AI-enabled attacks are no longer theoretical—they’re here.

In this episode, Ryan O’Halloran of In Balance IT sits down with Shane Harsch of SentinelOne to break down the first large-scale AI-orchestrated cyber espionage campaign and what it means for today’s security leaders.

They explore how attackers are accelerating the kill chain through automation, why human-speed investigation is no longer viable, and the architectural shifts organizations must make to defend at machine speed. From identity blind spots to modular automation, Shane outlines the capabilities modern SOCs need to shorten response time, detect novel threats, and recover quickly.

What we cover:

• How AI is reshaping attacker tradecraft and shrinking dwell time
• Why machine-speed attacks force a rethinking of SOC workflows
• The critical role of identity visibility and anomaly detection
• Why automation is now essential—not optional—for defense
• How SentinelOne is approaching hyper-automation and AI-native security
• What leaders must do to prepare for attacks that outpace human response

If you're asking how to build automation, regain visibility, or harden identity in a world of AI-driven threats, this episode offers a clear path forward.

Learn more: In Balance IT → inbalanceit.com SentinelOne → sentinelone.com

In Episode 15 of The Balancing Act Podcast “Calling All APIs”, Ryan O'Halloran (VP of Security Strategy at In Balance) invites special guest Tim Erlin (VP of Product at Wallarm) to discuss the state of API security in the threat landscape and how incredibly important APIs are to generating business revenue. Ryan and Tim also cover the trends in protecting API’s and the relationship with AI that fits hand in glove.

In Episode 14 of The Balancing Act Podcast, Ryan O'Halloran (VP of Security Strategy at In Balance) and Michael Caplan (CTO at In Balance) discuss an overview of the latest developments on securing end users in the age of AI and contrasting the advantages and disadvantages of performing security operations either in a traditional cloud proxy network (SSE) versus natively inside of the end users web browser (Enterprise Browser), and how that leads to security outcomes the business desires.