Organizations often place excessive faith in firewalls and perimeter security, assuming their internal environment is safe. This overlooks the fact that once a breach occurs, sensitive data is exposed. The critical question isn't just preventing entry, but protecting data once an attacker is already inside the "secure" environment.

AI agents, optimized for task completion, lack the implicit understanding of security protocols that humans possess. This focus on outcomes can lead them to make mistakes like exposing code or sensitive internal data, creating a new class of insider risk.

A company's biggest security threat isn't a hacker scanning for open ports, but a compromised internal account or a malicious insider. This shifts the security focus to rigorous hiring practices, including background checks and reference calls, to prevent bad actors from gaining access from within.

Recruiting a highly influential but inaccessible figure is impractical. An effective intelligence strategy is to target individuals in their close circle who have access to the desired information but are far more manageable as sources.

A company's biggest human security flaw often lies with its help desk. CrowdStrike's CEO points out that help desk staff are typically incentivized to resolve issues and close tickets as quickly as possible. This makes them susceptible to social engineering, as their motivation is speed and helpfulness, not rigorous security verification.

Beyond official agreements for data access, governments recruit insiders within tech firms. They create informal channels by exploiting personal vulnerabilities, such as offering medical treatment for a family member in exchange for cooperation.

With digital footprints making simple cover stories obsolete, intelligence agencies now build entire, fully-funded companies to create a plausible pretext for an agent to interact with a high-value target. This provides sophisticated 'cover for action.'

CrowdStrike is seeing a rise in state-sponsored actors successfully passing job interviews to become remote employees. They are then shipped a company laptop, giving them complete, trusted access inside the corporate network, bypassing all perimeter defenses.

As AI tools for both cyber offense and defense improve, the technical advantage may go to defenders with more compute and better models. However, humans will continue to be the weakest link, vulnerable to social engineering attacks that bypass technical defenses.