Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Shadow AI is already on your employees' phones — and it's invisible to your network controls. This demo follows a real workflow: an employee gets blocked from using an unauthorized AI tool on her corporate laptop, so she switches to her personal phone instead. No VPN, no DLP, no visibility, no corporate controls follow her there.

In this week's Intel Chat, Chris Luft and Matt Bromiley discuss how the same AI capabilities fueling adversaries are available to defenders too. Matt's takeaway: you don't need to buy an AI product to keep pace. The same way an attacker points AI at a code base, defenders can point it at detection rules and telemetry. Chris adds that as more developers use these models to check their own code, the playing field will level out, though the next year or two will likely bring a spike in exploits from lower-skilled attackers leveraging AI before defenses catch up.