Aug 22, 2026 · 36 min
AI compresses the cybersecurity response window
AI attacks now move in minutes, not weeks: N-Able's Robert Johnston on the SOC's AI reckoning
As AI accelerates both security operations and attacks, defenders face less time to investigate alerts, manage vulnerabilities, and decide who is accountable.
- 1AI can automate repetitive SOC tasks, reduce alert fatigue, and give analysts more context for investigations.
- 2MSPs are increasingly combining IT operations and security services as customers expect one integrated provider.
- 3AI-enabled attacks may reduce dwell time to minutes, making rapid response, telemetry, and vulnerability management essential.
Don't miss
Johnston identifies near-zero dwell time and faster vulnerability exploitation as the defining consequences of AI-enabled attacks.
The brief
Robert Johnston traces a path from the United States Marine Corps and U.S. Cyber Command to founding AdLumen and leading AI-driven security work at Enable.
Johnston argues that AI is moving beyond repetitive SOC tasks toward investigations built on broader context, helping analysts cut noise without losing meaningful detection opportunities.
The episode places that shift inside a larger MSP transformation: providers are adding security to IT operations as customers treat both services as one responsibility.
Johnston says attackers are using AI to compress dwell time and accelerate vulnerability discovery, forcing defenders to improve response speed, telemetry, and vulnerability management.
The conversation also tests the limits of AI security claims, from autonomous hacking demonstrations to private-sector hack back and the unresolved questions of agency and accountability.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.