Après les fuites de données : comment enseigner les bons réflexes au plus grand nombre ?

Après les fuites de données : comment enseigner les bons réflexes au plus grand nombre ?

After data leaks: how to teach good reflexes to the greatest number?

🎙 RISKINTEL MEDIA 👥 206K 📅 September 7, 2026 ⏱ 36 min 👁 7 📄 expert opinion 🧭 2026-09-07
Available in: English (current) Français

Keywords

cybersecuritysocial engineeringAIsecurity awarenesshuman factor

Summary

In this interview, Arnaud Bia, international director at SFE, a cybersecurity awareness editor, and Steven Carrier, CEO of Berops, a red team company, discuss the human factor in cybersecurity, particularly in the context of data breaches and the rise of AI. They explore how AI, while not conscious, can be used both offensively and defensively, and emphasize that it currently serves as an accelerator for attackers and a tool for defenders, but does not replace human experts. The conversation delves into the concept of ‘weak signals’ in human behavior that attackers exploit, and the importance of collective intelligence and positive reinforcement in security awareness. They highlight common psychological biases used in social engineering, such as urgency and authority, drawing on Cialdini’s principles. The experts stress the need for a shift in mindset from blaming individuals to fostering a learning culture, and they discuss the potential future role of AI in cybersecurity, acknowledging that while AI may eventually replace some roles, human validation remains crucial for now.

166 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in the practical, experience-based insights from two professionals actively working in offensive and defensive cybersecurity. They provide concrete examples of how AI is used in attacks (e.g., personalized phishing) and defense (e.g., automating attack simulations), and they articulate the importance of understanding human psychology in security. The argumentation is coherent and balanced, acknowledging both the capabilities and limitations of AI. They avoid overhyping AI, clearly stating that current LLMs lack consciousness and understanding, and they emphasize the need for human oversight. The discussion on weak signals and the shift from blaming individuals to positive reinforcement is particularly valuable for security awareness programs.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate. The experts reference established concepts like Cialdini’s principles of persuasion, which are well-documented in psychology, but they do not provide specific studies or data to support their claims. The discussion is based on professional experience rather than formal research. The title accurately reflects the content, which focuses on teaching cybersecurity reflexes to a broad audience, particularly in the context of data breaches. The sources cited in the description are primarily promotional (newsletter, LinkedIn, official site) and do not include direct references to the discussed topics.

213 words

Title / Content Match

The title accurately reflects the content, which focuses on teaching cybersecurity reflexes to a broad audience, particularly in the context of data breaches.

Quality & Reliability

7/10

The discussion features two cybersecurity experts (a red team specialist and a security awareness editor) who provide practical insights grounded in professional experience. They reference established concepts like Cialdini's principles and acknowledge the limitations of AI, but the conversation is largely anecdotal and lacks formal citations or data.

Key Moments

Cited Sources

Concurring Sources

  • Cialdini's Principles — The experts reference Cialdini's work on persuasion, which is a standard framework in social engineering.

Contribution & Novelties

The interview provides a practical perspective on integrating AI into cybersecurity awareness and red teaming, emphasizing the human element. It highlights the shift from individual blame to positive reinforcement in security culture.

Pour aller plus loin :

75 words

Radar Profile

The radar profile shows a balanced score across all dimensions, with slightly higher scores in information quantity and quality, reflecting the expert-driven discussion. The technical level is moderate, suitable for a general audience interested in cybersecurity.

Reliability 7/10