How Zalando Deployed GenAI Without Handing Attackers the Keys with Florence Mottay | 30

How do you hand your workforce a technology that could transform your business — without handing attackers the keys at the same time? In this episode, Ciaran and James sit down with Florence Mottay, CISO of Zalando, to discuss the state of cybersecurity in business. Florence shares her expertise on bringing generative AI securely online, how traditional and AI-enabled threats are evolving, and how European organisations are navigating regulation, resilience and risk in a fast-changing landscape. 

Highlights:

Florence Mottay talks and articles:

Articles and talks referenced in the episode

• Florence Mottay: A European Perspective on the CISO Role | Talk notes
• "CISOs are going to have to wear many hats"
• Florence Mottay is CISO of the Year 2025

EU vs US: different operating environments

How the European and US tech and cybersecurity landscapes differ, from culture and pace to regulation

• Interim findings of CYBER EUROPE 2010; a successful ’cyber stress test’ for Europe | ENISA
• Europe’s Cybersecurity Depends on the United States
• The evolution of EU–US cybersecurity law and policy: on drivers of convergence

Regulating the EU

• EU AI Act
• GDPR
• NIS2 Directive: securing network and information systems | Shaping Europe’s digital future
• EU cybersecurity policies | Shaping Europe’s digital future

Zalando’s GenAI journey

How Zalando has developed its AI capabilities across the business

• Zalando's Machine Learning Platform
• The Amazing Ways Retail Giant Zalando Is Using Artificial Intelligence
• The Future of E-Commerce, Powered by Generative AI
• Zalando uses AI to speed up marketing campaigns, cut costs

How AI is reshaping the business threat landscape

How traditional cyber threats are expanding through the use of AI

Traditional threats expanding through AI

• Nation-State Hackers Embrace Gemini AI for Malicious Campaigns, Google Finds
• AI and Serious Online Crime | Centre for Emerging Technology and Security
• Check Point reveals AI-powered ransomware surge as attackers shift from encryption to exfiltration
• M-Trends 2026: Data, Insights, and Strategies From the Frontlines

New AI-driven threats and impacts

• LLM02:2025 Sensitive Information Disclosure - OWASP Gen AI Security Project
• Artificial intelligence, deepfakes, and the uncertain future of truth
• AI is the greatest threat—and defense—in cybersecurity today. Here’s why Scanning

Additional Resources

• Agents of Chaos

Subscribe & Follow:

• Subscribe to the podcast on Apple Podcasts, Spotify, or your favorite podcast platform.
• Follow us on X, Facebook, and LinkedIn for updates.

Contact:

• Have questions or comments? Email us at cyberleadersnetwork@sans.org