Show Notes
Enterprises are running more AI agents than their security teams realize, and attackers only need to be right once. Anand Oswal, EVP of Network Security at Palo Alto Networks, explains how to secure agents across four surfaces: enterprise, SaaS, endpoints, and the browser. With host Michael Krigsman, he covers shadow agent discovery, MCP and browser risks, prompt injection, agent identity, and why a unified platform beats a stack of point products.
YOU’LL DISCOVER
✅ The four agent surfaces every CISO must secure at once: enterprise, SaaS, endpoints, and the browser ✅ Why discovery comes first: you cannot secure agents, models, tools, and plugins you cannot see ✅ The Palo Alto Networks finding that one third of public MCP servers carry takeover level vulnerabilities ✅ How vibe coding agents demand privileged access to local files, terminals, and cloud credentials ✅ How browser agents inherit your session and cookies and can perform identity impersonation ✅ Runtime threats to know: prompt injection, memory poisoning, tool misuse, and model DoS ✅ How MCP and A2A protocols expand the attack surface, and why a centralized AI gateway anchors identity, runtime, and observability controls ✅ The case for zero trust, an AI-driven SOC, and one unified platform over point products, and where Prisma AI fits
⏱️ TIMESTAMPS
0:00 Introduction 0:22 Agent memory poisoning and tool misuse 0:59 Discovering shadow agents across four surfaces 2:32 Vibe coding agents and MCP risk 4:46 Browser agents and session misuse 6:20 Runtime threats and prompt injection 7:17 Agent-to-agent protocols and attack surface 8:04 Agent identity and the control plane 9:16 Centralizing control at the AI gateway 10:23 Zero trust and an AI-driven SOC 11:29 One platform, not point products
Subscribe for weekly conversations with the business and technology leaders shaping the enterprise.
Get the CXOTalk newsletter: https://newsletter.cxotalk.com
Show notes, transcript, and summary: https://www.cxotalk.com/episode/palo-alto-networks-evp-securing-ai-agents-in-the-enterprise
Episode 924
#CXOTalk #EnterpriseAI #CIO #AIGovernance #AgenticAI #IBM #DigitalTransformation #AIStrategy #AILeadership
More from CXOTalk
Check out Gartner Symposium: https://cxo.news/KGg8XY === Tamar Yehoshua is Chief Product and AI Officer at Atlassian, where AI agents are now direct users of the software her team builds. She led product at Google Search and Slack before joining Atlassian, and in this conversation she explains how the company designs products for both people and agents: the teamwork graph that gives an agent the organizational context it arrives without, who stays accountable when a chain of agents goes wrong, how Atlassian measures AI spending with its CFO, and why she never believed agents would kill SaaS.
Check out Gartner Symposium: https://cxo.news/KGg8XY ======== More than 90% of the code at Snap is now written by AI agents, and a code review agent checks most of it within ten minutes. Saral Jain, SVP, Head of Engineering and CIO at Snap Inc., built the system that makes that safe for nearly a billion monthly users. He explains the golden path of 14 managed agents, the guardrails that account for more than half of the investment, and why accountability still rests with a named human for every change that ships.
Enterprise AI has moved past experimentation and now has to prove its return. Ed Sim, Founder and General Partner of boldstart ventures, ranked the No. 1 seed investor in the Business Insider Seed 100 two years running, sees hundreds of AI startup pitches a year, and writes the first check into companies enterprises buy from years later. He wrote the first check into Snyk and backed Protect AI, which Palo Alto Networks acquired for more than $700 million.
Most enterprise AI pilots stall or fail before production, and the blocker is rarely the model.
Are AI agents ready for banking and financial services? Former UBS Group CIO Oliver Bussmann explains the risks to trust and reputation in banking.