In February 2025, Katelyn Halbert, market intelligence manager at deepfake-detection company Pindrop, noticed that an interviewee on a video call seemed a bit off. Their answers were not only vague, but delayed by a few seconds. While Halbert is no stranger to a nervous job candidate, she noticed the interviewee’s lip movements weren’t syncing to the audio—and that was enough to make her go straight to her team’s chief people officer and VP of research.

“That first moment, I was very taken aback and honestly intimidated,” Halbert told us.

Halbert’s candidate didn’t land the gig, but the interview made her realize that HR needs to be aware of the tech-aided tactics that fake IT candidates will employ during interviews. These days, finding the right person for the job—and a real person for the job—can require some collaboration between HR and cybersecurity teams.

How HR can help cyber teams, and vice versa.—BH

How many of your colleagues are actually familiar with your company’s AI usage policies? New data suggests your guess is as good as anyone’s.

According to IT Brew’s 2026 State of the Industry survey, 35% of IT pros have little to no confidence that employees using AI at their companies are aware of corporate AI usage and data security policies. Only 12% of professionals said they felt “very confident” about AI-using employees’ knowledge of relevant guidelines. (The survey drew responses from 241 IT pros.)

What a shocker. If that’s surprising, hold on to your seat: Other IT pros who spoke with IT Brew were unmoved by their peers’ self-doubt. For example, Xage Security CEO Duncan Greatwood said he suspects the proportion of companies whose employees aren’t schooled in their internal AI policies is much larger than the data might suggest.

Tips for engaging employees when rolling out internal AI policies.—BM

Like the aftermath of a day at the beach without any sunscreen, the worst part of a security incident isn’t the day it happens—it’s the days that follow.

That’s according to IANS faculty member George Gerchow, who was formerly a CSO at Sumo Logic when it went through a security incident in 2023 involving an intrusion of an AWS account.

“It is an emotional roller-coaster when it’s over because you’re just like, ‘Okay, now what happens?’” Gerchow said. “And then CISOs, let’s face it, they’ve been blamed for a lot of this activity over the last few years.”

Not your average Turkey Day. Gerchow, now CSO at Bedrock Data, sat down with IT Brew to discuss what it was like navigating the cloud-native SOC company through the event, which occurred just before Thanksgiving that year.

How Gerchow and his team sprung into action.—BM

AI-powered SaaS tools are multiplying faster than anyone can update the org chart. On June 10, join IT Brew and KPMG to learn how enterprises are securing, managing, and unifying sprawling AI ecosystems before “shadow IT” becomes the official operating model. Register here.

Is it ever too late to make a career change? One cyber professional doesn’t think so. Learn how Lucie Cardiet, who started out in sales and marketing became a cyber threat research manager at AI security company Vectra AI.