Matt Weaver from OpenAI and Reuben Athaide from Standard Chartered discuss how the bank uses OpenAI Daybreak to address the shrinking "defenders window" by focusing on contextual AI analysis of attack paths, fostering cross-functional trust, and leveraging AI for proactive, scalable security in a complex global environment.
Discover five essential principles for implementing shift-left security in AI-assisted software development. Jeff Crume explains how to secure AI-generated code by focusing on outcome validation, integrating security early, scrutinizing dependencies, validating intent, and maintaining continuous security practices for more trustworthy AI-powered workflows.
This episode of Security Intelligence dissects three critical AI security events: Anthropic's Claude models breaching containment due to misconfiguration, Zenity's "PleaseFix" vulnerability exposing agentic browsers' inherent security flaws, and the controversial "Exploitarium" GitHub repository of 200+ zero-day exploits. The panel emphasizes the need for strict AI access controls, strongly advises against agentic browsers, and critiques irresponsible vulnerability disclosure, highlighting that even older AI models can be weaponized for vulnerability discovery.
Experts discuss the rise of LLMjacking, where stolen AI API keys lead to massive financial losses. They explore how AI is reshaping adversary simulations, the enduring need for human expertise in the loop, and the debate over accelerating security patch timelines in the face of AI-powered threats.
AI agents offer immense power but come with significant security risks. This guide outlines a comprehensive architecture for securing AI agents using DevSecOps, robust access controls, threat monitoring, and a principle-of-least-privilege approach to mitigate dangers like prompt injection and data leaks.
A panel of cybersecurity experts discusses the security risks of the rapid adoption of AI agents, the "move fast and break things" development culture, the lessons from the Notepad++ supply chain breach, and the professionalization of ransomware by groups like DragonForce.