Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI companies are refusing to release models because the rules around safety, surveillance and misuse are still too weak. When governments cannot keep pace, private companies end up deciding how powerful AI models should be used, controlled and withheld.

In this episode, host Richard Bejtlich sits down with Corelight Co-founder and Chief Strategy Officer Greg Bell to unpack groundbreaking research that quantifies exactly how data quality impacts AI-driven security automation. Moving past qualitative industry hype, Greg shares hard evidence from an empirical experiment pitting leading AI agents against real-world Capture the Flag (CTF) challenges and incident response report writing. The findings reveal a dramatic truth: basic firewall and flow logs place a hard cap on inference, throttling an LLM's capacity for deep insight.

The EU just pushed back its AI Act enforcement by 16 months. The US is deregulating. China is governing through infrastructure. And the UK is doing nothing and hoping for the best. Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I'm Jim and in this episode, I'm joined by Richard Cassidy, Field CISO at Rubrik, and Jonathan Care, Head of the AI Practice at KuppingerCole.

The AI governance crisis is already here, with innovation moving faster than regulation, oversight and accountability. The real problem is no longer only what AI can do, but who governs it when these systems start reshaping security, business and public life.