Previous
Listen on:
S4 E13

The AI Access Problem: Why Zero Trust Matters More Than Ever

As AI becomes embedded in everyday business operations, technology leaders face a growing security challenge. Attackers can use AI to scale their operations, identify vulnerabilities and launch more attacks, while employees are using it to write code, build applications and automate tasks without always understanding the risks. For CIOs, CTOs and CISOs, the challenge is knowing how to embrace AI without giving it access to information, systems and networks it shouldn’t reach.

 

In this episode of CXO Secrets, David McClelland sits down with Michael Jenkins, Chief Technology Officer at ThreatLocker, to explore how AI is changing the cybersecurity landscape and why zero trust is becoming increasingly important. Drawing on his experience in email security, IT and ransomware prevention, Michael shares how the threats facing organisations have evolved and why preventing attacks is more effective than repeatedly recovering from them.

 

Michael explains why the biggest risk with AI isn’t necessarily its intelligence, but the level of access organisations give it. He discusses how employees can unintentionally introduce vulnerabilities by using AI-generated code, why banning AI can drive people towards unapproved tools, and how businesses can establish the right controls to support adoption safely. He also explores the importance of least privilege, the practical challenges of implementing zero trust, and why security needs to be embedded across an organisation rather than applied selectively.

 

Throughout the conversation, Michael shares his perspective on the future of AI-powered attacks, the importance of educating employees and why building a strong security culture requires consistency, collaboration and a willingness to challenge established ways of working.

 

Topics include:

  • How AI is increasing the scale and volume of cyberattacks
  • Why attackers can exploit AI-generated code even when it isn’t perfect
  • The security risks of employees building applications with AI
  • Shadow AI and the dangers of using unapproved tools
  • Why banning AI can create greater risks for data protection
  • Why the real AI security problem is access, not intelligence
  • Applying zero trust principles to AI agents, applications and employees
  • Using least privilege to limit access to sensitive data and systems
  • How organisations can enable AI adoption without compromising security
  • Why AI-generated code still requires human review
  • Moving from ransomware recovery to proactive attack prevention
  • Lessons from investigating organisations repeatedly hit by ransomware
  • Implementing zero trust without unnecessarily disrupting employees
  • Why security education and clear communication are essential to successful change
  • Preparing for an increase in AI-powered attacks and less predictable threat actors
  • Why effective technology leaders encourage their teams to challenge established practices
Back to All Episodes

ThreatLocker

Stop Ransomware! ThreatLocker® improves enterprise-level server and endpoint security with Zero Trust controls, including Allowlisting, Ringfencing™, Elevation, Storage, Network Control, Configuration Management, and Detect EDR and MDR solutions.

Contact us: cxosecrets@edsxevents.com
Subscribe to CXO Secrets
Sponsor next episode
Michael Jenkins
CTO
ThreatLocker

Michael Jenkins is a cybersecurity leader with nearly 20 years of experience building and managing security technology. He was an early advocate for Zero Trust and has spent much of his career advancing its use as a practical approach to preventing cyberattacks.

 

Michael joined ThreatLocker as Chief Technology Officer in 2019 and has helped build the company’s Zero Trust Platform. He leads the company’s development and product teams and has led the creation and expansion of products across endpoint, network, and cloud security, including Zero Trust Network Access and Zero Trust Cloud Access.

 

Michael has also made developing people a major part of his leadership at ThreatLocker. He has mentored dozens of employees, including professionals who joined the company in entry-level roles and grew into highly skilled developers and cybersecurity practitioners. He regularly leads large product development initiatives under demanding timelines while maintaining a strong focus on product quality.

 

A frequent author and speaker on cybersecurity and Zero Trust, Michael advocates for deny-by-default controls that give users access to what they need while limiting everything else. During his career, Zero Trust has grown from a relatively uncommon approach into a cybersecurity model widely adopted by businesses and U.S. government agencies. Michael has helped drive that evolution through the products he has built and the professionals he has mentored.

View LinkedIn profile
Share
Copy Link
×