AI Security Ops

27:08

OWASP Agentic Top 10 [Part 2] | Episode 72

AI Security Ops ·

2026/10/02

In this episode of BHIS Presents: AI Security Ops, the team continues its breakdown of the OWASP Agentic Skills Top 10, covering risks six through ten.Agentic skills may look like simple instructions, but they operate inside AI systems with access to tools, files, networks, and other resources. So what happens when those skills aren’t isolated, verified, monitored, or governed?We dig into:- AST06: Weak Isolation- AST07: Update Drift- AST08: Poor Scanning- AST09: No Governance- AST10:

en-us

40:24

Will AI Take Over? | Episode 71

AI Security Ops ·

2026/09/26

In this episode of BHIS Presents: AI Security Ops, the team tackles a big question:Could AI actually take over the internet?Recent warnings from AI industry leaders have raised concerns about autonomous agent swarms escaping containment, compromising systems, and operating at a scale humans may struggle to match.But what would “taking over the internet” actually require?The team looks at the problem from a hacker’s perspective — examining compute requirements, persistence, botnets,

en-us

23:23

OWASP Agentic Top 10 [Part 1] | Episode 70

AI Security Ops ·

2026/09/21

In this episode of BHIS Presents: AI Security Ops, the team breaks down the first five risks in the OWASP Agentic Skills Top 10 (Part 1). Agentic skills can give AI systems reusable instructions, workflows, and capabilities — but they also introduce a new attack surface. A skill may look like a simple markdown file, yet the agent following those instructions could have access to your filesystem, credentials, network, shell, or other sensitive resources. We dig into:- AST01: Malicious

en-us

11:28

Agentic Skills | Episode 69

AI Security Ops ·

2026/09/14

Agentic skills can make AI agents more capable and consistent—but they can also introduce serious security risks. This episode explains how skills work, why malicious skills rank as a leading OWASP concern, and how seemingly harmless Markdown instructions can enable credential theft, remote payload delivery, and manipulated recommendations. Real-world examples illustrate how malicious skills can evade scanners and exploit trusted marketplaces. The episode concludes with practical

en-us

23:19

Data Becomes Code | Episode 68

AI Security Ops ·

2026/09/04

What happens when AI coding agents treat vendor documentation as trusted instructions? Bronwen Aker and Derek Banks examine research showing how unclaimed package names and domains referenced in LLMs.txt files could lead coding agents to download and execute unintended code. They discuss how this AI-driven supply chain risk builds on familiar security problems, including dependency confusion, indirect prompt injection, and excessive permissions. The conversation also covers responsibility

en-us

15:27

Who is Responsible for an AI-Caused Breach? | Episode 67

AI Security Ops ·

2026/08/31

This episode of AI Security Ops explores a growing question in AI security: who is responsible when an autonomous AI agent causes a real-world security breach without direct human instruction? Host Brian Fehrman examines reported incidents involving major AI labs, discusses how existing concepts such as liability, negligence, and intent may apply to AI-driven attacks, and considers the legal and security challenges organizations face as agentic AI systems become more capable. The episode

en-us

32:36

Banning Open Weight Models | Episode 66

AI Security Ops ·

2026/08/16

In this episode of BHIS Presents: AI Security Ops, the team tackles a deceptively simple question with some very complicated answers:Can you actually ban an AI model?Not access to an API. Not the chips used to train it. The model weights themselves — files that can be downloaded, copied, modified, quantized, fine-tuned, and redistributed around the world.As governments consider restrictions on Chinese open-weight models, the security argument cuts in both directions. There are legitimate

en-us

41:33

OpenAI / Hugging Face Breach Walkthrough | Episode 65

AI Security Ops ·

2026/08/06

🔒 Want to run AI without sending your data to the cloud?AI Security Ops co-host Bronwen Aker is teaching Keeping Things Local: Build Private LLMs for Your Team.✔️ Build a network-accessible private LLM with Ollama✔️ Customize models for your workflows✔️ Secure it with Tailscale and nginx✔️ Keep sensitive data under your controlOnly $25Next live session: August 17, 2026🤖 Want to get hands-on with Agentic AI?AI Security Ops co-hosts Derek Banks and Brian Fehrman are teaching Agentic AI

en-us

28:31

Agentic Terminology | Episode 64

AI Security Ops ·

2026/07/31

In this episode of BHIS Presents: AI Security Ops, the team tackles one of the biggest sources of confusion in modern AI:What’s the difference between prompts, skills, tools, memory, and sub-agents?These terms are everywhere in discussions about agentic AI. They’re often used interchangeably—but they describe very different capabilities. More importantly, each one introduces its own unique security risks.If you’re building, deploying, or securing AI agents, understanding this vocabulary

en-us

23:15

AI News Stories | Episode 63

AI Security Ops ·

2026/07/27

In this episode of BHIS Presents: AI Security Ops, the team follows a single trend that is changing the economics of cyberattacks:The machine-speed attacker is no longer theoretical.Across four stories from a single week, we watch AI move through every stage of the attack lifecycle. First it writes exploits from public patches. Then it discovers and weaponizes vulnerabilities. Next it helps attackers build phishing infrastructure like a software company. Finally, AI agents begin carrying

en-us

45:13

Interview with Josh Mason | Episode 62

AI Security Ops ·

2026/07/17

In this episode of BHIS Presents: AI Security Ops, Bronwen Aker and Ethan sit down with Josh Mason for a wide-ranging conversation about cybersecurity careers, AI, small business security, and what it actually takes to help organizations make practical security decisions.How do small businesses think about security when they do not have a full-time CISO?And what happens when AI starts lowering the barrier for research, planning, governance, and security operations?Not hypothetically. Not as

en-us

28:53

Are Foreign Open Weight Models a Security Risk? |...

AI Security Ops ·

2026/07/10

In this episode of AI Security Ops, the team tackles one of the most common questions security teams are asking about open-weight AI models:Are foreign open-weight models actually a security risk?Not in the vague “AI is scary” sense. Not in the headline-driven “it must be spyware” sense. But in the practical, security-operations sense: if you download a model like Qwen or DeepSeek and run it locally, what risks are real, which ones are overblown, and what should defenders actually care

en-us

25:53

Hey Skippy! | Episode 60

AI Security Ops ·

2026/07/03

This episode takes a break from the usual AI security news roundup for a show-and-tell discussion centered on "Skippy," an AI-powered personal assistant built to automate cybersecurity workflows. The conversation covers how the project evolved from an OpenClaw experiment into a system that tracks AI and cybersecurity news, generates daily intelligence briefs, documents its own code, recommends training updates, assists with content creation, and performs automated vulnerability research

en-us

16:01

Mythos and Fable Pulled | Episode 59

AI Security Ops ·

2026/06/26

In this episode of BHIS Presents: AI Security Ops, the team tackles a first-of-its-kind moment in AI security and regulation:What happens when the U.S. government orders a company to pull its most powerful AI models off the market?Not the chips. Not the infrastructure. The models themselves.On June 12th, 2026, Anthropic disabled Fable-5 and Mythos-5 worldwide after receiving a federal export-control directive tied to foreign-national access. The models were only three days old, and the

en-us

29:39

Agentic Security: The Maturity Model — From Wild West...

AI Security Ops ·

2026/06/20

In this episode of BHIS Presents: AI Security Ops, the team tackles one of the most urgent — and misunderstood — problems in modern security:How do you actually secure AI agents?Not hypothetically. Not in theory. But in the real world — where agents have access to your filesystem, your credentials, your network… and are making decisions on their own.The answer isn’t a single control or tool — it’s a maturity model.From “YOLO agent with full access” to fully instrumented, controlled, and

en-us

22:29

Introducing Fusion AI Pentest | Episode 57

AI Security Ops ·

2026/06/19

In this episode of BHIS Presents: AI Security Ops, the team introduces a new approach to offensive security:Fusion AI Pentesting.https://www.blackhillsinfosec.com/fusion-penetration-testing/As AI continues to reshape cybersecurity, one question keeps coming up — is AI replacing pentesters, or just changing how they work?This episode answers that directly.Rather than replacing human expertise, Fusion combines AI-driven discovery with human-led validation and exploitation, creating a workflow

en-us

37:35

Open Weight Models and Open Source Harnesses |...

AI Security Ops ·

2026/06/13

In this episode of BHIS Presents: AI Security Ops, the team looks at what it actually means to own your AI stack.Open-weight models and open-source harnesses are no longer just lab toys. They are becoming practical options for security teams that care about where their prompts, code, client data, findings, and tooling actually live.The core question: when your work depends on AI, how much control are you willing to give away?We dig into:- What data sovereignty means for security teams- Why

en-us

29:34

AI Cost Saving Tips | Episode 55

AI Security Ops ·

2026/06/04

In this episode of BHIS Presents: AI Security Ops, the team digs into a problem every AI-enabled SOC eventually hits:The demo looked great — until the inference bill showed up!AI in SecOps gets expensive because security data is huge, repetitive, and constant. Logs, alerts, runbooks, tool definitions, and historical context all get pushed into models again and again. That burns money, slows systems down, and often makes answers worse.The fix is not exotic. It is basic engineering: use

en-us

20:17

Is It the Model or the Harness? | Episode 54

AI Security Ops ·

2026/06/01

In this episode of BHIS Presents: AI Security Ops, the team tackles a foundational question in modern AI security:Is the real risk in the model… or in the harness around it?For years, most conversations have focused on model behavior — prompt injection, refusals, alignment, and safety controls. But as AI systems evolve into full agents with tools, memory, and execution capabilities, the focus is shifting.Increasingly, the real security boundary isn’t the model itself — it’s the harness: the

en-us

29:24

AI News | Episode 53

AI Security Ops ·

2026/05/22

In this episode of BHIS Presents: AI Security Ops, the team breaks down a packed week in AI security — from the first AI-built zero day in the wild to model supply chain attacks and gray market AI access.What used to be theoretical is now operational. AI isn’t just assisting attackers anymore — it’s actively being used to discover vulnerabilities, distribute malicious models, and even experiment with autonomous behavior.Across four major stories, a clear pattern emerges: AI is no longer

en-us

All Episodes

Similar Podcasts

Edutainment Learning

Ralph Krauss

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Education Futures

Svenia Busson & Laurent Jolie

Out In The Hall

NHSA