As cyber threats evolve with AI’s rapid advancements, it’s crucial for enterprises to stay ahead of potential attacks. A recent discussion by John Grancarich, Chief Strategy Officer at Fortra, highlights the necessity of integrating offensive testing with defensive capabilities. The aim is simple: to thwart strategies like reconnaissance, lateral movement, and data exfiltration before they commence.
John points out the AI-driven surge in threats such as hyper-personalized phishing, deepfake social engineering, and automated vulnerability discovery. To counter these, he proposes a three-tiered use of AI: securing generative AI pipelines, detecting AI-powered threats with behavior models, and enhancing SOC teams with automated processes. These approaches promise quicker incident response and decreased false positives, giving valuable time back to cybersecurity professionals.
Acquiring Lookout’s cloud security component has expanded Fortra’s capabilities in comprehensive data protection. Solutions like CASB, secure web gateway, and ZTNA now seamlessly integrate with existing endpoint and network controls. This unified approach allows for better risk assessment and mitigation through centralized discovery and policy enforcement.
Education also plays a significant role in bolstering defenses. Practical initiatives such as phishing simulations and promoting cautious behavior can further reduce vulnerabilities. Looking ahead, John envisions a unified platform marrying both offensive and defensive strategies. This includes the deployment of a novel DSPM and the ambitious mission of cultivating a 10x security engineer. These efforts aim to create a more resilient cybersecurity posture across organizations.


