
In the fast-evolving world of cybersecurity, few voices stand as steady and insightful as Jon Clay’s. As Vice President of Threat Intelligence at Trend Micro, Jon has spent almost 30 years navigating a landscape that’s grown from basic viruses to advanced, multi-layered cyber threats. Reflecting on his career, he shares, “Cybersecurity isn’t about solving one big problem. It’s about adapting to countless smaller ones that change every day.” Through years of experience, Jon has learnt that keeping organisations safe isn’t just about stopping attacks—it’s about building resilience.
Jon’s path at Trend Micro has spanned roles in sales engineering, threat communication, and leadership in threat intelligence. This journey has given him a unique perspective that bridges technical detail with the big-picture impact on businesses. “Cybersecurity today is a business issue as much as it’s a technical one,” he says. “It’s about understanding the real impact of threats and designing solutions that protect both people and operations.”
From Broad Attacks to Precision Threats
One of the biggest shifts Jon has observed is how cyber threats have evolved from broad, random attacks to highly targeted campaigns. This shift, he explains, forced Trend Micro to rethink its approach. “When attackers moved from ‘spray-and-pray’ tactics to more calculated, focused attacks, we had to change our strategy,” Jon explains. “Now, it’s all about having a unified platform that gives companies a complete picture of their digital landscape.”
This comprehensive approach, known as Attack Surface Risk Management (ASRM), focuses on spotting vulnerabilities before they become entry points. “A fragmented approach to security just doesn’t cut it anymore,” Jon notes. “The future is about integration and working together, not in isolated silos.”
The Rise of AI in Cybercrime: The ‘Criminal GPT’ Phenomenon
Artificial intelligence has introduced new possibilities—and new dangers—in the cybersecurity world. With services like “Criminal GPT,” cybercriminals are using AI to scale up attacks with minimal effort. “We’re not seeing criminals reinventing the wheel with AI,” Jon clarifies. “Instead, they’re taking existing AI models and tweaking them for their own ends. It’s about making cybercrime easier and more accessible.”
Criminals are now using AI not just to code malware but to craft sophisticated phishing emails across languages using “jailbreak-as-a-service” models that remove ethical safeguards. For businesses, this means that staying safe requires a proactive, AI-driven approach. “AI isn’t just changing how we defend against attacks,” Jon says. “It’s changing who can launch them and how sophisticated they can be.”
Protecting AI Assets: A New Priority in Cybersecurity
AI is becoming integral to everything from manufacturing to customer service. But as Jon warns, this makes AI itself a potential vulnerability. “All it takes is a small tweak to an AI model to cause big problems. Imagine a factory AI misclassifying a defect—it could mean a defective product makes it to market,” he explains. “That’s why we need to start treating AI as critical infrastructure, just like power grids or data centres.”
Trend Micro’s AI app protection aims to keep these models secure by blocking malicious changes and ensuring they work as intended. For Jon, protecting AI assets means going beyond traditional security protocols. “You have to treat every part of the AI ecosystem—models, data, configurations—as equally critical,” he advises.
The Human Element in an AI-Driven Defence
While AI has transformed cybersecurity, Jon believes human intuition is irreplaceable. “AI is great at detecting patterns and spotting anomalies, but it’s people who understand the context,” he says. Trend Micro’s platform, Trend Vision One, combines AI with human expertise, creating a balanced defence approach that leverages the best of both worlds.
In Jon’s view, cybersecurity will always require a partnership between technology and human insight. “AI can give us a head start, but it’s human intelligence that makes the final call,” he explains. “It’s about using AI to support people, not replace them.”
Predictive Defence Strategies: Threat Path Prediction and Agentic AI
Looking to the future, Jon is excited about technologies like threat path prediction and Agentic AI. “These tools let us see where an attack might happen before it does,” he explains. Threat path prediction maps out possible vulnerabilities, allowing security teams to prioritise their defences. Agentic AI, meanwhile, provides organisations with adaptive decision-making abilities that help streamline their cybersecurity operations. “What we’re seeing is a shift from reactive to proactive defence,” Jon says with optimism. “Instead of just waiting for an attack, we’re getting better at anticipating it.”
Small Security Gaps, Big Consequences
While major cyberattacks make the headlines, Jon is concerned about smaller security gaps that often go unnoticed. “It’s not always the big, obvious threats that do the most damage,” he cautions. “A series of small vulnerabilities—like outdated software or a misconfigured cloud server—can add up to a significant risk.”
Jon’s advice to security leaders is simple but powerful: focus on a comprehensive, AI-driven detection system that can catch the minor issues before they become major problems. “Sometimes it’s the basics that get overlooked, and that’s where real risk can build up,” he says.
For the Next Generation of Cybersecurity Professionals
For those entering the cybersecurity field, Jon encourages a well-rounded approach. “It’s not enough to know the technical side,” he explains. “You have to understand how cybersecurity impacts a business as a whole.” He also advises aspiring professionals to hone their communication skills and analytical abilities and to stay adaptable in an industry that’s constantly changing. “The threats we face tomorrow won’t look like the ones we see today,” he says. “Being able to evolve is key.”
Connect with Jon Clay on LinkedIn
In a world that’s increasingly digital—and progressively vulnerable—Jon Clay’s vision for cybersecurity offers a guiding light. If you’d like to follow Jon’s insights or learn more about Trend Micro’s pioneering work, connect with him on LinkedIn. It’s an opportunity to stay informed and engaged in the fast-moving world of cybersecurity from one of the industry’s most experienced leaders.
“Cybersecurity isn’t just about protection. It’s about empowering organisations to navigate a digital world with confidence.” His work at Trend Micro is paving the way for a future where businesses can not only survive but thrive in the face of cyber threats.
You may also like
-
Splunk Report: Agentic AI Takes Center Stage in CISOs’ Path to Digital Resilience
-
96% of APAC CIOs report a shift beyond technical responsibilities, as global AI adoption rises by 282%
-
From Lab Bench to Enterprise Scale: Alvin How on Practical Innovation, Collaboration, and Execution Discipline
-
Diligent Survey Finds Nearly Half of Responding Organisations in Asia Will Make AI a Priority by 2026
-
Trend Micro Predicts 2026 as the Year Cybercrime Becomes Fully Industrialised Inbox AI Overview
