Safe AI at scale, what happens after initial access, and the weekly enterprise news - ESW #463

Interview with Shiva Pillay from Veeam Safe AI at Scale AI investment is exploding, yet nearly 90% of enterprise initiatives fail because the data powering AI cannot be trusted. That’s the uncomfortable truth the industry is facing right now. Safe AI at scale requires more than just great models—it demands trusted, governed, and recoverable data. This segment is sponsored by Veeam. Visit https://securityweekly.com/veeam to learn more about them! Segment resources: -Veeam Launches New Data and AI Trust Maturity Model to Help Organizations Benchmark AI Readiness: https://www.veeam.com/company/press-r... Topic: Sure, we know how initial access works, but what about lateral movement? A special topic segment where we're joined by Albert Estevez Polo, field CTO for Zero Networks (a community guest, not a podcast sponsor). Zero Networks just released some very interesting data on what attackers are doing after they gain access to victim's environments and how they're doing it. Segment Resources: -Link to report page: https://zeronetworks.com/resource-cen... Weekly Enterprise Security News Finally, in the enterprise security news, 1. Funding and acquisitions 2. Good news, Mythos isn’t dangerous anymore! 3. An excellent breach analysis 4. Cyber insurance rates are dropping, but there’s a catch 5. CISA updates vulnerability remediation guidance 6. Zoom calls are worse than you think, and maybe not for the reasons you think 7. Remember when it was illegal to rip DVDs? All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-463 00:00:00 Welcome to Enterprise Security Weekly and Episode Overview 00:02:51 Veeam's Evolution and Security AIDSPM Acquisition for AI 00:07:53 Ensuring Data Trust and Contextualization for AI Initiatives 00:16:31 Addressing Shadow AI and Data Hygiene for Enterprise Security 00:26:34 The Hard Truth: Courage and Collaboration for AI Security 00:33:01 Zero Networks Report on Post-Initial Access Lateral Movement 00:49:18 Weekly Enterprise Security News and NPM Security Updates 00:53:01 Funding, Acquisitions, and the Pace of AI Governance Rules 00:56:12 Anthropic's Mythos, Fable, and the AI Vulnerability Discussion 01:07:05 Defending at Machine Speed: Patching, Remediation, and AI's Role 01:21:54 AI Code Vulnerabilities, Cyber Insurance, and Digital Communication Bias