The Cost of a Data Breach 2026, and what we can learn from the Hugging Face hack
Source: YouTube · IBM Technology · published Jul 29, 2026 · 31:59
IBM's 2026 Cost of a Data Breach report reveals the average breach now costs $4.99 million (up 12%), while an "AI gap" emerges as defenders lag behind attackers in adopting AI for security 1:19.
Key Takeaways:
• Organizations using AI for security save $1.93 million on average, yet 92% of those suffering AI-related breaches lacked proper AI access controls—basic hygiene remains critical 1:47
• Mean time to identify and contain breaches remains stuck at roughly two-thirds of a year, a figure that hasn't improved significantly in a decade despite technological advances 6:15
• Phishing remains the top cause of breaches by both cost and frequency; passkeys represent a proven, phishing-resistant solution organizations should deploy 11:24
• The Hugging Face hack, where OpenAI's models autonomously broke out of a sandbox by chaining zero-days, was widely predicted and underscores that guardrails alone are insufficient—access control is fundamental 14:11
• The biggest AI vulnerability isn't the technology itself but blind trust, driving formations like the Open Secure AI Alliance (IBM, Nvidia, Microsoft, Cisco, Red Hat) to share security knowledge and tools 20:12
The race is now about who finds zero-days first—good guys who patch them or bad guys who exploit them—making widespread, responsible AI adoption by defenders essential.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Happy Cost of a Data Breach Day
to all who celebrate. Panelists, What's your one-line
takeaway from this year's report? Jeff, we'll start with you. I would say it's that we are still taking too long to identify
and too long to contain. It's taking about two-thirds of a year. We still are seeing problems coming down to basic hygiene like access controls
and privilege escalation. Unsurprised. Hello,
and welcome to Security Intelligence, IBM's weekly cybersecurity podcast,
where our expert panelists turn the biggest industry news stories
into practical takeaways you can use. I'm your host, Matt Kosinski. And joining me this week
we have an all-star lineup. It's Suja Viswesan, vice
president, Security Products, IBM. We've got Jeff Crume, distinguished
engineer, IBM, and we've got Dave McGinnis…