Securing AI Agents with Dave Lewis, Enterprise News, and interviews from Oktane 2025 - Dave Lewis, Mike Poole, Conor Mulherin - ESW #430

In this week's sponsored interview, we dive into the evolving security landscape around AI agents, where we stand with AI agent adoption. We also touch on topics such as securing credentials in browser workflows and why identity is foundational to AI agent security.

• 1Password Addresses a Critical AI Browser Agent Security Gap
• 1Password Now Available in Comet - the AI Browser by Perplexity

This segment is sponsored by 1Password. Visit https://securityweekly.com/1password to learn more!

In this week's enterprise security news,

1. one big acquisition, two small fundings
2. not all AI is bad
3. deepfakes are getting crazy good
4. make sure you log what your AI agents do
5. Copilot prompt injection
6. NordVPN tries to pull a jedi mind trick on us
7. failure rate in AI adoption is a feature not a bug?
8. using facial recognition to find Tinder profiles
9. a predictable squirrel story

All that and more, on this episode of Enterprise Security Weekly.

Interview with Connor Mulherin of TechSoup

The cybersecurity landscape in the nonprofit sector is evolving quickly, with organizations facing unique challenges due to limited resources, sensitive mission-driven work, and developing policies and training programs. Connor Mulherin, Director and GM of Validation Services at TechSoup, will discuss the industry's need for accessible and collaborative solutions to provide affordable technology leadership and security guidance. It will highlight how nonprofit organizations can build long-term digital resilience and combat these growing challenges.

Segment Resources:

• www.techsoup.org
• Tech Impact Launch CTO Program For Small NPOs
• Virtual Chief Technology Officer Program for the Nonprofit Sector

Interview with Mike Poole, Director of Cyber Security at Werner Enterprises

In today's digital landscape, cybersecurity is not just a technical issue—it's a business imperative. Organizations that prioritize cybersecurity culture see fewer incidents and stronger resilience against evolving threats. But how do you foster a security-first mindset across an organization?

This session will explore the critical components of building and maintaining a robust cybersecurity culture, starting with executive leadership buy-in—a fundamental step in securing resources and driving organizational change. We'll then dive into the power of monthly phishing exercises, which reinforce awareness and preparedness. Attendees will also learn how to develop effective training programs that engage employees at all levels and create lasting behavioral change. Finally, we'll discuss the role of cybersecurity-themed events, particularly during Cybersecurity Awareness Month, as a powerful tool to capture attention and reinforce key security principles.

This segment is sponsored by Oktane by Okta. Visit https://securityweekly.com/oktane to learn more about them!

Show Notes: https://securityweekly.com/esw-430