Hardware-level zero trust, don't trust AI with your employees, and the news - Matias Katz, J Wolfgang Goerlich - ESW #446

What if you had enterprise-grade network security protections traveling with your users' laptops? What if it could be built into the laptop, but still stay safe even if the laptop OS and firmware were entirely compromised?

Mathias and his company, Byos have built such a thing, and BOY do we have some questions for him.

Addressing the nuanced, nefarious threats of AI

Sure, we need to worry about AI prompt injection and AI data leakage, but what about the threats to our BRAINS? Seriously, as we start to have daily conversations with this technology, how are they going to shape how we think? What inherent biases in the training, fine tuning, guardrails, or lack of guardrails are going to affect our decisions or how we work?

Wolfgang is concerned about this, so he performed a human/AI experiment. With almost 1000 people partaking in the experiment, the results are sure to be intriguing.

Finally, in the enterprise security news,

1. survey results on how folks are feeling about openclaw
2. some hidden drama discovered in KEV updates
3. some new KEV tools
4. is AI replacing traditional code scanning tools?
5. remote code execution in notepad
6. no, not notepad++, NOTEPAD.EXE
7. you know, the one that ships preinstalled on Windows
8. the RSAC innovation sandbox finalists
9. dealing with legacy vulnerabilities
10. Don't accept OpenClaw Mac Minis from strangers!

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-446