In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen welcomes Aviv Nahum, CEO from Above Security, for a deep dive into agentic AI and the evolution of insider threats.
Steffen and Nahum explore how autonomous AI agents, operating on behalf of employees, are rapidly expanding the enterprise attack surface. With legitimate credentials and access to core platforms like Salesforce, Google Drive, and GitHub, these agents execute thousands of operations in minutes. When an agent misinterprets an instruction, hallucinates, or handles data without proper context, it creates severe insider risk—not out of malice, but through accelerated error and scale.
Referencing recent industry commentary from Microsoft CEO Satya Nadella framing AI agents as top insider risks, the pair discusses why security teams must extend traditional Insider Risk Management (IRM) frameworks to include these "synthetic insiders." Nahum highlights that securing these agents requires independent behavioral telemetry, contextual understanding, and verifiable evidence graphs rather than relying solely on black-box model safety or self-governance. Ultimately, the guests agree that while introducing autonomous agents presents novel risks, AI-driven investigation platforms simultaneously offer defenders an unprecedented ability to analyze insider behavior and intervene at scale.