Battling cyber attacks and deepfakes with AI (with Darktrace's Poppy Gustafsson) | Masters of Scale
Cyber war is raging, and the culprit is AI. Poppy Gustafsson, CEO of cybersecurity firm Darktrace shares new, proprietary info ...
Cofounder, Darktrace
Search every verified Poppy Gustafsson interview, podcast appearance, and on-the-record quote — each transcript cross-checked by AI and human review to confirm speaker identity. Poppy Gustafsson, co-founder and former CEO of Darktrace, has spoken extensively about the evolving cyber threat landscape and the role of artificial intelligence in both attack and defense. In a December 2024 interview, she described novel threats as "the new normal" and argued that AI is a powerful tool for defenders because cybersecurity is "nuanced and evolving" and a "natural home to be able to use AI." She noted that attackers are also innovating, pointing to a rise in "as-a-service" tools like ransomware-as-a-service, and cited a case where a finance worker in Hong Kong was scammed out of about $25 million by a deepfake video call. Gustafsson emphasized that Darktrace's approach is to learn an organization's "unique digital fingerprint" to detect novel attacks without relying on prior threat updates, and that the company's focus has shifted from reactive to proactive defense. Gustafsson has also commented on the challenges of AI regulation and geopolitical cyber risks. In a 2023 panel, she expressed concern that regulation might only address "yesterday's world" given the pace of technological change, and argued that organized criminal gangs operating like businesses on the dark web would not be deterred by compliance rules. Regarding Russia's cyber capabilities, she noted in 2022 that Russia has a "very powerful cyber offensive capability" capable of real-world impact, citing the 2016 attack on Ukraine's power grid. She also observed that during heightened tensions, criminal groups may use geopolitical conflicts as camouflage for their activities. On leadership, Gustafsson has said that experience can be overrated, recounting how a young graduate at Darktrace suggested reducing a three-month sales cycle to three weeks, which cut the cycle by two-thirds.
“Innovation isn't something that's just available to the good guys — the bad guys are innovating and evolving constantly; we're seeing a huge rise in 'as-a-service' tools, ransomware-as-a-service and malware-as-a-service, it's like a commercial ecosystem around cyber attacks.”
“Let's take as known that novel threats are the new normal — we're always going to be facing an attack we don't anticipate, and AI is a really powerful tool in that; yes AI can be leveraged by attackers as well, but cyber security is nuanced and self-learning, which makes it a natural home for AI.”
“There was a big pipeline breach in the US where attackers even sent an apology saying they'd do better diligence about what they hack next — it revealed that this is big business on the other side of the dark web and, alarmingly, that some criminal groups behave like commercial enterprises.”
“We saw a finance worker in Hong Kong scammed out of about $25 million by a video call with someone posing as their CFO — the advent of tools like ChatGPT and generative AI makes phishing and deepfakes far more convincing.”
“One of the things we try to look for is the outcome rather than motive — attackers often create urgency to force a quick response, so you should focus on whether the behavior being driven by a communication is unusual or risky.”
“Cyber threat arises wherever we mix people and technologies — the gap between them is what an attacker tries to exploit, so solving cyber risk means addressing that human-technology interface.”
“Instead of studying the threat landscape, we observe the daily ebb and flow of digital activity to learn an organization's unique digital fingerprint — once you know that, you can spot when things change and detect novel attacks without a prior update.”
“Our business evolved from reactive (alarm bells) to active (autonomously stopping attacks) and now to proactive — using the unique understanding of an organization to harden its crown jewels and reduce future risk.”
“If we do our job right, no one knows we've been there — technology users (for example doctors and nurses in a neonatal unit) should be able to take tech for granted while security quietly protects them.”
“Attackers intentionally exploit human vulnerabilities to shape behavior and influence perceptions — that translates into information operations and influence campaigns, and if voting systems are compromised it's often via human interfaces rather than purely technical hacks.”
“We sometimes fall into the trap of thinking AI is a looming futuristic threat, but actually we're already using AI daily—translating and mapping tools—and many people are gaining huge opportunities and benefits from it; I'm in cybersecurity so I see it being used for bad, but I'm incredibly excited about its future.”
“When we started Darktrace a decade ago I never in a million years predicted that employees would knowingly upload vast quantities of their own corporate data into a third‑party open‑source AI platform; it's not really about wholly predicting the risk, it's about how you build resilience when that risk isn't always fore...”
“The big at‑scale bad actors tend to be organized criminal gangs operating like big businesses on the other side of the dark web — they've got graphics, marketing and payroll teams and they won't be responding to regulation; they'll use the technology wherever they can to make money.”
“The opportunity is still overwhelmingly huge when it comes to defending organisations: AI is one of the most singularly powerful tools that allows businesses to get on the front foot in what otherwise would be an AI versus AI attacker‑versus‑defender fight.”
“Tools like ChatGPT are fantastic ways for consumers to have a go and experience AI for themselves; I would encourage consumer‑facing experiences because consumer understanding will cascade into enterprise adoption.”
Cyber war is raging, and the culprit is AI. Poppy Gustafsson, CEO of cybersecurity firm Darktrace shares new, proprietary info ...
What are the problems that AI can be used to tackle in Britain and what guardrails need to be put in place to address risks?
When it comes to putting together a great team, experience is often high on the list of things you're looking for. But should it be? Poppy Gustafsson, CEO of cybersecurity company Darktrace, believes that experience can be an overrated quality. "In the earliest days at Darktrace, we were brainstorming about how to reduce the length of our sales cycle. In those days, we were running a three month proof of value because that's what the rest of the industry did," Poppy Gustafsson explained to CNBC Make It. "It took the young graduate in the room had been working with us at that point for less…
Poppy Gustafsson, the founder of Darktrace, recently sat down with Aaron Johnston, Director of FI Cambridge, to discuss startup ...
Darktrace CEO Poppy Gustafsson spoke at the Bloomberg Technology Summit in London on Wednesday about AI regulation and ...
By 2024, cybercriminals are projected to cost the global economy more than $6 trillion annually. Perhaps nowhere more ...
We spoke to Poppy Gustafsson OBE, CEO, Darktrace ahead of London Tech Week 2022 (13-17th June 2022), to discuss the ...
Poppy Gustafsson, CEO of Darktrace, argues that Russia's cyber-offensive skills can have real political and business impacts, but ...
Hot off the back of a £5.4bn IPO, Matthew Moulding, Co-Founder & CEO, THG, is joined by the formidable Poppy Gustafsson, Co-Founder & CEO, Darktrace and Balderton Capital’s Managing Partner, Bernard Liautaud to discuss the path to scaling globally. The discussion touches on the journey of these renowned founders and their take on going public, led by Murray Roos, Group Director Capital Markets at London Stock Exchange Group. Sign-up to join the next FF Live discussion - https://bit.ly/2xTmeyP About Founders Forum Live: Through this new series fuelled by founders, FF Live is a platform f…
Ed chats with Poppy Gustafsson OBE, the CEO of Darktrace – a UK unicorn worth almost $2 billion, and ranked Europe’s ninth fastest-growing European company according to the Financial Times. Their AI-driven solution ‘inoculates’ companies’ systems against cyber threats, be they bad actors peddling malware or unintended data breaches brought about by human error. This crucial conversation was full of insight from one of Europe’s top executives. - Follow us to stay up to date on the latest from Kindred Media Twitter: / kindredcast LinkedIn: / kindredmedia Instagram: / kindredmediahq
Sign in to search the full transcript archive, filter by topic, and access every quote from Poppy Gustafsson.
The summary and quote tags on this profile are produced with AI assistance from verified, first-person interview transcripts, then checked by our team to confirm the speaker's identity and the accuracy of every quote. See how we verify →