 days it takes on average to identify and contain a breach, makes the case for putting AI-driven vulnerability discovery in every team's hands, and closes on the skill he says matters most in the AI era: critical thinking. Speaker: Jeff Crume, PhD, CISSP, Security Architect and Adjunct Professor, NC State University Chapters: 0:00 Intro: three clocks, and why now is the most interesting time in cyber 2:51 The business clock: AI adoption and shadow AI 4:45 Do not say no, say how 7:00 The attacker clock: volume and velocity 7:31 AI-powered phishing: unlearn the misspelling test 8:43 AI finds a 27-year-old vulnerability 11:28 The fundamentals have not changed 13:16 Why AI vulnerability scanners should be widely available 15:41 The defender clock 17:13 Automate as much as possible, but not more 19:43 How fast attackers move versus how slowly breaches are contained 23:01 Why restricting AI tools will not stop attackers 24:34 AI-assisted detection and response 27:08 The skill that matters most: critical thinking 28:20 Applying critical thinking to all three clocks #CyberRiskSeries #AISecurity #ShadowAI #Cybersecurity

 76      1