"We're Becoming Dumb and Numb": Why #BlackHat 2025's AI Hype Is Killing Cybersecurity -- And Our Ability to Think

Random and Unscripted Podcast On ITSPmagazine

The Weekly Update with Sean Martin, CISSP and Marco Ciappelli

Picture this: You walk into Black Hat USA 2025, and every vendor booth is screaming "agentic AI." Different companies, different products—but they all taste like the same #marketing milkshake.

Sean and I witnessed the echo chamber firsthand. When everyone claims their AI is autonomous and perfect, how do CISOs tell them apart?

How do you even know what you're buying?

But this goes deeper than marketing noise. We're talking about the real danger of surrendering critical thinking to black-box systems we don't fully understand.

Marco introduces the ancient Greek myth of Talos—a bronze AI guardian who seemed invincible until one fatal flaw destroyed everything. Sound familiar?

"Do you really wanna trust the weapon to just go and shoot everybody?"

The questions we explored:

Are we creating a "lowest common denominator" reality where AI defines success?

What happens when we stop thinking and just hit the "easy button"?

Are we trapped in "circular knowledge learning" where #AI creates the questions AND answers?

Our solution isn't abandoning AI—it's getting honest about limitations. Stop selling perfection. Share your gaps. Because CISOs aren't stupid, and the truth always comes out.

In an industry built on protecting against deception, maybe it's time we stop deceiving ourselves.

Click below to read, listen or watch this conversation - and access the mentioned articles. Do not worry, nothing is gated, and all is free!

https://www.linkedin.com/pulse/were-becoming-dumb-numb-why-black-hat-2025s-ai-hype-killing-v8ztc

What's your take? Are we becoming too dependent on AI decision-making?

Black Hat USA 2025: The Complete Story Collection

Just dropped our most comprehensive newsletter yet—featuring 22+ conversations from Las Vegas that go way beyond the typical conference buzz.

From "data kidnapping" replacing ransomware to the reality check on agentic AI hype, we covered the stories that actually matter. Not just what vendors are selling, but what security practitioners are really thinking about.

What's inside:

→ Deep conversations with leaders from Apono, Zscaler, CyberSN, runZero, Stellar Cyber, BLACKCLOAK, ThreatLocker, Akamai Technologies, Dropzone AI, BlinkOps, ReversingLabs, Crogl, Inc. and more companies

→ Hard truths about #cybersecurity hiring, vendor novelty, and #CISO burnout

→ Philosophical reflections on #AI, #humanity, and what we risk when machines make our decisions

→ Practical insights on automation, vulnerability management, and supply chain transparency

Plus exciting news about ITSPmagazine Studio (our new brand advisory for cybersecurity and technology companies) and ITSPmagazine Europe (transatlantic conversations on tech, security, and society with Rob Black ).

This isn't just event coverage—it's the kind of substantive dialogue our industry needs. The conversations that challenge assumptions, explore nuance, and connect technology decisions to human outcomes.

Link in comments

What resonated most with you from Black Hat this year?

The technical innovations, the human challenges, or the bigger questions about where we're headed?

Official Welcome: BLACKCLOAK Joins ITSPmagazine’s BlackHat USA 2025 Coverage

We are pleased to welcome BlackCloak as a Full Sponsor of our On Location Coverage at #BlackHat USA 2025 in Las Vegas.

Hey Chris Pierson, let's see if we can get creative and top this shot!
Looking forward to see you and have another great chat!

#BlackCloak is a pioneer in Digital Executive Protection, delivering #cybersecurity and privacy solutions tailored for high-net-worth individuals, corporate executives, and their families. As #cybercriminals increasingly target the personal lives of business leaders to gain access to enterprise networks, BlackCloak provides a critical layer of defense — extending security beyond the office and into the home.

With a blend of cutting-edge technology and white-glove service, BlackCloak protects against threats like personal data leaks, home network intrusions, device compromise, and digital surveillance.

Check out #BlackCloack's Website here: https://itspm.ag/itspbcweb

Visit BlackCloak’s page on ITSPmagazine to learn more about their mission and presence in our Black Hat coverage:
https://www.itspmagazine.com/directory/blackcloak

Explore our full Black Hat USA 2025 coverage here:
https://www.itspmagazine.com/bhusa25

Since 2015, Black Hat has been a cornerstone event for ITSPmagazine, and we’re proud to continue spotlighting the companies and people shaping the future of cybersecurity. Our 2025 program includes exclusive on-site interviews, sponsored briefings, and editorial features designed to share timely insights with our global audience.

There is still time to join this year’s coverage:
2 Full Sponsorship Opportunities Remaining
A VERY Limited Number of On Location Briefings Available

Learn more and reserve your spot:
• Sponsorships: https://www.itspmagazine.com/event-coverage-sponsorship-and-briefings
• Briefings: https://www.itspmagazine.com/event-coverage-briefings

We thank the team at BlackCloak for supporting our 2025 Black Hat USA coverage — we look forward to sharing their story from the floor in Las Vegas.

Marco Ciappelli & Sean Martin, CISSP

A friend told me that #Lego is hiring a #CISO. If I were allowed to move to Denmark I would have applied on the spot. Maybe an escape route from fascism for one of you instead? #infosec #GetFediHired

No Click. No Warning. Just a Data Leak.

Think your AI assistant is secure? Think again. The new EchoLeak exploit shows how Microsoft 365 Copilot, and tools like it, can silently expose your sensitive data without a single user interaction. No clicks. No downloads. Just a well-crafted email.

In this eye-opening blog, we break down how EchoLeak works, why prompt injection is a growing AI threat, and the 5 actions you need to take right now to protect your organization.

Read now: https://www.lmgsecurity.com/no-click-nightmare-how-echoleak-redefines-ai-data-security-threats/

Hundreds of Brother printer models are affected by a critical, unpatchable vulnerability (CVE-2024-51978) that allows attackers to generate the default admin password using the device’s serial number—information that’s easily discoverable via other flaws.

748 total models across Brother, Fujifilm, Ricoh, Toshiba, and Konica Minolta are impacted, with millions of devices at risk globally.

Attackers can:
• Gain unauthenticated admin access
• Pivot to full remote code execution
• Exfiltrate credentials for LDAP, FTP, and more
• Move laterally through your network

Brother says the vulnerability cannot be fixed in firmware and requires a change in manufacturing. For now, mitigation = change the default admin password immediately.

Our pentest team regularly highlights printer security as a critical path to system compromise—and today’s news is another example that underscores this risk. This is your reminder: Printers are not “set-and-forget” devices. Treat them like any other endpoint—monitor, patch, and lock them down.

Need help testing your network for exploitable print devices? Contact us and our pentest team can help!

Read the Dark Reading article for more details on the Brother Printers vulnerability: https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug

Non-Human Identities: The Hidden Risk in Your Stack

Non-human identities (NHIs)—like API keys, service accounts, and OAuth tokens—now outnumber human accounts in many enterprises. But are you managing them securely? With 46% of organizations reporting compromises of NHI credentials just this year, it’s clear: these powerful, often-overlooked accounts are the next cybersecurity frontier.

Read The Hacker News article for more details: https://thehackernews.com/2025/06/the-hidden-threat-in-your-stack-why-non.html

being a #ciso brings some perks.
Guess I am eligable to being a butcher too huh? #infosec

Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari https://hackread.com/fullscreen-bitm-attack-discovered-by-squarex-exploits-browser-fullscreen-apis-to-steal-credentials-in-safari/ #BreachandAttack #PressRelease #Monitoring #Research #Malware #CISO #hack

Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari – Source:hackread.com https://ciso2ciso.com/fullscreen-bitm-attack-discovered-by-squarex-exploits-browser-fullscreen-apis-to-steal-credentials-in-safari-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #BreachandAttack #PressRelease #Monitoring #Hackread #Research #malware #CISO #hack

INE Security Partners with Abadnet Institute for Cybersecurity Training Programs in Saudi Arabia https://hackread.com/ine-security-partners-with-abadnet-institute-for-cybersecurity-training-programs-in-saudi-arabia/ #BreachandAttack #PressRelease #Research #breach #Report #CISO #hack

INE Security Alert: Continuous CVE Practice Closes Critical Gap Between Vulnerability Alerts and Effective Defense https://hackread.com/ine-security-alert-continuous-cve-practice-closes-critical-gap-between-vulnerability-alerts-and-effective-defense/ #BreachandAttack #PressRelease #Research #Report #CISO #hack

The FBI has issued an alert about cybercriminals hijacking outdated routers to power massive proxy-for-hire networks—masking malware, fraud, and credential theft right under your nose.

Watch the full Cyberside Chats episode to hear @sherridavidoff and @MDurrin 's insights on:

The FBI’s May 2025 alert
TheMoon malware and the Faceless proxy service
What these botnets mean for your enterprise
What you need to do now to stay protected

Watch the video: https://youtu.be/x_40BlvWsHk
Listen to the podcast: https://www.chatcyberside.com/e/outdated-routers-a-hidden-threat-in-your-neighborhood/?token=b0b648ff9ddf79f7cb1099945c74f7f0

SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks https://hackread.com/spycloud-analysis-reveals-94-of-fortune-50-companies-have-employee-data-exposed-in-phishing-attacks/ #PressRelease #Research #CISO

SpyCloud Analysis Reveals 94% of Fortune 50 Companies Have Employee Data Exposed in Phishing Attacks – Source:hackread.com https://ciso2ciso.com/spycloud-analysis-reveals-94-of-fortune-50-companies-have-employee-data-exposed-in-phishing-attacks-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #PressRelease #Hackread #Research #CISO