AI as a Weapon, Target, and Enterprise Reality with CoreWeave’s Natasha Eastman

“What are these AI systems attached to that make them such a huge risk?” “Everything.” Today, the Adversary Universe podcast welcomes Natasha Eastman, head of threat intelligence at CoreWeave, to share her perspective on how AI is used in the modern enterprise, the infrastructure needed to support it, and how she sees adversaries both using and attacking it. AI hasn’t necessarily given adversaries wholly new capabilities, Natasha explains. It enables them to do things faster, more capably, and with a lower barrier to entry. AI is seen in phishing scams, recon, coding and tooling support, fraud, and language and persona operations. It’s allowing threat actors to refine their content and make phishing even harder to detect. When it comes to attacks on AI, supply chain compromise and identity targeting are top of mind. Depending on how agents are configured and who configured them, they can have a phenomenal amount of access to internal and external resources. An attacker who gains control of an employee or agent identity could have unrestricted access to company systems and resources without the right guardrails in place. Our hosts and guest agree: It’s the new insider risk. “Everyone’s infrastructure that has access to AI capability is a target,” Natasha says. Tune in to hear Adam, Cristian, and Natasha pool their observations on AI threats, share what concerns them most, and offer their advice on what makes a strong AI governance program.