GenAI has industrialized social engineering. The human entry point is now automated, personalized, and scalable, and that changes how security leaders must defend. 

In this #shifthappens episode, Andrew Carr, Managing Director and Global Head of Threat Management for Booz Allen Hamilton's Commercial Incident Response team, joins AvePoint Chief Brand Officer Dux Raymond Sy and AvePoint Chief Risk, Privacy, and Information Security Officer Dana Simberkoff to unpack what's genuinely new about AI-driven attacks — and what organizations need to do about it.  

Drawing on frontline incident response across healthcare, financial services, manufacturing, and more, Andrew explains why attackers no longer need to compromise systems to extract millions, why built-in trust is now a liability, and why the fundamentals that have been ignored for too long – zero trust, data classification, least privilege – are exactly what this moment demands. He also breaks down how AI should be used in defense: not as autopilot, but as a human-augmented layer that triages, prioritizes, and buys decision-makers the time they no longer have.