Dawn Song: When AI Becomes the Hacker and the Defender

Allie Mellen, cybersecurity analyst and author, joins Ann on this week’s episode of Afternoon Cyber Tea to discuss her new book Code War: How Nations Hack, Spy, and Shape the Digital Battlefield. Allie explores how cyber conflict is deeply connected to geopolitics, history, and national strategy, arguing that cyberattacks are not mysterious acts of chaos, but tools used by governments to pursue economic, military, and political goals. The conversation unpacks common misconceptions about nation-state cyber threats, why organizations of all sizes can become collateral damage in global conflicts, and how leaders should think about cyber risk in an era of increasing geopolitical tension.     Resources:  View Allie Mellen on LinkedIn    View Ann Johnson on LinkedIn     Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks           Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Cybersecurity leader and author George Finney joins Ann on this week’s episode of Afternoon Cyber Tea to explore how trust, communication, and culture shape effective security leadership. Drawing on his experience in higher education and enterprise environments, George explains why Zero Trust succeeds or fails based on people not technology, and how CISOs can better communicate risk to executives and boards. The conversation also dives into AI governance, relatable storytelling as a leadership tool, and why making cybersecurity approachable is essential for building resilient organizations.  Resources:  View George Finney on LinkedIn   View Ann Johnson on LinkedIn   Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks         Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Dawn Song, Professor of Computer Science at UC Berkeley, joins Ann on this week’s episode of Afternoon Cyber Tea to explore how AI is rapidly reshaping the threat landscape. Dawn shares research from projects like Cyber Gym, demonstrating how frontier AI models are increasingly capable of identifying vulnerabilities, including zero-day exploits and generating proof-of-concept attacks, while also helping defenders automate patching and strengthen resilience.   The conversation examines adversarial AI, agentic systems, data privacy risks, and the need for science and evidence-based AI policy. Dawn closes with an optimistic vision for the future: using AI-driven formal verification to build provably secure systems and move beyond the traditional cat-and-mouse security model.  Resources:  View Dawn Song on LinkedIn    View Ann Johnson on LinkedIn   Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks           Discover and follow other Microsoft podcasts at microsoft.com/podcasts         Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Rob Suárez, Vice President and Chief Information Security Officer at CareFirst BlueCross BlueShield joins Ann on this week’s episode of Afternoon Cyber Tea. In the conversation, Rob shares how his career path and personal philosophy have shaped a mission-driven approach to cybersecurity that places patient trust, safety, and privacy at the center of every decision. He discusses the unique challenges of securing a deeply interconnected healthcare ecosystem, the critical role of culture and cyber literacy across organizations, and why transparency and resilience are essential during incidents. The episode also explores secure-by-design principles, the ethical use of AI in healthcare, and how the CISO role is evolving toward a broader focus on trust, collaboration, and human impact.     Resources:  View Rob Suárez on LinkedIn    View Ann Johnson on LinkedIn     Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks            Discover and follow other Microsoft podcasts at microsoft.com/podcasts       Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

David Gee, a veteran CISO, CIO, board advisor, and author, joins Ann Johnson, CVP of Cybersecurity, Microsoft, on this week’s episode of Afternoon Cyber Tea. Drawing on decades of experience and insights from his books, Gee explores the gap between theory and reality for security leaders, the role of imposter syndrome in professional growth, and why embracing discomfort is essential to effective leadership. The conversation examines how CISOs can balance risk management with business enablement, reset expectations with boards and executives, and build resilient, team-driven security cultures. Gee also shares perspectives on mentorship, long-term sustainability in the role, and how the CISO must evolve from a control-focused operator to a strategic influencer in an era shaped by AI, regulation, and constant change.    Resources:  View David Gee on LinkedIn  View Ann Johnson on LinkedIn     Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks           Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

On this special best of episode of Afternoon Cyber Tea, Ann revisits six standout conversations from the past year with Amy Edmondson, Christina Morillo, Frank X. Shaw, Hugh Thompson, Troy Hunt, and Jack Rhysider. Together, these moments highlight the evolving human and technical challenges shaping cybersecurity today, from trust and transparency to breach response, leadership under pressure, AI disruption, and the realities facing defenders on the front lines. This curated collection offers a fast-moving look at the insights, lessons, and big ideas that defined the season.    Resources:   View Ann Johnson on LinkedIn       Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks            Discover and follow other Microsoft podcasts at microsoft.com/podcasts         Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Dr. Lorrie Cranor, Director of the CyLab Security and Privacy Institute at Carnegie Mellon University joins Ann Johnson, Corporate Vice President, Microsoft, on this week's episode of Afternoon Cyber Tea to discuss the critical gap between security design and real-world usability. They explore why security tools often fail users, the ongoing challenges with passwords and password less authentication, and how privacy expectations have evolved in an era of constant data collection. Dr. Cranor emphasizes the importance of user-centered design, practical research, behavioral insights, and simpler, more transparent systems to help CISOs build security programs that truly work for people.    Resources:   View Lorrie Cranor on LinkedIn             View Ann Johnson on LinkedIn       Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks   Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Troy Hunt, founder of Have I Been Pwned, joins Ann on this week's episode of Afternoon Cyber Tea to explore what billions of breached records reveal about attacker behavior, human weakness, and the state of breach disclosure. He explains why organizations often hesitate to notify victims, how breach fatigue shapes user responses, and why transparency is both powerful and challenging. Troy also shares how he personally fell for a phishing attack, illustrating that even experts have moments of vulnerability. The conversation points toward a more resilient future and what it will take for both people and organizations to stay ahead of evolving threats.    Resources:   View Troy Hunt on LinkedIn  View Ann Johnson on LinkedIn     Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks           Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Brad L. Mortensen, President of Weber State University joins Ann on this week's episode of Afternoon Cyber Tea to discuss the evolving role of higher education in preparing the future cybersecurity workforce. Brad shares how Weber State supports students from all backgrounds through open enrollment, stackable credentials, real-world learning partnerships, and a focus on both technical training and durable human skills like communication, resilience, and problem solving. He talks about the rise of AI in the classroom, the importance of industry collaboration, and why fostering adaptability and creativity is essential to meeting growing cyber talent demands.     Resources:   View Brad L. Mortensen on LinkedIn    View Ann Johnson on LinkedIn       Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks           Discover and follow other Microsoft podcasts at microsoft.com/podcasts      Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of N2K media network.

Amy Hogan-Burney, Corporate Vice President of Customer Trust and Security at Microsoft joins Ann on this week's episode of Afternoon Cyber Tea to discuss her unexpected journey into cybersecurity, Microsoft’s evolving approach to combating global cybercrime, and the importance of collaboration across the private and public sectors. She reflects on lessons from the latest Microsoft Digital Defense Report, the growing impact of AI on security, and the challenges of regulatory complexity. Amy also shares insights on cyber diplomacy, building strong legal-technical partnerships, and the career advice that’s guided her path all while remaining optimistic about the future of cybersecurity.     Resources:   View Amy Hogan-Burney on LinkedIn     View Ann Johnson on LinkedIn        Related Microsoft Podcasts:   Microsoft Threat Intelligence Podcast   The BlueHat Podcast    Uncovering Hidden Risks            Discover and follow other Microsoft podcasts at microsoft.com/podcasts       Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of N2K media network.