Summary
In this Okta Executive Exchange interview, Thoughtworks CISO Nitin Raina discusses the rapidly evolving landscape of AI-powered social engineering attacks and deepfakes. Raina explains how threat actors are leveraging artificial intelligence to create sophisticated deception campaigns, including CEO impersonations, fake interviews, and voice cloning attacks delivered across multiple channels like email, WhatsApp, and SMS. He emphasizes that employees serve as the first line of defense and outlines a comprehensive security strategy that combines employee training, phishing-resistant MFA, email security tools, and Zero Trust architecture. Raina also addresses how advanced cybercrime groups like Scattered Spider are bypassing traditional MFA through SIM swapping and man-in-the-middle attacks, requiring organizations to deploy passwordless solutions and strengthen threat detection capabilities. The conversation concludes with Raina's advice for CISOs to position themselves as business enablers who partner closely with functional leaders to balance security with organizational agility.
