Threat hunting is one of cybersecurity's most talked‑about, and misunderstood, disciplines. In this episode, Cole French and guest Ben Lieberman breaks down what threat hunting really looks like inside complex, high‑volume environments and why fundamentals matter more than flashy techniques. We dig into how telemetry is collected, how attackers blend into normal activity, and why red and blue teams often view threats differently.

At its core, threat hunting is about mindset: understanding attacker behavior, knowing what "normal" looks like, and cutting through massive data to spot what truly matters.

You'll learn:

• Why attackers often rely on simple, well‑known techniques

• The challenges of working with massive telemetry and alert volume

• How tools like Splunk and Security Onion help find real signals

• Why red teams sometimes test the wrong things

• The importance of baselining and building detections around real behavior

As AI is reshaping the threat landscape, the timeline for vulnerability discovery has collapsed. In this episode, guest Matt Stern breaks down how attackers are using AI to find and exploit weaknesses in minutes, and what organizations must do to keep pace.

We explore how modern AI‑driven testing can scan code, APIs, and mobile apps at scale, surface logic flaws traditional tools miss and help teams secure software before release. Matt also explains how continuous AI‑powered pen testing reduces blind spots, cuts alert noise, and allows humans to focus on advanced threats.

Finally, we look at the next frontier of agentic AI — guardrails, documentation checks, and automated reviews that help organizations prepare for a world where both attackers and defenders operate at machine speed.

Following Part 1's deep dive into GTG-1002 and the rise of autonomous cyber operations, Part 2 shifts toward what leaders must do to get ahead of next-generation AI-enabled threats. Guest Nury Turkel explains how regulatory risk forms long before official rulemaking, often emerging first through congressional hearings, agency speeches, draft legislation, and national-security analyses. Nury argues that organizations gain an advantage by tracking long-term trendlines—such as bipartisan momentum and multi-agency action—rather than reacting to headlines, and by cultivating geopolitical literacy and responsible leadership. The conversation concludes with emerging AI-related risks to the defense industrial base and practical steps leaders can take to reduce technical debt, strengthen resilience, and stay ahead of next-generation threats.

References:

• Wall Street Journal: China Tells Its AI Leaders to Avoid U.S. Travel Over Security Concerns (paywall)
• Bloomberg: China Expands Travel Curbs to Top AI Talent at Private Firms (paywall)
• Reuters: China Restricts Overseas Travel for Top AI Talent at Alibaba, DeepSeek