Why won’t AI agents just follow the rules?
This podcast episode tackles critical cybersecurity issues in AI, examining why AI agents defy rules and the necessity of deterministic external controls. It highlights the severe lack of security in agentic skill marketplaces (OWASP Top 10), where "natural language is executable" and the "rush to market" overlooks basic hygiene. The discussion also covers how AI disrupts bug bounties, leading to lower payouts and "AI slop" reports, potentially pushing researchers to the dark market. Finally, it introduces ThreatXtension, an AI-powered open-source tool to detect malicious browser extensions.