Invisible Action: Understanding and Disrupting the Attack Cycle

Discussion Highlights

The “Invisible Action” webinar brought together leaders from the cyber and physical security domains to explore how attackers exploit gaps across digital, behavioral, and real-world environments. Moderated by 360’s own Chuck Randolph, the session featured Alex White, CTO of Glacier Security and former NSA engineer, and TJ Klomp, VP of Executive & Infrastructure Protection at Amazon. Their combined experience offered a rare look into how modern threat actors build and execute complex attack cycles—and how those cycles can be disrupted.

The panel examined how reconnaissance and targeting now heavily rely on visibility, encompassing location data, mobile device signals, public exposure, and communication habits. TJ shared how real-world protective efforts are undermined by routine, exposure, and an overreliance on reactive measures. Alex explained how unsecured communications, data exhaust, and AI-driven surveillance tactics allow adversaries to build detailed targeting profiles without ever breaching a perimeter.

One of the core themes was the need to stop treating physical and digital risks as separate problems. Effective protection now requires integrated thinking—designing for privacy, secure mobility, and intelligence from the start. The group shared examples of how small oversights in digital hygiene or travel planning can open the door to larger threats.

As the conversation turned toward the next six months, both speakers warned of accelerating risks, including the widespread availability of spoofing tools, rising anti-corporate sentiment, and increasingly AI-assisted targeting methods. The session closed with a call to shift left of boom—to challenge assumptions about visibility, risk ownership, and what a truly converged protection strategy looks like.