Shadow ai

The New Apex Predator: CrowdStrike CEO George Kurtz on Adversaries Armed With AI Agents

The New Apex Predator: CrowdStrike CEO George Kurtz on Adversaries Armed With AI Agents

George Kurtz, CEO of CrowdStrike, discusses how agentic AI has flattened the adversary pyramid, putting nation-state-grade tradecraft in the hands of low-skill attackers, and why open-weight models have become the tip of the spear. He covers CrowdStrike's Safe Mind lab, built with NVIDIA around red and blue security models trained on fifteen years of telemetry, the lessons from the Hugging Face incident, the case for defense dominance, and why he sees AI as a net creator of opportunity.

AI Security Engineer Foundations + Certificate — Javier Garza, Snyk

AI Security Engineer Foundations + Certificate — Javier Garza, Snyk

Javier Garza's AI Security Engineer Foundations workshop walks through the OWASP LLM Top 10, shadow AI and AI Bills of Materials, AI threat modeling, securing agent skills and MCP servers, secure vibe coding, and offensive agent workflows. Throughout, he argues that AI systems break traditional security assumptions because they are probabilistic, reach external content, and act through tools, so defenses must combine least-privilege access, continuous inventory, automated scanning, human approval, and education that explains guardrails rather than merely imposing them.

AI Agents Don't Read Your Policy Docs. They Hit Your APIs — Gravitee

AI Agents Don't Read Your Policy Docs. They Hit Your APIs — Gravitee

Sam, CTO at Gravity, argues that AI agent governance must be enforced in infrastructure rather than in prompts or policy documents. Through five live demos against a hotel-booking agent, he shows a gateway blocking destructive tool calls, preventing data exfiltration, rate-limiting runaway agents, serving cached semantic responses, and rejecting oversized prompts before any LLM call. He also covers observability, vendor decoupling via LLM routing, trimming bloated MCP tool lists, and managing shadow AI.

The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder

The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder

Michael Patterson of Coder explains Simon Willison's lethal trifecta: private data access, exposure to untrusted content, and external communication, and why coding agents running on developer laptops hit all three. He covers prompt injection, the organizational blockers to enterprise agent rollout such as shadow AI and alert fatigue, and three architectural guardrails: cloud development environments, a model proxy, and an agent firewall.

AI Is Exposing Your Data: An AI Security Problem You Can't See

AI Is Exposing Your Data: An AI Security Problem You Can't See

Jeff Crume explains how AI agents, RAG pipelines, prompts, tools, and models move sensitive data through modern AI systems, and why traditional DLP falls short. He outlines a unified approach built on data lineage, workload and workforce visibility, proactive risk identification, and compliance reporting.

Five AI Risks That Can Get You Fired—And How to Avoid Them

Five AI Risks That Can Get You Fired—And How to Avoid Them

Martin Keen explains five real-world AI risks that can lead to job loss: shadow AI, data leakage, hallucinations, prompt injection, and unauthorized AI agents. He emphasizes the critical need for strong AI governance to ensure safe and productive AI adoption in the workplace.