AI has made attacks both more frequent and more convincing. In this episode, Juraj Janosik, VP of AI at ESET, explains how attackers use AI to sharpen phishing and Business Email Compromise (BEC), making their messages hard to tell apart from genuine communication. He covers how automation has lowered the barrier to entry for unskilled attackers and reduced ransomware dwell time to a couple of hours.
Juraj also sets out what defenders can do about it. He argues that AI-powered tools alone won’t protect you, and makes the case for layered defenses built on strong security telemetry, human oversight, and consistent patching of known vulnerabilities, which remain attackers’ favorite way in. He also looks inward at the risks of rapid AI adoption, including shadow AI and employees leaking data through unsanctioned tools, and explains why training and clear governance are the best ways to reduce those risks.
Tune in to learn:
How AI has raised the quality of phishing and BEC attacks
How to spot AI-driven social engineering, starting with context and urgency
Why automation has cut the time from initial access to encryption down to hours
Why unpatched known vulnerabilities, not zero days, drive most attacks
How to govern AI use internally and reduce shadow AI risk
