CISO Series Podcast Wait, SMS Doesn’t Stand for “Super Mega Secure?”
Sep 16, 2025
In this discussion, Brian Long, CEO of Adaptive Security, delves into the alarming evolution of AI-powered cyber threats like deepfake voice calls and genAI phishing. He highlights the shocking challenges of hiring practices in a virtual world, particularly with North Korean operatives who struggled during video interviews. Long emphasizes the inadequacies of SMS for two-factor authentication, raising concerns about security vulnerabilities. The conversation wraps up with insights into Adaptive's innovative platform that simulates realistic cyber threats for better security training.
AI Snips
Chapters
Transcript
Episode notes
Nearly Hiring Fake Candidates From North Korea
- David recounts Vidoc Security almost hiring North Korean operatives who aced interviews but failed video calls.
- Candidates appeared laggy and their answers seemed to come from ChatGPT, exposing virtual hiring risks.
Redesign Hiring For Virtual Verification
- Add identity verification earlier in hiring and redesign processes for virtual-first interactions.
- Andy Ellis urges rethinking in-person assumptions and building verification into remote hiring workflows.
AI Models Enable Scalable Attacks
- Language models are improving rapidly and cost is dropping, making large-scale social engineering feasible.
- Brian Long warns attackers will scale attacks when cheaper models are "good enough" to fool people.