AI gets real, quantum gets urgent, and clarity cuts through the noise

Six episodes, one quarter, a recurring theme you couldn’t miss: the AI era has stopped being a forecast and become the operating environment. Quantum’s gone from “eventual” to “get going.” And underneath it all, the foundations kept reasserting themselves; identity, visibility, clarity.

Here’s what the first part of 2026 sounded like on the Thales Security Sessions Podcast.

The 2026 Predictions

Tim Chang, Global VP & GM of Application Security at Thales, began by knocking down a common misconception about cybersecurity: that it still requires a boundary. In an environment of AI-controlled robots, skyrocketing API calls, and automated agents working at machine speed, the concept fails not just because it’s difficult to do but because it’s impossible.

The conversation pushed beyond defensive AI toward something more proactive, using AI to simulate attacker behavior, find weak signals, and continuously test systems.

To fight these threats, Chang says organizations need to move beyond adapting controls to individual threats and instead build security that delivers consistent visibility and control across every environment, scaling with the system, not against it.

Pursuing Clarity in Cybersecurity

While Chang’s episode highlighted the dangers, Jay Thurston, Field CISO at Thales, identified the challenge: we do not really understand them. His fundamental claim flipped the traditional approach on its head by emphasizing that cybersecurity does not require more fear; it requires more understanding.

In his view, the danger lies in the feeling of security: healthy dashboards amid unstructured data, opaque AI systems, and the buildup of crypto exposure. The truth behind these problems begins with simple inquiries: where is our data, who has access to it, and what is happening with it?

“Companies have to reel it way back, not worry so much about all of those accelerating scare tactics, and figure out where their data sets live, do they have a good understanding of what those data paths are, and are they protecting them?”

Thales Goes to the Movies

While we were celebrating the Oscars, David Holmes, CTO Application Security at Thales, used sci-fi as a lens to explore how we’ve arrived at an algorithm-shaped reality. Did films like The Matrix predict this moment, or help create it?

Beneath the surface of movie quotes lies a message about how generative AI feels intelligent, simply because it reflects the patterns of our own language at scale without understanding anything.

“I feel that sometime, maybe in the next 10 years, there is going to be this possible pivot point between [whether] the digital world [becomes] better than the world we live in now, or [whether] we realize it should really have just been like movies.”

The Peril and Promise of AI Security

Diane Staheli, a former White House advisor, spoke from a policymaker’s perspective, discussing the risks and opportunities of AI. AI is accelerating faster than any governance model can comfortably track, fueling real exposure, but also new ways for defenders to get ahead.

“We can now, as a community, share indicators of what we’re seeing happen on these platforms, indicators that an entity might be planning a malicious cyberattack. We can start to get out ahead of it.”

Staheli’s was the policymaker’s view in a periodotherwise dominated by CISO perspectives. The speed-mismatch problem she names shows up in nearly every AI security conversation today.

RSAC 2026 On the Go: Where AI, Emerging Tech, and Collective Defense Collide

For the first time, we tried something different: opening our mic for RSAC 2026 visitors to share their opinions.

This session, recorded live on the exhibition floor, documented a shift in cybersecurity: identity, data, and application security are no longer separate conversations. They’re converging into a single discipline.

Three themes emerged throughout: AI will accelerate reaction time to machine speeds, visibility is diminishing (particularly in unstructured data and shadow AI), and trust frameworks are being reengineered with continuous validation.

It’s the closest thing to a real-time industry pulse. What used to be siloed disciplines are now colliding, and organizations that can’t integrate fast enough will feel it.

Inside the Race to a Quantum-Safe Future: PQC Palooza Live 2026 at RSAC

The seasonclosed by zooming out. Quantum is a timeline problem, and that timeline is shrinking.

As one guest said: “It is Y2K without a date.”

From voices throughout the PQC world, the answer was the same: coming up with a new algorithm is not the challenge; transitioning to it is the real problem.

This is the series’ conclusion, tying up the loose ends. Visibility, control, and preparation come up once more, but this time they have a deadline attached.

Looking ahead

Q1 mapped the terrain. 2026 continues with the constant fight for data protection itself.

For more insight, listen to the latest episodes of the Thales Security Sessions Podcast here:

· Security Sessions podcast home page: https://cpl.thalesgroup.com/podcasts/data-security-sessions

· Apple Podcasts: https://podcasts.apple.com/za/podcast/thales-security-sessions/id1541013082

· Spotify: https://open.spotify.com/show/7DTnHr3AUecB30jYvexVZb

· YouTube: https://www.youtube.com/playlist?list=PLw3mEF7reqIPsf2EFAfDLWDmZxAD9PQmH

· Amazon Music: https://music.amazon.com/podcasts/b551e7fe-d297-42cd-a52c-a22a8c2edd77/thales-security-sessions

Links to episodes:

· Tim Chang: https://cpl.thalesgroup.com/podcasts/data-security-sessions/cybersecurity-predictions-2026-podcast

· Jay Thurston: https://cpl.thalesgroup.com/podcasts/data-security-sessions/pursuing-clarity-cybersecurity-jay-thurston-podcast

· David Homes: https://cpl.thalesgroup.com/podcasts/data-security-sessions/thales-goes-to-the-movies-ai-digital-identity-podcast

· Diane Staheli: https://cpl.thalesgroup.com/podcasts/data-security-sessions/peril-promise-ai-security-diane-staheli-podcast

· RSAC 2026 On the Go: https://cpl.thalesgroup.com/podcasts/data-security-sessions/on-the-go/RSAC-2026-where-ai-emerging-tech-collective-defense-collide-podcast

· PQC Palooza: https://cpl.thalesgroup.com/podcasts/data-security-sessions/on-the-go/inside-the-race-to-quantum-safe-future-PQC-Palooza-2026-RSAC-podcast