CISO Series: Hacking the Validity of GenAI