Description

In this episode, Raghu Nandakumara sits down with two heavyweights in cybersecurity: Dr. Anton Chuvakin (Google Cloud) and Erik Bloch (Illumio), for a candid, often funny, and occasionally sobering look at why detection and response keeps fighting the same battles it was fighting 20 years ago.

From the birth of SIEM and the coining of "EDR," to the short-lived reign of XDR, to today's AI hype cycle, Anton and Erik trace the full arc of the industry's evolution and interrogate why, despite decades of tooling investment, the fundamental outcomes haven't changed. 

Alert fatigue, signal-to-noise ratios, and the needle-in-the-haystack problem remain as stubborn as ever –and the slides security teams are building in 2025 look suspiciously like the ones from 2003.

Raghu, Anton, and Erik discuss:

• Why the SOC still largely runs on a 1990s operating model and what it would actually take to change that
• How compliance pulled SIEM away from detection for over a decade and why that hangover still lingers
• Why a handful of engineering-led organizations (Google, Netflix, a European bank) have cracked the code while nearly everyone else keeps applying band-aids
• The pharmaceutical industry analogy that explains why security startups keep building band-aids instead of solving root causes
• What MDRs are doing right and why enterprise SOCs have no incentive to learn from them
• Why AI is accelerating tooling but, for some organizations, actually slowing down the harder transformation work
• How securing AI is repeating the exact same mistakes made in the early days of cloud

Stay connected with our host Raghu on LinkedIn

For more information about Illumio, check out our website at illumio.com