Securing AI on the Endpoint, Anthropic Dreams of AI Replicants, and the News - Michael Jenkins - ESW #481

Securing AI on the Endpoint - Zero Trust or Bust

Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give employees the power to build any software or workflow they can imagine, but what is the risk impact? These models aren't shy about adopting and downloading libraries, tools, and untrusted software to fulfill the goals they've been given.

We explore how execution control and ringfencing can add some sanity and security to the process.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Of all the things AI labs could be researching or cooking up, I wouldn't have guessed AI worms distributing inference across smart TVs would be on the list, but here we are. Adrian, Tyler, and Ayman mull over this strange research.

• It is too loose to be an academic paper, but maybe should have been?
• Is really a pressing AI risk we should be worried about right now?
• Why did Anthropic choose to focus on smart TVs and not more powerful IoT devices?

Finally, in the enterprise security news,

1. we discuss the vibes
2. certified organic books
3. don't mess with criminals
4. the history of ShinyHunters
5. building strategies on the wrong lessons
6. crypto wallet supply chain drama
7. Hot refrigerators
8. Reddit is great for breach tracking
9. Microsoft patch Tuesday is on track to hit 12,000 patches by next April

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-481