Varonis: AI's Impact on Data Security and Cyber Risk

Name: Varonis: AI's Impact on Data Security and Cyber Risk
Uploaded: 2026-06-25T20:31:09-04:00
Duration: 2 min 35 s
Description: AI is transforming how organizations work and how attackers operate, but it’s also introducing entirely new data security risks. In this montage, Varonis leaders break down how generative AI, agents, and copilots are changing the cybersecurity landscap...

Varonis

06/25/2026

0 (0%)

Report Like Favorite

Transcript

Since JAD-GPT got released, I mean, everybody rushed to AI. The potential gains from AI are outweighing the potential security risks, and it's like people have blinders on. AI has changed the way enterprises are thinking about data security. People are realizing that data security is what is foundational to using AI safely. They are giving confidential data to different LLM like Gemini and JAD-GPT. All the private data that you're giving to these AI is a kind of a goldmine. Organizations underestimate their AI risk when it comes to data. They often have no idea what these agents and tools like Copilot and JAD-GPT actually have access to. Most organizations don't necessarily know and understand the access parameters for every data source that AI is accessing, and so they don't really have true visibility into who has access to what. But when you've got agents acting on users' behalf or on their own accessing all these data sets all the time, it becomes another thing. If permissions are kind of left open, every user is going to have access to basically whatever they prompt for, and I think it's pretty dangerous. There's lots of ways that bad actors can use AI to help write the code that would create the malware. We have started seeing attacks where bad guys understand AI good enough that they can create attacks. They've developed entire pipelines using agentic AI. The regulations themselves are going to change drastically. More and more organizations are going to find themselves succumbing to, oh, I thought we were good. I didn't necessarily think that our particular AI system fell into this category, and then come to find out they actually do fall in within maybe the EU AI Act for high-risk systems. They don't know what they don't know, and it's introducing a lot of risk that they don't know how to measure, they don't know how to control for. AI is really good at collecting and analyzing data. Organizations can use AI to fight malicious AI. The attackers are adopting AI tools. This arms race will never end. Organizations need to rapidly adopt AI tools and automation to keep up with the attackers that are doing the same. The only way to measure and reduce risk and to minimize the time to detection and time to response for a threat is to use automated, smart systems to do it. That's where the value is for security teams right now.

TL;DR

Organizations are rushing to adopt AI tools like ChatGPT and Copilot without fully understanding the data security risks, often lacking visibility into what sensitive data these agents can access.
AI introduces new attack vectors as bad actors leverage AI to create sophisticated malware and exploit over-permissioned systems that grant AI agents broad access to confidential data.
An AI arms race is emerging between attackers and defenders, requiring security teams to rapidly adopt automated AI-powered tools to detect threats and respond at machine speed to stay ahead of malicious AI.

Summary

This montage from Varonis leaders examines how artificial intelligence is fundamentally reshaping cybersecurity and data protection. The discussion centers on the dual nature of AI adoption — while organizations rush to implement generative AI tools like ChatGPT and Copilot for productivity gains, they often underestimate the data security risks these technologies introduce. Varonis experts highlight critical blind spots including unknown data access patterns, over-permissioned systems, and the lack of visibility into what AI agents can actually access. The video addresses the growing threat of AI-powered malware, the evolving regulatory landscape including the EU AI Act, and the emerging arms race between malicious AI and defensive AI capabilities. The core message emphasizes that data security must be the foundation of safe AI adoption, and that organizations need automated, intelligent systems to measure risk, maintain visibility, and respond to threats at the speed AI demands. The experts stress that without proper controls and understanding of access parameters across data sources, AI tools become a potential goldmine for attackers accessing confidential information.

Chapters

0:00 - The AI Adoption Rush
0:27 - Data Security as AI Foundation
1:24 - AI-Powered Threats Emerge
2:05 - Fighting AI with AI

Key Quotes

0:14 "The potential gains from AI are outweighing the potential security risks, and it's like people have blinders on."
0:27 "People are realizing that data security is what is foundational to using AI safely."
1:15 "If permissions are kind of left open, every user is going to have access to basically whatever they prompt for, and I think it's pretty dangerous."

FAQ

Why do organizations underestimate AI security risks?

Organizations often have blinders on because the potential productivity gains from AI outweigh perceived security risks in their minds. They frequently don't understand what AI agents and tools like Copilot actually have access to, and lack visibility into access parameters across their data sources, creating unknown risk they can't measure or control.

How can organizations defend against AI-powered attacks?

Organizations need to fight AI with AI by rapidly adopting automated, intelligent security systems that can analyze data, detect threats, and respond at machine speed. The only way to minimize time to detection and response is through smart, automated systems, as manual approaches cannot keep pace with the evolving AI threat landscape.

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

11/10/2026

01:00 PM

11/10/2026

Zendesk: From AI Readiness to Results: A Framework for Transforming IT Service

https://www.truthinit.com/index.php/channel/2191/zendesk-from-ai-readiness-to-results-a-framework-for-transforming-it-service/
11/10/2026

01:00 PM

11/10/2026

Agentic Shopping Trends: Insights for the 2026 Holiday Season

https://www.truthinit.com/index.php/channel/2219/agentic-shopping-trends-insights-for-the-2026-holiday-season/
11/12/2026

01:00 PM

11/12/2026

Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
11/12/2026

01:00 PM

11/12/2026

Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor (Americas)

https://www.truthinit.com/index.php/channel/2202/practical-session-connecting-on-prem-data-to-databricks-via-minio-aistor-americas/
11/18/2026

08:00 AM

11/18/2026

Hands-On Workshop: Connecting On-Prem Data to Databricks via MinIO AIStor (International)

https://www.truthinit.com/index.php/channel/2194/hands-on-workshop-connecting-on-prem-data-to-databricks-via-minio-aistor-international/
11/19/2026

01:00 PM

11/19/2026

Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
11/19/2026

01:00 PM

11/19/2026

Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
11/19/2026

01:00 PM

11/19/2026

A Deep Dive into Muse, Dots, and Duet's Impact on Your Website

https://www.truthinit.com/index.php/channel/2228/a-deep-dive-into-muse-dots-and-duets-impact-on-your-website/
12/03/2026

01:00 PM

12/03/2026

CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
01/19/2027

02:00 PM

01/19/2027

HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
03/18/2027

01:00 PM

03/18/2027

360View: Securing Access for People, Partners and AI Agents

https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
06/17/2027

01:00 PM

06/17/2027

360View: Stop the Leak: Data Loss Prevention for the AI Era

https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
08/19/2027

01:00 PM

08/19/2027

Who Has Access to What...and Should They?

https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
10/21/2027

01:00 PM

10/21/2027

After VMware: Building the Private Cloud You Actually Want

https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
11/18/2027

01:00 PM

11/18/2027

Assume Breach, Prove Recovery

https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
12/16/2027

01:00 PM

12/16/2027

The Self-Running Service Desk

https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/