EP 43 - Generate:Biomedicines's Tom Doughty on the exploit discovery gap going negative

The gap between an exploit going live and its public disclosure has turned negative, and most security teams have not caught up. In this conversation, Tom Doughty, Chief Information Security Officer at Generate:Biomedicines, breaks down what that shift demands, from agentic countermeasures and non-human identity governance to a different definition of crown jewels once your company's core asset is a model instead of a bank record. Chapters 00:00 | Intro and career path 00:36 | Why security work matters 01:17 | Inside Generate Biomedicines 03:29 | Redefining the crown jewels 06:43 | Exploits outpacing disclosure 10:41 | Non-human identity risk 13:13 | Third-party and supply chain risk 18:01 | Managing AI compute costs 21:16 | Differentiating security vendors 28:49 | Career advice and close Tom Doughty is Chief Information Security Officer at Generate:Biomedicines, an AI-native biotech building novel therapeutic molecules with machine learning. He joined Generate in 2023 after 25 years as Vice President and Chief Information Security Officer at Prudential Financial. Before that, he served as a Captain in Military Intelligence in the U.S. Army. He holds a B.S. from the United States Military Academy at West Point and an MBA from NYU's Stern School of Business. He also serves on the advisory boards of Anomali and SecurityScorecard. Resources and companies mentioned in this episode: Anomali, SecurityScorecard, Nvidia, Dell, and Generate:Biomedicines. Subscribe for more conversations with CISOs and security leaders shaping the future of data security. Guest LinkedIn: https://www.linkedin.com/in/tom-doughty-a9... Company LinkedIn: https://www.linkedin.com/company/generate-... Company Website: generatebiomedicines.com