IT Brew // Morning Brew // Update

CYBERSECURITY

Getty Images

We asked, you answered.

In a recent IT Brew poll, we asked if you were concerned about the potential of LLMs like Claude Mythos Preview to enable cyberattackers to exploit vulnerabilities, and 66% of you said “yes.”

There’s a good reason for potential threats such as these models to be top-of-mind for IT pros, said Heath Mullins, chief evangelist at ExtraHop. New models can quickly analyze and interpret massive amounts of data, enabling attackers to infiltrate systems more easily.

But Mullins said he’s more worried about the one-third of IT Brew’s respondents who said they weren’t bothered by the potential for exploits.

“I don’t understand how you could not be concerned about something that has the ability to create such an impact upon not only your organization, but your day-to-day life,” Mullins told IT Brew.

What the experts said.—EH

Sponsored By Deel

Keep your teams in sync

Your team can’t effectively manage the employee lifecycle without the most up-to-date information from HR.

That’s why communicating with the HR side of your org is so important. Deel can help. They’ve got A Practical Guide to HR-IT Communication for Employee Lifecycle Execution—a guide that shows you where communication typically breaks down and how you can fix it.

Grab your copy to learn how to:

Cut down on off-boarding security risks.
Streamline global device management.
Stay compliant and audit-ready.

Give your IT leaders centralized control over your entire distributed workforce. All it takes is solid communication and some good ol’ teamwork.

Stay in the loop with HR.

CYBERSECURITY

Identify yourself!

Getty Images

When it comes to managing AI agents, it’s important to understand identity.

That’s what Avihay Nathan, SVP of product management for machine and AI agents identity security at Palo Alto Networks, told IT Brew in a recent interview. With companies increasing their use of agents across the tech stack, it’s important to keep track of what’s allowed where.

“We are in a place where agents are evolving every day, getting delegated to perform actions on behalf of users, instead of users with their own identities, with the identity of the human who invoked them,” Nathan said. “Identity security quickly becomes this area where you can look at the entire risk from AI agents and manage it just like you would do for any human in the organization.”

Because agents are often “privileged identities from day one,” Nathan continued, it’s important to securely manage credentials. The process could include conducting an audit to separate the actions of humans and agents to show who is taking which actions.

New company, who this?—EH

CYBERSECURITY

Shift to cybersecurity!

Lucie Cardiet

Is it ever too late to make a career change? One cyber professional doesn’t think so.

Lucie Cardiet, cyber threat research manager at AI security company Vectra AI, told IT Brew that she started out in sales and marketing. However, curiosity about cyberattackers eventually led to her current career in cybersecurity.

How it started. Cardiet’s background is in digital marketing, with a strong focus on web design and development. She spent a few years freelancing for the websites of small businesses and IT companies, and started working with Vectra AI in 2021 as a freelance web marketing consultant. She then joined the team full-time in 2022 as a marketing manager, before leaping to the cybersecurity team in 2024.

“When I joined Vectra AI, I cared about the technical health of the site, but the real mission was bringing in traffic,” Cardiet wrote in an email to IT Brew. “Trust is what makes that work, especially in cybersecurity, where the audience has zero patience for marketing language and is hunting for content that actually teaches them something.”

Pulling a switch.—CN

☕ Cybersecurity myth(o)s explained!