Cyber Crime Junkies
Cyber Crime Junkies

The Siren Went Off. How AI Has Warned You with Expert Dan Elliott

October 15, 2026

AI Summary

5 min read

The Siren Went Off: How AI Has Already Warned You

Dan Elliott, a former Canadian national security intelligence officer now with Recorded Future, opens with a distinction that shapes the entire conversation: intelligence tradecraft is not about classifying threat actors by their labels—hacktivist, criminal, state-sponsored—but about understanding what they are trying to achieve and how hard they are willing to push. This goal-oriented lens, he argues, is what separates an intelligence mindset from a purely technical one. And it is precisely this mindset that organizations need now, because AI has already sounded the alarm. The question is whether anyone is listening.

The Real AI Threat Is Not What You Think

Continue reading the full summary in the app — free to try.

Read Full Summary →

Free • No credit card required

Listen to Audio Summary Open in App

What you'll learn

  • 1 (03:59) **Intelligence Tradecraft vs. IT Background** - Dan Elliott explains how his 15-20 years in national security intelligence shapes his view of cybercrime, focusing on threat actor goals rather than just their labels (e.g., hacktivist vs. state-sponsored).
  • 2 (09:08) **How Insider Threats Develop** - The conversation shifts to how trusted insiders, like the FBI spy Robert Hanssen, can become threats, using the "boiling frog" analogy for career progression.
  • 3 (14:32) **Field CISO Role & The AI Conversation** - Dan describes his job as a "field CISO" for Recorded Future, acting as a bridge between internal stakeholders and the external threat landscape, with AI dominating the conversation for the last six months.
  • 4 (16:39) **AI in Social Engineering: Voice Cloning & Deepfakes** - The host details how ransomware gangs now use AI for multi-tiered attacks, starting with voice cloning to impersonate IT support and steal credentials, bypassing security alerts.
  • 5 (19:57) **The CVE Problem: Why Patching is Broken** - Dan defines a CVE (Common Vulnerabilities and Exposures), explaining that of the ~45,000 published in 2025, only about 1% are actually exploited by threat actors.
  • 6 (22:10) **Shadow AI & The Danger of Connectors** - The discussion moves to the real risk for most businesses: employees using AI (even approved versions) without clear guardrails, creating vulnerabilities through APIs and tokens.
  • 7 (25:38) **Stolen Credentials & Pre-Authentication Breaches** - The host notes that credentials remain one of the most exploited assets, with AI helping attackers connect stolen passwords from unrelated sites to corporate logins.

+ Full timestamped outline available in the app

Show Notes

Joined by expert Dan Elliott. AI is your siren. It just showed up unexpectedly and criminals have taken advantage of it far faster than good defenders can get budget approvals passed. 


Chapters

  • 02:05 Intelligence tradecraft vs IT security: how the background changes the view
  • 05:30 Robert Hanssen, insider threat, and the castle wall that failed
  • 09:20 Dan's role at Recorded Future and what's dominating conversations in Asia Pacific
  • 11:25 AI-enabled ransomware: voice cloning, credential theft, and the three-stage attack
  • 13:00 How mature are threat actors actually using AI right now
  • 15:10 What a CVE is and why patching the criticals no longer works
  • 17:05 Shadow AI and how employee behavior opens doors you didn't know existed
  • 19:30 The Clue breach, API tokens, and keys handed out without a ledger
  • 21:20 Stolen credentials, credential stuffing, and why logging in beats breaking in
  • 23:10 Pre-authentication bypasses: getting in before the password prompt
  • 25:00 Who's liable when the AI agent goes rogue
  • 27:30 Old code, fast release cycles, and the car with a conditional brake failure
  • 29:45 The Pocket OS deletion, the Hugging Face test, and AI that wrote its own workflow
  • 33:00 Laws that exist but don't say AI, and the fox writing rules for the henhouse
  • 35:00 Why the wins from AI are boring and why that's the point
  • 37:20 Grok, token cost, and the consumption bill coming due in 2027
  • 39:05 Why uploading a 60-page PDF is a bad habit that will cost you
  • 41:20 Ambient AI, Cleveland Clinic, and attestation replacing note-taking
  • 44:15 OpenAI Dots, Meta glasses, and the device that never stops listening

Questions? Text our Studio direct. We read these and when helpful we give a special shout out for those to contact us.

True crime enters our homes and businesses daily. Learn from actual people who fight it daily and show you how in a thriller story. The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.

Special Author pricing (30% off)

Growth without Interruption. Get peace of mind. Stay Competitive-Get NetGain. Contact NetGain today at 844-777-6278 or reach out at [email protected] or find more at www.NETGAINIT.com  
 

Support the show

Want to Watch?

Subscribe and stop reading about it after it happens: https://www.youtube.com/@CyberCrimeJunkies?sub_confirmation=1

Hosted by David

Cyber Crime Junkies

More from this podcast

Cyber Crime Junkies →