
Hosted by John Coogan and Jordi Hays
Written by a model from the transcript; not yet reviewed.
This live episode from CrowdStrike's Fal.Con 2026 covers the major cybersecurity announcements and the shifting landscape of cyber threats in the age of generative AI. The hosts speak with George Kurtz, Michael Sentonas, Daniel Bernard, and Justin Boitano about the rise of agentic technology, the emergence of the post-nation-state 'agent state,' and the newly launched Safe Mine system developed in partnership with Nvidia. The discussion details how autonomous AI agents are increasing the velocity and sophistication of cyber attacks, leading to a new dynamic where defenders must utilize specialized frontier models and automated harnesses to protect enterprise networks.
Throughout the episode, the guests and hosts explore the economic and practical realities of deploying security at scale. They examine why open-weight models have democratized advanced hacking capabilities for malicious actors, and how defenders can leverage low-cost, domain-adapted models to maintain security without suffering from token shock. The conversation highlights the critical importance of deterministic security systems alongside AI-driven indicators of attack, emphasizing that while intelligence is becoming commoditized, contextualized execution and platform scalability are paramount for protecting critical infrastructure.
George Kurtz opens the show, summarizing CrowdStrike’s new Falcon Guardian AI agent and the Super Intelligence Cyber Lab, emphasizing AI-driven security.
Discussion of the new lab, partnership with Nvidia, and the creation of a red/blue harness that learns from each other to improve defender models.
Exploration of how attackers and defenders balance AI power with compute costs, the rise of the agent state, and the economic battle between attackers and defenders.
Kurtz and the host talk about leadership, customer‑first philosophy, and the challenges of scaling AI capabilities across teams.
Wrap‑up of the episode, teaser for the next guest Daniel Bernard, and a brief mention of upcoming topics.
The speakers discuss how public and private benchmarks guided the development of their AI model to outperform existing solutions in speed, cost, and effectiveness for cybersecurity.
They explain why the partnership with Nvidia and the use of the Nematron model were chosen over other open-source options, citing GPU expertise and cultural alignment.
The discussion covers how CrowdStrike can customize the open model with their own data to create tailored cyber intelligence and new business models.
They highlight ongoing research, such as the AVO harness, that improves model accuracy and showcases the value of open research sharing.
The speakers explore how enterprises can balance the new token-based cost model with performance, discussing open vs. frontier models and budgeting strategies.
They analyze the evolving attack surface, the need for low-cost, always-on AI defenders, and how technology can shift the balance in favor of defenders.
The conversation turns to Nvidia’s diversified chip fleet, rack-scale infrastructure, and how this supports efficient AI workloads across different models.
Introducing AIDR and Falcon Guardianinsight
George Kurtz introduces Falcon Guardian, a product designed to secure AI agents against the sophisticated, unpredictable behavior of what he describes as drunk interns on the network.
The Rise of Agentic Technologyinsight
The discussion highlights how generative AI agents have democratized advanced knowledge, creating a post-nation-state threat landscape where hacktivists and e-crime actors possess equivalent capabilities.
Defenders Lacking Model Accessdebate
George Kurtz points out the historical imbalance where frontier-caliber AI was available to test-passing agents for adversaries, but denied to defenders due to model refusals and guardrails.
Deterministic Security vs AIinsight
George Kurtz explains that while models are useful for sorting data and finding vulnerabilities, an in-line deterministic system is still required to stop a breach in its tracks.
Token Shock for Enterprisesdata
Michael Sentonas discusses how businesses entering 2026 are experiencing token shock, realizing they have spent thousands of extra dollars per employee on unmanaged AI costs.
Open Weight Model Dangersinsight
Michael Sentonas explains how adversaries benefit from open-weight models, allowing them to download and customize models internally to build malware without detection costs.
Protecting Critical Infrastructureinsight
The guests address the vulnerability of small businesses, hospitals, and local utilities that lack the resources of major corporations to defend against advanced cyber threats.
“First, we started with our Falcon Guardian product, which is in the category of AIDR.”
“They have access to data. They have access to compute, to networking resources. They do bad things because they're like a bunch of drunk interns that you put on your network.”
“Customers, for the first time, want to go faster somewhere, and they need security to go faster as opposed to a brake pedal. It's actually a gas pedal.”
“Super important, because we needed to be more performant than what's out there today.”
“We have a bunch of cyber researchers. And basically, what we're doing is we're constantly publishing where advancements are coming in the ecosystem or in these environments.”
“In ARC AGI 3, we could take a frontier model from 30% accuracy to 100% accuracy.”
“Safe Mind changes the curve. I think Frontier AI has disproportionately advantaged, well, one, everyone sees advantage.”
(00:03) - George Kurtz discusses CrowdStrike’s new AI security products, including Falcon Guardian and an agentic security platform developed with Nvidia. The CrowdStrike co-founder and CEO explains how AI is accelerating cyberattacks and defenses, emphasizing scalable threat detection, deterministic security, continuous red-team/blue-team learning, and responsible AI adoption. (20:31) - Michael Sentonas discusses his role as CrowdStrike’s president, overseeing go-to-market, product, engineering, research, and threat-hunting teams. He explains how AI is accelerating cyberattacks and social engineering, emphasizes collaboration among businesses and governments, and highlights CrowdStrike’s focus on customer security, innovation, and cost-efficient solutions. (41:53) - Daniel Bernard discusses his role as CrowdStrike’s chief business officer and the company’s close partnership with Nvidia. He highlights SafeMind, a cybersecurity AI platform built on Nemotron that uses specialized models and harnesses to provide faster, more affordable, always-on protection against evolving threats. Justin Boitano is Vice President of Enterprise AI at NVIDIA, where he leads the company’s enterprise accelerated computing and AI business, helping organizations deploy AI infrastructure, models, and agents at scale. He previously led marketing and business development at Frame, a cloud application platform acquired by Nutanix. TBPN is made possible by: Ramp - https://ramp.com Public - https://public.com Cisco - https://www.cisco.com Console - https://www.console.com CrowdStrike - https://www.crowdstrike.com Figma - https://www.figma.com MongoDB - https://www.mongodb.com NYSE - https://www.nyse.com Railway - https://railway.com Shopify - https://www.shopify.com Codex - http://openAI.com/codex Follow TBPN: https://TBPN.com https://x.com/tbpn https://open.spotify.com/show/2L6WMqY3GUPCGBD0dX6p00?si=674252d53acf4231 https://podcasts.apple.com/us/podcast/tbpn/id1772360235 https://www.youtube.com/@TBPNLive
12,615 words · 6 speakers
Speaker names marked are inferred from speaking time and the show’s known hosts — they are not voice-verified.
Page updated · transcript and summary are machine-generated