Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Are cybersecurity events still giving people a reason to turn up, or have too many become expensive sales floors with the same conversations on repeat? Welcome to Razorwire, the podcast where we share our take on the world of cybersecurity with direct, practical advice for professionals and business owners alike. I'm Jim and in this episode I'm joined by James Bore, Chartered Security Professional, Gary Hibberd, co-founder of Consultants Like Us and Lisa Ventura, founder of the AI and Cybersecurity Association and Unity Group Solutions.

The OpenAI model that escaped its testing environment and compromised Hugging Face exposed a much bigger cybersecurity problem: are our existing defences actually designed for autonomous AI attacks? In this Razorwire Raw, James Rees looks beyond the original incident at what happens when AI can identify vulnerabilities, exploit them and move through systems at a speed human defenders simply can't match. From AI security and sandboxing to defensive AI and the possible return of honeypots, it may be time to reconsider what defence in depth looks like in the age of AI.

How to get into cybersecurity starts with learning how to think about risk, communicate with different stakeholders and keep learning. The InfoSec community contains experienced practitioners willing to share knowledge, so starting your career does not mean figuring everything out by yourself.

Cybersecurity risk management starts with understanding the risk you are trying to address rather than blindly following a checklist. A risk mindset helps security professionals step beyond policies and procedures and focus on what matters when decisions need to be made.

Will AI replace cybersecurity jobs? AI already helps with repetitive work such as analysing logs and producing documentation, but information security still relies on judgement, strategic thinking and understanding risk.

AI governance is becoming a regulatory race as standards bodies compete to define how organisations manage AI and AI agents. Growing compliance requirements risk creating duplicated frameworks, more noise and a commercial battle over which standard becomes dominant.

Cybersecurity communication skills matter when you need people across an organisation to engage with security rather than avoid it. Trust, empathy and translating risk help security teams become useful advisers instead of people who arrive quoting policies and saying no.

Cybersecurity vendors are struggling to get the attention of CISOs, and having a good product isn't necessarily enough. In this Razorwire Raw, James Rees looks at why traditional cybersecurity sales and marketing tactics are increasingly ineffective, particularly for newer vendors building products for AI security, and what vendors need to understand about the people they're trying to reach.

Cybersecurity for beginners does not require you to arrive with years of technical experience. Feeling like an outsider, learning unfamiliar terminology and building knowledge as you go are all part of developing the skills needed to work in information security.

GRC cybersecurity careers rely on far more than knowing policies, frameworks and technical terminology. Risk thinking, communication, trust and the ability to work with different stakeholders sit at the centre of a career spanning security auditing, compliance and AI governance.