The Human Vulnerability Gap: AI, Social Engineering, and Your Risk Profile | Resilience Risk Briefing
Learn how AI is changing social engineering, where defenses are failing, and what lower-exposure organizations do differently.
Why AI-driven social engineering is outpacing today’s controls
Social engineering has always been one of the most reliable ways into an organization. AI has made it faster, more convincing, and cheaper to run at scale, and the controls most teams rely on weren’t built for this version of the threat.
This fireside chat covers how these attacks are being constructed now, where detection breaks down, and what organizations with lower exposure are doing differently, from threat mechanics to what incidents actually cost.
Judson Dressler, Director of Resilience’s Risk Operations Center, is joined by Rob T. Lee, Chief AI Officer and Chief of Research at the SANS Institute, to close with specific, prioritized steps security teams can implement.
About Speakers
Rob T. Lee
Chief AI Officer and Chief of Research at the SANS Institute
Rob T. Lee is Chief AI Officer and Chief of Research at the SANS Institute, where he advises boards, CISOs, and government leaders on AI governance, deployment, and defense. Lee recently authored the SANS Secure AI Blueprint, introducing a three-pillar model of Protect, Utilize, and Govern, and led the development of the SANS Critical AI Security Guidelines. His forthcoming white paper, “From Asymmetry to Parity: Building a Safe Harbor for AI-Driven Cyber Defense,” addresses emerging challenges in AI-driven cyber defense.
Lee previously served as a U.S. Air Force officer and founding member of the first information warfare unit, where he helped build national-level cyber operations. He later served with the NSA and CIA before joining Mandiant as Director of Threat Intelligence and Threat Hunting, where he co-authored the first M-Trends report. He also serves as a FISA Court Technical Advisor on emerging threats.
Lee coined the terms DFIR (digital forensics and incident response) and CTI (cyber threat intelligence), pioneered timeline analysis, and created the SIFT Workstation, an open-source forensic platform used globally in critical investigations. He has authored flagship SANS courses in forensics, threat hunting, and intelligence, co-developed GIAC certifications now used worldwide, and has trained more than 100,000 security professionals.
Judson “Jud” Dressler
Director of the Risk Operations Center, Resilience
Judson Dressler is the Director of the Risk Operations Center. Dressler recently joined Resilience after serving 20 years in the U.S. Air Force. He was previously the Permanent Professor and Head of the Department of Computer and Cyber Sciences at the United States Air Force Academy, where he taught more than 1,200 cadets each year and conducted long-term artificial intelligence and cybersecurity research.
He served as the Commander of the 835th Cyberspace Operations Squadron, where he led 134 cyber airmen to conduct threat-focused, intelligence-driven defensive cyberspace operations. Dressler holds a PhD in Computer Science from Rice University and a Master’s in Computer Science from the U.S. Air Force Institute of Technology.
Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.