teissPodcast

A handful of concrete data points (2-day exploit vs 26-day patch gap, 51% readiness gap, 14% with unique AI governance accountability) provide genuine value, but large portions of the conversation are circular repetition of the same 'visibility first, then governance' prescription with no depth added. Many claims are asserted and agreed upon without development.

“two days from discovery to exploit and time to patch still remaining at 26 days. So that gap in between is where the battle is on right now for us”

“only 14% of enterprises had somebody uniquely accountable for AI governance. So in a shared responsibility model it becomes uh, who's on first”

The 'shadow AI is the new shadow IT' and cloud-migration-as-precedent framings are explicitly acknowledged as recycled. The 'language as the new attack surface, not code' argument is moderately interesting but underdeveloped. The episode largely recycles circulating AI security tropes rather than advancing them.

“the domain of exploit uh, is not computer science anymore and Python code, right? The domain now is natural language. And so if natural language is the code, um, we know that we have no bounds”

“shadow AI is the new shadow IT risk”

Paul Barbosa is a senior VP at a major security vendor but is visibly present to promote Check Point's own Cloud Security Report, limiting independent credibility. Satyam Rastogi is a genuine practitioner but from a low-profile company and contributes mostly agreement and repetition rather than deep practitioner insight.

“We released our 2026 Cloud Security Report, very much focused on enterprise adoption of AI. Uh and what we found was super interesting”

“we were able to bypass a really huge well known EDR by the help of advanced AI level offensive things that we can create”

Several concrete statistics are cited, but nearly all originate from Check Point's own self-published report, which is promotional material rather than independent evidence. Named regulatory frameworks (NIS2, DORA, ISO 42001, OWASP LLM Top 10) add some grounding, but there are no third-party data sources, named customer case studies, or detailed real-world examples.

“77% of everyone we polled uh, has made moderate or significant or complete strategy change uh, related to AI, but only 26% said that their architecture is ready and only needs minor changes. So that's a 51% gap”

“a third of our respondents also indicated that they're already seeing um, attacks they can attribute to AI. Uh and that third that they identified was phishing, advanced phishing using AI, uh and deepfakes”

The host asks broad, scene-setting questions and never challenges a guest claim or asks a probing follow-up; most energy comes from relaying audience chat questions rather than host-driven inquiry. The conversation devolves repeatedly into mutual agreement loops ('you're right,' 'spot on,' 'right') with no productive friction.

“Ade says surely emphasis should be on the vendors to ensure that appropriate checkpoints are embedded in any AI product. Now I think that's a really interesting push to vendors”

“why are so many businesses struggling with that readiness gap? Why are so many businesses struggling with this? And is it simply down to pace of change or other complexities as well?”