Using AI to Build Cyber Resilience

Rubrik CEO Bipul Sinha believes that artificial intelligence is creating "one hundred times more opportunities," but with "one hundred times more risk" for cybersecurity clients. He joined Scarlet Fu and Norah Mulinda on 'Bloomberg Businessweek Daily' to discuss balancing AI innovation with data privacy.

See omnystudio.com/listener for privacy information.

Episode Transcript

Speaker 1 (00:02):
Bloomberg Audio Studios, Podcasts, radio News. You're listening to Bloomberg
Business Week with Carol Masser and Tim Steneveek on Bloomberg Radio.

Speaker 2 (00:14):
The CEO of rubrig, of course we know. This is
a cybersecurity and data management company that helps organizations protect,
back up and recover their data, especially after attacks like
ransomware people Sinha, of course, the CEO here want to
chat a little bit about what your company is doing
right now in this space. How are you using AI,
automation or data analytics to really stay ahead here?

Speaker 3 (00:39):
Thank you so much for the opportunity. Rubric is the
security and AI operations company. We help our customers recover from,
as you said, ransomware attack so that they can get
back into.

Speaker 4 (00:51):
The business without disruption.

Speaker 3 (00:53):
Our fundamental thesis is cyber attacks are inevitable and every
business has to have assumed reach, assume attack pressure, and
Rubrik helps them understand the risk of an attack and
how do you recover from an attack so that your
business is uninterrupted. And on the AI side, we are
also helping our customers accelerate their AI journey adopt more

(01:15):
of their agentic systems. One of the big concerns around
agents is. Agents can misbehave, they can hallucinate, or they
can get compromised by cyber actors. So we are giving
them a rewind button so that if agents take actions
that are not desirable, they can just press the rewind
button and undo the action of misbehaving agents.

Speaker 1 (01:36):
Beyond misbehaving agents, As more companies adopt or implement AI,
does that make them more vulnerable to attacks like ransomware?
Does that open up any vulnerabilities?

Speaker 3 (01:49):
Obviously, more AI adoption, more agentic adoption, actually creates a
larger surface area of cyber attack because you have more software.
But at the end of the day, AI is times
more opportunities and one hundred times more risk. On the
risk side, now, AI agents can do ten x more
damage in one tenth of the time. So business have

(02:10):
to have to have the confidence that they can deploy agents,
they can do AI transformation, create an AI enterprise, deploy
AI worker without the risk of AI.

Speaker 4 (02:21):
And that's what we are focused on.

Speaker 3 (02:22):
How do we reduce the risk and give our customers
more confidence to do the AI transformation.

Speaker 2 (02:28):
Well, you really underscored the idea that AI can be
an asset here or it can really cause some real damage.
So how are you thinking about balancing innovation with cybersecurity
and data privacy?

Speaker 3 (02:41):
Definitely, the AIS aim is to increase productivity, but on
the risk side, only the right data can go to
the right person on the right platform at the.

Speaker 4 (02:50):
Right time, and that is the organization's core.

Speaker 3 (02:53):
We are helping our customers understand the sensitivity of the data,
have integrity and availability of the data and the services,
and at the same time, if anything goes wrong, giving
them a rewind button so they are confident about deploying
AI in production, deploying agents to actually do real work.

Speaker 1 (03:13):
When you offer them a rewind button, does it rewind everything?
I mean, it raises all the issues that they want
to clean up or is there some residue that simply
can't be done away.

Speaker 3 (03:27):
We give them a rewind button to completely undo the
action of an agent, but it has to be done
surgically because you don't want to take good actions out.

Speaker 4 (03:35):
And that's what we do.

Speaker 3 (03:36):
We give them full visibility on what has happened and
the ability to surgically undo only undesirable changes.

Speaker 2 (03:43):
Interesting, how exactly does that work?

Speaker 3 (03:48):
What we do is we give them a platform where
we actually monitor all the changes by an agent and
connect that back into the cyber resiliency platform.

Speaker 4 (03:57):
The rubric has developed over the last ten twelve.

Speaker 3 (03:59):
Years so that you can connect the action to the
effect and then ability to undo the effects.

Speaker 1 (04:06):
I want to ask you about consolidation in your space.
In cybersecurity space, there's been a lot of talk that
this is a crowded space. There are a lot of
small companies, a lot of startups, and people have been
waiting for waves of consolidation for a while now. But
we have an administration that is much more open to
mergers and acquisitions than the previous administration. How do you

(04:28):
look at the landscape right now, the competitive landscape? Are
there too many players right now?

Speaker 3 (04:34):
Traditionally cybersecurity the way it evolved was it is focused
on prevention and detection of attacks, and there are hundreds
of vendors and tens of tools that average enterprise eighty
two hundred tools they buy to prevent and detect attacks.
That space is super crowded, too many vendors, too much fragmentation.
Is still a number of successful cyber attacks. We are

(04:55):
focused on the resiliency part of it, where we are
saying attacks will have Are you ready to withstand an
attack and keep your services up and running. So our
space is a new market, new segment in cybersecurity which
is rapidly growing, but the older cybersecurity segment around prevention
and detection has a lot of vendor. There has to
be consolidation because businesses can't deal with eighty tools from

(05:17):
hundreds of vendors and constantly juggling and having these disconnected systems.
So you see Pollow, Alternate Work, crowd Strike and others
are making big headways and creating platforms that can connect
all aspects of the infrastructure.

Speaker 4 (05:33):
Security around prevention and detection understood.

Speaker 1 (05:36):
So people I need to ask you, are you looking
to you? Are you are you canvassing the market and
looking to maybe add on to what your current capabilities offer.
Are you in the marketplace to are you a buyer potentially?

Speaker 3 (05:51):
Always we always look at our current roadmap and how
do we accelate this roadmap for our customers. Were always
looking for great team, great technology, great products to acquire
and accelate our roadmap. We have taken this approach of
organic and organic development and we want to holistically help
our customers do the AI transformation, create AI enterprise with confidence.

Speaker 1 (06:15):
All Right. I bring that up because Rubric did announce
a deal to buy Predabase back on June twenty fifth
for about half a billion dollars. All right, Biple Sinha,
thank you so much for joining us. Say Bipple is
CEO of Rubric, a cybersecurity firm and data management firm
as well.