Ep 9 | 8.13.26

What do AI-driven ‘bank heist’ attacks mean for defenders?

Show Notes

Attackers aren't just using AI to steal data; they're using it to fight back while you investigate them in real time. And once an adversary is inside, why would they ever want to leave? That's the unsettling reality Tom Kellermann, VP of AI Security and Threat Research at TrendAI, lays out in this episode.

And the numbers prove it. According to a 2026 TrendAI survey of 46 financial-sector CISOs, more than 60% of respondents experienced counter-incident response, where adversaries actively disrupt live investigations. In addition, nearly 90% of these leaders reported more AI-enabled attacks year over year.

Tom joins Johnny Hand and Dustin Childs to explain why the threats that hit banks first tend to hit everyone else next, and what defenders can do about it.

You'll learn:

Why ungoverned AI should be treated as a command-and-control (C2) channel, and how attackers use it for reconnaissance, lateral movement, and persistence
How agentic attacks work end-to-end, from jailbreaking LLMs through API attacks to dynamically spinning up C2s in minutes
What tactics are used most for bank crime, from the rise of reverse business email compromise (RBEC), deepfake "employee digital twins," and the theft of non-public market information for digital front-running
How a strategic leadership alignment can improve AI defense

Why stick around:

Tom lays out how defenders can turn AI against the attackers, and why a CISO's independent voice has never mattered more.

Episode resources:

About AI Security Brief

AI Security Brief is where security and technology leaders come to get ahead. Join us for real conversations on the AI trends, threats, and decisions that can’t wait.

About TrendAI™

TrendAI™ empowers organizations to lead the future of AI with proactive security designed to inspire innovation and eliminate risk. TrendAI™. AI Fearlessly.

AI Security Brief

Podcast Info

HOST(S):

Dustin C. Childs is a part of TrendAI™ Zero Day Initiative™ (ZDI), which is the world's largest vendor-agnostic bug bounty program. Dustin began his infosec journey in the late 1990s at the Air Force Information Warfare Center. Following his time working for the government, Mr. Childs worked in the Microsoft Trustworthy Computing group, where he served as a case manager in the Microsoft Security Response Center (MSRC) with a focus on addressing vulnerabilities in the Windows operating system and in Microsoft's developer tools. In his current role, Mr. Childs gathers and analyzes threat intelligence from various TrendAI and open-source resources to understand and communicate risk to enterprises. He also creates, implements, and oversees internal and external communications programs that promote the work of the TrendAI™ ZDI and its researchers. He has spoken at multiple conferences including Black Hat USA, ThotCon, BlueHat, B-Sides, and multiple ISSA events.

Johnny Hand is a seasoned cybersecurity leader with over 20 years of experience translating intricate technical concepts into business-critical operations. He is the global CISO at TrendAI™, where he spearheads the integration of artificial intelligence for enhanced security and operational efficiency. His background in securing critical infrastructure includes leading information security and technology operations for an international academic institution and overseeing communication and defensive cyber operations for specialized units within the U.S. Navy. His focus remains on building resilient security strategies that adapt to the evolving technology landscape.

Schedule: Biweekly

Creator: TrendAI

Social Media:

TrendAI