Cybersecurity is entering a new era one shaped by autonomous AI attacks, machine speed defense and the looming impact of quantum computing.

In this episode, Francis Gorman speaks with Rik Ferguson, Vice President of Security Intelligence at Forescout, about why organisations must move from “assume breach” to “assume autonomy.” Rik explains the four conditions required for trusted autonomous defense: context, constraint, reversibility and transparency.

They also explore the risks of over-relying on AI in security operations, the importance of meaningful human oversight and why “harvest now, decrypt later” attacks make post-quantum readiness an urgent business priority.

Key Takeaways

AI is changing the operating model of cyberattacks.
The greatest shift is not simply that AI makes existing attacks faster. Autonomous systems may combine vulnerabilities and techniques in ways that do not reflect human logic or established attacker behaviour.

Defence cannot remain at human speed.
As attacks become increasingly automated, organisations will need defensive systems capable of detecting, containing and responding at machine speed.

Trust in autonomous security must be earned.
Rik identifies four essential conditions for trusted autonomy:

• Context: Decisions must reflect the asset, its dependencies, its business importance and the wider environment.
• Constraint: Autonomous actions must remain within clearly defined boundaries and guardrails.
• Reversibility: Defensive interventions must be capable of being rapidly undone when they cause unintended consequences.
• Transparency: Operators must understand why a decision was made, which data informed it and what the potential impact will be.

Human oversight must be meaningful.
Simply placing a person at the end of an automated process does not guarantee safety. Over-reliance on automation can reduce vigilance and leave people less capable of intervening when intervention matters most.

Paper we discussed during the episode: https://www.forescout.com/resources/wp-assume-autonomy/