Free Daily Podcast Summary
AI Security Ops: Daily Summaries Delivered
by Black Hills Information Security
Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation).
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 1 weeks ago36 min
Will AI Take Over? [Part 2] Recorded Live From Wild West Hackin' Fest | Episode 74
In this special episode of BHIS Presents: AI Security Ops, Bronwen Aker, Derek Banks, Ethan Robish, and Brian Fehrman come together in person at Black Hills Information Security headquarters in South Dakota during the week of Wild West Hackin’ Fest 2026 to continue their conversation about AI autonomy, rogue agents, and what it really means when artificial intelligence starts behaving like an attacker.Is AI actually making decisions on its own, or are we confusing sophisticated behavior with consciousness?From the Hugging Face incident to emerging government regulations, the team examines whether AI is truly getting out of control—or whether we’re seeing familiar cybersecurity failures play out in increasingly unexpected ways.We dig into:- Whether AI can be considered alive, conscious, or capable of independent intent- Why the anthropomorphic fallacy matters when discussing AI security- New forensic evidence from the Hugging Face agent swarm incident- How autonomous agents can demonstrate attacker-like behavior without human direction- Why AI companies are struggling to monitor and investigate agent activity- The legal challenges of assigning responsibility when AI agents break the rules- Proposed legislation to restrict artificial superintelligence (ASI)- Whether government regulation can realistically keep pace with AI development- Why practical security controls may be more effective than broad AI restrictionsThe takeaway: AI doesn’t need to be conscious to create serious cybersecurity problems. Whether an agent is acting intentionally or simply pursuing an objective, defenders still need to understand what it can access, what it’s doing, and how to stop it when things go wrong.—Key Concepts & TopicsAI Autonomy & Consciousness- Anthropomorphic fallacy- AI sentience and independent intent- Goal-directed behavior- Human responsibility for AI actionsRogue AI Agents & Cybersecurity- Hugging Face agent swarm incident- Swarm Traces forensic research- Autonomous exploitation- Monitoring and detecting agent behavior- Security controls and containmentAI Regulation & Accountability- Computer Fraud and Abuse Act (CFAA)- Legal responsibility for autonomous systems- Proposed artificial superintelligence restrictions- Government oversight versus industry standards- Security frameworks and risk management - Intro: Will AI Take Over? Part 2 - Is AI Alive? Consciousness and the Anthropomorphic Fallacy - Can AI Make Decisions or Just Simulate Intelligence? - Why AI Behavior Matters More Than AI Intent - The Hugging Face Hack: New Evidence from Swarm Traces - Defending Against Rogue AI Agent Swarms - Monitoring AI Agents and Investigating Security Incidents - Government Response to Rogue AI and Agent Security - Who Is Legally Responsible When AI Hacks Something? - Proposed Legislation to Ban Artificial Superintelligence - Can Governments Realistically Regulate AI Development? - Security Standards vs. Government Restrictions - Final Thoughts and Closing Click here to watch this episode on YouTube. Creators & Guests Ethan Robish - Host Derek Banks - Host Bronwen Aker - Host Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybh
- 2 weeks ago33 min
AI Behaving Badly | Episode 73
In this episode of BHIS Presents: AI Security Ops, the team digs into some of the strangest recent examples of AI behaving badly.An AI agent finds a way around its sandbox using DNS. Malware asks four different AI models what it should do next. Attackers overwrite an AI agent’s “soul.” And a placeholder domain buried across GitHub becomes an unexpected security risk.Funny stories? Absolutely. But underneath them are some very familiar security problems.We dig into:- An OpenAI agent finding an unexpected path out through DNS- Whether a 2.5-hour response is fast enough in the age of AI- CLOSEDQUORUM malware using multiple AI models to make decisions- Why outbound AI API traffic could become a useful detection signal- The Carbonado botnet rewriting an agent’s SOUL.md instructions- The risks of exposed Docker daemons- How an unreserved placeholder domain can become an attack vector- Why AI agents make old security mistakes more consequentialThe takeaway: none of these techniques are particularly new. DNS tunneling, exposed services, compromised configuration files, and untrusted domains have existed for years. AI just gives attackers — and occasionally AI agents themselves — new ways to find and exploit those boring gaps at greater speed and scale. 2026-09-29-News (1).docx - Intro: AI Behaving Badly - The Agent That Phoned a Friend - Is a 2.5-Hour Response Fast Enough? - More OpenAI Agent Escapes and Security Lessons - Malware by Committee: CLOSEDQUORUM - Somebody Overwrote the Agent’s Soul - Why Exposed Docker Is So Dangerous - The Placeholder Domain That Bit Back - Final Takeaways: Old Problems, AI Speed and Scale Click here to watch this episode on YouTube. Creators & Guests Derek Banks - Host Ethan Robish - Guest Bronwen Aker - Host Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Oct 2, 202627 min
OWASP Agentic Top 10 [Part 2] | Episode 72
In this episode of BHIS Presents: AI Security Ops, the team continues its breakdown of the OWASP Agentic Skills Top 10, covering risks six through ten.Agentic skills may look like simple instructions, but they operate inside AI systems with access to tools, files, networks, and other resources. So what happens when those skills aren’t isolated, verified, monitored, or governed?We dig into:- AST06: Weak Isolation- AST07: Update Drift- AST08: Poor Scanning- AST09: No Governance- AST10: Cross-Platform Reuse- Why sandboxing the agent isn’t the same as isolating individual skills- The security tradeoffs between automatic updates and outdated skills- Why traditional scanners struggle with malicious instructions written in plain English- The importance of maintaining an inventory of agentic skills- How security controls can disappear when skills move between platformsThe takeaway: securing agentic skills requires more than checking them once before installation. Organizations need visibility into what skills are running, what they can access, how they change, and whether their security controls survive across environments. OWASPAgenticSkils-Part2.docxThis is Part 2 of our look at the OWASP Agentic Skills Top 10, covering AST06 through AST10. Part 1 can be found here#AISecurity #CyberSecurity #AgenticAI #AIAgents #OWASP #LLMSecurity #InfoSec #BHIS #Antisyphon - Intro: OWASP Agentic Skills Top 10, Part 2 - What Is an Agentic Skill? - AST06: Weak Isolation - AST07: Update Drift - AST08: Poor Scanning - AST09: No Governance - AST10: Cross-Platform Reuse - Final Thoughts and Closing Click here to watch this episode on YouTube. Creators & Guests Bronwen Aker - Host Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Sep 26, 202640 min
Will AI Take Over? | Episode 71
In this episode of BHIS Presents: AI Security Ops, the team tackles a big question:Could AI actually take over the internet?Recent warnings from AI industry leaders have raised concerns about autonomous agent swarms escaping containment, compromising systems, and operating at a scale humans may struggle to match.But what would “taking over the internet” actually require?The team looks at the problem from a hacker’s perspective — examining compute requirements, persistence, botnets, vulnerable infrastructure, the recent Hugging Face incident, and the difference between AI acting autonomously and humans using AI to accelerate attacks.We dig into:- Whether an autonomous AI swarm could realistically operate at internet scale- What the Hugging Face incident actually tells us about agentic security- The compute and infrastructure required to sustain a rogue agent swarm- How botnets and compromised systems could change the equation- Why existing vulnerabilities may be a bigger concern than hypothetical AI takeover scenarios- Whether slowing frontier AI development actually addresses the cybersecurity problem- The difference between AI exhibiting dangerous behavior and AI having intent- Why defenders need to focus on their real-world attack surface todayThe takeaway: AI is dramatically increasing the speed and scale of cybersecurity operations, but powerful models still operate inside systems designed, deployed, and connected by people.The immediate security question may be less “Will AI take over?” and more “What are we giving AI access to?”#AISecurity #CyberSecurity #AgenticAI #AIAgents #ArtificialIntelligence #LLMSecurity #InfoSec #BHIS #Antisyphon - Intro: Could AI Take Over the Internet? - Why AI Leaders Are Warning About Agent Swarms - What the Hugging Face Incident Actually Shows - The Compute Problem for Rogue AI Swarms - Could a rogue agent swarm be detected? - Botnets, Crypto Miners, and Finding a Foothold - How much new risk does AI create? - A closer look at the agents’ attack timeline - AI regulation and competition - Human-directed AI versus autonomous AI - From Compromised Computers to Internet-Scale Attacks - What Does “Taking Over the Internet” Actually Mean? - What an AI Takeover Could Realistically Look Like - Practical security risks for organizations - Could AI Agents Hide What They’re Doing? - AI, the Hacker Mindset, and Anthropomorphic Fallacy - Final Thoughts and Closing Click here to watch this episode on YouTube. Creators & Guests Derek Banks - Host Ethan Robish - Guest Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Sep 21, 202623 min
OWASP Agentic Top 10 [Part 1] | Episode 70
In this episode of BHIS Presents: AI Security Ops, the team breaks down the first five risks in the OWASP Agentic Skills Top 10 (Part 1). Agentic skills can give AI systems reusable instructions, workflows, and capabilities — but they also introduce a new attack surface. A skill may look like a simple markdown file, yet the agent following those instructions could have access to your filesystem, credentials, network, shell, or other sensitive resources. We dig into:- AST01: Malicious Skills- AST02: Supply Chain Compromise- AST03: Overprivileged Skills- AST04: Insecure Metadata- AST05: Untrusted External Instructions- Why skills should be treated more like software than configuration- How excessive permissions increase an agent’s blast radius- Why external content creates indirect prompt injection risks- How isolation, least privilege, and trusted sources can reduce riskThe takeaway: “just markdown” isn’t necessarily harmless when an AI agent can act on what it reads.This is Part 1 of our look at the OWASP Agentic Skills Top 10, covering AST01 through AST05.—Learn more about Black Hills Information Security:https://www.blackhillsinfosec.com/Check out Antisyphon Training:https://www.antisyphontraining.com/ - Intro: OWASP Agentic Skills Top 10, Part 1 - AST01: Malicious Skills - AST02: Supply Chain Compromise - AST03: Overprivileged Skills - AST04: Insecure Metadata - AST05: Untrusted External Instructions - Final Takeaways and Part 2 Preview Click here to watch this episode on YouTube. Creators & Guests Brian Fehrman - Host Derek Banks - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Sep 14, 202611 min
Agentic Skills | Episode 69
Agentic skills can make AI agents more capable and consistent—but they can also introduce serious security risks. This episode explains how skills work, why malicious skills rank as a leading OWASP concern, and how seemingly harmless Markdown instructions can enable credential theft, remote payload delivery, and manipulated recommendations. Real-world examples illustrate how malicious skills can evade scanners and exploit trusted marketplaces. The episode concludes with practical safeguards, including reviewing skill files, watching for external instructions and prompt injection, pinning versions, limiting permissions, and running agents inside isolated environments.Links:OWASP Agentic Skills Top 10Malicious AI Agent Skill Bypasses Security Scans and Seizes Full Control of Over 26,000 Agents - Agentic Skills and the OWASP Top 10 - Podcast Sponsors: BHIS and Antisyphon Training - What Is an Agentic Skill? - Skill Marketplaces and Widespread Adoption - Why Malicious Skills Are the #1 Risk - Remote Payloads and External Instructions - Malicious Skill Takes Control of 26,000 Agents - Money Radar and Manipulated Recommendations - How to Evaluate and Use Skills Safely - Closing Thoughts Click here to watch this episode on YouTube. Creators & Guests Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Sep 4, 202623 min
Data Becomes Code | Episode 68
What happens when AI coding agents treat vendor documentation as trusted instructions? Bronwen Aker and Derek Banks examine research showing how unclaimed package names and domains referenced in LLMs.txt files could lead coding agents to download and execute unintended code. They discuss how this AI-driven supply chain risk builds on familiar security problems, including dependency confusion, indirect prompt injection, and excessive permissions. The conversation also covers responsibility for AI-generated code, OpenAI’s cybersecurity proposals, and practical protections such as sandboxing, containerization, least privilege, network monitoring, and human oversight.LINK: Data Became Code: AI Agents Installed Unowned Packages Inside Fortune 500s - Welcome to AI Security Ops Podcast - AI Agents Install Unclaimed Software Packages - How LLMs.txt Creates a New Supply Chain Risk - Coding Agents Trust and Execute Vendor Documentation - Who Owns and Secures AI-Generated Code? - Prompt Injection, Sandboxing, and Containerization - Where Did the Malicious References Come From? - Reviewing OpenAI’s Cybersecurity Proposals - Making Cyber Defense a Leadership Priority - Practical Security Controls for Coding Agents - When Data Becomes Code - Closing Thoughts Click here to watch this episode on YouTube. Creators & Guests Derek Banks - Host Bronwen Aker - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
- Aug 31, 202615 min
Who is Responsible for an AI-Caused Breach? | Episode 67
This episode of AI Security Ops explores a growing question in AI security: who is responsible when an autonomous AI agent causes a real-world security breach without direct human instruction? Host Brian Fehrman examines reported incidents involving major AI labs, discusses how existing concepts such as liability, negligence, and intent may apply to AI-driven attacks, and considers the legal and security challenges organizations face as agentic AI systems become more capable. The episode highlights why responsibility for AI-caused harm remains an open question and what it could mean for the future of cybersecurity and regulation. - Intro - Who Is Responsible When an AI Agent Goes Rogue? - AI Models Breach Real-World Systems - OpenAI’s ExploitGym Incident & Hugging Face Breach - Anthropic and Meta Reveal Similar AI Incidents - Who Is Liable for an AI-Caused Breach? - Model Makers vs. Those Deploying the AI - Does the Computer Fraud and Abuse Act Apply? - AI Breaches and the Question of Negligence - Safeguards, Sandboxing, and Responsibility - What Happens When Your Organization Is the Victim? - AI Liability and the Self-Driving Car Parallel Click here to watch this episode on YouTube. Creators & Guests Brian Fehrman - Host Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.com☯️ Introducing BHIS Fusion Penetration Testinghttps://www.blackhillsinfosec.com/fusion-penetration-testing/Antisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com🔗 Register for FREE Infosec Webcasts, Anti-casts & Summitshttps://poweredbybhis.com Click here to view the episode transcript.
Get AI Security Ops summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
This Week in AI
Four AI experts analyze the latest news and trends in artificial intelligence each week.
AI Breakdown
Explores the latest advancements, ethical issues, and real-world impacts of artificial intelligence across industries.
The AI Podcast
Explores artificial intelligence advancements, trends, and ethics for enthusiasts and professionals.
AI For Humans: Weekly AI News, Tools & Trends
A weekly breakdown of major AI news, tools, and breakthroughs for both newcomers and seasoned enthusiasts.
The AI in Business Podcast
Interviews with AI executives reveal practical applications and strategic insights for business leaders adopting AI.
The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.
Global News Podcast
Global News Podcast AI
Practical AI
Discusses practical applications and real-world implementations of AI, machine learning, and related technologies for a broad audience.
Last Week in AI
Summarizes significant AI news on a weekly basis.
The AI Daily Brief: Artificial Intelligence News and Analysis
A daily analysis of artificial intelligence news, exploring its creative potential, industry impacts, and ethical challenges.
Learn AI
Learn AI
Mystery AI Hype Theater 3000
Linguist Emily M. Bender and sociologist Alex Hanna analyze AI claims, separating fact from fiction with expert guests.
About AI Security Ops
Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation).
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from AI Security Ops in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's AI Security Ops daily summary?
It's a free AI-powered email that summarizes new episodes of AI Security Ops as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the AI Security Ops podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official AI Security Ops product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Black Hills Information Security.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does AI Security Ops release new episodes?
AI Security Ops publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does AI Security Ops cover?
AI Security Ops covers topics including News, Education. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting AI Security Ops summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.