EP269 Reflections on RSA 2026 - Beyond AI AI AI AI AI AI AI

This section reflects on the RSA conferences, starting from 2021, with a focus on the overwhelming presence of AI in the cybersecurity ecosystem. The hosts discuss the proliferation of AI messaging by vendors, often with exaggerated claims or superficial use of AI ('AI washing'). They introduce a framework to differentiate vendors based on their AI engagement, ranging from AI natives to AI tourists, and those who simply use AI for productivity without claiming expertise. The discussion highlights the importance of vendors providing concrete data and proof to substantiate their AI claims, cautioning against reliance on buzzwords and superficial marketing.

This section analyzes how AI is being integrated into security products, such as identity management and threat detection, noting both genuine innovations and superficial marketing. The hosts emphasize the need for data-driven claims from vendors to verify AI's effectiveness. They express concern about startups and legacy vendors coexisting in the market, with some companies being disconnected from the latest AI developments. There's a discussion about the potential future dominance of big tech and AI labs and the implications for the cybersecurity industry, including concerns over vendor consolidation and the threat of AI-powered attacks.

The discussion shifts to the dangers posed by AI in the hands of malicious actors, including AI-powered hacking, red teaming, and cyberattacks. The hosts debate whether AI will significantly alter attack methodologies, with some believing that fundamental security practices are more important than the technology used by attackers. They recognize AI's role in accelerating attacks but also stress that strong fundamentals, such as secure coding and proper configuration, remain the best defense. The conversation touches on AI in supply chain attacks, AI-assisted espionage, and the need for proactive disruption strategies.

This section explores trends observed at RSA, including the decline of traditional buzzwords like zero trust, replaced by whimsical and visually vibrant booth designs. They note a nostalgic appreciation for the industry’s aesthetic shift away from dark themes and tired marketing language. The hosts critique the superficiality of some vendors' messaging, emphasizing the importance of data and demonstrable proof over marketing gimmicks. They also reflect on the enduring presence of legacy vendors that haven't evolved their offerings, and the questioned value of physically attending RSA for low-information buyers.

Finally, the hosts examine the signaling effect of openness in cybersecurity products, with some companies using 'open' as a badge of credibility or a defensive stance against proprietary hide-away tactics. They discuss whether open detection rules or open ecosystems actually indicate better security or if they're just strategic signals. The episode concludes with thoughts on the future of RSA, predicting significant industry shifts over the next five years, driven by AI disruptions, and stressing the importance of companies disrupting adversaries, including expanding efforts against scams like pig butchering.