AI in Cybersecurity: Phil Venables (Formerly Google Cloud CISO) on Agentic AI & CISO Strategy

AI in Cybersecurity: Phil Venables (Formerly Google Cloud CISO) on Agentic AI & CISO Strategy

Dive deep into the evolving landscape of AI in Cybersecurity with Phil Venables, former Chief Information Security Officer at Google Cloud and a cybersecurity veteran with over 30 years of experience. Recorded at RSA, this episode explores the critical shifts and future trends shaping our industry.

Caleb, Ashish and Phil speak about

  • The journey from predictive AI to the forefront of Agentic AI in enterprise environments.
  • How organizations are transitioning AI from experimental prototypes to impactful production applications.
  • The three essential pillars of AI control for CISOs: software lifecycle risk, data governance, and operational risk management.
  • Current adversarial uses of AI and the surprising realities versus the hype.
  • Leveraging AI to combat workforce skill shortages and boost productivity within security teams.
  • The rise of "Vibe Coding" and how AI is transforming software development and security.
  • The expanding role of the CISO towards becoming a Chief Digital Risk Officer.
  • Practical advice for security teams on adopting AI for security operations automation and beyond.


Questions asked:

(00:00) - Intro: AI's Future in Cybersecurity with Phil Venables

(00:55) - Meet Phil Venables: Ex-Google Cloud CISO & Cyber Veteran

(02:59) - AI Security Now: Navigating Predictive, Generative & Agentic AI

(04:44) - AI: Beyond the Hype? Real Enterprise Adoption & Value

(05:49) - Top CISO Concerns: Securing AI in Production Environments

(07:02) - AI Security for All: Advice for Smaller Organizations (Hint: Platforms!)

(09:04) - CISOs' AI Worries: Data Leakage, Prompt Injection & Deepfakes?

(12:53) - AI Maturity: Beyond Terminator Fears to Practical Guardrails

(14:45) - Agentic AI in Action: Real-World Enterprise Deployments & Use Cases

(15:56) - Securing Agentic AI: Building Guardrails & Control Planes (Early Days)

(22:57) - Future-Proof Your Security Program for AI: Key Considerations

(25:13) - LLM Strategy: Single vs. Multiple Models for AI Applications

(28:26) - "Vibe Coding": How AI is Revolutionizing Software Development for Leaders

(32:21) - Security Implications of AI-Generated Code & "Shift Downward"

(37:22) - Frontier Models & Shared Responsibility: Who Secures What?

(39:07) - AI Adoption Hotbeds: Which Security Teams Are Leading the Way? (SecOps First!)

(40:20) - AI App Sprawl: Managing Risk in a World of Custom, AI-Generated Apps

Avsnitt(51)

The Zero-Click AI Hack: How to Contain the Blast Radius of Autonomous Agents

The Zero-Click AI Hack: How to Contain the Blast Radius of Autonomous Agents

Is an AI agent's identity a workload or an action? Ashish spoke to Elie Bursztein, Distinguished Research Scientist and co-author of Google SAIF (Secure AI Framework) about how it is neither and that ...

29 Apr 47min

Buy vs. Build AI Security: Why [Box.com](http://Box.com) CISO is Creating their Own Agentic SOC

Buy vs. Build AI Security: Why [Box.com](http://Box.com) CISO is Creating their Own Agentic SOC

If your AI solution is just helping humans process the same amount of alerts a little faster, you haven't transformed anything, you've just created a faster hamster wheel.In this episode, Ashish and C...

22 Apr 46min

Anthropic's Project Mythos: Why the "Zero-Day Machine" is Terrifying the Security Industry

Anthropic's Project Mythos: Why the "Zero-Day Machine" is Terrifying the Security Industry

In this episode, Ashish and Caleb discuss the internet-breaking preview of Project Mythos, an unreleased AI model from Anthropic that has shown an unprecedented, terrifying ability to reason through c...

18 Apr 1h 3min

Are AI Security Startups Faking It? How to Separate Signal from Noise

Are AI Security Startups Faking It? How to Separate Signal from Noise

With over 70 startups claiming to have built the perfect "AI SOC Analyst" or "AI Threat Hunter," how do you separate the real products from the vaporware? Recorded live at Decibel RSAC Founder Festiva...

15 Apr 47min

How Lovable Manages 100+ Daily Changes, Vibe Coding & Shadow AI

How Lovable Manages 100+ Daily Changes, Vibe Coding & Shadow AI

What does it actually look like to run security inside one of Europe's fastest-growing AI companies? In this episode, recorded live at the Munich Cybersecurity Conference (MCSC), Ashish Rajan sat down...

2 Apr 57min

Questions Every CISO Must Ask AI Security Vendors

Questions Every CISO Must Ask AI Security Vendors

RSA Conference 2026 is here and the AI agent hype machine is louder than ever. In this episode, Ashish and Caleb cut through the noise and arm CISOs, practitioners, and security teams with a clear-eye...

18 Mars 50min

Will Foundation Models Kill Security Startups?

Will Foundation Models Kill Security Startups?

Did Anthropic just kill the AppSec industry? Following the announcement of Claude Code Security, a tool that finds, reasons about, and fixes code vulnerabilities, major security stocks dropped by 8% ....

5 Mars 59min

How to Build Your Own AI Chief of Staff with Claude Code

How to Build Your Own AI Chief of Staff with Claude Code

What if you could automate your entire work life with a personal AI Chief of Staff? In this episode, Caleb Sima reveals "Pepper," his custom-built AI agent to Ashish that manages emails, schedules mee...

11 Feb 47min

Populärt inom Teknik

natets-morka-sida
uppgang-och-fall
elbilsveckan
market-makers
rss-technokratin
bilar-med-sladd
rss-laddstationen-med-elbilen-i-sverige
rss-elektrikerpodden
skogsforum-podcast
har-vi-akt-till-mars-an
rss-it-sakerhetspodden
rss-powerboat-sverige-podcast
bli-saker-podden
rss-uppgang-och-fall
hej-bruksbil
rss-veckans-ai
rss-snacka-om-ai
developers-mer-an-bara-kod
rss-fabriken-2
rss-en-ai-till-kaffet