We are at a critical turning point in data security, driven primarily by artificial intelligence (AI). My recent conversation with Jonathan Roizin, CEO of Flow Security\u2014now part of CrowdStrike\u2014has reinforced my belief that the cybersecurity industry urgently needs to reconsider its strategies for protecting data in this rapidly evolving digital landscape.<\/p>\n\n\n\n
Roizin has spent more than 15 years tackling cyber threats, both as a leader within elite Israeli cybersecurity organizations\u2014including Unit 8200 and Sygnia\u2014and as a founder at the forefront of innovation. His approach to data security, which prioritizes “data in motion,” underscores a reality we can no longer ignore: data no longer sits still. It flows dynamically across cloud services, SaaS platforms, and APIs, and this fluidity fundamentally changes how we must think about protecting it.<\/p>\n\n\n\n
The stakes are high. According to IBM’s 2023 Cost of a Data Breach report, the average cost of a single breach reached $4.45 million, marking an all-time high. The complexity of data management is accelerating: organizations today use an average of over 130 SaaS applications, a figure that has surged by nearly 18% annually over the past three years (Okta Business at Work Report, 2023). Yet, most companies still approach data security with outdated models that treat information as static and manageable within clear perimeters.<\/p>\n\n\n\n
Roizin highlighted a significant shift away from traditional Data Leakage Prevention (DLP) methods, which were primarily designed to lock down endpoints and internal networks. As he succinctly put it, “The boundaries have been broken.” With organizations migrating to public cloud environments\u2014like AWS, Google Cloud, and Microsoft Azure\u2014the idea of a defensible perimeter around data is increasingly obsolete. In fact, according to Gartner, by 2025, 85% of organizations will operate primarily in cloud-based environments, making traditional perimeter-focused data security approaches even less effective.<\/p>\n\n\n\n
The rise of AI further complicates this scenario. AI-powered productivity tools are flooding workplaces, from sophisticated coding assistants to real-time note-takers in meetings. Roizin described scenarios in which employees inadvertently shared sensitive data through unmonitored AI tools, dramatically increasing organizational vulnerability. A recent Team8 report validates this concern, showing AI-driven phishing attacks have increased by more than 2,000%, with nearly half leveraging GPT technology to generate authentic, persuasive communications.<\/p>\n\n\n\n
However, Roizin also presented a compelling vision of AI as a double-edged sword\u2014not only magnifying threats but providing powerful means to counteract them. Flow Security’s technology, for example, employs AI-driven automation to classify and monitor sensitive data flows continuously, providing real-time visibility and prevention that static or rule-based systems simply cannot match. It\u2019s an approach I deeply believe organizations must adopt swiftly.<\/p>\n\n\n\n