Jeff Crume examines Jev, a new AI approach that makes structured decisions rather than generating text, through a cybersecurity lens. He argues that confidence scores are not evidence, that AI decisions expand the attack surface, and that observability, decomposed reasoning, independent controls, and human oversight are needed before trusting them.
This podcast episode explores three significant AI-enabled cyberattacks: "Dark Sourcery," an AEO poisoning technique that tricks AI chatbots into providing malicious information; an LLM-assisted hacking spree targeting critical vulnerabilities; and an AI agent swarm breaching hundreds of servers with alarming speed. The discussion highlights the evolving threat landscape, the critical importance of cybersecurity hygiene, and the need to rethink trust in AI systems.
Chris Lovejoy and Saul Howard discuss the critical challenges of deploying AI agents in highly regulated enterprise environments, particularly healthcare. They advocate for a "constraints-first" architectural approach, proposing three core primitives – an immutable event log for auditability, schema-driven object storage for sensitive data, and human-agent equivalency for seamless escalation – which collectively enable privacy-preserving evaluations as a fundamental byproduct of the system design, rather than being an afterthought.
This podcast explores the challenges cybersecurity leaders face in adopting AI, the emergence of new threats like ghostjacking, and AI's current capabilities in patching vulnerabilities. It highlights the prevalent "AI decision paralysis" and offers strategic advice for integrating AI into security operations, advocating for a human-in-the-loop approach and a realistic assessment of AI's current
Promptware introduces a new class of AI malware leveraging prompt injections to exploit architectural flaws in LLMs. This summary details The Promptware Kill Chain, covering stages from initial access and jailbreaking to persistence, lateral movement, and real-world impact. It emphasizes the critical need for a Zero Trust approach, treating AI agents as hostile runtimes to defend against these sophisticated AI-native threats.
AI agents introduce a critical security gap when connecting to legacy enterprise systems, known as the 'agentic last mile identity problem'. This summary explains how losing user identity, context, and delegation breaks zero-trust principles and outlines a solution using a policy-driven vault to manage access and issue short-term credentials.