AI Has a data problem, cascading breaches, and the weekly news - Dimitri Sirota - ESW #459

AI Has a data problem, cascading breaches, and the weekly news - Dimitri Sirota - ESW #459

Author: Security Weekly Productions May 18, 2026 Duration: 1:36:29

Interview with Dimitri Sirota from BigID

Most organizations think AI risk lives in the model – or the identity. It doesn't. It lives in the data. In this episode, BigID's CEO reframes the conversation: why legacy access controls are breaking down, why visibility into sensitive data is the missing foundation, and what it takes to govern humans and machines under a single, accountable framework.

Segment Resources:

This Week's Topic: Cascading Breaches

We're seeing more and more 3rd and 4th party attacks that chain through multiple layers of compromised tools and services. In this topic segment, we discuss the two main aspects of this trend:

  1. How we can stop the chain of breaches from a third party library, vendor, or service provider
  2. How this might get handled at the legal, contractual, and organizational levels

We discuss two big recent examples:

  1. Sonicwall's 2025 breach of their cloud firewall configuration backup service
  2. The compromise of Aqua Security's widely used Trivy open source tool

The Weekly Enterprise News

Finally, in the enterprise security news,

  1. Funding and M&A courtesy of the Security, Funded newsletter
  2. We have evidence that attackers are leveraging AI now (this sounds like old news, but there was little to no evidence before, when people were claiming this)
  3. The Angry admin problem emerges again
  4. Vulnerability information is getting crazy to keep up with
  5. Breach information is getting crazy to keep up with
  6. You can give your Agents an allowance now - don't spend it all in one place
  7. Are vulnerabilities sparse or dense?
  8. Mythos, as a model, isn't all that special
  9. Deploy your own deception sensors!
  10. Japan made something weird. Again.

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-459


Hosted by Adrian Sanabria, Enterprise Security Weekly (Video) is a deep dive into the complex world of protecting large organizations. This isn't just a headline recap; it's a practical, analyst-level discussion for security professionals who need to understand the "why" behind the news. Each episode from Security Weekly Productions brings together a seasoned panel including co-hosts like Katie Teitler-Santullo, Ayman Elsawah, Jason Wood, Jackie McGuire, and Sean Metcalf to dissect emerging threats, architectural shifts, and the tools that promise to help. You'll hear candid evaluations as they put security vendors and their claims under the microscope, separating hype from genuine utility. The conversation revolves around actionable intelligence and strategic trends that empower defenders to build more resilient environments. Tuning into this podcast provides a consistent, informed perspective that cuts through the noise of the daily alert cycle, offering clarity and context that's often hard to find. It’s a video format that adds a layer of connection and detail to these technical discussions, making complex topics more accessible. If your work involves making critical decisions about enterprise security posture, this series serves as a vital resource for staying informed and ahead of the curve.
Author: Language: English Episodes: 100

Enterprise Security Weekly (Video)
Podcast Episodes