Show Notes
Is generative AI a security team's greatest new weapon or its biggest new vulnerability? This episode dives headfirst into the debate with two leading experts on opposite sides of the AI dragon. We 1st published this episode on Cloud Security Podcast and because of the feedback we received from those diving into all things AI Security, we wanted to bring it to those who haven't probably had the chance to hear it yet on this podcast.
On one side, discover how to leverage and "tame" AI for your defense. Jackie Bow explains how Anthropic uses its own powerful LLM, Claude, to revolutionize threat detection and response. Learn how AI can be used to: Build investigation and triage tools with incredible speed.
Break free from the "black box" of traditional security tools, offering more visibility and control.
Creatively "hallucinate" within set boundaries to uncover investigative paths a human might miss.
Lower the barrier to entry for security professionals, enabling them to build prototypes and tools without deep coding expertise.
On the other side, Kane Narraway provides a masterclass in threat modeling the new landscape of AI systems. He argues that while AI introduces new challenges, many are amplifications of existing SaaS risks. This conversation covers the critical aspects of securing AI, including: Why access, integrations, and authorization are the biggest risk factors in enterprise AI.
How to approach threat modeling for both in-house and third-party AI tools.
The security challenges of emerging standards like MCP (Meta-Controller Protocol) and the importance of securing the data AI tools can access.
The critical need for security teams to adopt AI to keep pace with modern engineering departments.
Questions asked: (00:00) Intro: Slaying or Training the AI Dragon at BSidesSF?(02:22) Meet Jackie Bow (Anthropic): Training AI for Security Defense(02:51) Meet Kane Narraway (Canva): Securing AI Systems & Facing Risks(03:49) Was Traditional Security Ops "Hot Garbage"? Setting the Scene(05:57) The Real Risks: What AI Brings to Your Organisation(06:53) AI in Action: Leveraging AI for Threat Detection & Response(07:46) AI Hallucinations: Bug, Feature, or Security Blind Spot?(08:55) Threat Modeling AI: The Core Challenges & Learnings(12:26) Getting Started: Practical AI Threat Detection First Steps(16:42) AI & Cloud: Integrating AI into Your Existing Environments(25:21) AI vs. Traditional: Is Threat Modeling Different Now?(28:34) Your First Step: Where to Begin with AI Threat Modeling?(31:59) Fun Questions & Final Thoughts on the Future of AI Security
Resources BSidesSF 2025 - AI's Bitter Lesson for SOCs: Let Machines Be Machines BSidesSF 2025 - One Search To Rule Them All: Threat Modelling AI Search
More from AI Security Podcast
While attackers using AI can now operate at "machine speed," traditional enterprise security teams are often stuck moving at "meeting speed." To bridge this gap, organizations must fundamentally rethink how they structure their security operations, leverage AI for defensive scale, and eliminate the bureaucratic bottlenecks that delay critical patching and remediation. In this episode of the AI Security Podcast, Ashish and Caleb sit down to analyze the September 2026 Anthropic Threat Report and the underlying causes of recent high-profile AI sandbox escapes. Caleb explains how security leaders can fight AI with AI, sharing how he successfully used autonomous agents to conduct a 98% accurate least-privilege architectural audit across his entire organization. Caleb also speaks about the "barbell hiring" strategy eliminating middle management to build a highly agile, cross-functional Security SWAT team composed entirely of principal-level experts and junior engineers.
As the speed of automated threats outpaces traditional patching cycles, organizations must prioritize structural containment over purely reactive detection. Cloud network architectures frequently default to permissive egress, meaning workloads can reach the public internet unless explicitly restricted. In this episode, Doug Merritt, CEO of Aviatrix and former CEO of Splunk, details how to build practical containment strategies for modern cloud and AI environments. He outlines how security teams can implement egress controls in monitor mode to validate traffic without risking system downtime. The discussion covers the transition from legacy IP-based firewalls to identity-based policies for ephemeral serverless and Kubernetes workloads. By prioritizing reachability and blast radius as core metrics, organizations can systematically reduce their attack surface and improve resilience.
When non-technical employees can spin up fully functioning apps in days and AI agents are running parallel workflows that babysit their own pull requests, the traditional SDLC is dead. In this episode, Ashish sits down with Prahathess Rengasamy, Senior Security Engineer at SpaceX AI, to discuss how the staggering compression of development time requires an entirely new approach to security engineering. Prahathess explains why legacy 10-minute PR wait times are incompatible with multi-agent workflows, and how security teams can build internal Model Context Protocol (MCP) servers to inject compliance and security guardrails directly into an agent's context window. We unpack the differences between Q&A chatbots and autonomous coding agents, the critical need to preserve foundational preventative cloud controls (like AWS SCPs and GCP Org Policies), and why holding an autonomous machine accountable for management decisions is a critical architectural flaw. Finally, Prahathess breaks down the "build vs. buy" debate, revealing how small security teams can leverage AI to rapidly deploy internal platforms and paved roads that previously took months to engineer.
How does a global financial engine moving trillions annually manage cyber risk in the age of AI? In this episode, Ashish sits down with Subra Kumaraswamy, CISO of Visa. Subra discusses Visa's journey as part of Anthropic's Glasswing Project testing the Mythos model, revealing why a majority of Mythos-discovered vulnerabilities were non-exploitable due to robust zero-trust architecture and micro-segmentation. Subra explains why Visa open-sourced VVAH (Visa Vulnerability Agentic Harness) to help security teams scale vulnerability discovery, prioritization, and remediation across any model. He also breaks down how Visa triages 98% of Level 1 SOC incidents with AI agents, why "Mean Time to Adapt" (MTTA) is replacing legacy patch timelines, and how cross-functional AI governance enables innovation while maintaining strict production controls
Is the AI "vulnpocalypse" already here? According to Casey Ellis, Founder of Bugcrowd and pioneer of Disclose.io, we aren't quite in an apocalypse yet, we're actually in a "slopdemic." The cost of discovering vulnerabilities has plummeted, flooding bug bounty and SOC triage queues with low-quality, noisy submissions. Because these queues are so overwhelmed, many highly skilled researchers are simply hoarding zero-days because reporting them has become too difficult. In this episode, Ashish sits down with Casey to unpack the major themes and mindset shifts from RSA and Black Hat 2026. Casey breaks down how AI is shrinking the OODA loop for defenders, forcing the industry to adopt a true "assume breach" mentality and reconsider deception technology to frustrate active adversaries. They also explore the risks of non-technical employees "vibe coding" corporate applications and why CISOs must get hands-on with AI tools at home if they want to understand the risks their workforce is taking.