tech
Risky Business is a weekly information security podcast featuring news and in-depth interviews with industry luminaries. Launched in February 2007, Risky Business is a must-listen digest for information security pros. With a running time of approximately 50-60 minutes, Risky Business is pacy; a security podcast without the waffle.
Damian Lukey, CEO of Nebulock, discussed the company's shift in focus from AI-driven threat hunting to a broader "context engine" approach. Initially, Nebulock leveraged agentic AI for hypothesis-based hunting, but customer feedback led to an expansion to include detection creation and validation directly within the platform.
Nebulock has developed a sophisticated data graph, described as a "context engine," to improve security operations. This graph allows agents to traverse relationships between identities, hosts, and service accounts, enabling more nuanced analysis of potential threats and user legitimacy.
Damian Lukey's background in EDR and MDR has informed Nebulock's mission to solve the fundamental problem of security breaches. He noted that existing tools, while good in their niches, often fail to provide a holistic view, leading to frustration and gaps in enterprise security.
Nebulock aims to complement existing security detection stacks, but ultimately desires to own that space. Damian Lukey acknowledged this is a long-term journey requiring trust and continuous improvement, rather than an immediate replacement of current investments.
Patrick Grey posited that security is fundamentally a data problem and questioned how to best structure that data for modern security needs, particularly for AI agents. Damian Lukey agreed, highlighting Nebulock's focus on building a graph-optimized data structure.
In recent developments, China has significantly narrowed the gap in AI vulnerability discovery and exploitation compared to the United States. Meanwhile, the US has lifted a ban on Fable, a company previously under scrutiny.