072: AI's Trust Problem: Deepfakes, Dwell Time & the Death of 'It Won't Happen to Us'

Cyber attackers aren't smashing down doors anymore. They're moving in, settling down, and learning the house before anyone notices. Host Charles sits down with Adam Basedow, CTO at VECTRA (an Ensign InfoSecurity company), to unpack why AI is accelerating cyber risk faster than most organisations can keep up — and why the fundamentals still matter more than ever. Adam brings twenty-five years of experience across systems, infrastructure, managed services and security operations to explain VECTRA's practical, operating-model approach to cybersecurity, and how its position within Ensign InfoSecurity — Asia's largest pure-play cybersecurity group — gives clients local accountability backed by 24/7 global SOC scale, threat intelligence and incident response. Together they dig into the state of the threat landscape: attackers automating faster with AI, dwell times creeping upward as adversaries linger undetected to steal credentials and move laterally, and the unglamorous root causes still behind most breaches — weak MFA, stolen credentials, unpatched systems, poor visibility and slow response. From there, the conversation turns to the risks reshaping boardrooms in 2026: shadow AI and the data walking out the door through unmanaged LLMs, the danger of putting all your security eggs in one AI vendor's basket, and a sobering real-world case of deepfake-enabled fraud that cost one engineering firm US$25 million. They close with practical, personal advice — password managers, passphrases, and why you should ditch SMS-based MFA for good. In this episode: 00:00 — Welcome and Security Focus 00:52 — Meet Adam and VECTRA 02:10 — The Ensign Partnership Explained 03:49 — How AI Is Accelerating the Threat Landscape 05:48 — Dwell Time Demystified 07:49 — Why Organisations Keep Ignoring Security Warnings 09:42 — Shadow AI and the Data Risk Nobody's Watching 15:23 — What a SOC Actually Does 16:57 — Agentic AI Inside the SOC 19:26 — The First 72 Hours After a Breach 21:20 — Virtual CISO: A Practical Option for SMEs 23:27 — How AI Has Changed the Security Conversation 24:22 — The $25M Deepfake Wake-Up Call 26:43 — Defending Against Deepfake Fraud 28:01 — Reality Check: How Scared Should We Actually Be? 29:41 — Safe(r) Use of Public LLMs 32:08 — The Risk of Vendor Concentration 32:50 — Why Cyber Is Now a Board-Level Issue 33:49 — The MFA Fatigue Attack That Should Worry You 34:59 — Identity Compromise and the Enduring Email Threat 37:11 — Your Personal Security Checklist 39:12 — Wrap-Up and Key Takeaways Connect with Adam Explore VECTRA and Ensign Infosecurity Get the data behind the conversation - Ensign Infosecurity's Cyber Threat Landscape Report 2025 Catch every episode of Techburst Talks, including audio, video, carousels, shorts and more, all in one place - click here.