# Stop! AI Could Be Your Next Breach — Here’s Why

An episode of [AI Security, AI Cloud Ops & Infrastructure | ClearTech Loop](https://invisiblenetwork.ai/podcast/1823980617), 13 Aug 2025, 13 min.

Audio: https://www.buzzsprout.com/2248577/episodes/17662421-stop-ai-could-be-your-next-breach-here-s-why.mp3

Send us Fan Mail You think AI is protecting you. It might actually be helping hackers. V-CISO Danny Pastrana has seen it first-hand — AI tools deployed without guardrails can turn into a compliance nightmare, a data leak machine, and your fastest path to a breach. In this episode, Danny rips the lid off AI hype and shows you where the real danger lives — and how to keep it from wrecking your business. In This Episode: • The cyber insurance trap that could cost you millions • How hackers use AI to scale phishing and deepfakes • Why “human-in-the-loop” isn’t optional • The one mistake that turns AI from asset to liability Why You Should Listen: If your board is pushing for more AI without asking the right questions, this could be the most important 10 minutes you hear all year. Because AI won’t just make you faster — it’ll make your mistakes faster too. 🎧 Listen: In Buzzsprout Player ▶ Watch on YouTube: https://www.youtube.com/@ClearTechResearch/videos 📰 Subscribe to the Newsletter: https://www.linkedin.com/newsletters/7346174860760416256/

## Transcript

[0:07] SPEAKER_01: Hey everyone, thank you so much for joining ClearTech Loop.
[0:10] SPEAKER_01: I'm Joe Peterson.
[0:12] SPEAKER_01: I am the chief analyst at ClearTech Loop and wanted to uh let you know that we're going to be visiting today with Danny Pristrana, VCSO and CEO of CyberNet Security.
[0:23] SPEAKER_01: Hi, Danny.
[0:24] SPEAKER_00: Hi, how are you, Joe?
[0:27] SPEAKER_01: I'm doing great.
[0:28] SPEAKER_01: Thank you so much for taking some time to visit.
[0:31] SPEAKER_01: So, in case you guys are new to ClearTech Loop, we're a focus podcast series.
[0:35] SPEAKER_01: We're delivering sharp, real-time insights at the intersection of cybersecurity, cloud, and AI security.
[0:42] SPEAKER_01: And this session is part of a series of conversations with IT and security leaders that are navigating a new era of risk and responsibility.
[0:51] SPEAKER_01: But it's not just about protection.
[0:53] SPEAKER_01: We ask what they see on the horizon and how they're preparing for it through a three-question lens.
[0:59] SPEAKER_01: But before we dig in, I'd like Danny to take a minute and talk to us about his role at Cybernet Security and what he does as a V CSO.
[1:10] SPEAKER_00: Hi, Joe.
[1:11] SPEAKER_00: Thank you for inviting me.
[1:13] SPEAKER_00: Um yes, uh, I'm the president and founder of Cybernet Security in Puerto Rico.
[1:20] SPEAKER_00: We are a consulting firm providing uh cybersecurity consultant for different uh companies and agencies, mostly uh companies that are regulated and uh government entities that need to be in compliance with certain uh regulations.
[1:40] SPEAKER_00: So our primary focus is to provide cybersecurity consultant and uh enhance their security poster of those companies and government agencies.
[1:52] SPEAKER_01: That's great.
[1:52] SPEAKER_01: Thank you for sharing that.
[1:54] SPEAKER_01: So let's dig right into the questions.
[1:55] SPEAKER_01: I know you're a CISSP.
[1:57] SPEAKER_01: So talk to us about risk from a CISO's perspective.
[2:02] SPEAKER_01: How should you be thinking about cyber risk in terms of dollars and business impact?
[2:08] SPEAKER_00: That's a great question, yo.
[2:11] SPEAKER_00: Um as a CISO, you you need to establish certain controls and have the correct uh communication with this uh the other sea levels in a company.
[2:27] SPEAKER_00: You know, um, you need to evaluate the business impact that uh those cyber risks uh had.
[2:36] SPEAKER_00: You need to uh identify those cyber risks, you know.
[2:40] SPEAKER_00: You need to do the corresponding assessment and put in place uh their safeguards to minimize those impacts.
[2:52] SPEAKER_00: Most companies are regulated, so they need to be in compliance with HIPAA, GDBR, uh SOX, um to name a few, you know, and uh those cybersecurity risks uh they they they impact your corporate image, the your reputation.
[3:18] SPEAKER_00: Um the cost of cybersecurity insurance gets higher if you don't have uh the corresponding uh uh uh safeguards in place.
[3:31] SPEAKER_00: I I know companies that they call us and say, Yeah, you know, we want to have a cybersecurity insurance.
[3:39] SPEAKER_00: And when we do the assessment, those companies don't uh comply with all the regulations that needs to be put in place or the safeguard that needs to be put in place.
[3:52] SPEAKER_00: So as a cybersecurity, as a CISO, you need to have those uh to put in place those safeguards, be in compliance, analyze what the regulation will ask you to do, and also have the corresponding communication with the rest of the teams.
[4:10] SPEAKER_00: Uh the CEO, the CFO, the compliance people, lawyers, marketing, you need to gather all those people in a table and explain them all the risks that a company has.
[4:24] SPEAKER_00: You know, we we we know companies that after a cyber attack they go bankruptcy.
[4:30] SPEAKER_00: The stakeholders uh uh sue those companies, sue the CEO of the company, sue the CIOs of the company because they lie when they submit paperwork, when they submit the different uh uh documentation on the regulation.
[4:52] SPEAKER_00: When they as simple as fill out the cybersecurity insurance, they lie.
[4:57] SPEAKER_00: And when they ask for to be to receive as a compensation for a cybersecurity uh attack, the cybersecurity insurance deny those uh services.
[5:11] SPEAKER_00: So their reputation, the lowest market, the whole impact on the not only the cost, the the company, the cost, the customer that they serve, it's all affected.
[5:24] SPEAKER_01: You're right.
[5:25] SPEAKER_01: I mean, that's such a comprehensive answer.
[5:28] SPEAKER_01: And everything that you said there was absolutely correct.
[5:31] SPEAKER_01: And it's clear that it's from the point of view of a practitioner, right?
[5:34] SPEAKER_01: Someone who's seeing this.
[5:36] SPEAKER_01: And I think you nicely answered the second question that I had in the first one.
[5:41] SPEAKER_01: You nested it in there.
[5:42] SPEAKER_01: So I'm gonna go right on to the third question.
[5:45] SPEAKER_01: How should the CISO be thinking about AI adoption sort of from two sides, in terms of its use to secure emerging threats and also from an organizational governance perspective?
[5:59] SPEAKER_00: Well, I'm I'm working right now with uh a company that we are we are um trying to implement some AI uh security postures and also AI on the business line, analyzing the phone calls, analyzing the behavior of the clients, the customers, the employees on a phone call, but also we need to put in place safeguards.
[6:25] SPEAKER_00: You know, we need to put in place safeguards because we are dealing with HIPAA, we are dealing with PII, personal private information, personal identifier information, excuse me.
[6:38] SPEAKER_00: So we need to make sure that those uh tools that we are using in AI, they they have the safeguards in place.
[6:49] SPEAKER_00: Uh it's not as simple that we are going to have and put in place chat GPT and everything is going to be magically done.
[6:57] SPEAKER_00: It helps you.
[6:58] SPEAKER_00: It helps you.
[6:59] SPEAKER_00: You can you can enhance, you can uh you can uh minimize your workload, but also you need to be to take in consideration the hallucinations that those systems can can have.
[7:14] SPEAKER_00: You know, uh there are different uh uh ethical policies that need to be put in place.
[7:21] SPEAKER_00: No, it's not only the regulation of the uh of uh NIS that needs has uh an AI uh framework, security framework, now that they are working on that and they they uh publish a draft of the of that regulation, but also your internal AI poster, what tools are you going to do, what suppliers are uh or your business partner are using for AI, how they are using the AI, uh how do you can minimize the impact of what information employees can upload to the AI?
[8:04] SPEAKER_00: Because if you don't put a safeguard in a business, uh an employee from HR can upload the salaries of all the employees, and if you don't have the safeguard, all the employees can ask the AR tool what is the salary of the president, and they will find it, you know.
[8:24] SPEAKER_00: And if you publish that to tools that are publicly accessible, it's going to be worse.
[8:33] SPEAKER_00: So you need to put in place, you need to educate your employees on how uh you use tools.
[8:41] SPEAKER_00: Going back to cybersecurity, we need to put in place also save certain safeguards, for example.
[8:51] SPEAKER_00: Uh AI can help you identify the threats more rapidly, incident response better, you can have more visibility, you know, your your analysis time for incidents can be lower, but also you can have a lot of false positives because the tool doesn't learn as as a way that the human uh works.
[9:18] SPEAKER_00: So the human, the person, the uh they need to be there to make the corresponding analysis.
[9:28] SPEAKER_00: Uh AI is not going to uh to to um to put to eliminate people, you know.
[9:38] SPEAKER_00: People the uh people need to analyze how the AI tools works, you know, and AI it doesn't have the analysis, it doesn't have the comprehension of doing things.
[9:53] SPEAKER_00: Humans have the that knowledge.
[9:56] SPEAKER_00: AI is a robot, it's a tool that is going to do uh uh things, it doesn't make decisions.
[10:05] SPEAKER_00: You are the one who are going to make the decision for the AR tools.
[10:09] SPEAKER_00: So in cybersecurity, XDRs, MDRs, CM solutions that are doing or are implementing AR tools inside their system are great.
[10:24] SPEAKER_00: It helps you minimize the time, but the human factor, the human is the one who decides, who makes the decision how I'm going to uh resolve this problem.
[10:35] SPEAKER_00: Is this true?
[10:36] SPEAKER_00: Is this going to impact my company?
[10:40] SPEAKER_00: So those are the things that needs to be done.
[10:44] SPEAKER_00: One of the most concerns me is the AI in dark web.
[10:52] SPEAKER_00: Okay.
[10:55] SPEAKER_00: All the people say, you know, AI is working great, it's helping us, but the same way that we are using AI in XBRs, in CM solutions, in uh antivirus, uh analyzing locks, they are using the hackers, they are using the same tools to create more uh damaging malware, more damaging fishing attacks.
[11:26] SPEAKER_00: Uh they are using uh AI voices, AI videos, and every day they are getting better and better and better.
[11:39] SPEAKER_00: And we as a human, we need to know how to identify and how to put safeguard so we aren't we are not going to be victims of those attacks.
[11:51] SPEAKER_01: I think you made some really good points.
[11:54] SPEAKER_01: I keep hearing people um in cybersecurity talk about the importance of human in the loop, and you just addressed why that's important.
[12:03] SPEAKER_01: So thank you for sharing that and thank you for taking time to visit today.
[12:08] SPEAKER_00: Thank you, Joe.
[12:11] SPEAKER_01: If you like what we're doing and like what we have to say, subscribe.
[12:14] SPEAKER_01: We'd love to, you know, be in your inbox on a daily basis or weekly basis.
[12:20] SPEAKER_01: Thanks so much.

Shows are listed from Apple Podcasts' charts and directory, and Podcast Index where it is used. Every show and episode belongs to its publisher and plays from the publisher's own feed; this site hosts none of them.