The Joystick Effect: How Attackers Manipulate Your Security Data with Chris Nyhuis

Cyber Sentries: AI Insight to Cloud Security · 2026-07-08 · 35 min

0:00--:--

Topics in this episode

Episode notes

Why AI Needs a Deterministic Pass First As security teams lean harder on AI to catch threats faster, a foundational question keeps getting skipped: is the data feeding that AI actually trustworthy? On this episode of Cyber Sentries , host John Richards sits down with Chris Nyhuis, president and CEO of Vigilant, to unpack why forensic validation - not faster algorithms - may be the missing piece in modern threat detection. Why Your Detection Stack Might Be Blind to Its Own Blind Spots John and Chris dig into what Chris calls the "joystick effect" - a technique where threat actors quietly manipulate logs and EDR training data so security tools learn to miss them entirely. It's a tactic that's existed for decades, but as more teams hand decisions to AI without questioning the data underneath, it's becoming far more dangerous. Chris also walks through why packet loss on span ports and mirror ports can silently gut visibility long before AI ever gets involved, and why physical taps and chain-of-custody collection matter more than flashy detection features.