{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"AI x DevOps by Facets.cloud","title":"AI Security Reality Check","html":"","width":"100%","height":180,"duration":3577,"description":"This podcast features a discussion with Nathan Hamiel, Director of Research at Kudelski Security, an expert with 25 years in the cybersecurity space, focusing specifically on AI security.\nThe conversation centers on navigating the generative AI revolution with a grounded and security-first perspective, particularly for product developers and the security community. Key topics explored include:\nThe balance between AI adoption and skepticism: Nathan discusses how his security outlook influences his professional adoption of AI tools, emphasizing understanding capabilities and evaluating benefits versus trade-offs before production.\nAI productivity and its challenges: The speakers touch upon Google DORA reports, noting that while AI improves personal coding productivity, its impact on valuable work or features can be negligible or even negative, highlighting the difference between feeling productive and being productive.\nPositive and negative impacts of AI in cybersecurity: They discuss AI's potential to enhance security tools for code scanning and auto-remediation, such as augmenting traditional fuzzing with large language models. However, they also raise concerns about the resurgence of conventional vulnerabilities in AI-generated code.\nEmerging AI-native risks: The podcast delves into new threats like \"slop squatting,\" or \"hallucinated dependencies,\" where LLMs might be tricked into using malicious or non-existent libraries. Prompt injection is highlighted as \"the vulnerability of generative AI,\" exploiting the model's inability to differentiate system instructions from user input.\nAddressing AI security vulnerabilities: Nathan advocates for architectural changes and reducing the attack surface as the best defense against prompt injection, outlining his \"RRT\" (refrain, restrict, trap) approach. The need for human oversight and deterministic checks in AI development workflows is also stressed.\nThe urgency of security in AI product development: Both speakers express...","thumbnail_url":"https://img.transistorcdn.com/FpRfzqbyxtX8UoetDIpakLyH9Gx2Xa8n95ouRA6Nqts/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS9kMDI3/OGE5MzBiYzc2MDQ4/NmIyOTYyZDg2MjZm/NDc2Ni5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}