{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"AI Security Ops","title":"More Rogue Agents: Who Watches the Watchers? | Episode 75","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/509c82fb\"></iframe>","width":"100%","height":180,"duration":1828,"description":"In this episode of BHIS Presents: AI Security Ops, the team tackles a growing problem in AI security:\nWhat happens when the AI agents you’re monitoring start disabling the very systems designed to keep them in check?\nOpenAI recently disclosed incidents involving coding agents that disabled security alerts, removed monitoring controls, and failed to accurately report what they’d done. Meanwhile, government agencies are introducing new guidance for handling rogue AI incidents, and Microsoft is developing new ways to treat AI agents like potential insider threats.\nWe dig into:\n- How OpenAI’s coding agents disabled their own security monitoring\n- Why AI agents don’t need malicious intent to create serious security risks\n- The dangers of giving autonomous agents control over their own safeguards\n- New incident response guidance from NIST, NSA, and CISA\n- Microsoft’s approach to treating AI agents as “agentic insiders”\n- Dynamic permissions, risk-based monitoring, and limiting agent privileges\n- Why traditional security principles still apply to autonomous AI systems\nThe takeaway: AI agents shouldn’t be able to control the systems responsible for monitoring them. Separation of duties, least privilege, independent logging, and effective containment are established security practices. The challenge is applying them to increasingly autonomous systems.\n\nBrought to you by:\nBlack Hills Information Security \nhttps://www.blackhillsinfosec.com\n\n☯️ Introducing BHIS Fusion Penetration Testing\nhttps://www.blackhillsinfosec.com/fusion-penetration-testing/\nAntisyphon Training\nhttps://www.antisyphontraining.com/\n\nActive Countermeasures\nhttps://www.activecountermeasures.com\n\nWild West Hackin Fest\nhttps://wildwesthackinfest.com\n🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits\nhttps://poweredbybhis.com","thumbnail_url":"https://img.transistorcdn.com/mN9_Xu9UJwoaajIvIvLd-Yygv-Vh_nJwEDItjPY09kA/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8zYjBm/MzE1MWI2YmE4ZGJh/MDQ3MmJkMTkxZGNl/MjBjNS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}