Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

This episode looks at what happens when AI starts finding vulnerabilities at scale, restricted access creates market imbalance, and security teams struggle to keep pace. It covers fragile infrastructure, bug brokers, overloaded analysts, CISO fear, and the growing sense that cyber defence is entering a faster and harsher era.

Every organisation depends on data, which makes information security central to how the business survives and grows. The clip argues that security leaders should stop shrinking themselves in front of boards, stop catastrophising without answers, and take their place as serious decision makers.

The future is bigger than arguments between cyber, privacy, AI and business continuity specialists. Organisational resilience offers a clearer way to think about protection, bringing these competing disciplines together under one practical goal.

Anthropic's Project Glasswing and Mythos Preview model represent a seismic shift in cybersecurity. This AI is specifically tuned for vulnerability discovery, code review and security hardening at unprecedented speed. In this episode of Razorwire Raw, Jim Rees breaks down what Project Glasswing actually means for information security professionals and the concerns nobody's talking about yet.

Security teams often buy tools the way someone buys marathon gear, hoping the equipment alone will make them ready. Real security needs commitment, routine, leadership and follow through, because preparation is what matters when the hard day arrives.

Claims about being GDPR compliant often come from people selling certainty where none exists. The point is not to buy a magic fix or a shiny platform, but to recognise that data protection is ongoing work, not a finished state you can simply declare.

People entering InfoSec face a flood of opinions, hot takes and polished content from voices who have not done the real work. The clip calls out false prophets and influencers who sound credible online, while making it harder for newcomers to tell genuine expertise from noise.

One of the biggest security problems is speed, not a lack of tools. Constant pressure, tired judgement and endless cognitive load make people more likely to miss phishing, mishandle data and make poor decisions, so slowing down becomes a practical security control.

AI systems treat almost everything as a possible input channel, from PDFs and PowerPoints to text, music and more. Without a real separation between control plane instructions and data plane content, the attack surface keeps growing faster than most security programmes can contain.

People are installing powerful AI agents on everyday laptops without realising those tools can access files, emails and operating system functions. Once prompt injected, that agent can behave like a malicious version of its user, which turns convenience into a direct path for deletion, exfiltration and loss of control.

A threat actor reportedly used a prompt injected AI model under the cover of a fake bug bounty story to help compromise government systems and extract large volumes of data. The case shows how jailbroken AI can become an active force multiplier for offensive operations, not merely a productivity tool.

AI adoption is happening faster than any technology cycle in history. Information security and risk management are being sacrificed for speed and every single technology revolution has followed the same pattern. In this episode of Razorwire Raw, Jim Rees draws on decades of experience through the internet boom, virtualisation revolution and cloud computing adoption to explain what's actually happening with AI right now. Each cycle has been faster than the last, and each time, security gets left behind.

Many organisations are pushing AI adoption at full speed while treating security as something to patch in later. The result is a market full of rapidly deployed models, third party tools and jailbreakable systems where capability gets rewarded first and control gets ignored until damage appears.

Prompt injection works because language models struggle to tell the difference between trusted instructions and untrusted user content. Unlike SQL injection or cross site scripting, there is no clean deterministic defence, which leaves code, libraries and AI workflows open to manipulation at multiple points.

Regular pen tests and occasional vulnerability scans no longer match the speed of AI driven development and daily changes in modern systems. The real risk now sits in fast moving exposures, chained attacks and agentic behaviour that traditional CVE focused thinking was never built to handle.

What happens when your organisation adopts AI faster than your security strategy can keep up? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I’m Jim and in this episode, I’m joined by Martin Voelk, penetration tester and AI red teamer, and Jonathan Care, lead analyst covering the intersection of AI, cybersecurity and identity.

AI agents with browser access can be manipulated into downloading and running malware disguised as a harmless support tool. It is social engineering for machines, where prompt injection turns an innocent browsing task into a full system compromise without any classic CVE in sight.

This episode explores why CTEM matters in a world of vibe coding, AI agents and rapidly expanding attack surfaces. It covers prompt injection, hidden threats, deepfakes, weak governance and the growing fear that businesses are deploying AI far faster than security teams can understand or control it.