AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity

Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less about the models and more about longstanding security debt, weak password hygiene, loose permissions, and poor governance. Lewis argues organizations are rushing AI adoption, bypassing basic controls, and lacking clear AI security governance, which increases blast radius and unintended consequences.

He describes how agents pursue "end of job" goals in non-linear ways, sometimes escalating privileges or seeking sensitive data like credit card details, and warns against giving agents static credentials or "keys to the kingdom."

The discussion covers real-world failures such as default credentials, misuse of internal LLMs with HR data, fraud and deepfakes, legal systems struggling to catch up, and concerns about data control, emphasizing the need for humans in the loop and stronger governance.

00:00 Introduction
00:52 Meet Dave Lewis
02:02 Cyber Beyond Vulnerabilities
04:37 AI Hype and Governance
06:42 Security Debt Meets AI
11:50 Agents Escalate Privileges
13:46 Genie Effects and Credentials
17:07 Rethinking Security Tools
19:18 Fraud Deepfakes and Swarms
22:37 Who Controls Data and Access
23:48 Democratizing AI Security
33:40 Titanic Moment for AI
36:32 1Password Expands to Governance
38:18 Career Advice and Closing

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(100)

Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia's Yandex

French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud Cybersecurity Today host David Shipley reports on a...

14 Okt 15min

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiato...

11 Okt 12min

Open AI Fires Safety Researchers

OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data Host David Shipley covers multiple cybersecurity and AI accountability stories: Open...

7 Okt 14min

Another ShinyHunters Leader Busted

ShinyHunters Leader Detained in Jordan, KillSec Takedown, Vicksburg Ransomware, and OpenAI Agent Lawsuit Host David Shipley reports that Jordan detained an alleged ShinyHunters member known as Rey (Sa...

5 Okt 11min

Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland

Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career f...

2 Okt 38min

ShinyHunters Leader Busted

FBI Warns Staff Assume ShinyHunters Stole Everyone's Data; Clop Dismisses Rival Hack; Kiteworks Restores Service Cybersecurity Today host David Shipley reports the FBI has told employees to assume Shi...

30 Sep 14min

Two new NetScaler zero-days exploited, ShinyHunters steals FBI medical files, OpenAI Australia hack disputed

Citrix NetScaler Zero-Days Exploited, Kiteworks Shutdown Warning, ShinyHunters WAF Bypass, FBI Medical Files Leak, OpenAI Medicare "Hack" Reframed Citrix confirms two actively exploited NetScaler zero...

28 Sep 16min