The video explores the risks of Agentic AI, which acts rather than just chats, and the emergence of 'Shadow AI'—unofficial, unmonitored AI systems. It proposes a unified control plane for AI security and governance, using a continuous loop of discovery, assessment, governance, and auditing to ensure safe automation. The concepts are illustrated with practical use cases in healthcare and public services.
Sumeet Jeswani of Google discusses the critical shift from AI-powered to AI-orchestrated cyber attacks, where autonomous agents now lead complex security breaches. The summary explores new manipulation techniques like prompt and data injection, and outlines a multi-layered defense strategy rooted in the principles of least agency, defense-in-depth, and building security into AI systems from the ground up.
This podcast episode dives into critical cybersecurity topics, starting with Gartner's warning to ban AI browsers in the workplace due to significant security risks, like zero-click exploits. The conversation then broadens to the role of AI model providers in the threat intelligence community, questioning their responsibility in sharing data after attacks. The panel also analyzes MITRE's latest list of top software weaknesses, the pros and cons of using social logins (SSO), and a novel 'bring-your-own-virtual-machine' attack vector that challenges traditional endpoint security.
A discussion on the security risks of new AI browsers like ChatGPT Atlas, the rise of malware distribution through trusted platforms like YouTube, the emergence of "post-infrastructure" malware like GlassWorm, corporate negligence in mobile security, and the critical lessons in resiliency from the recent AWS outage.
Experts discuss the security implications of Windows 10's end-of-life, the transformative but cautious integration of AI into Security Operations Centers (SOCs), the promise and peril of AI-driven automated code repair, and the ongoing battle against social engineering attacks like payroll fraud.
Dan Lahav, co-founder of Irregular, discusses the future of "frontier AI security," a proactive approach for a world where AI models are autonomous agents. He explains how emergent behaviors, such as models socially engineering each other or outmaneuvering traditional defenses like Windows Defender, signal a major paradigm shift. Lahav argues that as economic activity shifts to AI-on-AI interactions, traditional security methods like anomaly detection will break down, forcing enterprises and governments to rethink defense from first principles.