AI Security Ops Transistor (https://transistor.fm) https://feeds.transistor.fm/ai-security-ops Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation). © 2025 Black Hills Information Security 0543e6d6-b875-52ac-bb17-d2b531254cfe yes AI Security Ops - Why Did We Create This Podcast? | Podcast Trailer en-us Fri, 27 Mar 2026 15:30:15 -0400 Sat, 28 Mar 2026 01:04:19 -0400 https://aisecurityops.transistor.fm https://img.transistorcdn.com/9ziXpU-Xx8IwFIqNBqmAG5wnRRzkBikBaMGdqXXSw9w/rs:fill:0:0:1/w:1400/h:1400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8zYjBm/MzE1MWI2YmE4ZGJh/MDQ3MmJkMTkxZGNl/MjBjNS5wbmc.jpg AI Security Ops https://aisecurityops.transistor.fm episodic Black Hills Information Security Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation). Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation). Cyber Security, Artificial Intelligence, A.I.,AI,infosec Black Hills Information Security marketing@blackhillsinfosec.com No No Embedding Space Attacks | Episode 45 45 45 Embedding Space Attacks | Episode 45 full e1e0a047-8183-4ad1-9a57-44d1f7d8c104 https://share.transistor.fm/s/61d8bc24 In this episode of BHIS Presents: AI Security Ops, the team explores embedding space attacks — a lesser-known but increasingly important threat in modern AI systems — and how attackers can manipulate the mathematical foundations of how models understand data.

Unlike prompt injection, which targets instructions, embedding attacks operate at a deeper level by influencing how data is represented, retrieved, and interpreted inside vector spaces. By subtly altering embeddings or poisoning data sources, attackers can manipulate AI behavior without ever touching the model directly.

Through a hands-on walkthrough of a custom notebook with rich visualizations, this episode breaks down how embeddings work, why they are critical to LLM-powered systems like RAG pipelines, and how attackers can exploit them in real-world scenarios.

We dig into:
- What embeddings are and how AI systems convert text into numerical representations
- How vector spaces enable similarity search and retrieval in LLM applications
- What embedding space attacks are and why they matter for AI security
- How small perturbations in data can drastically change model behavior
- The risks of poisoned data in RAG and vector databases
- How attackers can influence search results and downstream AI outputs
- Why these attacks are subtle, hard to detect, and often overlooked
- The role of visualization in understanding embedding behavior
- Real-world implications for AI-powered applications and workflows
- Defensive considerations when building with embeddings and vector stores

This episode focuses on the foundational layer of AI systems, showing how security risks extend beyond prompts and into the underlying data representations that power modern AI.

⸻

📚 Key Concepts Covered

AI Foundations
- Embeddings and vector representations
- Similarity search and vector space reasoning

AI Security Risks
- Embedding space manipulation
- Data poisoning in vector databases
- Retrieval manipulation in RAG systems

Applications & Impact
- LLM-powered search and assistants
- AI pipelines using embeddings
- Risks in production AI systems

#AISecurity #Embeddings #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #InfoSec

Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

  • (00:00) - Intro & Episode Overview
  • (01:39) - What Are Embeddings? (AI Only Understands Numbers)
  • (03:44) - The Embedding Process (Text → Vectors)
  • (07:43) - Similarity, Classification & Vector Math
  • (09:55) - Visualizing Embedding Space (2D Projection)
  • (14:29) - Classifiers
  • (15:39) - Playing Games with Information
  • (18:06) - Attack Techniques: Synonyms & Context Manipulation
  • (20:29) - Context Padding
  • (27:10) - Collision Attacks, Defenses & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> In this episode of BHIS Presents: AI Security Ops, the team explores embedding space attacks — a lesser-known but increasingly important threat in modern AI systems — and how attackers can manipulate the mathematical foundations of how models understand data.

Unlike prompt injection, which targets instructions, embedding attacks operate at a deeper level by influencing how data is represented, retrieved, and interpreted inside vector spaces. By subtly altering embeddings or poisoning data sources, attackers can manipulate AI behavior without ever touching the model directly.

Through a hands-on walkthrough of a custom notebook with rich visualizations, this episode breaks down how embeddings work, why they are critical to LLM-powered systems like RAG pipelines, and how attackers can exploit them in real-world scenarios.

We dig into:
- What embeddings are and how AI systems convert text into numerical representations
- How vector spaces enable similarity search and retrieval in LLM applications
- What embedding space attacks are and why they matter for AI security
- How small perturbations in data can drastically change model behavior
- The risks of poisoned data in RAG and vector databases
- How attackers can influence search results and downstream AI outputs
- Why these attacks are subtle, hard to detect, and often overlooked
- The role of visualization in understanding embedding behavior
- Real-world implications for AI-powered applications and workflows
- Defensive considerations when building with embeddings and vector stores

This episode focuses on the foundational layer of AI systems, showing how security risks extend beyond prompts and into the underlying data representations that power modern AI.

⸻

📚 Key Concepts Covered

AI Foundations
- Embeddings and vector representations
- Similarity search and vector space reasoning

AI Security Risks
- Embedding space manipulation
- Data poisoning in vector databases
- Retrieval manipulation in RAG systems

Applications & Impact
- LLM-powered search and assistants
- AI pipelines using embeddings
- Risks in production AI systems

#AISecurity #Embeddings #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #InfoSec

Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

  • (00:00) - Intro & Episode Overview
  • (01:39) - What Are Embeddings? (AI Only Understands Numbers)
  • (03:44) - The Embedding Process (Text → Vectors)
  • (07:43) - Similarity, Classification & Vector Math
  • (09:55) - Visualizing Embedding Space (2D Projection)
  • (14:29) - Classifiers
  • (15:39) - Playing Games with Information
  • (18:06) - Attack Techniques: Synonyms & Context Manipulation
  • (20:29) - Context Padding
  • (27:10) - Collision Attacks, Defenses & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Thu, 26 Mar 2026 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1985 In this episode of BHIS Presents: AI Security Ops, the team explores embedding space attacks — a lesser-known but increasingly important threat in modern AI systems — and how attackers can manipulate the mathematical foundations of how models understand data.

Unlike prompt injection, which targets instructions, embedding attacks operate at a deeper level by influencing how data is represented, retrieved, and interpreted inside vector spaces. By subtly altering embeddings or poisoning data sources, attackers can manipulate AI behavior without ever touching the model directly.

Through a hands-on walkthrough of a custom notebook with rich visualizations, this episode breaks down how embeddings work, why they are critical to LLM-powered systems like RAG pipelines, and how attackers can exploit them in real-world scenarios.

We dig into:
- What embeddings are and how AI systems convert text into numerical representations
- How vector spaces enable similarity search and retrieval in LLM applications
- What embedding space attacks are and why they matter for AI security
- How small perturbations in data can drastically change model behavior
- The risks of poisoned data in RAG and vector databases
- How attackers can influence search results and downstream AI outputs
- Why these attacks are subtle, hard to detect, and often overlooked
- The role of visualization in understanding embedding behavior
- Real-world implications for AI-powered applications and workflows
- Defensive considerations when building with embeddings and vector stores

This episode focuses on the foundational layer of AI systems, showing how security risks extend beyond prompts and into the underlying data representations that power modern AI.

⸻

📚 Key Concepts Covered

AI Foundations
- Embeddings and vector representations
- Similarity search and vector space reasoning

AI Security Risks
- Embedding space manipulation
- Data poisoning in vector databases
- Retrieval manipulation in RAG systems

Applications & Impact
- LLM-powered search and assistants
- AI pipelines using embeddings
- Risks in production AI systems

#AISecurity #Embeddings #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #InfoSec

Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

  • (00:00) - Intro & Episode Overview
  • (01:39) - What Are Embeddings? (AI Only Understands Numbers)
  • (03:44) - The Embedding Process (Text → Vectors)
  • (07:43) - Similarity, Classification & Vector Math
  • (09:55) - Visualizing Embedding Space (2D Projection)
  • (14:29) - Classifiers
  • (15:39) - Playing Games with Information
  • (18:06) - Attack Techniques: Synonyms & Context Manipulation
  • (20:29) - Context Padding
  • (27:10) - Collision Attacks, Defenses & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Derek Banks Indirect Prompt Injection | Episode 44 44 44 Indirect Prompt Injection | Episode 44 full f970a7c3-c0c6-47fa-b902-ca65c24168c1 https://share.transistor.fm/s/e2e31bd3 In this episode of BHIS Presents: AI Security Ops, the team breaks down indirect prompt injection — the #1 risk in the OWASP Top 10 for LLM Applications — and why it represents one of the most dangerous and misunderstood threats in modern AI systems.

Unlike traditional attacks, indirect prompt injection doesn’t require malware, credentials, or even user interaction. Instead, attackers hide malicious instructions inside everyday content like emails, documents, or web pages — and wait for AI systems to unknowingly execute them.

From real-world exploits like EchoLeak to in-the-wild attacks observed by Palo Alto Unit 42, this episode explores how attackers are already abusing AI-powered tools in production environments — and why current defenses are struggling to keep up.

We dig into:
• What indirect prompt injection is and how it differs from direct attacks
• Why OWASP ranks prompt injection as the #1 LLM security risk
• How attackers hide payloads inside emails, documents, and web content
• The EchoLeak zero-click exploit against Microsoft 365 Copilot
• Web-based prompt injection attacks observed in the wild (Unit 42)
• Exploits targeting AI coding tools like Cursor IDE and GitHub Copilot
• How RAG systems amplify the risk through poisoned knowledge bases
• Why LLM architecture makes this problem fundamentally hard to solve
• Research showing modern defenses still fail 50%+ of the time
• Practical mitigation strategies: least privilege, human-in-the-loop, and observability

This episode focuses on the real-world security implications of AI adoption, showing how attackers are already leveraging these techniques — and what defenders need to understand as AI becomes deeply embedded in business workflows.

⸻

📚 Key References

Prompt Injection & LLM Risk
• OWASP Top 10 for LLM Applications 2025 — https://owasp.org

Real-World Attacks
• EchoLeak (CVE-2025-32711) — Aim Security / arXiv
• Unit 42 — Web-Based Indirect Prompt Injection in the Wild (March 2026) — https://unit42.paloaltonetworks.com

AI System Vulnerabilities
• Cursor IDE (CVE-2025-59944)
• GitHub Copilot (CVE-2025-53773)
• Lakera — Zero-Click MCP Attack — https://lakera.ai

Research on Defenses
• Zhan et al. — Adaptive Attacks Break Defenses (NAACL 2025)
• Anthropic System Card (Feb 2026)
• Google Gemini Security Research (2025)

Standards & Guidance
• NIST AI Risk Management Framework — https://nist.gov
• MITRE ATLAS — https://atlas.mitre.org
• ISO/IEC 42001 AI Management Systems

#AISecurity #PromptInjection #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #infosec

  • (00:00) - Intro & BHIS / Antisyphon Overview
  • (01:19) - OWASP Top 10 & Prompt Injection Context
  • (01:41) - Indirect Prompt Injection Explained (Stored Attack Analogy)
  • (02:54) - Real-World Attack Scenarios (Calendar & Hidden Payloads)
  • (05:10) - EchoLeak & Zero-Click Copilot Exploit
  • (06:10) - Weaponized Excel Prompt Injection PoC
  • (06:50) - Email Injection & AI Summarization Abuse
  • (09:07) - Why Detection & Prevention Are So Difficult
  • (14:02) - Mitigations & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> In this episode of BHIS Presents: AI Security Ops, the team breaks down indirect prompt injection — the #1 risk in the OWASP Top 10 for LLM Applications — and why it represents one of the most dangerous and misunderstood threats in modern AI systems.

Unlike traditional attacks, indirect prompt injection doesn’t require malware, credentials, or even user interaction. Instead, attackers hide malicious instructions inside everyday content like emails, documents, or web pages — and wait for AI systems to unknowingly execute them.

From real-world exploits like EchoLeak to in-the-wild attacks observed by Palo Alto Unit 42, this episode explores how attackers are already abusing AI-powered tools in production environments — and why current defenses are struggling to keep up.

We dig into:
• What indirect prompt injection is and how it differs from direct attacks
• Why OWASP ranks prompt injection as the #1 LLM security risk
• How attackers hide payloads inside emails, documents, and web content
• The EchoLeak zero-click exploit against Microsoft 365 Copilot
• Web-based prompt injection attacks observed in the wild (Unit 42)
• Exploits targeting AI coding tools like Cursor IDE and GitHub Copilot
• How RAG systems amplify the risk through poisoned knowledge bases
• Why LLM architecture makes this problem fundamentally hard to solve
• Research showing modern defenses still fail 50%+ of the time
• Practical mitigation strategies: least privilege, human-in-the-loop, and observability

This episode focuses on the real-world security implications of AI adoption, showing how attackers are already leveraging these techniques — and what defenders need to understand as AI becomes deeply embedded in business workflows.

⸻

📚 Key References

Prompt Injection & LLM Risk
• OWASP Top 10 for LLM Applications 2025 — https://owasp.org

Real-World Attacks
• EchoLeak (CVE-2025-32711) — Aim Security / arXiv
• Unit 42 — Web-Based Indirect Prompt Injection in the Wild (March 2026) — https://unit42.paloaltonetworks.com

AI System Vulnerabilities
• Cursor IDE (CVE-2025-59944)
• GitHub Copilot (CVE-2025-53773)
• Lakera — Zero-Click MCP Attack — https://lakera.ai

Research on Defenses
• Zhan et al. — Adaptive Attacks Break Defenses (NAACL 2025)
• Anthropic System Card (Feb 2026)
• Google Gemini Security Research (2025)

Standards & Guidance
• NIST AI Risk Management Framework — https://nist.gov
• MITRE ATLAS — https://atlas.mitre.org
• ISO/IEC 42001 AI Management Systems

#AISecurity #PromptInjection #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #infosec

  • (00:00) - Intro & BHIS / Antisyphon Overview
  • (01:19) - OWASP Top 10 & Prompt Injection Context
  • (01:41) - Indirect Prompt Injection Explained (Stored Attack Analogy)
  • (02:54) - Real-World Attack Scenarios (Calendar & Hidden Payloads)
  • (05:10) - EchoLeak & Zero-Click Copilot Exploit
  • (06:10) - Weaponized Excel Prompt Injection PoC
  • (06:50) - Email Injection & AI Summarization Abuse
  • (09:07) - Why Detection & Prevention Are So Difficult
  • (14:02) - Mitigations & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Thu, 19 Mar 2026 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 970 In this episode of BHIS Presents: AI Security Ops, the team breaks down indirect prompt injection — the #1 risk in the OWASP Top 10 for LLM Applications — and why it represents one of the most dangerous and misunderstood threats in modern AI systems.

Unlike traditional attacks, indirect prompt injection doesn’t require malware, credentials, or even user interaction. Instead, attackers hide malicious instructions inside everyday content like emails, documents, or web pages — and wait for AI systems to unknowingly execute them.

From real-world exploits like EchoLeak to in-the-wild attacks observed by Palo Alto Unit 42, this episode explores how attackers are already abusing AI-powered tools in production environments — and why current defenses are struggling to keep up.

We dig into:
• What indirect prompt injection is and how it differs from direct attacks
• Why OWASP ranks prompt injection as the #1 LLM security risk
• How attackers hide payloads inside emails, documents, and web content
• The EchoLeak zero-click exploit against Microsoft 365 Copilot
• Web-based prompt injection attacks observed in the wild (Unit 42)
• Exploits targeting AI coding tools like Cursor IDE and GitHub Copilot
• How RAG systems amplify the risk through poisoned knowledge bases
• Why LLM architecture makes this problem fundamentally hard to solve
• Research showing modern defenses still fail 50%+ of the time
• Practical mitigation strategies: least privilege, human-in-the-loop, and observability

This episode focuses on the real-world security implications of AI adoption, showing how attackers are already leveraging these techniques — and what defenders need to understand as AI becomes deeply embedded in business workflows.

⸻

📚 Key References

Prompt Injection & LLM Risk
• OWASP Top 10 for LLM Applications 2025 — https://owasp.org

Real-World Attacks
• EchoLeak (CVE-2025-32711) — Aim Security / arXiv
• Unit 42 — Web-Based Indirect Prompt Injection in the Wild (March 2026) — https://unit42.paloaltonetworks.com

AI System Vulnerabilities
• Cursor IDE (CVE-2025-59944)
• GitHub Copilot (CVE-2025-53773)
• Lakera — Zero-Click MCP Attack — https://lakera.ai

Research on Defenses
• Zhan et al. — Adaptive Attacks Break Defenses (NAACL 2025)
• Anthropic System Card (Feb 2026)
• Google Gemini Security Research (2025)

Standards & Guidance
• NIST AI Risk Management Framework — https://nist.gov
• MITRE ATLAS — https://atlas.mitre.org
• ISO/IEC 42001 AI Management Systems

#AISecurity #PromptInjection #CyberSecurity #LLMSecurity #AIThreats #BHIS #AIAgents #ArtificialIntelligence #infosec

  • (00:00) - Intro & BHIS / Antisyphon Overview
  • (01:19) - OWASP Top 10 & Prompt Injection Context
  • (01:41) - Indirect Prompt Injection Explained (Stored Attack Analogy)
  • (02:54) - Real-World Attack Scenarios (Calendar & Hidden Payloads)
  • (05:10) - EchoLeak & Zero-Click Copilot Exploit
  • (06:10) - Weaponized Excel Prompt Injection PoC
  • (06:50) - Email Injection & AI Summarization Abuse
  • (09:07) - Why Detection & Prevention Are So Difficult
  • (14:02) - Mitigations & Final Thoughts

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Brian Fehrman Top AI Security Concerns | Episode 43 43 43 Top AI Security Concerns | Episode 43 full 23424c64-751a-40f9-8ced-a8370fb96228 https://share.transistor.fm/s/6889addc In this episode of BHIS Presents: AI Security Ops, Bronwen Aker and Dr. Brian Fehrman break down some of the top AI security concerns being discussed by researchers, security firms, and government agencies this year.

As AI capabilities rapidly expand, so does the attack surface. From agentic AI systems being used by attackers, to deepfakes at industrial scale, to the persistent challenge of prompt injection, security teams are trying to understand what risks are real, what’s hype, and where defenders should focus first.

We dig into:
- Why agentic AI is emerging as a major security concern
- How attackers could weaponize autonomous agents to scale operations
- The risk of malicious agent skills and AI supply chain attacks
- Why overly broad permissions make agent-based systems dangerous
- AI-assisted phishing campaigns and social engineering at scale
- The rise of deepfakes and corporate fraud driven by generative AI
- Why humans still struggle to reliably detect deepfake media
- The economics of deepfake fraud and real-world incidents
- Prompt injection attacks and why they remain difficult to solve
- Whether future models may autonomously discover and exploit jailbreaks

This episode looks at the practical security implications of today’s AI ecosystem — where the biggest risks are coming from, how attackers may leverage AI systems, and what defenders should be thinking about as these technologies continue to evolve.

📚 Key References

Agentic AI Threats
- CrowdStrike 2026 Global Threat Report — https://www.crowdstrike.com
- IBM X-Force 2026 Threat Intelligence Index — https://www.ibm.com/security/x-force
- Cisco State of AI Security 2026 — https://www.cisco.com/site/us/en/products/security/state-of-ai-security.html#tabs-9da71fbd27-item-1288c79d71-tab

Deepfakes & AI-Driven Fraud
- WEF Global Cybersecurity Outlook 2026 — https://www.weforum.org/publications/global-cybersecurity-outlook-2026/
- International AI Safety Report 2026 — https://www.internationalaisafetyreport.org

AI Security & Infrastructure Risk
- CISA Joint Guidance on AI in OT — https://www.cisa.gov/news-events/news/new-joint-guide-advances-secure-integration-artificial-intelligence-operational-technology

Prompt Injection & LLM Exploitation
- Schneier et al., “The Promptware Kill Chain” — https://www.lawfaremedia.org/article/the-promptware-kill-chain
- Palo Alto Unit 42 — “Fooling AI Agents: Web-Based Indirect Prompt Injection Observed in the Wild”
https://unit42.paloaltonetworks.com/indirect-prompt-injection-ai-agents/

  • (00:00) - Intro & Episode Overview
  • (02:18) - Agentic AI as a Security Threat (CrowdStrike 2026 Global Threat Report, IBM X-Force Index)
  • (03:46) - Malicious Agent Skills & AI Supply Chain Attacks (Cisco State of AI Security)
  • (04:58) - How Agent Skills Actually Work
  • (07:47) - Permissions & Guardrails for AI Agents (CISA AI in OT Guidance)
  • (09:57) - AI-Generated Phishing Campaigns (CrowdStrike / IBM Threat Reports)
  • (13:58) - Deepfakes at Industrial Scale (WEF Global Cybersecurity Outlook)
  • (15:38) - Corporate Fraud & Deepfake Incidents (International AI Safety Report)
  • (17:21) - Why Humans Struggle to Detect Deepfakes
  • (21:13) - Prompt Injection Attacks Explained (Schneier – Promptware Kill Chain)
  • (24:35) - AI Models Jailbreaking Other Models (Palo Alto Unit 42 Research)
  • (28:59) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> In this episode of BHIS Presents: AI Security Ops, Bronwen Aker and Dr. Brian Fehrman break down some of the top AI security concerns being discussed by researchers, security firms, and government agencies this year.

As AI capabilities rapidly expand, so does the attack surface. From agentic AI systems being used by attackers, to deepfakes at industrial scale, to the persistent challenge of prompt injection, security teams are trying to understand what risks are real, what’s hype, and where defenders should focus first.

We dig into:
- Why agentic AI is emerging as a major security concern
- How attackers could weaponize autonomous agents to scale operations
- The risk of malicious agent skills and AI supply chain attacks
- Why overly broad permissions make agent-based systems dangerous
- AI-assisted phishing campaigns and social engineering at scale
- The rise of deepfakes and corporate fraud driven by generative AI
- Why humans still struggle to reliably detect deepfake media
- The economics of deepfake fraud and real-world incidents
- Prompt injection attacks and why they remain difficult to solve
- Whether future models may autonomously discover and exploit jailbreaks

This episode looks at the practical security implications of today’s AI ecosystem — where the biggest risks are coming from, how attackers may leverage AI systems, and what defenders should be thinking about as these technologies continue to evolve.

📚 Key References

Agentic AI Threats
- CrowdStrike 2026 Global Threat Report — https://www.crowdstrike.com
- IBM X-Force 2026 Threat Intelligence Index — https://www.ibm.com/security/x-force
- Cisco State of AI Security 2026 — https://www.cisco.com/site/us/en/products/security/state-of-ai-security.html#tabs-9da71fbd27-item-1288c79d71-tab

Deepfakes & AI-Driven Fraud
- WEF Global Cybersecurity Outlook 2026 — https://www.weforum.org/publications/global-cybersecurity-outlook-2026/
- International AI Safety Report 2026 — https://www.internationalaisafetyreport.org

AI Security & Infrastructure Risk
- CISA Joint Guidance on AI in OT — https://www.cisa.gov/news-events/news/new-joint-guide-advances-secure-integration-artificial-intelligence-operational-technology

Prompt Injection & LLM Exploitation
- Schneier et al., “The Promptware Kill Chain” — https://www.lawfaremedia.org/article/the-promptware-kill-chain
- Palo Alto Unit 42 — “Fooling AI Agents: Web-Based Indirect Prompt Injection Observed in the Wild”
https://unit42.paloaltonetworks.com/indirect-prompt-injection-ai-agents/

  • (00:00) - Intro & Episode Overview
  • (02:18) - Agentic AI as a Security Threat (CrowdStrike 2026 Global Threat Report, IBM X-Force Index)
  • (03:46) - Malicious Agent Skills & AI Supply Chain Attacks (Cisco State of AI Security)
  • (04:58) - How Agent Skills Actually Work
  • (07:47) - Permissions & Guardrails for AI Agents (CISA AI in OT Guidance)
  • (09:57) - AI-Generated Phishing Campaigns (CrowdStrike / IBM Threat Reports)
  • (13:58) - Deepfakes at Industrial Scale (WEF Global Cybersecurity Outlook)
  • (15:38) - Corporate Fraud & Deepfake Incidents (International AI Safety Report)
  • (17:21) - Why Humans Struggle to Detect Deepfakes
  • (21:13) - Prompt Injection Attacks Explained (Schneier – Promptware Kill Chain)
  • (24:35) - AI Models Jailbreaking Other Models (Palo Alto Unit 42 Research)
  • (28:59) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Thu, 12 Mar 2026 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1751 In this episode of BHIS Presents: AI Security Ops, Bronwen Aker and Dr. Brian Fehrman break down some of the top AI security concerns being discussed by researchers, security firms, and government agencies this year.

As AI capabilities rapidly expand, so does the attack surface. From agentic AI systems being used by attackers, to deepfakes at industrial scale, to the persistent challenge of prompt injection, security teams are trying to understand what risks are real, what’s hype, and where defenders should focus first.

We dig into:
- Why agentic AI is emerging as a major security concern
- How attackers could weaponize autonomous agents to scale operations
- The risk of malicious agent skills and AI supply chain attacks
- Why overly broad permissions make agent-based systems dangerous
- AI-assisted phishing campaigns and social engineering at scale
- The rise of deepfakes and corporate fraud driven by generative AI
- Why humans still struggle to reliably detect deepfake media
- The economics of deepfake fraud and real-world incidents
- Prompt injection attacks and why they remain difficult to solve
- Whether future models may autonomously discover and exploit jailbreaks

This episode looks at the practical security implications of today’s AI ecosystem — where the biggest risks are coming from, how attackers may leverage AI systems, and what defenders should be thinking about as these technologies continue to evolve.

📚 Key References

Agentic AI Threats
- CrowdStrike 2026 Global Threat Report — https://www.crowdstrike.com
- IBM X-Force 2026 Threat Intelligence Index — https://www.ibm.com/security/x-force
- Cisco State of AI Security 2026 — https://www.cisco.com/site/us/en/products/security/state-of-ai-security.html#tabs-9da71fbd27-item-1288c79d71-tab

Deepfakes & AI-Driven Fraud
- WEF Global Cybersecurity Outlook 2026 — https://www.weforum.org/publications/global-cybersecurity-outlook-2026/
- International AI Safety Report 2026 — https://www.internationalaisafetyreport.org

AI Security & Infrastructure Risk
- CISA Joint Guidance on AI in OT — https://www.cisa.gov/news-events/news/new-joint-guide-advances-secure-integration-artificial-intelligence-operational-technology

Prompt Injection & LLM Exploitation
- Schneier et al., “The Promptware Kill Chain” — https://www.lawfaremedia.org/article/the-promptware-kill-chain
- Palo Alto Unit 42 — “Fooling AI Agents: Web-Based Indirect Prompt Injection Observed in the Wild”
https://unit42.paloaltonetworks.com/indirect-prompt-injection-ai-agents/

  • (00:00) - Intro & Episode Overview
  • (02:18) - Agentic AI as a Security Threat (CrowdStrike 2026 Global Threat Report, IBM X-Force Index)
  • (03:46) - Malicious Agent Skills & AI Supply Chain Attacks (Cisco State of AI Security)
  • (04:58) - How Agent Skills Actually Work
  • (07:47) - Permissions & Guardrails for AI Agents (CISA AI in OT Guidance)
  • (09:57) - AI-Generated Phishing Campaigns (CrowdStrike / IBM Threat Reports)
  • (13:58) - Deepfakes at Industrial Scale (WEF Global Cybersecurity Outlook)
  • (15:38) - Corporate Fraud & Deepfake Incidents (International AI Safety Report)
  • (17:21) - Why Humans Struggle to Detect Deepfakes
  • (21:13) - Prompt Injection Attacks Explained (Schneier – Promptware Kill Chain)
  • (24:35) - AI Models Jailbreaking Other Models (Palo Alto Unit 42 Research)
  • (28:59) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Bronwen Aker Brian Fehrman Claude Cowork Discussion | Episode 42 42 42 Claude Cowork Discussion | Episode 42 full f9b57e0f-f456-4c71-83d4-74e7926b1b2d https://share.transistor.fm/s/28f31187 We discuss the meaning of AI life In episode 42 of "BHIS Presents: AI Security Ops." Derek Banks is joined by Bronwen Aker and Brian Fehrman to break down Anthropic’s latest agentic desktop experiment: Claude Cowork.

Claude Cowork brings large language models directly onto the endpoint — giving Claude the ability to read, write, and organize files on your local machine. It’s designed to make powerful AI workflows accessible to non-technical users… but as with any tool that operates at the OS level, the security implications are significant.

We explore what happens when AI moves closer to your data, your filesystem, and your browser — and what that means for defenders.

We dig into:
- What Claude Cowork is and how it differs from Claude Code
- Agentic desktop tools vs. command-line workflows
- Local file access and OS-level interaction risks
- Skills, automation, and task iteration
- Chrome plugins and expanded attack surface
- Overly broad permissions and least-privilege concerns
- SaaS disruption and shifting trust boundaries
- Endpoint monitoring challenges
- The speed of AI releases vs. security review cycles
- Balancing innovation with responsible deployment

This conversation looks at the real-world operational and defensive considerations of agentic AI tools running directly on user systems. If you’re evaluating AI productivity tools inside your organization — or defending environments where they’re already being adopted — this episode will help you think through the risks and tradeoffs.

  • (00:00) - Intro & Episode Overview
  • (02:08) - What Is Claude Cowork?
  • (04:03) - Desktop Agents vs. Command Line Users
  • (06:12) - Agentic Workflows & Task Automation
  • (08:08) - Building Fast with Claude (Speed of Development)
  • (09:29) - Browser Plugins & Expanding Capabilities
  • (11:06) - Permission Models & “Just Give It Access to Everything”
  • (12:40) - SaaS Disruption & Enterprise Impact
  • (14:38) - Overly Broad File Access Risks
  • (16:27) - Organizational Disruption & Workforce Impact
  • (18:09) - Security Lag vs. Rapid AI Releases
  • (19:46) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> We discuss the meaning of AI life In episode 42 of "BHIS Presents: AI Security Ops." Derek Banks is joined by Bronwen Aker and Brian Fehrman to break down Anthropic’s latest agentic desktop experiment: Claude Cowork.

Claude Cowork brings large language models directly onto the endpoint — giving Claude the ability to read, write, and organize files on your local machine. It’s designed to make powerful AI workflows accessible to non-technical users… but as with any tool that operates at the OS level, the security implications are significant.

We explore what happens when AI moves closer to your data, your filesystem, and your browser — and what that means for defenders.

We dig into:
- What Claude Cowork is and how it differs from Claude Code
- Agentic desktop tools vs. command-line workflows
- Local file access and OS-level interaction risks
- Skills, automation, and task iteration
- Chrome plugins and expanded attack surface
- Overly broad permissions and least-privilege concerns
- SaaS disruption and shifting trust boundaries
- Endpoint monitoring challenges
- The speed of AI releases vs. security review cycles
- Balancing innovation with responsible deployment

This conversation looks at the real-world operational and defensive considerations of agentic AI tools running directly on user systems. If you’re evaluating AI productivity tools inside your organization — or defending environments where they’re already being adopted — this episode will help you think through the risks and tradeoffs.

  • (00:00) - Intro & Episode Overview
  • (02:08) - What Is Claude Cowork?
  • (04:03) - Desktop Agents vs. Command Line Users
  • (06:12) - Agentic Workflows & Task Automation
  • (08:08) - Building Fast with Claude (Speed of Development)
  • (09:29) - Browser Plugins & Expanding Capabilities
  • (11:06) - Permission Models & “Just Give It Access to Everything”
  • (12:40) - SaaS Disruption & Enterprise Impact
  • (14:38) - Overly Broad File Access Risks
  • (16:27) - Organizational Disruption & Workforce Impact
  • (18:09) - Security Lag vs. Rapid AI Releases
  • (19:46) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Fri, 06 Mar 2026 16:54:31 -0500 Black Hills Information Security Black Hills Information Security 1293 We discuss the meaning of AI life In episode 42 of "BHIS Presents: AI Security Ops." Derek Banks is joined by Bronwen Aker and Brian Fehrman to break down Anthropic’s latest agentic desktop experiment: Claude Cowork.

Claude Cowork brings large language models directly onto the endpoint — giving Claude the ability to read, write, and organize files on your local machine. It’s designed to make powerful AI workflows accessible to non-technical users… but as with any tool that operates at the OS level, the security implications are significant.

We explore what happens when AI moves closer to your data, your filesystem, and your browser — and what that means for defenders.

We dig into:
- What Claude Cowork is and how it differs from Claude Code
- Agentic desktop tools vs. command-line workflows
- Local file access and OS-level interaction risks
- Skills, automation, and task iteration
- Chrome plugins and expanded attack surface
- Overly broad permissions and least-privilege concerns
- SaaS disruption and shifting trust boundaries
- Endpoint monitoring challenges
- The speed of AI releases vs. security review cycles
- Balancing innovation with responsible deployment

This conversation looks at the real-world operational and defensive considerations of agentic AI tools running directly on user systems. If you’re evaluating AI productivity tools inside your organization — or defending environments where they’re already being adopted — this episode will help you think through the risks and tradeoffs.

  • (00:00) - Intro & Episode Overview
  • (02:08) - What Is Claude Cowork?
  • (04:03) - Desktop Agents vs. Command Line Users
  • (06:12) - Agentic Workflows & Task Automation
  • (08:08) - Building Fast with Claude (Speed of Development)
  • (09:29) - Browser Plugins & Expanding Capabilities
  • (11:06) - Permission Models & “Just Give It Access to Everything”
  • (12:40) - SaaS Disruption & Enterprise Impact
  • (14:38) - Overly Broad File Access Risks
  • (16:27) - Organizational Disruption & Workforce Impact
  • (18:09) - Security Lag vs. Rapid AI Releases
  • (19:46) - Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Bronwen Aker Brian Fehrman OpenClaw and Moltbook with Guests Beau Bullock and Hayden Covington | Episode 41 41 41 OpenClaw and Moltbook with Guests Beau Bullock and Hayden Covington | Episode 41 full fe2b32ee-0c78-4e1e-9a2f-56992086b14d https://share.transistor.fm/s/b50dad42 In this episode of BHIS Presents: AI Security Ops, we’re joined by Beau Bullock and Hayden Covington to unpack one of the most talked-about AI agent experiments in recent memory: OpenClaw and its companion platform, Moltbook.

OpenClaw exploded onto the scene as an autonomous AI agent capable of operating Claude Code from the command line — executing tasks, monitoring output, and iterating with minimal human involvement. Shortly after, Moltbook emerged as a social platform designed specifically for AI agents to interact with one another.

But as with most cutting-edge AI experiments, things moved fast… and broke fast.

We dig into:

  • What OpenClaw actually is and how it works
  • AI agents operating other AI systems (Claude Code in the loop)
  • The concept of “skills” and extending agent capabilities
  • The one-click RCE vulnerability discovered shortly after release
  • Moltbook as a social network for AI agents
  • API keys, agent-only access, and how humans bypassed it
  • Beacons, autonomy, and what “control” really means
  • Where the line is between automation and true autonomy
  • Short-term workforce impacts vs. long-term AI risk


This conversation moves beyond hype into the practical and security implications of rapidly deployed autonomous agents. If you’re experimenting with AI agents — or defending against them — this episode will give you a grounded perspective on what’s possible today, what’s fragile, and what’s coming next.

  • (00:00) - Intro & Guest Welcome
  • (01:38) - AI Agents in the News
  • (03:23) - From “Moltbot” to OpenClaw
  • (04:13) - What Is OpenClaw? How It Works
  • (05:13) - Claude Code + Agent-in-the-Middle Model
  • (07:36) - Extending OpenClaw with Skills
  • (08:42) - Release Timeline & Rapid Adoption
  • (10:16) - One-Click RCE in OpenClaw
  • (11:45) - Introducing Moltbook (AI Social Network)
  • (14:03) - How Moltbook Actually Worked
  • (17:55) - “I Am a Robot” & Agent Authentication
  • (20:28) - Beaconing & Operational Behavior
  • (26:44) - Automation vs. True Autonomy
  • (27:26) - Control, Kill Switches & Agent Boundaries
  • (30:59) - Workforce Impact & Near-Term Concerns
  • (35:34) - AI Apocalypse? Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> In this episode of BHIS Presents: AI Security Ops, we’re joined by Beau Bullock and Hayden Covington to unpack one of the most talked-about AI agent experiments in recent memory: OpenClaw and its companion platform, Moltbook.

OpenClaw exploded onto the scene as an autonomous AI agent capable of operating Claude Code from the command line — executing tasks, monitoring output, and iterating with minimal human involvement. Shortly after, Moltbook emerged as a social platform designed specifically for AI agents to interact with one another.

But as with most cutting-edge AI experiments, things moved fast… and broke fast.

We dig into:

  • What OpenClaw actually is and how it works
  • AI agents operating other AI systems (Claude Code in the loop)
  • The concept of “skills” and extending agent capabilities
  • The one-click RCE vulnerability discovered shortly after release
  • Moltbook as a social network for AI agents
  • API keys, agent-only access, and how humans bypassed it
  • Beacons, autonomy, and what “control” really means
  • Where the line is between automation and true autonomy
  • Short-term workforce impacts vs. long-term AI risk


This conversation moves beyond hype into the practical and security implications of rapidly deployed autonomous agents. If you’re experimenting with AI agents — or defending against them — this episode will give you a grounded perspective on what’s possible today, what’s fragile, and what’s coming next.

  • (00:00) - Intro & Guest Welcome
  • (01:38) - AI Agents in the News
  • (03:23) - From “Moltbot” to OpenClaw
  • (04:13) - What Is OpenClaw? How It Works
  • (05:13) - Claude Code + Agent-in-the-Middle Model
  • (07:36) - Extending OpenClaw with Skills
  • (08:42) - Release Timeline & Rapid Adoption
  • (10:16) - One-Click RCE in OpenClaw
  • (11:45) - Introducing Moltbook (AI Social Network)
  • (14:03) - How Moltbook Actually Worked
  • (17:55) - “I Am a Robot” & Agent Authentication
  • (20:28) - Beaconing & Operational Behavior
  • (26:44) - Automation vs. True Autonomy
  • (27:26) - Control, Kill Switches & Agent Boundaries
  • (30:59) - Workforce Impact & Near-Term Concerns
  • (35:34) - AI Apocalypse? Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Thu, 26 Feb 2026 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 2160 In this episode of BHIS Presents: AI Security Ops, we’re joined by Beau Bullock and Hayden Covington to unpack one of the most talked-about AI agent experiments in recent memory: OpenClaw and its companion platform, Moltbook.

OpenClaw exploded onto the scene as an autonomous AI agent capable of operating Claude Code from the command line — executing tasks, monitoring output, and iterating with minimal human involvement. Shortly after, Moltbook emerged as a social platform designed specifically for AI agents to interact with one another.

But as with most cutting-edge AI experiments, things moved fast… and broke fast.

We dig into:

  • What OpenClaw actually is and how it works
  • AI agents operating other AI systems (Claude Code in the loop)
  • The concept of “skills” and extending agent capabilities
  • The one-click RCE vulnerability discovered shortly after release
  • Moltbook as a social network for AI agents
  • API keys, agent-only access, and how humans bypassed it
  • Beacons, autonomy, and what “control” really means
  • Where the line is between automation and true autonomy
  • Short-term workforce impacts vs. long-term AI risk


This conversation moves beyond hype into the practical and security implications of rapidly deployed autonomous agents. If you’re experimenting with AI agents — or defending against them — this episode will give you a grounded perspective on what’s possible today, what’s fragile, and what’s coming next.

  • (00:00) - Intro & Guest Welcome
  • (01:38) - AI Agents in the News
  • (03:23) - From “Moltbot” to OpenClaw
  • (04:13) - What Is OpenClaw? How It Works
  • (05:13) - Claude Code + Agent-in-the-Middle Model
  • (07:36) - Extending OpenClaw with Skills
  • (08:42) - Release Timeline & Rapid Adoption
  • (10:16) - One-Click RCE in OpenClaw
  • (11:45) - Introducing Moltbook (AI Social Network)
  • (14:03) - How Moltbook Actually Worked
  • (17:55) - “I Am a Robot” & Agent Authentication
  • (20:28) - Beaconing & Operational Behavior
  • (26:44) - Automation vs. True Autonomy
  • (27:26) - Control, Kill Switches & Agent Boundaries
  • (30:59) - Workforce Impact & Near-Term Concerns
  • (35:34) - AI Apocalypse? Final Thoughts & Wrap-Up

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Beau Bullock Hayden Covington Derek Banks Brian Fehrman Bronwen Aker AI in the SOC: Interview with Hayden Covington and Ethan Robish from the BHIS SOC | Episode 40 40 40 AI in the SOC: Interview with Hayden Covington and Ethan Robish from the BHIS SOC | Episode 40 full 8ba30a6d-c386-45e3-9de0-08575133e9db https://share.transistor.fm/s/b51cf022 AI in the SOC: Interview with Hayden Covington and Ethan Robish from the BHIS SOC | Episode 40

In this episode of BHIS Presents: AI Security Ops, we sit down with Hayden Covington and Ethan Robish from the BHIS Security Operations Center (SOC) to explore how AI is actually being used in modern defensive operations.

From foundational machine learning techniques like statistical baselining and clustering to large language models assisting with alert triage and reporting, we dig into what works, what doesn’t, and what SOC teams should realistically expect from AI today.

We break down:

- How AI helps reduce alert fatigue and improve triage
- Practical automation inside a real-world SOC
- The difference between traditional ML approaches and LLM-powered workflows
- Foundational techniques like K-means, anomaly detection, and behavioral baselining
- Using LLMs for enrichment, investigation, and report drafting
- Where AI struggles: hallucinations, inconsistency, and edge cases
- Risks around over-trusting AI in security operations
- How to responsibly integrate AI into analyst workflows

This episode is grounded in real operational experience—not vendor demos. If you’re running a SOC, building AI tooling, or just trying to separate hype from reality, this conversation will help you think clearly about augmentation vs. automation in defensive security.


  • (00:00) - Intro & Guest Introductions
  • (04:44) - Alert Triage & SOC Pain Points
  • (06:04) - Automation Inside the SOC
  • (09:59) - “Boring AI”: Clustering, Baselining & Statistics
  • (17:06) - AI-Assisted Reporting & Client Communication
  • (18:34) - Limitations, Edge Cases & Model Risk
  • (22:56) - Hallucinations & Inconsistent Outputs
  • (25:04) - AI Demos vs. Real-World Security Work
  • (28:35) - Final Thoughts & Closing

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> AI in the SOC: Interview with Hayden Covington and Ethan Robish from the BHIS SOC | Episode 40

In this episode of BHIS Presents: AI Security Ops, we sit down with Hayden Covington and Ethan Robish from the BHIS Security Operations Center (SOC) to explore how AI is actually being used in modern defensive operations.

From foundational machine learning techniques like statistical baselining and clustering to large language models assisting with alert triage and reporting, we dig into what works, what doesn’t, and what SOC teams should realistically expect from AI today.

We break down:

- How AI helps reduce alert fatigue and improve triage
- Practical automation inside a real-world SOC
- The difference between traditional ML approaches and LLM-powered workflows
- Foundational techniques like K-means, anomaly detection, and behavioral baselining
- Using LLMs for enrichment, investigation, and report drafting
- Where AI struggles: hallucinations, inconsistency, and edge cases
- Risks around over-trusting AI in security operations
- How to responsibly integrate AI into analyst workflows

This episode is grounded in real operational experience—not vendor demos. If you’re running a SOC, building AI tooling, or just trying to separate hype from reality, this conversation will help you think clearly about augmentation vs. automation in defensive security.


  • (00:00) - Intro & Guest Introductions
  • (04:44) - Alert Triage & SOC Pain Points
  • (06:04) - Automation Inside the SOC
  • (09:59) - “Boring AI”: Clustering, Baselining & Statistics
  • (17:06) - AI-Assisted Reporting & Client Communication
  • (18:34) - Limitations, Edge Cases & Model Risk
  • (22:56) - Hallucinations & Inconsistent Outputs
  • (25:04) - AI Demos vs. Real-World Security Work
  • (28:35) - Final Thoughts & Closing

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Fri, 20 Feb 2026 09:39:57 -0500 Black Hills Information Security Black Hills Information Security 1768 AI in the SOC: Interview with Hayden Covington and Ethan Robish from the BHIS SOC | Episode 40

In this episode of BHIS Presents: AI Security Ops, we sit down with Hayden Covington and Ethan Robish from the BHIS Security Operations Center (SOC) to explore how AI is actually being used in modern defensive operations.

From foundational machine learning techniques like statistical baselining and clustering to large language models assisting with alert triage and reporting, we dig into what works, what doesn’t, and what SOC teams should realistically expect from AI today.

We break down:

- How AI helps reduce alert fatigue and improve triage
- Practical automation inside a real-world SOC
- The difference between traditional ML approaches and LLM-powered workflows
- Foundational techniques like K-means, anomaly detection, and behavioral baselining
- Using LLMs for enrichment, investigation, and report drafting
- Where AI struggles: hallucinations, inconsistency, and edge cases
- Risks around over-trusting AI in security operations
- How to responsibly integrate AI into analyst workflows

This episode is grounded in real operational experience—not vendor demos. If you’re running a SOC, building AI tooling, or just trying to separate hype from reality, this conversation will help you think clearly about augmentation vs. automation in defensive security.


  • (00:00) - Intro & Guest Introductions
  • (04:44) - Alert Triage & SOC Pain Points
  • (06:04) - Automation Inside the SOC
  • (09:59) - “Boring AI”: Clustering, Baselining & Statistics
  • (17:06) - AI-Assisted Reporting & Client Communication
  • (18:34) - Limitations, Edge Cases & Model Risk
  • (22:56) - Hallucinations & Inconsistent Outputs
  • (25:04) - AI Demos vs. Real-World Security Work
  • (28:35) - Final Thoughts & Closing

Click here to watch this episode on YouTube.

Creators & Guests
Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Hayden Covington Ethan Robish Bronwen Aker Derek Banks Brian Fehrman AI News | Episode 39 38 38 AI News | Episode 39 full fd3770b0-95b0-44ac-828b-3e903b9b62d0 https://share.transistor.fm/s/139934fb AI News | Episode 39

In this episode of AI Security Ops, we break down the latest developments in AI-driven threats, identity chaos caused by autonomous agents, NIST’s focus on securing AI in critical infrastructure, and new visibility tooling for AI exposure.

We cover real-world abuse of LLMs for phishing, how AI agents are colliding with IAM governance, and what defenders should be watching right now.

Chapters:
00:00 – Introduction and Sponsors
Black Hills Information Security - https://www.blackhillsinfosec.com/
Antisyphon Training - https://www.antisyphontraining.com/

01:08 – LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
Discussion begins as the hosts introduce the first story.
How LLMs are generating polymorphic malicious JavaScript for phishing pages and evading traditional detection.
👉 https://unit42.paloaltonetworks.com/real-time-malicious-javascript-through-llms/

08:49 – AI Agents vs IAM: “Who Approved This Agent?” (Hacker News)
Conversation shifts to agent privilege management and governance failures.
👉 https://thehackernews.com/2026/01/who-approved-this-agent-rethinking.html

10:07 – NIST Focus on Securing AI Agents in Critical Infrastructure
Discussion on federal guidance and why AI agents are being treated as critical infrastructure risk components.
👉 https://www.linkedin.com/pulse/cybersecurity-institute-news-roundup-20-january-2026-entrust-alz7c

13:44 – Tenable One AI Exposure
Breaking down Tenable’s push into enterprise AI usage visibility and exposure management.
👉 https://www.tenable.com/blog/tenable-one-ai-exposure-secure-ai-usage-at-scale


Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

Chapters

  • (00:00) - Introduction and Sponsors
  • (01:08) - LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
  • (10:07) - NIST Focus on Securing AI Agents in Critical Infrastructure
  • (13:44) - Tenable One AI Exposure

Creators & Guests
Click here to watch this episode on YouTube.

----------------------------------------------------------------------------------------------
About Joff Thyer - https://www.blackhillsinfosec.com/team/joff-thyer/
About Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
About Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
About Bronwen Aker - https://www.blackhillsinfosec.com/team/bronwen-aker/
About Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]> AI News | Episode 39

In this episode of AI Security Ops, we break down the latest developments in AI-driven threats, identity chaos caused by autonomous agents, NIST’s focus on securing AI in critical infrastructure, and new visibility tooling for AI exposure.

We cover real-world abuse of LLMs for phishing, how AI agents are colliding with IAM governance, and what defenders should be watching right now.

Chapters:
00:00 – Introduction and Sponsors
Black Hills Information Security - https://www.blackhillsinfosec.com/
Antisyphon Training - https://www.antisyphontraining.com/

01:08 – LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
Discussion begins as the hosts introduce the first story.
How LLMs are generating polymorphic malicious JavaScript for phishing pages and evading traditional detection.
👉 https://unit42.paloaltonetworks.com/real-time-malicious-javascript-through-llms/

08:49 – AI Agents vs IAM: “Who Approved This Agent?” (Hacker News)
Conversation shifts to agent privilege management and governance failures.
👉 https://thehackernews.com/2026/01/who-approved-this-agent-rethinking.html

10:07 – NIST Focus on Securing AI Agents in Critical Infrastructure
Discussion on federal guidance and why AI agents are being treated as critical infrastructure risk components.
👉 https://www.linkedin.com/pulse/cybersecurity-institute-news-roundup-20-january-2026-entrust-alz7c

13:44 – Tenable One AI Exposure
Breaking down Tenable’s push into enterprise AI usage visibility and exposure management.
👉 https://www.tenable.com/blog/tenable-one-ai-exposure-secure-ai-usage-at-scale


Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

Chapters

  • (00:00) - Introduction and Sponsors
  • (01:08) - LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
  • (10:07) - NIST Focus on Securing AI Agents in Critical Infrastructure
  • (13:44) - Tenable One AI Exposure

Creators & Guests
Click here to watch this episode on YouTube.

----------------------------------------------------------------------------------------------
About Joff Thyer - https://www.blackhillsinfosec.com/team/joff-thyer/
About Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
About Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
About Bronwen Aker - https://www.blackhillsinfosec.com/team/bronwen-aker/
About Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]> Thu, 12 Feb 2026 08:00:00 -0500 Black Hills Information Security Black Hills Information Security 1088 AI News | Episode 39

In this episode of AI Security Ops, we break down the latest developments in AI-driven threats, identity chaos caused by autonomous agents, NIST’s focus on securing AI in critical infrastructure, and new visibility tooling for AI exposure.

We cover real-world abuse of LLMs for phishing, how AI agents are colliding with IAM governance, and what defenders should be watching right now.

Chapters:
00:00 – Introduction and Sponsors
Black Hills Information Security - https://www.blackhillsinfosec.com/
Antisyphon Training - https://www.antisyphontraining.com/

01:08 – LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
Discussion begins as the hosts introduce the first story.
How LLMs are generating polymorphic malicious JavaScript for phishing pages and evading traditional detection.
👉 https://unit42.paloaltonetworks.com/real-time-malicious-javascript-through-llms/

08:49 – AI Agents vs IAM: “Who Approved This Agent?” (Hacker News)
Conversation shifts to agent privilege management and governance failures.
👉 https://thehackernews.com/2026/01/who-approved-this-agent-rethinking.html

10:07 – NIST Focus on Securing AI Agents in Critical Infrastructure
Discussion on federal guidance and why AI agents are being treated as critical infrastructure risk components.
👉 https://www.linkedin.com/pulse/cybersecurity-institute-news-roundup-20-january-2026-entrust-alz7c

13:44 – Tenable One AI Exposure
Breaking down Tenable’s push into enterprise AI usage visibility and exposure management.
👉 https://www.tenable.com/blog/tenable-one-ai-exposure-secure-ai-usage-at-scale


Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

Chapters

  • (00:00) - Introduction and Sponsors
  • (01:08) - LLM-Generated Phishing JavaScript (Unit 42 / Palo Alto)
  • (10:07) - NIST Focus on Securing AI Agents in Critical Infrastructure
  • (13:44) - Tenable One AI Exposure

Creators & Guests
Click here to watch this episode on YouTube.

----------------------------------------------------------------------------------------------
About Joff Thyer - https://www.blackhillsinfosec.com/team/joff-thyer/
About Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
About Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
About Bronwen Aker - https://www.blackhillsinfosec.com/team/bronwen-aker/
About Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Questions From the Community | Episode 38 39 39 Questions From the Community | Episode 38 full 6f8d619b-e376-4757-9973-0bec369bc811 https://share.transistor.fm/s/9c40ade5
Click here to watch this episode on YouTube.

Creators & Guests

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]>
Click here to watch this episode on YouTube.

Creators & Guests

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]> Thu, 05 Feb 2026 06:00:00 -0500 Black Hills Information Security Black Hills Information Security 995
Click here to watch this episode on YouTube.

Creators & Guests

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

Click here to view the episode transcript.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Joff Thyer Derek Banks A.I. Frameworks and Databases | Episode 37 37 37 A.I. Frameworks and Databases | Episode 37 full 4a233281-6b51-4d3b-a17d-d04eea9758c9 https://share.transistor.fm/s/810ce64d In Episode 37 of AI Security Ops, the team breaks down the most important AI security frameworks and vulnerability databases used to track risks in machine learning and large language models. The discussion covers emerging AI vulnerability databases, the OWASP Top 10 for LLMs, CVE challenges, and frameworks like MITRE ATLAS, highlighting why standardizing AI threats is still difficult. This episode is a practical guide for security professionals looking to stay ahead of AI vulnerabilities, attack techniques, and defensive resources in a fast-moving landscape.

Chapters

  • (00:00) - Episode 37 – AI Frameworks & Databases
  • (01:39) - A.I. vulnerability tracking is still young
  • (02:44) - Should A.I. get its own vulnerability database?
  • (07:33) - The benefit of multiple vulnerability databases
  • (15:58) - The what is the definition of a vulnerability?
  • (17:54) - Final Thoughts

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> In Episode 37 of AI Security Ops, the team breaks down the most important AI security frameworks and vulnerability databases used to track risks in machine learning and large language models. The discussion covers emerging AI vulnerability databases, the OWASP Top 10 for LLMs, CVE challenges, and frameworks like MITRE ATLAS, highlighting why standardizing AI threats is still difficult. This episode is a practical guide for security professionals looking to stay ahead of AI vulnerabilities, attack techniques, and defensive resources in a fast-moving landscape.

Chapters

  • (00:00) - Episode 37 – AI Frameworks & Databases
  • (01:39) - A.I. vulnerability tracking is still young
  • (02:44) - Should A.I. get its own vulnerability database?
  • (07:33) - The benefit of multiple vulnerability databases
  • (15:58) - The what is the definition of a vulnerability?
  • (17:54) - Final Thoughts

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Fri, 30 Jan 2026 15:04:06 -0500 Black Hills Information Security Black Hills Information Security 1130 In Episode 37 of AI Security Ops, the team breaks down the most important AI security frameworks and vulnerability databases used to track risks in machine learning and large language models. The discussion covers emerging AI vulnerability databases, the OWASP Top 10 for LLMs, CVE challenges, and frameworks like MITRE ATLAS, highlighting why standardizing AI threats is still difficult. This episode is a practical guide for security professionals looking to stay ahead of AI vulnerabilities, attack techniques, and defensive resources in a fast-moving landscape.

Chapters

  • (00:00) - Episode 37 – AI Frameworks & Databases
  • (01:39) - A.I. vulnerability tracking is still young
  • (02:44) - Should A.I. get its own vulnerability database?
  • (07:33) - The benefit of multiple vulnerability databases
  • (15:58) - The what is the definition of a vulnerability?
  • (17:54) - Final Thoughts

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Derek Banks AI News Stories | Episode 36 36 36 AI News Stories | Episode 36 full ca293f30-b2ce-4e67-86a4-e017925f6e84 https://share.transistor.fm/s/3a816e83 This week on AI Security Ops, the team breaks down how attackers are weaponizing AI and the tools around it: a critical n8n zero-day that can lead to unauthenticated remote code execution, prompt-injection “zombie agent” risks tied to ChatGPT memory, a zero-click-style indirect prompt injection scenario via email/URLs, and malicious Chrome extensions caught siphoning ChatGPT/DeepSeek chats at scale. They close with a reminder that the tactics are often “same old security problems,” just amplified by AI—so lock down orchestration, limit browser extensions, and keep sensitive data out of chat tools.

Key stories discussed

1) n8n (“n-eight-n”) zero-day → unauthenticated RCE risk

  • https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html
  • The hosts discuss a critical flaw in the n8n workflow automation platform where a workflow-parsing HTTP endpoint can be abused (via a crafted JSON payload) to achieve remote code execution as the n8n service account. Because automation/orchestration platforms often have broad internal access, one compromise can cascade quickly across an organization’s automation layer. 
    ai-news-stories-episode-36
  • Practical takeaway: don’t expose orchestration platforms directly to the internet; restrict who/what can talk to them; treat these “glue” systems as high-impact targets and assess them like any other production system. 
    ai-news-stories-episode-36

2) “Zombie agent” prompt injection via ChatGPT Memory

  • https://www.darkreading.com/endpoint-security/chatgpt-memory-feature-prompt-injection
  • The team talks about research describing an exploit that stores malicious instructions in long-term memory, then later triggers them with a benign prompt—leading to potential data leakage or unsafe tool actions if the model has integrations. The discussion frames this as “stored XSS vibes,” but harder to solve because the “feature” (following instructions/context) is also the root problem. 
    ai-news-stories-episode-36
  • User-side mitigation themes: consider disabling memory, keep chats cleaned up, and avoid putting sensitive data into chat tools—especially when agents/tools are involved. 
    ai-news-stories-episode-36

3) “Zero-click” agentic abuse via crafted email/URL (indirect prompt injection)

  • https://www.infosecurity-magazine.com/news/new-zeroclick-attack-chatgpt/
  • Another story describes a crafted URL delivered via email that could trigger an agentic workflow (e.g., email summarization / agent actions) to export chat logs without explicit user interaction. The hosts largely interpret this as indirect prompt injection—a pattern they expect to keep seeing as assistants gain more connectivity. 
    ai-news-stories-episode-36
  • Key point: even if the exact implementation varies, auto-processing untrusted content (like email) is a persistent risk when the model can take actions or access history. 
    ai-news-stories-episode-36

4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (900k users)

  • https://thehackernews.com/2026/01/two-chrome-extensions-caught-stealing.html
  • Two Chrome extensions posing as AI productivity tools reportedly injected JavaScript into AI web UIs, scraped chat text from the DOM, and exfiltrated it—highlighting ongoing extension supply-chain risk and the reality that “approved store” doesn’t mean safe. 
    ai-news-stories-episode-36
  • Advice echoed: minimize extensions, separate browsers/profiles for sensitive activities, and treat “AI sidebar” tools with extra skepticism. 
    ai-news-stories-episode-36

5) APT28 credential phishing updated with AI-written lures

  • https://thehackernews.com/2026/01/russian-apt28-runs-credential-stealing.html
  • The closing story is a familiar APT pattern—phishing emails with malicious Office docs leading to PowerShell loaders and credential theft—except the lure text is AI-generated, making it more consistent/convincing (and harder for users to spot via grammar/tone). 
    ai-news-stories-episode-36
  • The conversation stresses that “don’t click links” guidance is oversimplified; verification and layered controls matter (e.g., disabling macros org-wide). 
    ai-news-stories-episode-36

Chapter Timestamps

  • (00:00) - Intro & Sponsors
  • (01:16) - 1) n8n zero-day → unauthenticated RCE
  • (09:00) - 2) “Zombie agent” prompt injection via ChatGPT Memory
  • (19:52) - 3) “Zero-click” style agent abuse via crafted email/URL (indirect prompt injection)
  • (23:41) - 4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (~900k users)
  • (29:59) - 5) APT28 phishing refreshed with AI-written lures
  • (34:15) - Closing thoughts: “AI genie is out of the bottle” + safety reminders

Click here to watch a video of this episode.
Creators & Guests


Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> This week on AI Security Ops, the team breaks down how attackers are weaponizing AI and the tools around it: a critical n8n zero-day that can lead to unauthenticated remote code execution, prompt-injection “zombie agent” risks tied to ChatGPT memory, a zero-click-style indirect prompt injection scenario via email/URLs, and malicious Chrome extensions caught siphoning ChatGPT/DeepSeek chats at scale. They close with a reminder that the tactics are often “same old security problems,” just amplified by AI—so lock down orchestration, limit browser extensions, and keep sensitive data out of chat tools.

Key stories discussed

1) n8n (“n-eight-n”) zero-day → unauthenticated RCE risk

  • https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html
  • The hosts discuss a critical flaw in the n8n workflow automation platform where a workflow-parsing HTTP endpoint can be abused (via a crafted JSON payload) to achieve remote code execution as the n8n service account. Because automation/orchestration platforms often have broad internal access, one compromise can cascade quickly across an organization’s automation layer. 
    ai-news-stories-episode-36
  • Practical takeaway: don’t expose orchestration platforms directly to the internet; restrict who/what can talk to them; treat these “glue” systems as high-impact targets and assess them like any other production system. 
    ai-news-stories-episode-36

2) “Zombie agent” prompt injection via ChatGPT Memory

  • https://www.darkreading.com/endpoint-security/chatgpt-memory-feature-prompt-injection
  • The team talks about research describing an exploit that stores malicious instructions in long-term memory, then later triggers them with a benign prompt—leading to potential data leakage or unsafe tool actions if the model has integrations. The discussion frames this as “stored XSS vibes,” but harder to solve because the “feature” (following instructions/context) is also the root problem. 
    ai-news-stories-episode-36
  • User-side mitigation themes: consider disabling memory, keep chats cleaned up, and avoid putting sensitive data into chat tools—especially when agents/tools are involved. 
    ai-news-stories-episode-36

3) “Zero-click” agentic abuse via crafted email/URL (indirect prompt injection)

  • https://www.infosecurity-magazine.com/news/new-zeroclick-attack-chatgpt/
  • Another story describes a crafted URL delivered via email that could trigger an agentic workflow (e.g., email summarization / agent actions) to export chat logs without explicit user interaction. The hosts largely interpret this as indirect prompt injection—a pattern they expect to keep seeing as assistants gain more connectivity. 
    ai-news-stories-episode-36
  • Key point: even if the exact implementation varies, auto-processing untrusted content (like email) is a persistent risk when the model can take actions or access history. 
    ai-news-stories-episode-36

4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (900k users)

  • https://thehackernews.com/2026/01/two-chrome-extensions-caught-stealing.html
  • Two Chrome extensions posing as AI productivity tools reportedly injected JavaScript into AI web UIs, scraped chat text from the DOM, and exfiltrated it—highlighting ongoing extension supply-chain risk and the reality that “approved store” doesn’t mean safe. 
    ai-news-stories-episode-36
  • Advice echoed: minimize extensions, separate browsers/profiles for sensitive activities, and treat “AI sidebar” tools with extra skepticism. 
    ai-news-stories-episode-36

5) APT28 credential phishing updated with AI-written lures

  • https://thehackernews.com/2026/01/russian-apt28-runs-credential-stealing.html
  • The closing story is a familiar APT pattern—phishing emails with malicious Office docs leading to PowerShell loaders and credential theft—except the lure text is AI-generated, making it more consistent/convincing (and harder for users to spot via grammar/tone). 
    ai-news-stories-episode-36
  • The conversation stresses that “don’t click links” guidance is oversimplified; verification and layered controls matter (e.g., disabling macros org-wide). 
    ai-news-stories-episode-36

Chapter Timestamps

  • (00:00) - Intro & Sponsors
  • (01:16) - 1) n8n zero-day → unauthenticated RCE
  • (09:00) - 2) “Zombie agent” prompt injection via ChatGPT Memory
  • (19:52) - 3) “Zero-click” style agent abuse via crafted email/URL (indirect prompt injection)
  • (23:41) - 4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (~900k users)
  • (29:59) - 5) APT28 phishing refreshed with AI-written lures
  • (34:15) - Closing thoughts: “AI genie is out of the bottle” + safety reminders

Click here to watch a video of this episode.
Creators & Guests


Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Thu, 22 Jan 2026 16:03:10 -0500 Black Hills Information Security Black Hills Information Security 2116 This week on AI Security Ops, the team breaks down how attackers are weaponizing AI and the tools around it: a critical n8n zero-day that can lead to unauthenticated remote code execution, prompt-injection “zombie agent” risks tied to ChatGPT memory, a zero-click-style indirect prompt injection scenario via email/URLs, and malicious Chrome extensions caught siphoning ChatGPT/DeepSeek chats at scale. They close with a reminder that the tactics are often “same old security problems,” just amplified by AI—so lock down orchestration, limit browser extensions, and keep sensitive data out of chat tools.

Key stories discussed

1) n8n (“n-eight-n”) zero-day → unauthenticated RCE risk

  • https://thehackernews.com/2026/01/critical-n8n-vulnerability-cvss-100.html
  • The hosts discuss a critical flaw in the n8n workflow automation platform where a workflow-parsing HTTP endpoint can be abused (via a crafted JSON payload) to achieve remote code execution as the n8n service account. Because automation/orchestration platforms often have broad internal access, one compromise can cascade quickly across an organization’s automation layer. 
    ai-news-stories-episode-36
  • Practical takeaway: don’t expose orchestration platforms directly to the internet; restrict who/what can talk to them; treat these “glue” systems as high-impact targets and assess them like any other production system. 
    ai-news-stories-episode-36

2) “Zombie agent” prompt injection via ChatGPT Memory

  • https://www.darkreading.com/endpoint-security/chatgpt-memory-feature-prompt-injection
  • The team talks about research describing an exploit that stores malicious instructions in long-term memory, then later triggers them with a benign prompt—leading to potential data leakage or unsafe tool actions if the model has integrations. The discussion frames this as “stored XSS vibes,” but harder to solve because the “feature” (following instructions/context) is also the root problem. 
    ai-news-stories-episode-36
  • User-side mitigation themes: consider disabling memory, keep chats cleaned up, and avoid putting sensitive data into chat tools—especially when agents/tools are involved. 
    ai-news-stories-episode-36

3) “Zero-click” agentic abuse via crafted email/URL (indirect prompt injection)

  • https://www.infosecurity-magazine.com/news/new-zeroclick-attack-chatgpt/
  • Another story describes a crafted URL delivered via email that could trigger an agentic workflow (e.g., email summarization / agent actions) to export chat logs without explicit user interaction. The hosts largely interpret this as indirect prompt injection—a pattern they expect to keep seeing as assistants gain more connectivity. 
    ai-news-stories-episode-36
  • Key point: even if the exact implementation varies, auto-processing untrusted content (like email) is a persistent risk when the model can take actions or access history. 
    ai-news-stories-episode-36

4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (900k users)

  • https://thehackernews.com/2026/01/two-chrome-extensions-caught-stealing.html
  • Two Chrome extensions posing as AI productivity tools reportedly injected JavaScript into AI web UIs, scraped chat text from the DOM, and exfiltrated it—highlighting ongoing extension supply-chain risk and the reality that “approved store” doesn’t mean safe. 
    ai-news-stories-episode-36
  • Advice echoed: minimize extensions, separate browsers/profiles for sensitive activities, and treat “AI sidebar” tools with extra skepticism. 
    ai-news-stories-episode-36

5) APT28 credential phishing updated with AI-written lures

  • https://thehackernews.com/2026/01/russian-apt28-runs-credential-stealing.html
  • The closing story is a familiar APT pattern—phishing emails with malicious Office docs leading to PowerShell loaders and credential theft—except the lure text is AI-generated, making it more consistent/convincing (and harder for users to spot via grammar/tone). 
    ai-news-stories-episode-36
  • The conversation stresses that “don’t click links” guidance is oversimplified; verification and layered controls matter (e.g., disabling macros org-wide). 
    ai-news-stories-episode-36

Chapter Timestamps

  • (00:00) - Intro & Sponsors
  • (01:16) - 1) n8n zero-day → unauthenticated RCE
  • (09:00) - 2) “Zombie agent” prompt injection via ChatGPT Memory
  • (19:52) - 3) “Zero-click” style agent abuse via crafted email/URL (indirect prompt injection)
  • (23:41) - 4) Malicious Chrome extensions stealing ChatGPT/DeepSeek chats (~900k users)
  • (29:59) - 5) APT28 phishing refreshed with AI-written lures
  • (34:15) - Closing thoughts: “AI genie is out of the bottle” + safety reminders

Click here to watch a video of this episode.
Creators & Guests


Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com 

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Derek Banks 2026 Predictions | Episode 35 35 35 2026 Predictions | Episode 35 full d6ed0990-766f-4a5d-8181-94c40f1ad985 https://share.transistor.fm/s/9e06d6c0 AI Security Ops | Episode 35 – 2026 Predictions

In this episode, the BHIS panel looks into the crystal ball and shares bold predictions for AI in 2026—from energy constraints and drug development breakthroughs to agentic AI risks and cybersecurity threats.

Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Prediction: Grid Power Becomes the Bottleneck
  • (10:27) - Prediction: FDA Qualifies AI Drug Development Tools
  • (15:45) - Prediction: Nation-State Threat Actors Weaponize AI
  • (17:33) - Prediction: Agentic AI Dominates App Development
  • (23:07) - Closing Thoughts: Jobs, Risk & Opportunity

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> AI Security Ops | Episode 35 – 2026 Predictions

In this episode, the BHIS panel looks into the crystal ball and shares bold predictions for AI in 2026—from energy constraints and drug development breakthroughs to agentic AI risks and cybersecurity threats.

Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Prediction: Grid Power Becomes the Bottleneck
  • (10:27) - Prediction: FDA Qualifies AI Drug Development Tools
  • (15:45) - Prediction: Nation-State Threat Actors Weaponize AI
  • (17:33) - Prediction: Agentic AI Dominates App Development
  • (23:07) - Closing Thoughts: Jobs, Risk & Opportunity

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 08 Jan 2026 08:00:00 -0500 Black Hills Information Security Black Hills Information Security 1490 AI Security Ops | Episode 35 – 2026 Predictions

In this episode, the BHIS panel looks into the crystal ball and shares bold predictions for AI in 2026—from energy constraints and drug development breakthroughs to agentic AI risks and cybersecurity threats.

Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Prediction: Grid Power Becomes the Bottleneck
  • (10:27) - Prediction: FDA Qualifies AI Drug Development Tools
  • (15:45) - Prediction: Nation-State Threat Actors Weaponize AI
  • (17:33) - Prediction: Agentic AI Dominates App Development
  • (23:07) - Closing Thoughts: Jobs, Risk & Opportunity

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Derek Banks Joff Thyer AI Security Ops - Why Did We Create This Podcast? | Podcast Trailer 1 1 AI Security Ops - Why Did We Create This Podcast? | Podcast Trailer trailer ad31dc7e-a17f-4243-a7eb-618940947ca5 https://share.transistor.fm/s/316653b6 Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

AI Security Ops | Episode 34 – Why Did We Create This Podcast?
In this episode, the BHIS team explains the purpose behind AI Security Ops, what you can expect from future episodes, and why this show matters for anyone at the intersection of AI and cybersecurity.

Chapters

  • (00:00) - Intro & Welcome
  • (00:13) - Why We Started AI Security Ops
  • (00:41) - Our Mission: Stay Informed & Ahead
  • (00:56) - What We Cover: AI News & Insights
  • (01:23) - Community Q&A & Real-World Scenarios
  • (02:18) - Special Guests & Industry Leaders
  • (02:41) - Demos, How-Tos & Practical Tips
  • (03:07) - Who Should Listen & Why Subscribe
  • (03:34) - Join the Conversation & Closing

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

]]> Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

AI Security Ops | Episode 34 – Why Did We Create This Podcast?
In this episode, the BHIS team explains the purpose behind AI Security Ops, what you can expect from future episodes, and why this show matters for anyone at the intersection of AI and cybersecurity.

Chapters

  • (00:00) - Intro & Welcome
  • (00:13) - Why We Started AI Security Ops
  • (00:41) - Our Mission: Stay Informed & Ahead
  • (00:56) - What We Cover: AI News & Insights
  • (01:23) - Community Q&A & Real-World Scenarios
  • (02:18) - Special Guests & Industry Leaders
  • (02:41) - Demos, How-Tos & Practical Tips
  • (03:07) - Who Should Listen & Why Subscribe
  • (03:34) - Join the Conversation & Closing

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

]]> Wed, 24 Dec 2025 08:00:00 -0500 Black Hills Information Security Black Hills Information Security 233 Join the 5,000+ cybersecurity professionals on our BHIS Discord server to ask questions and share your knowledge about AI Security.
https://discord.gg/bhis

AI Security Ops | Episode 34 – Why Did We Create This Podcast?
In this episode, the BHIS team explains the purpose behind AI Security Ops, what you can expect from future episodes, and why this show matters for anyone at the intersection of AI and cybersecurity.

Chapters

  • (00:00) - Intro & Welcome
  • (00:13) - Why We Started AI Security Ops
  • (00:41) - Our Mission: Stay Informed & Ahead
  • (00:56) - What We Cover: AI News & Insights
  • (01:23) - Community Q&A & Real-World Scenarios
  • (02:18) - Special Guests & Industry Leaders
  • (02:41) - Demos, How-Tos & Practical Tips
  • (03:07) - Who Should Listen & Why Subscribe
  • (03:34) - Join the Conversation & Closing

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Bronwen Aker Joff Thyer Community Q&A on AI Security | Episode 34 34 34 Community Q&A on AI Security | Episode 34 full 7069db31-d4aa-4209-aee7-55f42137caa2 https://share.transistor.fm/s/a1c4b52f Community Q&A on AI Security | Episode 34

In this episode of BHIS Presents: AI Security Ops, our panel tackles real questions from the community about AI, hallucinations, privacy, and practical use cases. From limiting model hallucinations to understanding memory features and explaining AI to non-technical audiences, we dive into the nuances of large language models and their role in cybersecurity.

We break down:

  • Why LLMs sometimes “make stuff up” and how to reduce hallucinations
  • The role of prompts, temperature, and RAG databases in accuracy
  • Prompting best practices and reasoning modes for better results
  • Legal liability: Can you sue ChatGPT for bad advice?
  • Memory features, data retention, and privacy trade-offs
  • Security paranoia: AI apps, trust, and enterprise vs free accounts
  • Practical examples like customizing AI for writing style
  • How to explain AI to your mom (or any non-technical audience)
  • Why AI isn’t magic—just math and advanced auto-complete


Whether you’re deploying AI tools or just curious about the hype, this episode will help you understand the realities of AI in security and how to use it responsibly.

Chapters

  • (00:00) - Welcome & Sponsor Shoutouts
  • (00:50) - Episode Overview: Community Q&A
  • (01:19) - Q1: Will ChatGPT Make Stuff Up?
  • (07:50) - Q2: Can Lawyers Sue ChatGPT for False Cases?
  • (11:15) - Q3: How Can AI Improve Without Ingesting Everything?
  • (22:04) - Q4: How Do You Explain AI to Non-Technical People?
  • (28:00) - Closing Remarks & Training Plug

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Community Q&A on AI Security | Episode 34

In this episode of BHIS Presents: AI Security Ops, our panel tackles real questions from the community about AI, hallucinations, privacy, and practical use cases. From limiting model hallucinations to understanding memory features and explaining AI to non-technical audiences, we dive into the nuances of large language models and their role in cybersecurity.

We break down:

  • Why LLMs sometimes “make stuff up” and how to reduce hallucinations
  • The role of prompts, temperature, and RAG databases in accuracy
  • Prompting best practices and reasoning modes for better results
  • Legal liability: Can you sue ChatGPT for bad advice?
  • Memory features, data retention, and privacy trade-offs
  • Security paranoia: AI apps, trust, and enterprise vs free accounts
  • Practical examples like customizing AI for writing style
  • How to explain AI to your mom (or any non-technical audience)
  • Why AI isn’t magic—just math and advanced auto-complete


Whether you’re deploying AI tools or just curious about the hype, this episode will help you understand the realities of AI in security and how to use it responsibly.

Chapters

  • (00:00) - Welcome & Sponsor Shoutouts
  • (00:50) - Episode Overview: Community Q&A
  • (01:19) - Q1: Will ChatGPT Make Stuff Up?
  • (07:50) - Q2: Can Lawyers Sue ChatGPT for False Cases?
  • (11:15) - Q3: How Can AI Improve Without Ingesting Everything?
  • (22:04) - Q4: How Do You Explain AI to Non-Technical People?
  • (28:00) - Closing Remarks & Training Plug

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 18 Dec 2025 18:19:03 -0500 Black Hills Information Security Black Hills Information Security 1708 Community Q&A on AI Security | Episode 34

In this episode of BHIS Presents: AI Security Ops, our panel tackles real questions from the community about AI, hallucinations, privacy, and practical use cases. From limiting model hallucinations to understanding memory features and explaining AI to non-technical audiences, we dive into the nuances of large language models and their role in cybersecurity.

We break down:

  • Why LLMs sometimes “make stuff up” and how to reduce hallucinations
  • The role of prompts, temperature, and RAG databases in accuracy
  • Prompting best practices and reasoning modes for better results
  • Legal liability: Can you sue ChatGPT for bad advice?
  • Memory features, data retention, and privacy trade-offs
  • Security paranoia: AI apps, trust, and enterprise vs free accounts
  • Practical examples like customizing AI for writing style
  • How to explain AI to your mom (or any non-technical audience)
  • Why AI isn’t magic—just math and advanced auto-complete


Whether you’re deploying AI tools or just curious about the hype, this episode will help you understand the realities of AI in security and how to use it responsibly.

Chapters

  • (00:00) - Welcome & Sponsor Shoutouts
  • (00:50) - Episode Overview: Community Q&A
  • (01:19) - Q1: Will ChatGPT Make Stuff Up?
  • (07:50) - Q2: Can Lawyers Sue ChatGPT for False Cases?
  • (11:15) - Q3: How Can AI Improve Without Ingesting Everything?
  • (22:04) - Q4: How Do You Explain AI to Non-Technical People?
  • (28:00) - Closing Remarks & Training Plug

Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Derek Banks Joff Thyer AI News Stories | Episode 33 33 33 AI News Stories | Episode 33 full d7674048-eb49-4e78-91ec-e3ec7a450498 https://share.transistor.fm/s/cdc59387 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News | Episode 33
In this episode of BHIS Presents: AI Security Ops, the panel dives into the latest developments shaping the AI security landscape. From the first documented AI-orchestrated cyber-espionage campaign to polymorphic malware powered by Gemini, we explore how agentic AI, insecure infrastructure, and old-school mistakes are creating a fragile new attack surface.

We break down:

  • AI-driven cyber espionage: Anthropic disrupts a state-sponsored campaign using autonomous 
  • Black-hat LLMs: KawaiiGPT democratizes offensive capabilities for script kiddies.
  • Critical RCEs in AI stacks: ShadowMQ vulnerabilities hit Meta, NVIDIA, Microsoft, and more.
  • Amazon’s private AI bug bounty: Nova models under the microscope.
  • Google Antigravity IDE popped in 24 hours: Persistent code execution flaw.
  • PROMPTFLUX malware: Polymorphic VBScript leveraging Gemini for hourly rewrites.


Whether you’re defending enterprise AI deployments or building secure agentic tools, this episode will help you understand the emerging risks and what you can do to stay ahead.

⏱️ Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:27) - AI-Orchestrated Cyber Espionage (Anthropic)
  • (08:10) - ShadowMQ: Critical RCE in AI Inference Engines
  • (09:54) - KawaiiGPT: Free Black-Hat LLM
  • (22:45) - Amazon Nova: Private AI Bug Bounty
  • (26:38) - Google Antigravity IDE Hacked in 24 Hours
  • (31:36) - PROMPTFLUX: Malware Using Gemini for Polymorphism

🔗 Links
AI-Orchestrated Cyber Espionage (Anthropic)
ShadowMQ: Critical RCE in AI Inference Engines
KawaiiGPT: Free Black-Hat LLM
Amazon Nova: Private AI Bug Bounty
Google Antigravity IDE Hacked in 24 Hours
PROMPTFLUX: Malware Using Gemini for Polymorphism

#AISecurity #Cybersecurity #BHIS #LLMSecurity #AIThreats #AgenticAI #BugBounty #malware

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News | Episode 33
In this episode of BHIS Presents: AI Security Ops, the panel dives into the latest developments shaping the AI security landscape. From the first documented AI-orchestrated cyber-espionage campaign to polymorphic malware powered by Gemini, we explore how agentic AI, insecure infrastructure, and old-school mistakes are creating a fragile new attack surface.

We break down:

  • AI-driven cyber espionage: Anthropic disrupts a state-sponsored campaign using autonomous 
  • Black-hat LLMs: KawaiiGPT democratizes offensive capabilities for script kiddies.
  • Critical RCEs in AI stacks: ShadowMQ vulnerabilities hit Meta, NVIDIA, Microsoft, and more.
  • Amazon’s private AI bug bounty: Nova models under the microscope.
  • Google Antigravity IDE popped in 24 hours: Persistent code execution flaw.
  • PROMPTFLUX malware: Polymorphic VBScript leveraging Gemini for hourly rewrites.


Whether you’re defending enterprise AI deployments or building secure agentic tools, this episode will help you understand the emerging risks and what you can do to stay ahead.

⏱️ Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:27) - AI-Orchestrated Cyber Espionage (Anthropic)
  • (08:10) - ShadowMQ: Critical RCE in AI Inference Engines
  • (09:54) - KawaiiGPT: Free Black-Hat LLM
  • (22:45) - Amazon Nova: Private AI Bug Bounty
  • (26:38) - Google Antigravity IDE Hacked in 24 Hours
  • (31:36) - PROMPTFLUX: Malware Using Gemini for Polymorphism

🔗 Links
AI-Orchestrated Cyber Espionage (Anthropic)
ShadowMQ: Critical RCE in AI Inference Engines
KawaiiGPT: Free Black-Hat LLM
Amazon Nova: Private AI Bug Bounty
Google Antigravity IDE Hacked in 24 Hours
PROMPTFLUX: Malware Using Gemini for Polymorphism

#AISecurity #Cybersecurity #BHIS #LLMSecurity #AIThreats #AgenticAI #BugBounty #malware

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 11 Dec 2025 16:31:31 -0500 Black Hills Information Security Black Hills Information Security 2233 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News | Episode 33
In this episode of BHIS Presents: AI Security Ops, the panel dives into the latest developments shaping the AI security landscape. From the first documented AI-orchestrated cyber-espionage campaign to polymorphic malware powered by Gemini, we explore how agentic AI, insecure infrastructure, and old-school mistakes are creating a fragile new attack surface.

We break down:

  • AI-driven cyber espionage: Anthropic disrupts a state-sponsored campaign using autonomous 
  • Black-hat LLMs: KawaiiGPT democratizes offensive capabilities for script kiddies.
  • Critical RCEs in AI stacks: ShadowMQ vulnerabilities hit Meta, NVIDIA, Microsoft, and more.
  • Amazon’s private AI bug bounty: Nova models under the microscope.
  • Google Antigravity IDE popped in 24 hours: Persistent code execution flaw.
  • PROMPTFLUX malware: Polymorphic VBScript leveraging Gemini for hourly rewrites.


Whether you’re defending enterprise AI deployments or building secure agentic tools, this episode will help you understand the emerging risks and what you can do to stay ahead.

⏱️ Chapters

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:27) - AI-Orchestrated Cyber Espionage (Anthropic)
  • (08:10) - ShadowMQ: Critical RCE in AI Inference Engines
  • (09:54) - KawaiiGPT: Free Black-Hat LLM
  • (22:45) - Amazon Nova: Private AI Bug Bounty
  • (26:38) - Google Antigravity IDE Hacked in 24 Hours
  • (31:36) - PROMPTFLUX: Malware Using Gemini for Polymorphism

🔗 Links
AI-Orchestrated Cyber Espionage (Anthropic)
ShadowMQ: Critical RCE in AI Inference Engines
KawaiiGPT: Free Black-Hat LLM
Amazon Nova: Private AI Bug Bounty
Google Antigravity IDE Hacked in 24 Hours
PROMPTFLUX: Malware Using Gemini for Polymorphism

#AISecurity #Cybersecurity #BHIS #LLMSecurity #AIThreats #AgenticAI #BugBounty #malware

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> AISecurity,Cybersecurity,BHIS,LLMSecurity,AIThreats,AgenticAI,BugBounty,malware No Brian Fehrman Derek Banks Model Evasion Attacks | Episode 32 32 32 Model Evasion Attacks | Episode 32 full 57e7392f-7a91-4c50-8815-44f198ea5af8 https://share.transistor.fm/s/5a99cb37 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

Model Evasion Attacks | Episode 32
In this episode of BHIS Presents: AI Security Ops, the panel explores the stealthy world of model evasion attacks, where adversaries manipulate inputs to trick AI classifiers into misclassifying malicious activity as benign. From image classifiers to malware detection and even LLM-based systems, learn how attackers exploit decision boundaries and why this matters for cybersecurity.

We break down:
- What model evasion attacks are and how they differ from data poisoning
- How attackers tweak features to bypass classifiers (images, phishing, malware)
- Real-world tactics like model extraction and trial-and-error evasion
- Why non-determinism in AI models makes evasion harder to predict
- Advanced threats: model theft, ablation, and adversarial AI
- Defensive strategies: adversarial training, API throttling, and realistic expectations
- Future outlook: regulatory trends, transparency, and the ongoing arms race

Whether you’re deploying EDR solutions or fine-tuning AI models, this episode will help you understand why evasion is an enduring challenge, and what you can do to defend against it.


#AISecurity #ModelEvasion #Cybersecurity #BHIS #LLMSecurity #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Are Model Evasion Attacks?
  • (03:58) - Image Classifiers & Pixel Tweaks
  • (07:01) - Malware Classification & Decision Boundaries
  • (10:02) - Model Theft & Extraction Attacks
  • (13:16) - Non-Determinism & Myth Busting
  • (16:07) - AI in Offensive Capabilities
  • (17:36) - Defensive Strategies & Adversarial Training
  • (20:54) - Vendor Questions & Transparency
  • (23:22) - Future Outlook & Regulatory Trends
  • (25:54) - Panel Takeaways & Closing Thoughts
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

Model Evasion Attacks | Episode 32
In this episode of BHIS Presents: AI Security Ops, the panel explores the stealthy world of model evasion attacks, where adversaries manipulate inputs to trick AI classifiers into misclassifying malicious activity as benign. From image classifiers to malware detection and even LLM-based systems, learn how attackers exploit decision boundaries and why this matters for cybersecurity.

We break down:
- What model evasion attacks are and how they differ from data poisoning
- How attackers tweak features to bypass classifiers (images, phishing, malware)
- Real-world tactics like model extraction and trial-and-error evasion
- Why non-determinism in AI models makes evasion harder to predict
- Advanced threats: model theft, ablation, and adversarial AI
- Defensive strategies: adversarial training, API throttling, and realistic expectations
- Future outlook: regulatory trends, transparency, and the ongoing arms race

Whether you’re deploying EDR solutions or fine-tuning AI models, this episode will help you understand why evasion is an enduring challenge, and what you can do to defend against it.


#AISecurity #ModelEvasion #Cybersecurity #BHIS #LLMSecurity #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Are Model Evasion Attacks?
  • (03:58) - Image Classifiers & Pixel Tweaks
  • (07:01) - Malware Classification & Decision Boundaries
  • (10:02) - Model Theft & Extraction Attacks
  • (13:16) - Non-Determinism & Myth Busting
  • (16:07) - AI in Offensive Capabilities
  • (17:36) - Defensive Strategies & Adversarial Training
  • (20:54) - Vendor Questions & Transparency
  • (23:22) - Future Outlook & Regulatory Trends
  • (25:54) - Panel Takeaways & Closing Thoughts
]]> Thu, 04 Dec 2025 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 1712 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

Model Evasion Attacks | Episode 32
In this episode of BHIS Presents: AI Security Ops, the panel explores the stealthy world of model evasion attacks, where adversaries manipulate inputs to trick AI classifiers into misclassifying malicious activity as benign. From image classifiers to malware detection and even LLM-based systems, learn how attackers exploit decision boundaries and why this matters for cybersecurity.

We break down:
- What model evasion attacks are and how they differ from data poisoning
- How attackers tweak features to bypass classifiers (images, phishing, malware)
- Real-world tactics like model extraction and trial-and-error evasion
- Why non-determinism in AI models makes evasion harder to predict
- Advanced threats: model theft, ablation, and adversarial AI
- Defensive strategies: adversarial training, API throttling, and realistic expectations
- Future outlook: regulatory trends, transparency, and the ongoing arms race

Whether you’re deploying EDR solutions or fine-tuning AI models, this episode will help you understand why evasion is an enduring challenge, and what you can do to defend against it.


#AISecurity #ModelEvasion #Cybersecurity #BHIS #LLMSecurity #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Are Model Evasion Attacks?
  • (03:58) - Image Classifiers & Pixel Tweaks
  • (07:01) - Malware Classification & Decision Boundaries
  • (10:02) - Model Theft & Extraction Attacks
  • (13:16) - Non-Determinism & Myth Busting
  • (16:07) - AI in Offensive Capabilities
  • (17:36) - Defensive Strategies & Adversarial Training
  • (20:54) - Vendor Questions & Transparency
  • (23:22) - Future Outlook & Regulatory Trends
  • (25:54) - Panel Takeaways & Closing Thoughts
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer Data Poisoning | Episode 31 31 31 Data Poisoning | Episode 31 full 7242b12a-c380-4d1e-b0e2-1077df9248c1 https://share.transistor.fm/s/6ad6a5a8 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Data Poisoning Attacks | Episode 31
In this episode of BHIS Presents: AI Security Ops, the panel dives into the hidden danger of data poisoning – where attackers corrupt the data that trains your AI models, leading to unpredictable and often harmful behavior. From classifiers to LLMs, discover why poisoned data can undermine security, accuracy, and trust in AI systems.

We break down:

  • What data poisoning is and why it matters
  • How attackers inject malicious samples or flip labels in training sets
  • The role of open-source repositories like Hugging Face in supply chain risk
  • New twists for LLMs: poisoning via reinforcement feedback and RAG
  • Real-world concerns like bias in ChatGPT and malicious model uploads
  • Defensive strategies: governance, provenance, versioning, and security assessments


Whether you’re building classifiers or fine-tuning LLMs, this episode will help you understand how poisoned data sneaks in, and what you can do to prevent it. Treat your AI like a “drunk intern”: verify everything.


#aisecurity  #DataPoisoning #Cybersecurity #BHIS #llmsecurity  #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is Data Poisoning?
  • (03:58) - Poisoning Classifier Models
  • (08:10) - Risks in Open-Source Data Sets
  • (12:30) - LLM-Specific Poisoning Vectors
  • (17:04) - RAG and Context Injection
  • (21:25) - Realistic Threats & Examples
  • (25:48) - Defensive Strategies & Governance
  • (28:27) - Panel Takeaways & Closing Thoughts
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Data Poisoning Attacks | Episode 31
In this episode of BHIS Presents: AI Security Ops, the panel dives into the hidden danger of data poisoning – where attackers corrupt the data that trains your AI models, leading to unpredictable and often harmful behavior. From classifiers to LLMs, discover why poisoned data can undermine security, accuracy, and trust in AI systems.

We break down:

  • What data poisoning is and why it matters
  • How attackers inject malicious samples or flip labels in training sets
  • The role of open-source repositories like Hugging Face in supply chain risk
  • New twists for LLMs: poisoning via reinforcement feedback and RAG
  • Real-world concerns like bias in ChatGPT and malicious model uploads
  • Defensive strategies: governance, provenance, versioning, and security assessments


Whether you’re building classifiers or fine-tuning LLMs, this episode will help you understand how poisoned data sneaks in, and what you can do to prevent it. Treat your AI like a “drunk intern”: verify everything.


#aisecurity  #DataPoisoning #Cybersecurity #BHIS #llmsecurity  #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is Data Poisoning?
  • (03:58) - Poisoning Classifier Models
  • (08:10) - Risks in Open-Source Data Sets
  • (12:30) - LLM-Specific Poisoning Vectors
  • (17:04) - RAG and Context Injection
  • (21:25) - Realistic Threats & Examples
  • (25:48) - Defensive Strategies & Governance
  • (28:27) - Panel Takeaways & Closing Thoughts
]]> Thu, 27 Nov 2025 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 1880 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Data Poisoning Attacks | Episode 31
In this episode of BHIS Presents: AI Security Ops, the panel dives into the hidden danger of data poisoning – where attackers corrupt the data that trains your AI models, leading to unpredictable and often harmful behavior. From classifiers to LLMs, discover why poisoned data can undermine security, accuracy, and trust in AI systems.

We break down:

  • What data poisoning is and why it matters
  • How attackers inject malicious samples or flip labels in training sets
  • The role of open-source repositories like Hugging Face in supply chain risk
  • New twists for LLMs: poisoning via reinforcement feedback and RAG
  • Real-world concerns like bias in ChatGPT and malicious model uploads
  • Defensive strategies: governance, provenance, versioning, and security assessments


Whether you’re building classifiers or fine-tuning LLMs, this episode will help you understand how poisoned data sneaks in, and what you can do to prevent it. Treat your AI like a “drunk intern”: verify everything.


#aisecurity  #DataPoisoning #Cybersecurity #BHIS #llmsecurity  #aithreats


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is Data Poisoning?
  • (03:58) - Poisoning Classifier Models
  • (08:10) - Risks in Open-Source Data Sets
  • (12:30) - LLM-Specific Poisoning Vectors
  • (17:04) - RAG and Context Injection
  • (21:25) - Realistic Threats & Examples
  • (25:48) - Defensive Strategies & Governance
  • (28:27) - Panel Takeaways & Closing Thoughts
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No AI News Stories | Episode 30 30 30 AI News Stories | Episode 30 full 0ba3e45c-566e-4982-af3f-7069ff7602e1 https://share.transistor.fm/s/953ef94e 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 30
In this episode of BHIS Presents: AI Security Ops, we break down the top AI cybersecurity news and trends from November 2025. Our panel covers rising public awareness of AI, the security risks of local LLMs, emerging AI-driven threats, and what these developments mean for security teams. Whether you work in cybersecurity, AI security, or incident response, this episode helps you stay ahead of evolving AI-powered attacks and defenses.

Topics Covered:

Only 5% of Americans are unaware of AI?
What Pew Research reveals about AI’s penetration into everyday life and workplace usage.
AI’s Shift to the Intimacy Economy – Project Liberty
https://email.projectliberty.io/ais-shift-to-the-intimacy-economy-1 

Amazon to Cut Jobs and Invest in AI Infrastructure
14,000 corporate roles eliminated—are layoffs really about efficiency or something else?
Amazon to Cut Jobs & Invest in AI – DW
https://www.dw.com/en/amazon-to-cut-14000-corporate-jobs-amid-ai-investment/a-74524365

Local Models Less Secure than Cloud Providers?
Why quantization and lack of guardrails make local LLMs more vulnerable to prompt injection and insecure code.
Local LLMs Security Paradox – Quesma
https://quesma.com/blog/local-llms-security-paradox

Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:07) - AI’s Shift to the Intimacy Economy (Pew Research)
  • (19:40) - Amazon Layoffs & AI Investment
  • (27:00) - Local LLM Security Paradox
  • (36:32) - Wrap-Up & Key Takeaways
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 30
In this episode of BHIS Presents: AI Security Ops, we break down the top AI cybersecurity news and trends from November 2025. Our panel covers rising public awareness of AI, the security risks of local LLMs, emerging AI-driven threats, and what these developments mean for security teams. Whether you work in cybersecurity, AI security, or incident response, this episode helps you stay ahead of evolving AI-powered attacks and defenses.

Topics Covered:

Only 5% of Americans are unaware of AI?
What Pew Research reveals about AI’s penetration into everyday life and workplace usage.
AI’s Shift to the Intimacy Economy – Project Liberty
https://email.projectliberty.io/ais-shift-to-the-intimacy-economy-1 

Amazon to Cut Jobs and Invest in AI Infrastructure
14,000 corporate roles eliminated—are layoffs really about efficiency or something else?
Amazon to Cut Jobs & Invest in AI – DW
https://www.dw.com/en/amazon-to-cut-14000-corporate-jobs-amid-ai-investment/a-74524365

Local Models Less Secure than Cloud Providers?
Why quantization and lack of guardrails make local LLMs more vulnerable to prompt injection and insecure code.
Local LLMs Security Paradox – Quesma
https://quesma.com/blog/local-llms-security-paradox

Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:07) - AI’s Shift to the Intimacy Economy (Pew Research)
  • (19:40) - Amazon Layoffs & AI Investment
  • (27:00) - Local LLM Security Paradox
  • (36:32) - Wrap-Up & Key Takeaways
]]> Thu, 20 Nov 2025 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 2225 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 30
In this episode of BHIS Presents: AI Security Ops, we break down the top AI cybersecurity news and trends from November 2025. Our panel covers rising public awareness of AI, the security risks of local LLMs, emerging AI-driven threats, and what these developments mean for security teams. Whether you work in cybersecurity, AI security, or incident response, this episode helps you stay ahead of evolving AI-powered attacks and defenses.

Topics Covered:

Only 5% of Americans are unaware of AI?
What Pew Research reveals about AI’s penetration into everyday life and workplace usage.
AI’s Shift to the Intimacy Economy – Project Liberty
https://email.projectliberty.io/ais-shift-to-the-intimacy-economy-1 

Amazon to Cut Jobs and Invest in AI Infrastructure
14,000 corporate roles eliminated—are layoffs really about efficiency or something else?
Amazon to Cut Jobs & Invest in AI – DW
https://www.dw.com/en/amazon-to-cut-14000-corporate-jobs-amid-ai-investment/a-74524365

Local Models Less Secure than Cloud Providers?
Why quantization and lack of guardrails make local LLMs more vulnerable to prompt injection and insecure code.
Local LLMs Security Paradox – Quesma
https://quesma.com/blog/local-llms-security-paradox

Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:07) - AI’s Shift to the Intimacy Economy (Pew Research)
  • (19:40) - Amazon Layoffs & AI Investment
  • (27:00) - Local LLM Security Paradox
  • (36:32) - Wrap-Up & Key Takeaways
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Bronwen Aker Joff Thyer Derek Banks A Conversation with Dr. Colin Shea-Blymyer | Episode 29 29 29 A Conversation with Dr. Colin Shea-Blymyer | Episode 29 full 62b223d1-6b96-498c-9e3a-661d241a0668 https://share.transistor.fm/s/77b004f8 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

A Conversation with Dr. Colin Shea-Blymyer  | Episode 29

In this episode of BHIS Presents: AI Security Ops, the panel welcomes Dr. Colin Shea-Blymyer for a deep dive into the intersection of AI governance, cybersecurity, and red teaming. From the historical roots of neural networks to today’s regulatory patchwork, we explore how policy, security, and innovation collide in the age of AI. Expect candid insights on emerging risks, open models, and why defining your risk appetite matters more than ever.

Topics Covered:

  • AI governance vs. innovation: U.S. vs. EU regulatory approaches
  • The evolution of neural networks and lessons from AI history
  • AI red teaming: definitions, methodologies, and data-sharing challenges
  • Safety vs. security: where they overlap and diverge
  • Emerging risks: supply chain vulnerabilities, prompt injection, and poisoned data
  • Open weights vs. closed models: implications for research and security
  • Practical takeaways for organizations navigating AI uncertainty


About the Panel:
Joff Thyer, Dr. Brian Fehrman, Derek Banks
Guest Panelist: Dr. Colin Shea-Blymyer
https://cset.georgetown.edu/staff/colin-shea-blymyer/

#aisecurity  #aigovernance  #cyberrisk  #AIredteam #OpenModels #aipolicy  #BHIS #AIthreats #aiincybersecurity  #llmsecurity


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Guest Welcome
  • (02:14) - Colin’s Journey: From CS to AI Governance
  • (06:33) - Lessons from AI History & Neural Network Origins
  • (10:28) - AI Red Teaming: Definitions & Methodologies
  • (15:11) - Safety vs. Security: Where They Intersect
  • (22:47) - Regulatory Landscape: U.S. Patchwork vs. EU AI Act
  • (33:42) - Open Models Debate: Risks & Research Benefits
  • (38:19) - Emerging Threats & Supply Chain Risks
  • (44:06) - Practical Takeaways & Closing Thoughts
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

A Conversation with Dr. Colin Shea-Blymyer  | Episode 29

In this episode of BHIS Presents: AI Security Ops, the panel welcomes Dr. Colin Shea-Blymyer for a deep dive into the intersection of AI governance, cybersecurity, and red teaming. From the historical roots of neural networks to today’s regulatory patchwork, we explore how policy, security, and innovation collide in the age of AI. Expect candid insights on emerging risks, open models, and why defining your risk appetite matters more than ever.

Topics Covered:

  • AI governance vs. innovation: U.S. vs. EU regulatory approaches
  • The evolution of neural networks and lessons from AI history
  • AI red teaming: definitions, methodologies, and data-sharing challenges
  • Safety vs. security: where they overlap and diverge
  • Emerging risks: supply chain vulnerabilities, prompt injection, and poisoned data
  • Open weights vs. closed models: implications for research and security
  • Practical takeaways for organizations navigating AI uncertainty


About the Panel:
Joff Thyer, Dr. Brian Fehrman, Derek Banks
Guest Panelist: Dr. Colin Shea-Blymyer
https://cset.georgetown.edu/staff/colin-shea-blymyer/

#aisecurity  #aigovernance  #cyberrisk  #AIredteam #OpenModels #aipolicy  #BHIS #AIthreats #aiincybersecurity  #llmsecurity


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Guest Welcome
  • (02:14) - Colin’s Journey: From CS to AI Governance
  • (06:33) - Lessons from AI History & Neural Network Origins
  • (10:28) - AI Red Teaming: Definitions & Methodologies
  • (15:11) - Safety vs. Security: Where They Intersect
  • (22:47) - Regulatory Landscape: U.S. Patchwork vs. EU AI Act
  • (33:42) - Open Models Debate: Risks & Research Benefits
  • (38:19) - Emerging Threats & Supply Chain Risks
  • (44:06) - Practical Takeaways & Closing Thoughts
]]> Thu, 13 Nov 2025 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 2807 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

A Conversation with Dr. Colin Shea-Blymyer  | Episode 29

In this episode of BHIS Presents: AI Security Ops, the panel welcomes Dr. Colin Shea-Blymyer for a deep dive into the intersection of AI governance, cybersecurity, and red teaming. From the historical roots of neural networks to today’s regulatory patchwork, we explore how policy, security, and innovation collide in the age of AI. Expect candid insights on emerging risks, open models, and why defining your risk appetite matters more than ever.

Topics Covered:

  • AI governance vs. innovation: U.S. vs. EU regulatory approaches
  • The evolution of neural networks and lessons from AI history
  • AI red teaming: definitions, methodologies, and data-sharing challenges
  • Safety vs. security: where they overlap and diverge
  • Emerging risks: supply chain vulnerabilities, prompt injection, and poisoned data
  • Open weights vs. closed models: implications for research and security
  • Practical takeaways for organizations navigating AI uncertainty


About the Panel:
Joff Thyer, Dr. Brian Fehrman, Derek Banks
Guest Panelist: Dr. Colin Shea-Blymyer
https://cset.georgetown.edu/staff/colin-shea-blymyer/

#aisecurity  #aigovernance  #cyberrisk  #AIredteam #OpenModels #aipolicy  #BHIS #AIthreats #aiincybersecurity  #llmsecurity


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Guest Welcome
  • (02:14) - Colin’s Journey: From CS to AI Governance
  • (06:33) - Lessons from AI History & Neural Network Origins
  • (10:28) - AI Red Teaming: Definitions & Methodologies
  • (15:11) - Safety vs. Security: Where They Intersect
  • (22:47) - Regulatory Landscape: U.S. Patchwork vs. EU AI Act
  • (33:42) - Open Models Debate: Risks & Research Benefits
  • (38:19) - Emerging Threats & Supply Chain Risks
  • (44:06) - Practical Takeaways & Closing Thoughts
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Dr. Colin Shea-Blymyer Brian Fehrman Joff Thyer Questions from the Community | Episode 28 28 28 Questions from the Community | Episode 28 full 54eb5764-5b75-410f-8b00-969890ade0c2 https://share.transistor.fm/s/accbd8c0 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 28 – Questions from the Community
In this episode of BHIS Presents: AI Security Ops, the panel tackles real questions from the community, diving deep into the practical, ethical, and technical challenges of AI in cybersecurity. From red teaming tools to prompt privacy, this Q&A session delivers candid insights and actionable advice for professionals navigating the AI-infused threat landscape.

🧠 Topics Covered:

  • Open-source tools for LLM red teaming
  • Threat modeling AI systems (STRIDE methodology)
  • Hallucination rates in frontier vs. local models
  • Prompt privacy: what’s stored, what’s shared
  • Should red teamers disclose AI usage?
  • Human-in-the-loop: AI-generated deliverables
  • Whether you're a pentester, SOC analyst, or just curious about how AI is reshaping offensive security, this episode is packed with expert perspectives and practical takeaways.


About the Panel:
Brian Fehrman, Derek Banks, Joff Thyer


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Recommended Tools for LLM Red Teaming
  • (06:12) - Threat Modeling AI Systems
  • (09:58) - Which Models Hallucinate Most?
  • (17:13) - Prompt Privacy: What You Should Know
  • (22:54) - Should Red Teamers Disclose AI Usage?
  • (27:01) - Final Thoughts & Wrap-Up
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 28 – Questions from the Community
In this episode of BHIS Presents: AI Security Ops, the panel tackles real questions from the community, diving deep into the practical, ethical, and technical challenges of AI in cybersecurity. From red teaming tools to prompt privacy, this Q&A session delivers candid insights and actionable advice for professionals navigating the AI-infused threat landscape.

🧠 Topics Covered:

  • Open-source tools for LLM red teaming
  • Threat modeling AI systems (STRIDE methodology)
  • Hallucination rates in frontier vs. local models
  • Prompt privacy: what’s stored, what’s shared
  • Should red teamers disclose AI usage?
  • Human-in-the-loop: AI-generated deliverables
  • Whether you're a pentester, SOC analyst, or just curious about how AI is reshaping offensive security, this episode is packed with expert perspectives and practical takeaways.


About the Panel:
Brian Fehrman, Derek Banks, Joff Thyer


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Recommended Tools for LLM Red Teaming
  • (06:12) - Threat Modeling AI Systems
  • (09:58) - Which Models Hallucinate Most?
  • (17:13) - Prompt Privacy: What You Should Know
  • (22:54) - Should Red Teamers Disclose AI Usage?
  • (27:01) - Final Thoughts & Wrap-Up
]]> Thu, 06 Nov 2025 12:00:00 -0500 Black Hills Information Security Black Hills Information Security 1706 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 28 – Questions from the Community
In this episode of BHIS Presents: AI Security Ops, the panel tackles real questions from the community, diving deep into the practical, ethical, and technical challenges of AI in cybersecurity. From red teaming tools to prompt privacy, this Q&A session delivers candid insights and actionable advice for professionals navigating the AI-infused threat landscape.

🧠 Topics Covered:

  • Open-source tools for LLM red teaming
  • Threat modeling AI systems (STRIDE methodology)
  • Hallucination rates in frontier vs. local models
  • Prompt privacy: what’s stored, what’s shared
  • Should red teamers disclose AI usage?
  • Human-in-the-loop: AI-generated deliverables
  • Whether you're a pentester, SOC analyst, or just curious about how AI is reshaping offensive security, this episode is packed with expert perspectives and practical takeaways.


About the Panel:
Brian Fehrman, Derek Banks, Joff Thyer


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:14) - Recommended Tools for LLM Red Teaming
  • (06:12) - Threat Modeling AI Systems
  • (09:58) - Which Models Hallucinate Most?
  • (17:13) - Prompt Privacy: What You Should Know
  • (22:54) - Should Red Teamers Disclose AI Usage?
  • (27:01) - Final Thoughts & Wrap-Up
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer Azure AI Foundry Guardrails | Episode 27 27 27 Azure AI Foundry Guardrails | Episode 27 full 501a4b40-8b94-45c5-b208-8ac11f340df5 https://share.transistor.fm/s/635044c0 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Azure AI Foundry Guardrails | Episode 27

In this episode of BHIS Presents: AI Security Ops, we explore how to configure content filters for AI models using the Azure AI Fooundry guardrails and controls interface. Whether you're building secure demos or deploying models in production, this walkthrough shows how to block unwanted content, enforce policy, and maintain compliance.

Topics Covered:

  •  Changing default filters for demo compliance
  •  Setting up a system prompt and understanding its role
  •  Adding regex terms to block specific content
  •  Creating and configuring a custom filter: “tech demo guardrails”
  •  Input-side filtering: inspecting user text before model access
  •  Safety vs. security categories in filtering
  •  Enabling prompt shields for indirect jailbreak detection


This video is ideal for developers, security engineers, and anyone working with AI systems who needs to implement layered defenses and ensure responsible model behavior.


Why This Matters
By implementing layered security—block lists, input and output filters—you protect sensitive data, comply with policy, and maintain a safe user experience.

#AIsecurity #GuardrailsAndControls #ContentFiltering #PromptSecurity #RegexFiltering #BHIS #AIModelSafety #SystemPromptSecurity

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Introduction & Overview
  • (01:17) - Changing the Default Content Filter for Demo Compliance
  • (02:00) - Setting Up a System Prompt and Its Purpose
  • (04:26) - Adding a New Term (“dogs”) to the Content Filter (Regex Example)
  • (05:04) - Creating and Configuring a Content Filter Named “Tech Demo Guardrails”
  • (05:35) - How Input-Side Filters Inspect and Block Unwanted Content
  • (06:01) - Overview of Safety Categories vs. Security Categories
  • (07:15) - Enabling Prompt Shields for Indirect Jailbreak Detection (Not Used in Demo)
  • (08:30) - Summary & Next Steps
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Azure AI Foundry Guardrails | Episode 27

In this episode of BHIS Presents: AI Security Ops, we explore how to configure content filters for AI models using the Azure AI Fooundry guardrails and controls interface. Whether you're building secure demos or deploying models in production, this walkthrough shows how to block unwanted content, enforce policy, and maintain compliance.

Topics Covered:

  •  Changing default filters for demo compliance
  •  Setting up a system prompt and understanding its role
  •  Adding regex terms to block specific content
  •  Creating and configuring a custom filter: “tech demo guardrails”
  •  Input-side filtering: inspecting user text before model access
  •  Safety vs. security categories in filtering
  •  Enabling prompt shields for indirect jailbreak detection


This video is ideal for developers, security engineers, and anyone working with AI systems who needs to implement layered defenses and ensure responsible model behavior.


Why This Matters
By implementing layered security—block lists, input and output filters—you protect sensitive data, comply with policy, and maintain a safe user experience.

#AIsecurity #GuardrailsAndControls #ContentFiltering #PromptSecurity #RegexFiltering #BHIS #AIModelSafety #SystemPromptSecurity

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Introduction & Overview
  • (01:17) - Changing the Default Content Filter for Demo Compliance
  • (02:00) - Setting Up a System Prompt and Its Purpose
  • (04:26) - Adding a New Term (“dogs”) to the Content Filter (Regex Example)
  • (05:04) - Creating and Configuring a Content Filter Named “Tech Demo Guardrails”
  • (05:35) - How Input-Side Filters Inspect and Block Unwanted Content
  • (06:01) - Overview of Safety Categories vs. Security Categories
  • (07:15) - Enabling Prompt Shields for Indirect Jailbreak Detection (Not Used in Demo)
  • (08:30) - Summary & Next Steps
]]> Thu, 30 Oct 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 922 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Azure AI Foundry Guardrails | Episode 27

In this episode of BHIS Presents: AI Security Ops, we explore how to configure content filters for AI models using the Azure AI Fooundry guardrails and controls interface. Whether you're building secure demos or deploying models in production, this walkthrough shows how to block unwanted content, enforce policy, and maintain compliance.

Topics Covered:

  •  Changing default filters for demo compliance
  •  Setting up a system prompt and understanding its role
  •  Adding regex terms to block specific content
  •  Creating and configuring a custom filter: “tech demo guardrails”
  •  Input-side filtering: inspecting user text before model access
  •  Safety vs. security categories in filtering
  •  Enabling prompt shields for indirect jailbreak detection


This video is ideal for developers, security engineers, and anyone working with AI systems who needs to implement layered defenses and ensure responsible model behavior.


Why This Matters
By implementing layered security—block lists, input and output filters—you protect sensitive data, comply with policy, and maintain a safe user experience.

#AIsecurity #GuardrailsAndControls #ContentFiltering #PromptSecurity #RegexFiltering #BHIS #AIModelSafety #SystemPromptSecurity

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Introduction & Overview
  • (01:17) - Changing the Default Content Filter for Demo Compliance
  • (02:00) - Setting Up a System Prompt and Its Purpose
  • (04:26) - Adding a New Term (“dogs”) to the Content Filter (Regex Example)
  • (05:04) - Creating and Configuring a Content Filter Named “Tech Demo Guardrails”
  • (05:35) - How Input-Side Filters Inspect and Block Unwanted Content
  • (06:01) - Overview of Safety Categories vs. Security Categories
  • (07:15) - Enabling Prompt Shields for Indirect Jailbreak Detection (Not Used in Demo)
  • (08:30) - Summary & Next Steps
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Questions from the Community | Episode 26 26 26 Questions from the Community | Episode 26 full 98f2d43e-246a-46dc-a1d6-3b1522e54874 https://share.transistor.fm/s/2079ee77 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Questions from the Community | Episode 26
In this community-driven episode of BHIS Presents: AI Security Ops, the panel answers real questions from viewers about AI security, privacy, and risk. Featuring Brian Fehrman, Bronwen Aker, Jack Verrier, and Joff Thyer, the team dives into everything from guardrails and hallucinations to GDPR, agentic AI, and how to stay safe in an AI-saturated world.

💬 Topics include:

  • Are guardrails enough to protect sensitive prompts?
  • What’s the difference between hallucination and confabulation?
  • How does AI intersect with GDPR and the right to be forgotten?
  • What does it mean to “stay safe” when using AI?
  • How is securing AI different from traditional software?


Whether you're a red teamer, SOC analyst, or just trying to navigate the AI landscape, this episode offers practical insights and thoughtful perspectives from seasoned security professionals.

Panelists:
🔹 Brian Fehrman
🔹 Bronwen Aker
🔹 Jack Verrier
🔹 Joff Thyer
#AIsecurity #Cybersecurity #PromptInjection #LLMs #BHIS #AIprivacy #AgenticAI #AIandGDPR

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Panel Welcome
  • (01:22) - Are Guardrails Enough to Protect System Prompts?
  • (09:54) - Explaining Hallucination vs. Confabulation
  • (20:09) - AI and GDPR: The Right to Be Forgotten?
  • (23:49) - How Do We Stay Safe Using AI?
  • (32:26) - Securing AI vs. Traditional Software
  • (37:18) - Final Thoughts & Wrap-Up
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Questions from the Community | Episode 26
In this community-driven episode of BHIS Presents: AI Security Ops, the panel answers real questions from viewers about AI security, privacy, and risk. Featuring Brian Fehrman, Bronwen Aker, Jack Verrier, and Joff Thyer, the team dives into everything from guardrails and hallucinations to GDPR, agentic AI, and how to stay safe in an AI-saturated world.

💬 Topics include:

  • Are guardrails enough to protect sensitive prompts?
  • What’s the difference between hallucination and confabulation?
  • How does AI intersect with GDPR and the right to be forgotten?
  • What does it mean to “stay safe” when using AI?
  • How is securing AI different from traditional software?


Whether you're a red teamer, SOC analyst, or just trying to navigate the AI landscape, this episode offers practical insights and thoughtful perspectives from seasoned security professionals.

Panelists:
🔹 Brian Fehrman
🔹 Bronwen Aker
🔹 Jack Verrier
🔹 Joff Thyer
#AIsecurity #Cybersecurity #PromptInjection #LLMs #BHIS #AIprivacy #AgenticAI #AIandGDPR

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Panel Welcome
  • (01:22) - Are Guardrails Enough to Protect System Prompts?
  • (09:54) - Explaining Hallucination vs. Confabulation
  • (20:09) - AI and GDPR: The Right to Be Forgotten?
  • (23:49) - How Do We Stay Safe Using AI?
  • (32:26) - Securing AI vs. Traditional Software
  • (37:18) - Final Thoughts & Wrap-Up
]]> Thu, 23 Oct 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2267 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Questions from the Community | Episode 26
In this community-driven episode of BHIS Presents: AI Security Ops, the panel answers real questions from viewers about AI security, privacy, and risk. Featuring Brian Fehrman, Bronwen Aker, Jack Verrier, and Joff Thyer, the team dives into everything from guardrails and hallucinations to GDPR, agentic AI, and how to stay safe in an AI-saturated world.

💬 Topics include:

  • Are guardrails enough to protect sensitive prompts?
  • What’s the difference between hallucination and confabulation?
  • How does AI intersect with GDPR and the right to be forgotten?
  • What does it mean to “stay safe” when using AI?
  • How is securing AI different from traditional software?


Whether you're a red teamer, SOC analyst, or just trying to navigate the AI landscape, this episode offers practical insights and thoughtful perspectives from seasoned security professionals.

Panelists:
🔹 Brian Fehrman
🔹 Bronwen Aker
🔹 Jack Verrier
🔹 Joff Thyer
#AIsecurity #Cybersecurity #PromptInjection #LLMs #BHIS #AIprivacy #AgenticAI #AIandGDPR

Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Panel Welcome
  • (01:22) - Are Guardrails Enough to Protect System Prompts?
  • (09:54) - Explaining Hallucination vs. Confabulation
  • (20:09) - AI and GDPR: The Right to Be Forgotten?
  • (23:49) - How Do We Stay Safe Using AI?
  • (32:26) - Securing AI vs. Traditional Software
  • (37:18) - Final Thoughts & Wrap-Up
]]> AI security,Cybersecurity,Promp tInjection,LLMs,BHIS,AI privacy,Agentic AI,AI and GDPR No Brian Fehrman Joff Thyer Bronwen Aker Jack Verrier AI News Stories | Episode 25 25 25 AI News Stories | Episode 25 full 5254f0ca-48dd-41a6-b9bd-233b43990873 https://share.transistor.fm/s/83cb0b41 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 25
In this episode of BHIS Presents: AI Security Ops, the panel dives into the biggest AI cybersecurity headlines from late September 2025. From government regulation to zero-click exploits, we unpack the risks, trends, and implications for security professionals navigating the AI-powered future.

🧠 Topics Covered:

  • Government oversight of advanced AI systems
  • Accenture’s massive layoffs amid AI pivot
  • ShadowLeak: zero-click vulnerability in ChatGPT agents
  • Malicious MCP server stealing emails
  • AI in the SOC: benefits and risks
  • Attackers using AI to scale ransomware and social engineering


Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (00:45) - Senators Introduce AI Risk Evaluation Act
  • (09:48) - Accenture Layoffs & AI Restructuring
  • (16:17) - ShadowLeak: Zero-Click Vulnerability in ChatGPT
  • (20:07) - Malicious MCP Server & Supply Chain Risks
  • (26:27) - AI in the SOC: Alert Triage & Analyst Burnout
  • (30:10) - Final Thoughts: AI’s Role in Security Operations
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 25
In this episode of BHIS Presents: AI Security Ops, the panel dives into the biggest AI cybersecurity headlines from late September 2025. From government regulation to zero-click exploits, we unpack the risks, trends, and implications for security professionals navigating the AI-powered future.

🧠 Topics Covered:

  • Government oversight of advanced AI systems
  • Accenture’s massive layoffs amid AI pivot
  • ShadowLeak: zero-click vulnerability in ChatGPT agents
  • Malicious MCP server stealing emails
  • AI in the SOC: benefits and risks
  • Attackers using AI to scale ransomware and social engineering


Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (00:45) - Senators Introduce AI Risk Evaluation Act
  • (09:48) - Accenture Layoffs & AI Restructuring
  • (16:17) - ShadowLeak: Zero-Click Vulnerability in ChatGPT
  • (20:07) - Malicious MCP Server & Supply Chain Risks
  • (26:27) - AI in the SOC: Alert Triage & Analyst Burnout
  • (30:10) - Final Thoughts: AI’s Role in Security Operations
]]> Thu, 16 Oct 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1902 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


AI News Stories | Episode 25
In this episode of BHIS Presents: AI Security Ops, the panel dives into the biggest AI cybersecurity headlines from late September 2025. From government regulation to zero-click exploits, we unpack the risks, trends, and implications for security professionals navigating the AI-powered future.

🧠 Topics Covered:

  • Government oversight of advanced AI systems
  • Accenture’s massive layoffs amid AI pivot
  • ShadowLeak: zero-click vulnerability in ChatGPT agents
  • Malicious MCP server stealing emails
  • AI in the SOC: benefits and risks
  • Attackers using AI to scale ransomware and social engineering


Whether you're a red teamer, SOC analyst, or just trying to stay ahead of AI threats, this episode delivers sharp insights and practical takeaways.


Brought to you by Black Hills Information Security 

https://www.blackhillsinfosec.com

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (00:45) - Senators Introduce AI Risk Evaluation Act
  • (09:48) - Accenture Layoffs & AI Restructuring
  • (16:17) - ShadowLeak: Zero-Click Vulnerability in ChatGPT
  • (20:07) - Malicious MCP Server & Supply Chain Risks
  • (26:27) - AI in the SOC: Alert Triage & Analyst Burnout
  • (30:10) - Final Thoughts: AI’s Role in Security Operations
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Bronwen Aker Joff Thyer Model Extraction Attacks | Episode 24 24 24 Model Extraction Attacks | Episode 24 full 37728fa2-1486-4248-b483-2f9f73ef367e https://share.transistor.fm/s/e3bc86d6 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Model Extraction Attacks | Episode 24
In this solo episode of BHIS Presents: AI Security Ops, Brian Fehrman explores the stealthy world of Model Extraction Attacks—where hackers clone your AI model without ever touching your code. Learn how adversaries can reverse-engineer your multimillion-dollar model simply by querying its API, and why this threat is more than just academic.

We break down:
- What model extraction is and how it works
- Real-world examples like DeepSeek’s alleged distillation of OpenAI models
- The risks to intellectual property, security, and sensitive data
- Defensive strategies including API throttling, output limiting, watermarking, and honeypots
- Legal and ethical questions around benchmarking vs. theft

Whether you're deploying LLMs or classification models, this episode will help you understand how attackers replicate model behavior—and what you can do to stop them.
If your AI is accessible, someone’s probably trying to copy it.


#AIsecurity #ModelExtractionAttacks #Cybersecurity #BHIS #LLMsecurity #AIthreats


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is a Model Extraction Attack?
  • (02:45) - Why Training a Model Is So Expensive
  • (05:42) - How Model Extraction Works
  • (07:11) - Why It Matters: IP, Security & Data Risks
  • (10:25) - What Makes Extraction Easier or Harder
  • (12:54) - Defenses: Monitoring, Watermarking & Privacy
  • (16:04) - What to Do If You Suspect an Attack
  • (16:29) - Legal & Ethical Questions Around Model Theft
  • (19:30) - Final Thoughts & Takeaways
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Model Extraction Attacks | Episode 24
In this solo episode of BHIS Presents: AI Security Ops, Brian Fehrman explores the stealthy world of Model Extraction Attacks—where hackers clone your AI model without ever touching your code. Learn how adversaries can reverse-engineer your multimillion-dollar model simply by querying its API, and why this threat is more than just academic.

We break down:
- What model extraction is and how it works
- Real-world examples like DeepSeek’s alleged distillation of OpenAI models
- The risks to intellectual property, security, and sensitive data
- Defensive strategies including API throttling, output limiting, watermarking, and honeypots
- Legal and ethical questions around benchmarking vs. theft

Whether you're deploying LLMs or classification models, this episode will help you understand how attackers replicate model behavior—and what you can do to stop them.
If your AI is accessible, someone’s probably trying to copy it.


#AIsecurity #ModelExtractionAttacks #Cybersecurity #BHIS #LLMsecurity #AIthreats


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is a Model Extraction Attack?
  • (02:45) - Why Training a Model Is So Expensive
  • (05:42) - How Model Extraction Works
  • (07:11) - Why It Matters: IP, Security & Data Risks
  • (10:25) - What Makes Extraction Easier or Harder
  • (12:54) - Defenses: Monitoring, Watermarking & Privacy
  • (16:04) - What to Do If You Suspect an Attack
  • (16:29) - Legal & Ethical Questions Around Model Theft
  • (19:30) - Final Thoughts & Takeaways
]]> Sat, 11 Oct 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1198 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Model Extraction Attacks | Episode 24
In this solo episode of BHIS Presents: AI Security Ops, Brian Fehrman explores the stealthy world of Model Extraction Attacks—where hackers clone your AI model without ever touching your code. Learn how adversaries can reverse-engineer your multimillion-dollar model simply by querying its API, and why this threat is more than just academic.

We break down:
- What model extraction is and how it works
- Real-world examples like DeepSeek’s alleged distillation of OpenAI models
- The risks to intellectual property, security, and sensitive data
- Defensive strategies including API throttling, output limiting, watermarking, and honeypots
- Legal and ethical questions around benchmarking vs. theft

Whether you're deploying LLMs or classification models, this episode will help you understand how attackers replicate model behavior—and what you can do to stop them.
If your AI is accessible, someone’s probably trying to copy it.


#AIsecurity #ModelExtractionAttacks #Cybersecurity #BHIS #LLMsecurity #AIthreats


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro & Sponsor Shoutouts
  • (01:19) - What Is a Model Extraction Attack?
  • (02:45) - Why Training a Model Is So Expensive
  • (05:42) - How Model Extraction Works
  • (07:11) - Why It Matters: IP, Security & Data Risks
  • (10:25) - What Makes Extraction Easier or Harder
  • (12:54) - Defenses: Monitoring, Watermarking & Privacy
  • (16:04) - What to Do If You Suspect an Attack
  • (16:29) - Legal & Ethical Questions Around Model Theft
  • (19:30) - Final Thoughts & Takeaways
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman News of the Month | Episode 23 23 23 News of the Month | Episode 23 full 59a23c45-3115-4825-a74c-9ee1578f1764 https://share.transistor.fm/s/103f2eff 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



In this episode of AI Security Ops, Brian Fehrman and Joff Thyer dive into the latest AI news of the month, exploring how rapidly evolving technologies are reshaping cybersecurity.
Topics covered include:
 - How AI is changing cybersecurity monitoring
 - Expanding from email to Slack, Teams, and other chat platforms
 - Addressing insider threats and phishing campaigns in new channels
 - The rapid pace of AI innovation and industry trends
 - Why organizations should prioritize AI security assessments
 - Real-world risks and opportunities in the AI landscape

Stay ahead in the AI race with Black Hills Information Security as we cover real-world risks, opportunities, and the latest developments in the AI landscape.


///News Stories This Episode:

1. AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
https://thehackernews.com/2025/09/ai-powered-villager-pen-testing-tool.html

2. CrowdStrike and Meta Just Made Evaluating AI Security Tools Easier
https://www.zdnet.com/article/crowdstrike-and-meta-just-made-evaluating-ai-security-tools-easier/

3. Check Point Acquires Lakera to Deliver End-to-End AI Security for Enterprises
https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/

4. Proofpoint Offers AI Agents to Monitor Human-Based Communications
https://www.msspalert.com/news/proofpoint-offers-ai-agents-to-monitor-human-based-communications

5. EvilAI Malware Campaign Exploits AI-Generated Code to Breach Global Critical Sectors
https://industrialcyber.co/ransomware/evilai-malware-campaign-exploits-ai-generated-code-to-breach-global-critical-sectors/

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



In this episode of AI Security Ops, Brian Fehrman and Joff Thyer dive into the latest AI news of the month, exploring how rapidly evolving technologies are reshaping cybersecurity.
Topics covered include:
 - How AI is changing cybersecurity monitoring
 - Expanding from email to Slack, Teams, and other chat platforms
 - Addressing insider threats and phishing campaigns in new channels
 - The rapid pace of AI innovation and industry trends
 - Why organizations should prioritize AI security assessments
 - Real-world risks and opportunities in the AI landscape

Stay ahead in the AI race with Black Hills Information Security as we cover real-world risks, opportunities, and the latest developments in the AI landscape.


///News Stories This Episode:

1. AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
https://thehackernews.com/2025/09/ai-powered-villager-pen-testing-tool.html

2. CrowdStrike and Meta Just Made Evaluating AI Security Tools Easier
https://www.zdnet.com/article/crowdstrike-and-meta-just-made-evaluating-ai-security-tools-easier/

3. Check Point Acquires Lakera to Deliver End-to-End AI Security for Enterprises
https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/

4. Proofpoint Offers AI Agents to Monitor Human-Based Communications
https://www.msspalert.com/news/proofpoint-offers-ai-agents-to-monitor-human-based-communications

5. EvilAI Malware Campaign Exploits AI-Generated Code to Breach Global Critical Sectors
https://industrialcyber.co/ransomware/evilai-malware-campaign-exploits-ai-generated-code-to-breach-global-critical-sectors/

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 02 Oct 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2062 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com



In this episode of AI Security Ops, Brian Fehrman and Joff Thyer dive into the latest AI news of the month, exploring how rapidly evolving technologies are reshaping cybersecurity.
Topics covered include:
 - How AI is changing cybersecurity monitoring
 - Expanding from email to Slack, Teams, and other chat platforms
 - Addressing insider threats and phishing campaigns in new channels
 - The rapid pace of AI innovation and industry trends
 - Why organizations should prioritize AI security assessments
 - Real-world risks and opportunities in the AI landscape

Stay ahead in the AI race with Black Hills Information Security as we cover real-world risks, opportunities, and the latest developments in the AI landscape.


///News Stories This Episode:

1. AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
https://thehackernews.com/2025/09/ai-powered-villager-pen-testing-tool.html

2. CrowdStrike and Meta Just Made Evaluating AI Security Tools Easier
https://www.zdnet.com/article/crowdstrike-and-meta-just-made-evaluating-ai-security-tools-easier/

3. Check Point Acquires Lakera to Deliver End-to-End AI Security for Enterprises
https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/

4. Proofpoint Offers AI Agents to Monitor Human-Based Communications
https://www.msspalert.com/news/proofpoint-offers-ai-agents-to-monitor-human-based-communications

5. EvilAI Malware Campaign Exploits AI-Generated Code to Breach Global Critical Sectors
https://industrialcyber.co/ransomware/evilai-malware-campaign-exploits-ai-generated-code-to-breach-global-critical-sectors/

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Joff Thyer Insider Threat 2.0 - Prompt Leaks & Shadow AI | Episode 22 22 22 Insider Threat 2.0 - Prompt Leaks & Shadow AI | Episode 22 full 66b9dc5d-877e-4841-9e4a-a83f91f2a087 https://share.transistor.fm/s/7ad599c6 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Insider Threat 2.0 -  Prompt Leaks & Shadow AI | Episode 22

In this episode of BHIS Presents AI Security Ops, we dive into Insider Threat 2.0: Prompt Leaks & Shadow AI. The panel explores the hidden risks of employees pasting sensitive data into public AI tools, the rise of unauthorized “Shadow AI” in organizations, and how policies—or lack thereof—can expose critical information. Learn why free AI services often make you the product, how prompt history creates data leakage risks, and why companies must establish clear AI usage guidelines. We also cover practical defenses, from enterprise AI accounts to cultural awareness training, and draw parallels to past IT challenges like Shadow IT and rogue wireless.
If you’re concerned about AI security, data leakage, or safe adoption of large language models, this discussion will help you navigate the risks and protect your organization.

#AIsecurity #PromptInjection #ShadowAI #Cybersecurity #BHIS


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Insider Threat 2.0 -  Prompt Leaks & Shadow AI | Episode 22

In this episode of BHIS Presents AI Security Ops, we dive into Insider Threat 2.0: Prompt Leaks & Shadow AI. The panel explores the hidden risks of employees pasting sensitive data into public AI tools, the rise of unauthorized “Shadow AI” in organizations, and how policies—or lack thereof—can expose critical information. Learn why free AI services often make you the product, how prompt history creates data leakage risks, and why companies must establish clear AI usage guidelines. We also cover practical defenses, from enterprise AI accounts to cultural awareness training, and draw parallels to past IT challenges like Shadow IT and rogue wireless.
If you’re concerned about AI security, data leakage, or safe adoption of large language models, this discussion will help you navigate the risks and protect your organization.

#AIsecurity #PromptInjection #ShadowAI #Cybersecurity #BHIS


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 25 Sep 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1558 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Insider Threat 2.0 -  Prompt Leaks & Shadow AI | Episode 22

In this episode of BHIS Presents AI Security Ops, we dive into Insider Threat 2.0: Prompt Leaks & Shadow AI. The panel explores the hidden risks of employees pasting sensitive data into public AI tools, the rise of unauthorized “Shadow AI” in organizations, and how policies—or lack thereof—can expose critical information. Learn why free AI services often make you the product, how prompt history creates data leakage risks, and why companies must establish clear AI usage guidelines. We also cover practical defenses, from enterprise AI accounts to cultural awareness training, and draw parallels to past IT challenges like Shadow IT and rogue wireless.
If you’re concerned about AI security, data leakage, or safe adoption of large language models, this discussion will help you navigate the risks and protect your organization.

#AIsecurity #PromptInjection #ShadowAI #Cybersecurity #BHIS


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer Deepfakes and Fraudulent Interviews In Remote Hiring | Episode 21 21 21 Deepfakes and Fraudulent Interviews In Remote Hiring | Episode 21 full f59bb414-d6ed-4662-bf1a-2a04bc2bed46 https://share.transistor.fm/s/fbc46b5c 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 21 - Deepfakes And Fraudulent Interviews In Remote Hiring


In this episode of AI Security Ops by Black Hills Information Security, the crew explores the alarming rise of deepfakes and fraudulent interviews in remote hiring. As virtual work expands, cybercriminals are using AI-driven impersonation tactics to pose as job candidates, deceive recruiters, and gain unauthorized access to organizations. Joff, Bronwen Aker, Brian Fehrman, and Derek Banks break down real-world cases, explain the challenges of spotting deepfake job scams, and share actionable strategies to secure hiring processes. Discover the red flags to watch for in virtual interviews, how attackers exploit trust, and why companies must adapt their security awareness in the age of AI.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 21 - Deepfakes And Fraudulent Interviews In Remote Hiring


In this episode of AI Security Ops by Black Hills Information Security, the crew explores the alarming rise of deepfakes and fraudulent interviews in remote hiring. As virtual work expands, cybercriminals are using AI-driven impersonation tactics to pose as job candidates, deceive recruiters, and gain unauthorized access to organizations. Joff, Bronwen Aker, Brian Fehrman, and Derek Banks break down real-world cases, explain the challenges of spotting deepfake job scams, and share actionable strategies to secure hiring processes. Discover the red flags to watch for in virtual interviews, how attackers exploit trust, and why companies must adapt their security awareness in the age of AI.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 18 Sep 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1686 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 21 - Deepfakes And Fraudulent Interviews In Remote Hiring


In this episode of AI Security Ops by Black Hills Information Security, the crew explores the alarming rise of deepfakes and fraudulent interviews in remote hiring. As virtual work expands, cybercriminals are using AI-driven impersonation tactics to pose as job candidates, deceive recruiters, and gain unauthorized access to organizations. Joff, Bronwen Aker, Brian Fehrman, and Derek Banks break down real-world cases, explain the challenges of spotting deepfake job scams, and share actionable strategies to secure hiring processes. Discover the red flags to watch for in virtual interviews, how attackers exploit trust, and why companies must adapt their security awareness in the age of AI.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Bronwen Aker Joff Thyer The Hallucination Problem | Episode 20 20 20 The Hallucination Problem | Episode 20 full 90ad3b22-8182-421c-8800-bc61dc1a0f84 https://share.transistor.fm/s/09f2b7be 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 20 - The Hallucination Problem


In this episode of AI Security Ops, Joff Thyer and Brian Fehrman from Black Hills Information Security dive into the hallucination problem in AI large language models and generative AI. 


They explain what hallucinations are, why they happen, and the risks they create in real-world AI deployments. The discussion covers security implications, practical examples, and strategies organizations can use to mitigate these issues through stronger design, monitoring, and testing. 


A must-watch for cybersecurity professionals, AI researchers, and anyone curious about the limitations and challenges of modern AI systems.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 20 - The Hallucination Problem


In this episode of AI Security Ops, Joff Thyer and Brian Fehrman from Black Hills Information Security dive into the hallucination problem in AI large language models and generative AI. 


They explain what hallucinations are, why they happen, and the risks they create in real-world AI deployments. The discussion covers security implications, practical examples, and strategies organizations can use to mitigate these issues through stronger design, monitoring, and testing. 


A must-watch for cybersecurity professionals, AI researchers, and anyone curious about the limitations and challenges of modern AI systems.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 11 Sep 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1615 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 20 - The Hallucination Problem


In this episode of AI Security Ops, Joff Thyer and Brian Fehrman from Black Hills Information Security dive into the hallucination problem in AI large language models and generative AI. 


They explain what hallucinations are, why they happen, and the risks they create in real-world AI deployments. The discussion covers security implications, practical examples, and strategies organizations can use to mitigate these issues through stronger design, monitoring, and testing. 


A must-watch for cybersecurity professionals, AI researchers, and anyone curious about the limitations and challenges of modern AI systems.


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Joff Thyer News of the Month | Episode 19 19 19 News of the Month | Episode 19 full bc7a768b-208d-4c65-bde2-489164c0371d https://share.transistor.fm/s/a7955d77 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

AI News of the Month | Episode 19

In Episode 19,Brianand Derek cover a zero-click indirect prompt injection attack against ChatGPT connectors and seemingly innocent Google Calendar events that hijack smart homes via Gemini, with possible consequences for the power grid.

They'll discuss the impact of Microsoft patching a critical Azure OpenAI SSRF vulnerability and go over new NIST AI security standards, IBM’s study on shadow AI and breach costs, OpenAI’s response to chat indexing leaks, and a malicious VS Code extension that stole $500K in cryptocurrency. 

#AI #CyberSecurity #PromptInjection #Malware #InfoSec #AIThreats #Hacking #GenerativeAI #Deepfakes #LLM #ShadowAI








----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (00:31) - “Poisoned doc” exfiltrates data via ChatGPT Connectors (AgentFlayer)
  • (01:15) - A zero-click prompt injection
  • (02:12) - url_safe bypassed using URLs from Microsoft’s Azure Blob cloud storage
  • (07:08) - Poisoned Google Calendar invite hijacks Gemini to control a smart home
  • (08:35) - The intersection of AI and IOT
  • (09:53) - Be careful what you hook AI up to
  • (10:23) - Derek warns of threat to power grid
  • (11:54) - Mitigations - restrict permissions, sanitize calendar content
  • (13:56) - Patch Tuesday - AI-surface fixes; critical Azure OpenAI vuln
  • (15:49) - NIST proposes SP 800-53 “Control Overlays for Securing AI Systems”
  • (18:43) - IBM “Cost of a Data Breach”: AI is both breach vector and defender
  • (19:16) - Shadow AI
  • (21:49) - “The AI adoption curve is outpacing controls”
  • (23:02) - OpenAI considers encrypting Temporary Chats
  • (26:39) - Data storage and logging LLM interactions
  • (29:59) - Fake VS Code extension for Cursor leads to $500K crypto theft
  • (30:37) - Danger of using pip install as root on a server
]]> Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

AI News of the Month | Episode 19

In Episode 19,Brianand Derek cover a zero-click indirect prompt injection attack against ChatGPT connectors and seemingly innocent Google Calendar events that hijack smart homes via Gemini, with possible consequences for the power grid.

They'll discuss the impact of Microsoft patching a critical Azure OpenAI SSRF vulnerability and go over new NIST AI security standards, IBM’s study on shadow AI and breach costs, OpenAI’s response to chat indexing leaks, and a malicious VS Code extension that stole $500K in cryptocurrency. 

#AI #CyberSecurity #PromptInjection #Malware #InfoSec #AIThreats #Hacking #GenerativeAI #Deepfakes #LLM #ShadowAI








----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (00:31) - “Poisoned doc” exfiltrates data via ChatGPT Connectors (AgentFlayer)
  • (01:15) - A zero-click prompt injection
  • (02:12) - url_safe bypassed using URLs from Microsoft’s Azure Blob cloud storage
  • (07:08) - Poisoned Google Calendar invite hijacks Gemini to control a smart home
  • (08:35) - The intersection of AI and IOT
  • (09:53) - Be careful what you hook AI up to
  • (10:23) - Derek warns of threat to power grid
  • (11:54) - Mitigations - restrict permissions, sanitize calendar content
  • (13:56) - Patch Tuesday - AI-surface fixes; critical Azure OpenAI vuln
  • (15:49) - NIST proposes SP 800-53 “Control Overlays for Securing AI Systems”
  • (18:43) - IBM “Cost of a Data Breach”: AI is both breach vector and defender
  • (19:16) - Shadow AI
  • (21:49) - “The AI adoption curve is outpacing controls”
  • (23:02) - OpenAI considers encrypting Temporary Chats
  • (26:39) - Data storage and logging LLM interactions
  • (29:59) - Fake VS Code extension for Cursor leads to $500K crypto theft
  • (30:37) - Danger of using pip install as root on a server
]]> Thu, 04 Sep 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2237 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

AI News of the Month | Episode 19

In Episode 19,Brianand Derek cover a zero-click indirect prompt injection attack against ChatGPT connectors and seemingly innocent Google Calendar events that hijack smart homes via Gemini, with possible consequences for the power grid.

They'll discuss the impact of Microsoft patching a critical Azure OpenAI SSRF vulnerability and go over new NIST AI security standards, IBM’s study on shadow AI and breach costs, OpenAI’s response to chat indexing leaks, and a malicious VS Code extension that stole $500K in cryptocurrency. 

#AI #CyberSecurity #PromptInjection #Malware #InfoSec #AIThreats #Hacking #GenerativeAI #Deepfakes #LLM #ShadowAI








----------------------------------------------------------------------------------------------
Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/
Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/
Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (00:31) - “Poisoned doc” exfiltrates data via ChatGPT Connectors (AgentFlayer)
  • (01:15) - A zero-click prompt injection
  • (02:12) - url_safe bypassed using URLs from Microsoft’s Azure Blob cloud storage
  • (07:08) - Poisoned Google Calendar invite hijacks Gemini to control a smart home
  • (08:35) - The intersection of AI and IOT
  • (09:53) - Be careful what you hook AI up to
  • (10:23) - Derek warns of threat to power grid
  • (11:54) - Mitigations - restrict permissions, sanitize calendar content
  • (13:56) - Patch Tuesday - AI-surface fixes; critical Azure OpenAI vuln
  • (15:49) - NIST proposes SP 800-53 “Control Overlays for Securing AI Systems”
  • (18:43) - IBM “Cost of a Data Breach”: AI is both breach vector and defender
  • (19:16) - Shadow AI
  • (21:49) - “The AI adoption curve is outpacing controls”
  • (23:02) - OpenAI considers encrypting Temporary Chats
  • (26:39) - Data storage and logging LLM interactions
  • (29:59) - Fake VS Code extension for Cursor leads to $500K crypto theft
  • (30:37) - Danger of using pip install as root on a server
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Malware in the Age of AI | EP 18 18 18 Malware in the Age of AI | EP 18 full a99b82d5-912f-486f-9115-871908aec7cb https://share.transistor.fm/s/76bfb37a 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Malware in the Age of AI | Episode 18

In Episode 18, hosts Joff Thyer, Derek Banks and Brian Fehrman discuss the rise of AI-powered malware. From polymorphic keyloggers like Black Mamba to the use of ChatGPT, WormGPT, and fine-tuned LLMs for cyberattacks, the team will explain how generative AI is reshaping the security landscape.

They'll break down the real risks vs. hype, including prompt injection, jailbreaking, deepfakes, and AI-driven fraud, while also sharing strategies defenders can use to fight back.

The discussion highlights both the ethical implications and the critical need for defense-in-depth as threat actors use AI to accelerate their attacks.


#AI #Cybersecurity #Malware #AIThreats #Deepfakes #LLM #InfoSec #AIinSecurity #GenerativeAI #Hacking


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:15) - Black Mamba polymorphic AI keylogger
  • (02:47) - Can Chat GPT5 generate malware for us?
  • (03:42) - Guardrail circumvention technique #1
  • (04:16) - Guardrail circumvention technique #2
  • (05:30) - Guardrail circumvention technique #3
  • (05:59) - Guardrail circumvention technique #4
  • (06:30) - Using an Abliterated Model
  • (08:32) - AI models have democratized software creation
  • (11:20) - Polymorphic keyloggers are not new
  • (12:03) - AI makes it faster to iterate polymorphic malware
  • (12:33) - AI is able to analyze source code and find more vulnerabilities
  • (15:16) - How scared should we be? (hype vs reality)
  • (16:10) - Knowing enough to ask the right questions is important
  • (17:41) - Significant risks of AI fraud and social engineering
  • (19:32) - Business email compromise
  • (21:10) - How defenders can use AI
  • (24:28) - Audio deepfakes have become easier to create
  • (25:06) - Ethical concerns for pentesters using AI
  • (29:26) - In one sentence, how will AI change malware production in the near future?
]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Malware in the Age of AI | Episode 18

In Episode 18, hosts Joff Thyer, Derek Banks and Brian Fehrman discuss the rise of AI-powered malware. From polymorphic keyloggers like Black Mamba to the use of ChatGPT, WormGPT, and fine-tuned LLMs for cyberattacks, the team will explain how generative AI is reshaping the security landscape.

They'll break down the real risks vs. hype, including prompt injection, jailbreaking, deepfakes, and AI-driven fraud, while also sharing strategies defenders can use to fight back.

The discussion highlights both the ethical implications and the critical need for defense-in-depth as threat actors use AI to accelerate their attacks.


#AI #Cybersecurity #Malware #AIThreats #Deepfakes #LLM #InfoSec #AIinSecurity #GenerativeAI #Hacking


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:15) - Black Mamba polymorphic AI keylogger
  • (02:47) - Can Chat GPT5 generate malware for us?
  • (03:42) - Guardrail circumvention technique #1
  • (04:16) - Guardrail circumvention technique #2
  • (05:30) - Guardrail circumvention technique #3
  • (05:59) - Guardrail circumvention technique #4
  • (06:30) - Using an Abliterated Model
  • (08:32) - AI models have democratized software creation
  • (11:20) - Polymorphic keyloggers are not new
  • (12:03) - AI makes it faster to iterate polymorphic malware
  • (12:33) - AI is able to analyze source code and find more vulnerabilities
  • (15:16) - How scared should we be? (hype vs reality)
  • (16:10) - Knowing enough to ask the right questions is important
  • (17:41) - Significant risks of AI fraud and social engineering
  • (19:32) - Business email compromise
  • (21:10) - How defenders can use AI
  • (24:28) - Audio deepfakes have become easier to create
  • (25:06) - Ethical concerns for pentesters using AI
  • (29:26) - In one sentence, how will AI change malware production in the near future?
]]> Thu, 28 Aug 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1962 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Malware in the Age of AI | Episode 18

In Episode 18, hosts Joff Thyer, Derek Banks and Brian Fehrman discuss the rise of AI-powered malware. From polymorphic keyloggers like Black Mamba to the use of ChatGPT, WormGPT, and fine-tuned LLMs for cyberattacks, the team will explain how generative AI is reshaping the security landscape.

They'll break down the real risks vs. hype, including prompt injection, jailbreaking, deepfakes, and AI-driven fraud, while also sharing strategies defenders can use to fight back.

The discussion highlights both the ethical implications and the critical need for defense-in-depth as threat actors use AI to accelerate their attacks.


#AI #Cybersecurity #Malware #AIThreats #Deepfakes #LLM #InfoSec #AIinSecurity #GenerativeAI #Hacking


----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:15) - Black Mamba polymorphic AI keylogger
  • (02:47) - Can Chat GPT5 generate malware for us?
  • (03:42) - Guardrail circumvention technique #1
  • (04:16) - Guardrail circumvention technique #2
  • (05:30) - Guardrail circumvention technique #3
  • (05:59) - Guardrail circumvention technique #4
  • (06:30) - Using an Abliterated Model
  • (08:32) - AI models have democratized software creation
  • (11:20) - Polymorphic keyloggers are not new
  • (12:03) - AI makes it faster to iterate polymorphic malware
  • (12:33) - AI is able to analyze source code and find more vulnerabilities
  • (15:16) - How scared should we be? (hype vs reality)
  • (16:10) - Knowing enough to ask the right questions is important
  • (17:41) - Significant risks of AI fraud and social engineering
  • (19:32) - Business email compromise
  • (21:10) - How defenders can use AI
  • (24:28) - Audio deepfakes have become easier to create
  • (25:06) - Ethical concerns for pentesters using AI
  • (29:26) - In one sentence, how will AI change malware production in the near future?
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Joff Thyer Brian Fehrman Derek Banks Community Q&A | Episode 17 17 17 Community Q&A | Episode 17 full 6c48964b-bcdc-4620-9721-27c3c3870468 https://share.transistor.fm/s/4b24e2a4 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Community Q&A | Episode 17

In episode 17 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, Brian Fehrman and Bronwen Aker answer viewer-submitted questions about system prompts, prompt injection risks, AI hallucinations, deep fakes, and when (and when not) to use AI in cybersecurity. 

They'll discuss the difference between system and user prompts, how temperature settings impact LLM outputs, and the biggest mistakes companies make when deploying AI models. 

They'll also explain how to reduce hallucinations, and approach AI responsibly in security workflows. Derek explains his method for detecting audio deep fakes.

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:10) - What is a system prompt? How is it different from a user prompt?
  • (03:35) - What are some common system prompt mistakes?
  • (06:54) - Does repeating a prompt give different responses? (non-deterministic)
  • (07:56) - The temperature knob effect
  • (12:18) - When should I use AI? When should I not?
  • (16:47) - What are best practices to reduce hallucinations?
  • (20:29) - End-user temperature knob work-around
  • (22:55) - AI bots that rewrite their code to avoid shutdown commands
  • (26:53) - NCSL.org - Updates on legislation affecting AI
  • (29:44) - How do we detect AI deep fakes?
  • (30:00) - Derek’s DeepFake demo video
  • (30:38) - DISCLAIMER - Do Not use AI deep fakes to break the law!
  • (31:29) - F5-tts.org - Deep fake website
  • (35:02) - Derek pranks his family using AI
]]> Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Community Q&A | Episode 17

In episode 17 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, Brian Fehrman and Bronwen Aker answer viewer-submitted questions about system prompts, prompt injection risks, AI hallucinations, deep fakes, and when (and when not) to use AI in cybersecurity. 

They'll discuss the difference between system and user prompts, how temperature settings impact LLM outputs, and the biggest mistakes companies make when deploying AI models. 

They'll also explain how to reduce hallucinations, and approach AI responsibly in security workflows. Derek explains his method for detecting audio deep fakes.

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:10) - What is a system prompt? How is it different from a user prompt?
  • (03:35) - What are some common system prompt mistakes?
  • (06:54) - Does repeating a prompt give different responses? (non-deterministic)
  • (07:56) - The temperature knob effect
  • (12:18) - When should I use AI? When should I not?
  • (16:47) - What are best practices to reduce hallucinations?
  • (20:29) - End-user temperature knob work-around
  • (22:55) - AI bots that rewrite their code to avoid shutdown commands
  • (26:53) - NCSL.org - Updates on legislation affecting AI
  • (29:44) - How do we detect AI deep fakes?
  • (30:00) - Derek’s DeepFake demo video
  • (30:38) - DISCLAIMER - Do Not use AI deep fakes to break the law!
  • (31:29) - F5-tts.org - Deep fake website
  • (35:02) - Derek pranks his family using AI
]]> Thu, 21 Aug 2025 15:04:00 -0400 Black Hills Information Security Black Hills Information Security 2238 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Community Q&A | Episode 17

In episode 17 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, Brian Fehrman and Bronwen Aker answer viewer-submitted questions about system prompts, prompt injection risks, AI hallucinations, deep fakes, and when (and when not) to use AI in cybersecurity. 

They'll discuss the difference between system and user prompts, how temperature settings impact LLM outputs, and the biggest mistakes companies make when deploying AI models. 

They'll also explain how to reduce hallucinations, and approach AI responsibly in security workflows. Derek explains his method for detecting audio deep fakes.

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

  • (00:00) - Intro
  • (01:10) - What is a system prompt? How is it different from a user prompt?
  • (03:35) - What are some common system prompt mistakes?
  • (06:54) - Does repeating a prompt give different responses? (non-deterministic)
  • (07:56) - The temperature knob effect
  • (12:18) - When should I use AI? When should I not?
  • (16:47) - What are best practices to reduce hallucinations?
  • (20:29) - End-user temperature knob work-around
  • (22:55) - AI bots that rewrite their code to avoid shutdown commands
  • (26:53) - NCSL.org - Updates on legislation affecting AI
  • (29:44) - How do we detect AI deep fakes?
  • (30:00) - Derek’s DeepFake demo video
  • (30:38) - DISCLAIMER - Do Not use AI deep fakes to break the law!
  • (31:29) - F5-tts.org - Deep fake website
  • (35:02) - Derek pranks his family using AI
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Bronwen Aker Joff Thyer A Conversation with Daniel Miessler | Episode 16 16 16 A Conversation with Daniel Miessler | Episode 16 full f759ef18-bff0-476f-aa55-f848dd8bf50c https://share.transistor.fm/s/cb6b4b8f A Conversation with Daniel Miessler

In Episode 16, Joff and the team welcome human-centric AI innovator Daniel Miessler, creator of Fabric, an AI framework for solving real-world problems from a human perspective.

The conversation covers AI’s role in cybersecurity, the importance of clarity in “intent engineering” over prompt tricks, and the risks and opportunities of deploying large language models. They explore the shift from “vibe coding” to “spec coding,” the rise of AI scaffolding over raw model improvements, and what AI advancements including GPT-5 mean for the future of knowledge work.


"Introducing Fabric — A Human AI Augmentation Framework"
https://www.youtube.com/watch?v=wPEyyigh10g

Daniel's GitHub repository:
https://github.com/danielmiessler/Fabric


#AI #CyberSecurity #AgenticAI #SecurityOps #PromptEngineering

]]> A Conversation with Daniel Miessler

In Episode 16, Joff and the team welcome human-centric AI innovator Daniel Miessler, creator of Fabric, an AI framework for solving real-world problems from a human perspective.

The conversation covers AI’s role in cybersecurity, the importance of clarity in “intent engineering” over prompt tricks, and the risks and opportunities of deploying large language models. They explore the shift from “vibe coding” to “spec coding,” the rise of AI scaffolding over raw model improvements, and what AI advancements including GPT-5 mean for the future of knowledge work.


"Introducing Fabric — A Human AI Augmentation Framework"
https://www.youtube.com/watch?v=wPEyyigh10g

Daniel's GitHub repository:
https://github.com/danielmiessler/Fabric


#AI #CyberSecurity #AgenticAI #SecurityOps #PromptEngineering

]]> Thu, 14 Aug 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2695 A Conversation with Daniel Miessler

In Episode 16, Joff and the team welcome human-centric AI innovator Daniel Miessler, creator of Fabric, an AI framework for solving real-world problems from a human perspective.

The conversation covers AI’s role in cybersecurity, the importance of clarity in “intent engineering” over prompt tricks, and the risks and opportunities of deploying large language models. They explore the shift from “vibe coding” to “spec coding,” the rise of AI scaffolding over raw model improvements, and what AI advancements including GPT-5 mean for the future of knowledge work.


"Introducing Fabric — A Human AI Augmentation Framework"
https://www.youtube.com/watch?v=wPEyyigh10g

Daniel's GitHub repository:
https://github.com/danielmiessler/Fabric


#AI #CyberSecurity #AgenticAI #SecurityOps #PromptEngineering

]]> AI,Fabric,Daniel Miessler No Brian Fehrman Joff Thyer Derek Banks Bronwen Aker Daniel Miessler News of the Month – Episode 15 15 15 News of the Month – Episode 15 full 8fe014d4-e540-49fd-b8ad-498a192619b0 https://share.transistor.fm/s/7e837981 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


In this episode, we'll discuss Palo Alto Networks’ acquisition of Protect AI, the rise of “Shadow AI” in enterprises, alarming AI-driven data leaks, and vibe coding gone wrong. We'll dive into critical issues like AI hallucinations and the growing need for "human in the loop" oversight. We'll wrap up with a discussion of Proton’s Lumo AI chatbot, disappearing medical disclaimers in AI chatbots and data poisoning in Amazon's AI coding agent.


#AI #Cybersecurity #LLM #AInews #AISecurityOps #BlackHillsInfosec #LLMGuard #ShadowAI #DataLeak #AgenticAI #PrivacyTech #VibeCoding #ProtectAI




00:00 - Welcome, Intro

00:58 - Palo Alto Networks Completes Acquisition of Protect AI

https://www.paloaltonetworks.com/company/press/2025/palo-alto-networks-completes-acquisition-of-protect-ai

04:53 - Metomic Finds AI Data Leaks Impact 68% of Organizations, But Only 23% Have Proper AI Data Security Policies 

https://www.metomic.io/resource-centre/metomic-finds-ai-data-leaks-impact-68-of-organizations-but-only-23-have-proper-ai-data-security-policies

09:46 - S&P 500’s AI adoption may invite data breaches, new research shows

https://cybernews.com/security/sp-500-companies-ai-security-risks-report/

12:53 - Vibe Coding Fiasco: AI Agent Goes Rogue, Deletes Company's Entire Database

https://www.pcmag.com/news/vibe-coding-fiasco-replite-ai-agent-goes-rogue-deletes-company-database

18:47 - A major AI training data set contains millions of examples of personal data

https://www.technologyreview.com/2025/07/18/1120466/a-major-ai-training-data-set-contains-millions-of-examples-of-personal-data/

23:34 - Introducing Lumo, the AI where every conversation is confidential

https://proton.me/blog/lumo-ai

28:56 - AI companies have stopped warning you that their chatbots aren’t doctors

https://www.technologyreview.com/2025/07/21/1120522/ai-companies-have-stopped-warning-you-that-their-chatbots-arent-doctors/

36:53 - Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent

https://www.404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


In this episode, we'll discuss Palo Alto Networks’ acquisition of Protect AI, the rise of “Shadow AI” in enterprises, alarming AI-driven data leaks, and vibe coding gone wrong. We'll dive into critical issues like AI hallucinations and the growing need for "human in the loop" oversight. We'll wrap up with a discussion of Proton’s Lumo AI chatbot, disappearing medical disclaimers in AI chatbots and data poisoning in Amazon's AI coding agent.


#AI #Cybersecurity #LLM #AInews #AISecurityOps #BlackHillsInfosec #LLMGuard #ShadowAI #DataLeak #AgenticAI #PrivacyTech #VibeCoding #ProtectAI




00:00 - Welcome, Intro

00:58 - Palo Alto Networks Completes Acquisition of Protect AI

https://www.paloaltonetworks.com/company/press/2025/palo-alto-networks-completes-acquisition-of-protect-ai

04:53 - Metomic Finds AI Data Leaks Impact 68% of Organizations, But Only 23% Have Proper AI Data Security Policies 

https://www.metomic.io/resource-centre/metomic-finds-ai-data-leaks-impact-68-of-organizations-but-only-23-have-proper-ai-data-security-policies

09:46 - S&P 500’s AI adoption may invite data breaches, new research shows

https://cybernews.com/security/sp-500-companies-ai-security-risks-report/

12:53 - Vibe Coding Fiasco: AI Agent Goes Rogue, Deletes Company's Entire Database

https://www.pcmag.com/news/vibe-coding-fiasco-replite-ai-agent-goes-rogue-deletes-company-database

18:47 - A major AI training data set contains millions of examples of personal data

https://www.technologyreview.com/2025/07/18/1120466/a-major-ai-training-data-set-contains-millions-of-examples-of-personal-data/

23:34 - Introducing Lumo, the AI where every conversation is confidential

https://proton.me/blog/lumo-ai

28:56 - AI companies have stopped warning you that their chatbots aren’t doctors

https://www.technologyreview.com/2025/07/21/1120522/ai-companies-have-stopped-warning-you-that-their-chatbots-arent-doctors/

36:53 - Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent

https://www.404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent/

]]> Thu, 07 Aug 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2360 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


In this episode, we'll discuss Palo Alto Networks’ acquisition of Protect AI, the rise of “Shadow AI” in enterprises, alarming AI-driven data leaks, and vibe coding gone wrong. We'll dive into critical issues like AI hallucinations and the growing need for "human in the loop" oversight. We'll wrap up with a discussion of Proton’s Lumo AI chatbot, disappearing medical disclaimers in AI chatbots and data poisoning in Amazon's AI coding agent.


#AI #Cybersecurity #LLM #AInews #AISecurityOps #BlackHillsInfosec #LLMGuard #ShadowAI #DataLeak #AgenticAI #PrivacyTech #VibeCoding #ProtectAI




00:00 - Welcome, Intro

00:58 - Palo Alto Networks Completes Acquisition of Protect AI

https://www.paloaltonetworks.com/company/press/2025/palo-alto-networks-completes-acquisition-of-protect-ai

04:53 - Metomic Finds AI Data Leaks Impact 68% of Organizations, But Only 23% Have Proper AI Data Security Policies 

https://www.metomic.io/resource-centre/metomic-finds-ai-data-leaks-impact-68-of-organizations-but-only-23-have-proper-ai-data-security-policies

09:46 - S&P 500’s AI adoption may invite data breaches, new research shows

https://cybernews.com/security/sp-500-companies-ai-security-risks-report/

12:53 - Vibe Coding Fiasco: AI Agent Goes Rogue, Deletes Company's Entire Database

https://www.pcmag.com/news/vibe-coding-fiasco-replite-ai-agent-goes-rogue-deletes-company-database

18:47 - A major AI training data set contains millions of examples of personal data

https://www.technologyreview.com/2025/07/18/1120466/a-major-ai-training-data-set-contains-millions-of-examples-of-personal-data/

23:34 - Introducing Lumo, the AI where every conversation is confidential

https://proton.me/blog/lumo-ai

28:56 - AI companies have stopped warning you that their chatbots aren’t doctors

https://www.technologyreview.com/2025/07/21/1120522/ai-companies-have-stopped-warning-you-that-their-chatbots-arent-doctors/

36:53 - Hacker Plants Computer 'Wiping' Commands in Amazon's AI Coding Agent

https://www.404media.co/hacker-plants-computer-wiping-commands-in-amazons-ai-coding-agent/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Joff Thyer Questions From The Community podcast – Episode 14 14 14 Questions From The Community podcast – Episode 14 full ce6fda54-d828-4555-a0f3-aade7c47e37b https://share.transistor.fm/s/16d4d1b8 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

In Episode 14 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman answer questions submitted by viewers. 

The team will cover how effective prompt engineering can transform LLMs into workflow accelerators, and debate AI tool strengths— when to use Claude, ChatGPT, or Notebook LM.

They'll discuss the importance of human oversight when integrating AI into operations, highlighting the "human-in-the-loop" concept and include ways to explain AI to non-technical audiences.


#AI #promptengineering #CyberSecurity #Automation #SecurityOps #claudeai #chatgpt 


00:00 - Welcome, Intro

02:00 - Q - How do you use AI?

02:55 - The importance of effective prompt engineering

10:24 - Upcoming workshop - AI Workflow Optimization for Red Teaming

12:10 - Q - Which AI for which task? Where should I invest my time?

14:12 - Claude for coding in Python & Golang, but not great at Java

16:35 - Derek - Initial prompt improvement in Chat GPT, then go to Claude

17:37 - NotebookLM for students (https://notebooklm.google/)

20:01 - Invest your time in prompt engineering - applicable to any model

22:38 - Double check code, understand what it means, do not blindly trust AI output

25:17 - Q - How to discuss AI with a non-technical audience

28:08 - Talk to LLMs like a child

28:54 - AI is not sentient, it's just drawing relevant correlations

31:48 - Ask them clarifying questions - what are they trying to ask? What's the context?

33:37 - Q - How can you do "Human in the Loop?"

35:24 - Don't give your agentic AI too much power - treat it like a junior assistant

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

In Episode 14 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman answer questions submitted by viewers. 

The team will cover how effective prompt engineering can transform LLMs into workflow accelerators, and debate AI tool strengths— when to use Claude, ChatGPT, or Notebook LM.

They'll discuss the importance of human oversight when integrating AI into operations, highlighting the "human-in-the-loop" concept and include ways to explain AI to non-technical audiences.


#AI #promptengineering #CyberSecurity #Automation #SecurityOps #claudeai #chatgpt 


00:00 - Welcome, Intro

02:00 - Q - How do you use AI?

02:55 - The importance of effective prompt engineering

10:24 - Upcoming workshop - AI Workflow Optimization for Red Teaming

12:10 - Q - Which AI for which task? Where should I invest my time?

14:12 - Claude for coding in Python & Golang, but not great at Java

16:35 - Derek - Initial prompt improvement in Chat GPT, then go to Claude

17:37 - NotebookLM for students (https://notebooklm.google/)

20:01 - Invest your time in prompt engineering - applicable to any model

22:38 - Double check code, understand what it means, do not blindly trust AI output

25:17 - Q - How to discuss AI with a non-technical audience

28:08 - Talk to LLMs like a child

28:54 - AI is not sentient, it's just drawing relevant correlations

31:48 - Ask them clarifying questions - what are they trying to ask? What's the context?

33:37 - Q - How can you do "Human in the Loop?"

35:24 - Don't give your agentic AI too much power - treat it like a junior assistant

]]> Thu, 31 Jul 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2313 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com

In Episode 14 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman answer questions submitted by viewers. 

The team will cover how effective prompt engineering can transform LLMs into workflow accelerators, and debate AI tool strengths— when to use Claude, ChatGPT, or Notebook LM.

They'll discuss the importance of human oversight when integrating AI into operations, highlighting the "human-in-the-loop" concept and include ways to explain AI to non-technical audiences.


#AI #promptengineering #CyberSecurity #Automation #SecurityOps #claudeai #chatgpt 


00:00 - Welcome, Intro

02:00 - Q - How do you use AI?

02:55 - The importance of effective prompt engineering

10:24 - Upcoming workshop - AI Workflow Optimization for Red Teaming

12:10 - Q - Which AI for which task? Where should I invest my time?

14:12 - Claude for coding in Python & Golang, but not great at Java

16:35 - Derek - Initial prompt improvement in Chat GPT, then go to Claude

17:37 - NotebookLM for students (https://notebooklm.google/)

20:01 - Invest your time in prompt engineering - applicable to any model

22:38 - Double check code, understand what it means, do not blindly trust AI output

25:17 - Q - How to discuss AI with a non-technical audience

28:08 - Talk to LLMs like a child

28:54 - AI is not sentient, it's just drawing relevant correlations

31:48 - Ask them clarifying questions - what are they trying to ask? What's the context?

33:37 - Q - How can you do "Human in the Loop?"

35:24 - Don't give your agentic AI too much power - treat it like a junior assistant

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer Augmenting Red Teaming with AI- Episode 13 13 13 Augmenting Red Teaming with AI- Episode 13 full b655b2b4-3064-4b96-a5ed-77547b26214d https://share.transistor.fm/s/6e0236da 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Augmenting Red Teaming with AI | Episode 13


In Episode 13 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman dive into the exciting world of **Agentic AI in Red Teaming**. 


Discover how augmenting red teams with AI-driven tools helps automate penetration testing, tackle low-hanging fruit vulnerabilities, and provide comprehensive security coverage. The team discusses the importance of prompt engineering, maintaining human oversight, and navigating potential risks, including unintended actions by autonomous AI agents. 


Tune in to explore how AI is reshaping cybersecurity and learn practical strategies to effectively integrate Agentic AI into your security assessments.


#AI #CyberSecurity #RedTeaming #AgenticAI #Automation #SecurityOps

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Augmenting Red Teaming with AI | Episode 13


In Episode 13 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman dive into the exciting world of **Agentic AI in Red Teaming**. 


Discover how augmenting red teams with AI-driven tools helps automate penetration testing, tackle low-hanging fruit vulnerabilities, and provide comprehensive security coverage. The team discusses the importance of prompt engineering, maintaining human oversight, and navigating potential risks, including unintended actions by autonomous AI agents. 


Tune in to explore how AI is reshaping cybersecurity and learn practical strategies to effectively integrate Agentic AI into your security assessments.


#AI #CyberSecurity #RedTeaming #AgenticAI #Automation #SecurityOps

]]> Thu, 24 Jul 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1823 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Augmenting Red Teaming with AI | Episode 13


In Episode 13 of the AI Security Ops Podcast, hosts Joff Thyer, Derek Banks, and Brian Fehrman dive into the exciting world of **Agentic AI in Red Teaming**. 


Discover how augmenting red teams with AI-driven tools helps automate penetration testing, tackle low-hanging fruit vulnerabilities, and provide comprehensive security coverage. The team discusses the importance of prompt engineering, maintaining human oversight, and navigating potential risks, including unintended actions by autonomous AI agents. 


Tune in to explore how AI is reshaping cybersecurity and learn practical strategies to effectively integrate Agentic AI into your security assessments.


#AI #CyberSecurity #RedTeaming #AgenticAI #Automation #SecurityOps

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Joff Thyer Brian Fehrman Global AI Laws and the Impact of GDPR – Episode 12 12 12 Global AI Laws and the Impact of GDPR – Episode 12 full 07a2917f-ec7f-4f75-b504-c1e70d737562 https://share.transistor.fm/s/0fbd0ade 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Regulating the Machine: Global AI Laws and the Impact of GDPR | Episode 12


In Episode 12 the hosts discuss the complexities of regulating artificial intelligence (AI) technology across the globe. 


Highlighting the rapid advancement of AI and its challenges for lawmakers, the episode explores how the GDPR framework in the European Union provides clear guidelines addressing AI-related issues like data privacy, consent, and accountability. The discussion also contrasts the European regulatory-first approach with the U.S.'s innovation-driven stance, considering implications for privacy, intellectual property, and technology advancement. Additionally, the podcast addresses the fragmented nature of AI regulations within U.S. states, emphasizing the need for effective information security practices, audit mechanisms, and risk management frameworks.

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Regulating the Machine: Global AI Laws and the Impact of GDPR | Episode 12


In Episode 12 the hosts discuss the complexities of regulating artificial intelligence (AI) technology across the globe. 


Highlighting the rapid advancement of AI and its challenges for lawmakers, the episode explores how the GDPR framework in the European Union provides clear guidelines addressing AI-related issues like data privacy, consent, and accountability. The discussion also contrasts the European regulatory-first approach with the U.S.'s innovation-driven stance, considering implications for privacy, intellectual property, and technology advancement. Additionally, the podcast addresses the fragmented nature of AI regulations within U.S. states, emphasizing the need for effective information security practices, audit mechanisms, and risk management frameworks.

]]> Thu, 17 Jul 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 1591 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Regulating the Machine: Global AI Laws and the Impact of GDPR | Episode 12


In Episode 12 the hosts discuss the complexities of regulating artificial intelligence (AI) technology across the globe. 


Highlighting the rapid advancement of AI and its challenges for lawmakers, the episode explores how the GDPR framework in the European Union provides clear guidelines addressing AI-related issues like data privacy, consent, and accountability. The discussion also contrasts the European regulatory-first approach with the U.S.'s innovation-driven stance, considering implications for privacy, intellectual property, and technology advancement. Additionally, the podcast addresses the fragmented nature of AI regulations within U.S. states, emphasizing the need for effective information security practices, audit mechanisms, and risk management frameworks.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Bronwen Aker Brian Fehrman Joff Thyer A.I. News of the Month – Episode 11 11 11 A.I. News of the Month – Episode 11 full 0c2348ae-1b01-4616-b2f1-e8906ba240c8 https://share.transistor.fm/s/5fdf4130 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


In this episode of AI Security Ops, we explore major AI news, including the Scale AI data leak impacting giants like Google and Meta, a novel jailbreak attack technique dubbed the Echo Chamber, and Anthropic's Claude-Gov, tailored for U.S. national security. We discuss ethical AI management solutions, the innovative use of AI to detect shoplifting via behavioral gestures, IBM's WatsonX platform, and critical insights into AI red teaming and SQL injection vulnerabilities affecting AI applications. 


Join us as we uncover how traditional security practices remain crucial in today's AI-driven landscape.


News Links Referenced:

Scale AI exposed sensitive data about clients like Meta and xAI in public Google Docs, BI finds

https://www.businessinsider.com/scale-ai-public-google-docs-security-2025-6


AI Security Turning Point: Echo Chamber Jailbreak Exposes Dangerous Blind Spot

https://www.techrepublic.com/article/news-echo-chamber-jailbreak-manipulates-llms/


Anthropic's "Claude Gov" for National Security

https://techcrunch.com/2025/06/05/anthropic-unveils-custom-ai-models-for-u-s-national-security-customers/


Veesion - AI That Catches Shoplifters by Their Gestures

https://www.businessinsider.com/veesion-ai-tech-startup-shoplifting-prevention-alerts-security-suspicious-gestures-2025-6


IBM's New Platform for Managing "Agentic AI"

https://thejournal.com/articles/2025/06/24/ibm-launches-agentic-ai-governance-and-security-platform.aspx


How a Classic Bug Can Poison Modern AI Agents

https://www.trendmicro.com/en_us/research/25/f/why-a-classic-mcp-server-vulnerability-can-undermine-your-entire-ai-agent.html


The "False Sense of Security" in AI Red Teaming

https://www.forbes.com/councils/forbestechcouncil/2025/06/16/the-false-sense-of-security-in-ai-red-teaming/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


In this episode of AI Security Ops, we explore major AI news, including the Scale AI data leak impacting giants like Google and Meta, a novel jailbreak attack technique dubbed the Echo Chamber, and Anthropic's Claude-Gov, tailored for U.S. national security. We discuss ethical AI management solutions, the innovative use of AI to detect shoplifting via behavioral gestures, IBM's WatsonX platform, and critical insights into AI red teaming and SQL injection vulnerabilities affecting AI applications. 


Join us as we uncover how traditional security practices remain crucial in today's AI-driven landscape.


News Links Referenced:

Scale AI exposed sensitive data about clients like Meta and xAI in public Google Docs, BI finds

https://www.businessinsider.com/scale-ai-public-google-docs-security-2025-6


AI Security Turning Point: Echo Chamber Jailbreak Exposes Dangerous Blind Spot

https://www.techrepublic.com/article/news-echo-chamber-jailbreak-manipulates-llms/


Anthropic's "Claude Gov" for National Security

https://techcrunch.com/2025/06/05/anthropic-unveils-custom-ai-models-for-u-s-national-security-customers/


Veesion - AI That Catches Shoplifters by Their Gestures

https://www.businessinsider.com/veesion-ai-tech-startup-shoplifting-prevention-alerts-security-suspicious-gestures-2025-6


IBM's New Platform for Managing "Agentic AI"

https://thejournal.com/articles/2025/06/24/ibm-launches-agentic-ai-governance-and-security-platform.aspx


How a Classic Bug Can Poison Modern AI Agents

https://www.trendmicro.com/en_us/research/25/f/why-a-classic-mcp-server-vulnerability-can-undermine-your-entire-ai-agent.html


The "False Sense of Security" in AI Red Teaming

https://www.forbes.com/councils/forbestechcouncil/2025/06/16/the-false-sense-of-security-in-ai-red-teaming/

]]> Thu, 10 Jul 2025 05:00:00 -0400 Black Hills Information Security Black Hills Information Security 2128 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


In this episode of AI Security Ops, we explore major AI news, including the Scale AI data leak impacting giants like Google and Meta, a novel jailbreak attack technique dubbed the Echo Chamber, and Anthropic's Claude-Gov, tailored for U.S. national security. We discuss ethical AI management solutions, the innovative use of AI to detect shoplifting via behavioral gestures, IBM's WatsonX platform, and critical insights into AI red teaming and SQL injection vulnerabilities affecting AI applications. 


Join us as we uncover how traditional security practices remain crucial in today's AI-driven landscape.


News Links Referenced:

Scale AI exposed sensitive data about clients like Meta and xAI in public Google Docs, BI finds

https://www.businessinsider.com/scale-ai-public-google-docs-security-2025-6


AI Security Turning Point: Echo Chamber Jailbreak Exposes Dangerous Blind Spot

https://www.techrepublic.com/article/news-echo-chamber-jailbreak-manipulates-llms/


Anthropic's "Claude Gov" for National Security

https://techcrunch.com/2025/06/05/anthropic-unveils-custom-ai-models-for-u-s-national-security-customers/


Veesion - AI That Catches Shoplifters by Their Gestures

https://www.businessinsider.com/veesion-ai-tech-startup-shoplifting-prevention-alerts-security-suspicious-gestures-2025-6


IBM's New Platform for Managing "Agentic AI"

https://thejournal.com/articles/2025/06/24/ibm-launches-agentic-ai-governance-and-security-platform.aspx


How a Classic Bug Can Poison Modern AI Agents

https://www.trendmicro.com/en_us/research/25/f/why-a-classic-mcp-server-vulnerability-can-undermine-your-entire-ai-agent.html


The "False Sense of Security" in AI Red Teaming

https://www.forbes.com/councils/forbestechcouncil/2025/06/16/the-false-sense-of-security-in-ai-red-teaming/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Brian Fehrman Agentic AI Threats, challenges, and Defenses | Episode 10 10 10 Agentic AI Threats, challenges, and Defenses | Episode 10 full 39f0b2b8-80d2-45ac-8d9a-3e26c8a8cb22 https://share.transistor.fm/s/7469e88d 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Explore the rising security risks and challenges associated with agentic AI in Episode 10 of AI Security Ops. 

Join Cybersecurity experts Joff Thyer, Bronwen Aker, Derek Banks, and Brian Ferhman as they unpack the complexities of AI gaining autonomy and agency. This episode covers key topics such as defining agentic AI, real-world vulnerabilities like prompt injection, potential implications for cybersecurity, and effective mitigation strategies like implementing guardrails and maintaining granular logging. 

Valuable information for cybersecurity professionals, AI developers, and anyone interested in the future of artificial intelligence security.

#AgenticAI #AISecurity #Cybersecurity #LLMs #PromptInjection #RedTeaming #AIrisks
----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Explore the rising security risks and challenges associated with agentic AI in Episode 10 of AI Security Ops. 

Join Cybersecurity experts Joff Thyer, Bronwen Aker, Derek Banks, and Brian Ferhman as they unpack the complexities of AI gaining autonomy and agency. This episode covers key topics such as defining agentic AI, real-world vulnerabilities like prompt injection, potential implications for cybersecurity, and effective mitigation strategies like implementing guardrails and maintaining granular logging. 

Valuable information for cybersecurity professionals, AI developers, and anyone interested in the future of artificial intelligence security.

#AgenticAI #AISecurity #Cybersecurity #LLMs #PromptInjection #RedTeaming #AIrisks
----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 03 Jul 2025 12:00:00 -0400 Black Hills Information Security Black Hills Information Security 2230 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Explore the rising security risks and challenges associated with agentic AI in Episode 10 of AI Security Ops. 

Join Cybersecurity experts Joff Thyer, Bronwen Aker, Derek Banks, and Brian Ferhman as they unpack the complexities of AI gaining autonomy and agency. This episode covers key topics such as defining agentic AI, real-world vulnerabilities like prompt injection, potential implications for cybersecurity, and effective mitigation strategies like implementing guardrails and maintaining granular logging. 

Valuable information for cybersecurity professionals, AI developers, and anyone interested in the future of artificial intelligence security.

#AgenticAI #AISecurity #Cybersecurity #LLMs #PromptInjection #RedTeaming #AIrisks
----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Bronwen Aker Joff Thyer AI Model Usage and Comparisons – Episode 9 9 9 AI Model Usage and Comparisons – Episode 9 full 7e21fd06-61e7-46ff-88e0-523f61102aa7 https://share.transistor.fm/s/330f0127 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 9 of AI Security Ops! AI Model Usage and Comparisons


In this exciting episode, we explore practical uses and comparisons of popular AI models including OpenAI, Claude, Gemini, and Copilot. 


Join our expert panelists as they discuss personal workflows, share experiences with AI-driven coding and text processing, and examine strengths and weaknesses of these powerful technologies. Discover insights into the exponential growth of AI capabilities, the emerging specialization of models, and practical advice for effectively integrating AI tools into your cybersecurity practices. 


Tune in to stay ahead in the rapidly evolving landscape of AI and cybersecurity.


#AISecurityOps #AIModels #Cybersecurity #OpenAI #ClaudeAI #GeminiAI #Copilot #AITools #ArtificialIntelligence #TechTrends #AIInsights #CyberSec

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 9 of AI Security Ops! AI Model Usage and Comparisons


In this exciting episode, we explore practical uses and comparisons of popular AI models including OpenAI, Claude, Gemini, and Copilot. 


Join our expert panelists as they discuss personal workflows, share experiences with AI-driven coding and text processing, and examine strengths and weaknesses of these powerful technologies. Discover insights into the exponential growth of AI capabilities, the emerging specialization of models, and practical advice for effectively integrating AI tools into your cybersecurity practices. 


Tune in to stay ahead in the rapidly evolving landscape of AI and cybersecurity.


#AISecurityOps #AIModels #Cybersecurity #OpenAI #ClaudeAI #GeminiAI #Copilot #AITools #ArtificialIntelligence #TechTrends #AIInsights #CyberSec

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Thu, 26 Jun 2025 05:00:00 -0400 Black Hills Information Security Black Hills Information Security 852 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com


Episode 9 of AI Security Ops! AI Model Usage and Comparisons


In this exciting episode, we explore practical uses and comparisons of popular AI models including OpenAI, Claude, Gemini, and Copilot. 


Join our expert panelists as they discuss personal workflows, share experiences with AI-driven coding and text processing, and examine strengths and weaknesses of these powerful technologies. Discover insights into the exponential growth of AI capabilities, the emerging specialization of models, and practical advice for effectively integrating AI tools into your cybersecurity practices. 


Tune in to stay ahead in the rapidly evolving landscape of AI and cybersecurity.


#AISecurityOps #AIModels #Cybersecurity #OpenAI #ClaudeAI #GeminiAI #Copilot #AITools #ArtificialIntelligence #TechTrends #AIInsights #CyberSec

----------------------------------------------------------------------------------------------

Joff Thyer - https://blackhillsinfosec.com/team/joff-thyer/

Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/

Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/

Bronwen Aker - http://blackhillsinfosec.com/team/bronwen-aker/

Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Bronwen Aker Brian Fehrman Joff Thyer AEO vs SEO | Episode 8 8 8 AEO vs SEO | Episode 8 full 665dc941-b298-4868-9023-0c1382e4178f https://share.transistor.fm/s/9e55e4f2 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


AEO vs SEO | Episode 8


Explore how Artificial Intelligence (AI) is revolutionizing online search in this insightful episode of the AI Security Ops Podcast. 


Learn about Search Engine Optimization (SEO) versus Answer Engine Optimization (AEO), and understand the shift from link-based results to rich, AI-driven answers. Discover the security challenges and ethical implications surrounding the use of AI in search engines, including risks like misinformation, deepfakes, and data privacy concerns. Gain practical insights on how critical thinking and verification are becoming essential skills in navigating this new era of AI-enhanced search.


#SEO #AEO #ArtificialIntelligence #Cybersecurity #AI #InformationSecurity #SearchEngines #AIOptimization #OnlineSecurity #DigitalPrivacy

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


AEO vs SEO | Episode 8


Explore how Artificial Intelligence (AI) is revolutionizing online search in this insightful episode of the AI Security Ops Podcast. 


Learn about Search Engine Optimization (SEO) versus Answer Engine Optimization (AEO), and understand the shift from link-based results to rich, AI-driven answers. Discover the security challenges and ethical implications surrounding the use of AI in search engines, including risks like misinformation, deepfakes, and data privacy concerns. Gain practical insights on how critical thinking and verification are becoming essential skills in navigating this new era of AI-enhanced search.


#SEO #AEO #ArtificialIntelligence #Cybersecurity #AI #InformationSecurity #SearchEngines #AIOptimization #OnlineSecurity #DigitalPrivacy

]]> Thu, 19 Jun 2025 12:42:10 -0400 Black Hills Information Security Black Hills Information Security 1821 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


AEO vs SEO | Episode 8


Explore how Artificial Intelligence (AI) is revolutionizing online search in this insightful episode of the AI Security Ops Podcast. 


Learn about Search Engine Optimization (SEO) versus Answer Engine Optimization (AEO), and understand the shift from link-based results to rich, AI-driven answers. Discover the security challenges and ethical implications surrounding the use of AI in search engines, including risks like misinformation, deepfakes, and data privacy concerns. Gain practical insights on how critical thinking and verification are becoming essential skills in navigating this new era of AI-enhanced search.


#SEO #AEO #ArtificialIntelligence #Cybersecurity #AI #InformationSecurity #SearchEngines #AIOptimization #OnlineSecurity #DigitalPrivacy

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Bronwen Aker Joff Thyer R.A.G. [Retrieval Augmented Generation] – Episode 7 7 7 R.A.G. [Retrieval Augmented Generation] – Episode 7 full 70c14271-b934-404e-86a0-ccdfc64d2340 https://share.transistor.fm/s/f3cfc36e 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

R.A.G. (Retrieval Augmented Generation) is a powerful technique for enhancing Large Language Model (LLM) outputs with real-time, external data. RAG bridges the gap between static model knowledge and dynamic, context-aware responses.


Join hosts Brian Fehrman, Derek Banks, Bronwen Aker, and Ben Bowman as they break down how RAG improves the reliability and relevance of generative AI systems. You’ll learn why context retrieval matters, what problems RAG solves, and where it fits into modern AI security practices.

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

R.A.G. (Retrieval Augmented Generation) is a powerful technique for enhancing Large Language Model (LLM) outputs with real-time, external data. RAG bridges the gap between static model knowledge and dynamic, context-aware responses.


Join hosts Brian Fehrman, Derek Banks, Bronwen Aker, and Ben Bowman as they break down how RAG improves the reliability and relevance of generative AI systems. You’ll learn why context retrieval matters, what problems RAG solves, and where it fits into modern AI security practices.

]]> Thu, 12 Jun 2025 05:00:00 -0400 Black Hills Information Security Black Hills Information Security 1615 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

R.A.G. (Retrieval Augmented Generation) is a powerful technique for enhancing Large Language Model (LLM) outputs with real-time, external data. RAG bridges the gap between static model knowledge and dynamic, context-aware responses.


Join hosts Brian Fehrman, Derek Banks, Bronwen Aker, and Ben Bowman as they break down how RAG improves the reliability and relevance of generative AI systems. You’ll learn why context retrieval matters, what problems RAG solves, and where it fits into modern AI security practices.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Ben Bowman Brian Fehrman Bronwen Aker Derek Banks Joff Thyer LLM Guardrails | Episode 6 6 6 LLM Guardrails | Episode 6 full 667c77f8-d4fd-42e6-9c5b-27531b272044 https://share.transistor.fm/s/f3d698e7 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Episode 6: LLM Guardrails


We dive deep into the evolving world of LLM guardrails. 


We explore why guardrails are essential for securing large language models, the challenges of implementing them effectively, and how current approaches often resemble the patchwork fixes of early InfoSec days. From input/output filtering and prompt injection defenses to the emerging trend of LLMs guarding other LLMs, we analyze real-world assessments, highlight security pitfalls, and discuss the need for layered, deterministic defenses.


Plus, Brian Teases the next [ segments ] episode utilizing Prompt Guard within open web pipelines.

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Episode 6: LLM Guardrails


We dive deep into the evolving world of LLM guardrails. 


We explore why guardrails are essential for securing large language models, the challenges of implementing them effectively, and how current approaches often resemble the patchwork fixes of early InfoSec days. From input/output filtering and prompt injection defenses to the emerging trend of LLMs guarding other LLMs, we analyze real-world assessments, highlight security pitfalls, and discuss the need for layered, deterministic defenses.


Plus, Brian Teases the next [ segments ] episode utilizing Prompt Guard within open web pipelines.

]]> Thu, 05 Jun 2025 17:02:58 -0400 Black Hills Information Security Black Hills Information Security 1341 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – 

https://poweredbybhis.com 


Episode 6: LLM Guardrails


We dive deep into the evolving world of LLM guardrails. 


We explore why guardrails are essential for securing large language models, the challenges of implementing them effectively, and how current approaches often resemble the patchwork fixes of early InfoSec days. From input/output filtering and prompt injection defenses to the emerging trend of LLMs guarding other LLMs, we analyze real-world assessments, highlight security pitfalls, and discuss the need for layered, deterministic defenses.


Plus, Brian Teases the next [ segments ] episode utilizing Prompt Guard within open web pipelines.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Ben Bowman Derek Banks Brian Fehrman Joff Thyer Harmful Content | Episode 5 5 5 Harmful Content | Episode 5 full 7510fe6a-cda7-49a6-8a23-4a98048826e7 https://share.transistor.fm/s/94ac0c7a ChatGTP created summary, because of course we're gonna use A.I. on our A.I. podcast:


In this episode of the AI Security Ops podcast, the panel discusses the challenges and risks of harmful content generated by AI, particularly focusing on generative models like GPT. They explore how powerful prompt engineering can lead to the creation of misleading or dangerous outputs, and highlight the importance of detection methods, ethical oversight, and regulatory standards. The conversation emphasizes the need for responsible use of AI, stressing that while these models are incredibly capable, safeguards and human accountability are essential to prevent misuse.


Is this summary misleading?

]]> ChatGTP created summary, because of course we're gonna use A.I. on our A.I. podcast:


In this episode of the AI Security Ops podcast, the panel discusses the challenges and risks of harmful content generated by AI, particularly focusing on generative models like GPT. They explore how powerful prompt engineering can lead to the creation of misleading or dangerous outputs, and highlight the importance of detection methods, ethical oversight, and regulatory standards. The conversation emphasizes the need for responsible use of AI, stressing that while these models are incredibly capable, safeguards and human accountability are essential to prevent misuse.


Is this summary misleading?

]]> Thu, 22 May 2025 15:30:24 -0400 Black Hills Information Security Black Hills Information Security 2209 ChatGTP created summary, because of course we're gonna use A.I. on our A.I. podcast:


In this episode of the AI Security Ops podcast, the panel discusses the challenges and risks of harmful content generated by AI, particularly focusing on generative models like GPT. They explore how powerful prompt engineering can lead to the creation of misleading or dangerous outputs, and highlight the importance of detection methods, ethical oversight, and regulatory standards. The conversation emphasizes the need for responsible use of AI, stressing that while these models are incredibly capable, safeguards and human accountability are essential to prevent misuse.


Is this summary misleading?

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Derek Banks Joff Thyer Ben Bowman Brian Fehrman A.I. News of the month 4 4 A.I. News of the month full c7c57784-c779-4ca2-9e30-03e5b8f57282 https://share.transistor.fm/s/e58337f8 In this episode, we dive into how AI is revolutionizing cybersecurity—especially in spam detection using classic machine learning models like logistic regression and support vector machines. Join us as we explore real-world applications, teaching approaches in AI courses, and why your spam folder is smarter than ever.


Topics :

  • AI in email spam detection
  • Teaching machine learning through real datasets
  • NLP's role in cybersecurity
  • Behind-the-scenes on building practical AI models
]]> In this episode, we dive into how AI is revolutionizing cybersecurity—especially in spam detection using classic machine learning models like logistic regression and support vector machines. Join us as we explore real-world applications, teaching approaches in AI courses, and why your spam folder is smarter than ever.


Topics :

  • AI in email spam detection
  • Teaching machine learning through real datasets
  • NLP's role in cybersecurity
  • Behind-the-scenes on building practical AI models
]]> Thu, 15 May 2025 16:39:33 -0400 Black Hills Information Security Black Hills Information Security 1990 In this episode, we dive into how AI is revolutionizing cybersecurity—especially in spam detection using classic machine learning models like logistic regression and support vector machines. Join us as we explore real-world applications, teaching approaches in AI courses, and why your spam folder is smarter than ever.


Topics :

  • AI in email spam detection
  • Teaching machine learning through real datasets
  • NLP's role in cybersecurity
  • Behind-the-scenes on building practical AI models
]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Ben Bowman Derek Banks Bronwen Aker Brian Fehrman AI Deepfakes 3 3 AI Deepfakes full fde6de09-c3f1-448c-b6d0-977999c39b4e https://share.transistor.fm/s/3e8c9704 Welcome to another thought-provoking episode of AI Security Ops, hosted by Joff Thyer alongside Brian Fehrman and Derek Banks. In this episode, we dive deep into one of the most alarming developments in artificial intelligence—AI-generated deepfakes.

🔍 What We Cover:

  • What deepfakes are and how they’re created using generative adversarial networks (GANs) and diffusion models
  • Real-world deepfake incidents, including multimillion-dollar fraud
  • The growing accessibility of deepfake tools and the implications for social engineering
  • Detection and mitigation strategies: How to spot a deepfake and protect yourself or your organization
  • Ethical and legal challenges in legislating deepfake technology
  • Best practices for experimenting responsibly with deepfake tools

⚠️ With AI making deepfakes more realistic and accessible than ever, this isn’t just a tech curiosity—it’s a major infosec concern. Whether you're a cybersecurity pro, a tech enthusiast, or just curious about AI's darker side, this episode is a must-watch.

💬 Don’t forget to LIKE, COMMENT, and SUBSCRIBE for more insights on AI and cybersecurity!

#AI #Deepfakes #CyberSecurity #InfoSec #SocialEngineering #GenerativeAI #EthicalAI #AITrends #Podcast #AIForGood #BlackHillsInfoSec

]]> Welcome to another thought-provoking episode of AI Security Ops, hosted by Joff Thyer alongside Brian Fehrman and Derek Banks. In this episode, we dive deep into one of the most alarming developments in artificial intelligence—AI-generated deepfakes.

🔍 What We Cover:

  • What deepfakes are and how they’re created using generative adversarial networks (GANs) and diffusion models
  • Real-world deepfake incidents, including multimillion-dollar fraud
  • The growing accessibility of deepfake tools and the implications for social engineering
  • Detection and mitigation strategies: How to spot a deepfake and protect yourself or your organization
  • Ethical and legal challenges in legislating deepfake technology
  • Best practices for experimenting responsibly with deepfake tools

⚠️ With AI making deepfakes more realistic and accessible than ever, this isn’t just a tech curiosity—it’s a major infosec concern. Whether you're a cybersecurity pro, a tech enthusiast, or just curious about AI's darker side, this episode is a must-watch.

💬 Don’t forget to LIKE, COMMENT, and SUBSCRIBE for more insights on AI and cybersecurity!

#AI #Deepfakes #CyberSecurity #InfoSec #SocialEngineering #GenerativeAI #EthicalAI #AITrends #Podcast #AIForGood #BlackHillsInfoSec

]]> Mon, 28 Apr 2025 10:00:00 -0400 Black Hills Information Security Black Hills Information Security 1749 Welcome to another thought-provoking episode of AI Security Ops, hosted by Joff Thyer alongside Brian Fehrman and Derek Banks. In this episode, we dive deep into one of the most alarming developments in artificial intelligence—AI-generated deepfakes.

🔍 What We Cover:

  • What deepfakes are and how they’re created using generative adversarial networks (GANs) and diffusion models
  • Real-world deepfake incidents, including multimillion-dollar fraud
  • The growing accessibility of deepfake tools and the implications for social engineering
  • Detection and mitigation strategies: How to spot a deepfake and protect yourself or your organization
  • Ethical and legal challenges in legislating deepfake technology
  • Best practices for experimenting responsibly with deepfake tools

⚠️ With AI making deepfakes more realistic and accessible than ever, this isn’t just a tech curiosity—it’s a major infosec concern. Whether you're a cybersecurity pro, a tech enthusiast, or just curious about AI's darker side, this episode is a must-watch.

💬 Don’t forget to LIKE, COMMENT, and SUBSCRIBE for more insights on AI and cybersecurity!

#AI #Deepfakes #CyberSecurity #InfoSec #SocialEngineering #GenerativeAI #EthicalAI #AITrends #Podcast #AIForGood #BlackHillsInfoSec

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer Introduction to Prompt Injection 2 2 Introduction to Prompt Injection full ba893b49-41ec-4e29-b9ee-ad4cf6a5e677 https://share.transistor.fm/s/34f56f71 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Welcome to Episode 2 of AI Security Ops!

In this episode, Joff Thyer, Derek Banks, Brian Fehrman, and Ben "The Heretic" Bowman take a deep dive into Prompt Injection — one of the most fascinating and misunderstood attack techniques in the AI space.

We break down:
🛠️ What large language models (LLMs) are and how they work
💣 What prompt injection is, and why it matters for AI security
🎭 How attackers manipulate system prompts and personas
🔐 The difference between prompt injection and jailbreaking
👩‍💻 Practical examples, stories, and hands-on resources you can explore
🎯 How to start your journey as an AI hacker and why web app pen testing skills are more relevant than ever

Plus:
👉 Real-world cases of prompt attacks on Bing, Amazon, and more
👉 Tools and labs you can play with right now to test your skills
👉 Be sure to check out this weeks Tech Demo on YouTube!

Brought to you by the cybersecurity experts at Black Hills Information Security
https://blackhillsinfosec.com

]]> 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Welcome to Episode 2 of AI Security Ops!

In this episode, Joff Thyer, Derek Banks, Brian Fehrman, and Ben "The Heretic" Bowman take a deep dive into Prompt Injection — one of the most fascinating and misunderstood attack techniques in the AI space.

We break down:
🛠️ What large language models (LLMs) are and how they work
💣 What prompt injection is, and why it matters for AI security
🎭 How attackers manipulate system prompts and personas
🔐 The difference between prompt injection and jailbreaking
👩‍💻 Practical examples, stories, and hands-on resources you can explore
🎯 How to start your journey as an AI hacker and why web app pen testing skills are more relevant than ever

Plus:
👉 Real-world cases of prompt attacks on Bing, Amazon, and more
👉 Tools and labs you can play with right now to test your skills
👉 Be sure to check out this weeks Tech Demo on YouTube!

Brought to you by the cybersecurity experts at Black Hills Information Security
https://blackhillsinfosec.com

]]> Wed, 23 Apr 2025 00:33:45 -0400 Black Hills Information Security Black Hills Information Security 1383 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Welcome to Episode 2 of AI Security Ops!

In this episode, Joff Thyer, Derek Banks, Brian Fehrman, and Ben "The Heretic" Bowman take a deep dive into Prompt Injection — one of the most fascinating and misunderstood attack techniques in the AI space.

We break down:
🛠️ What large language models (LLMs) are and how they work
💣 What prompt injection is, and why it matters for AI security
🎭 How attackers manipulate system prompts and personas
🔐 The difference between prompt injection and jailbreaking
👩‍💻 Practical examples, stories, and hands-on resources you can explore
🎯 How to start your journey as an AI hacker and why web app pen testing skills are more relevant than ever

Plus:
👉 Real-world cases of prompt attacks on Bing, Amazon, and more
👉 Tools and labs you can play with right now to test your skills
👉 Be sure to check out this weeks Tech Demo on YouTube!

Brought to you by the cybersecurity experts at Black Hills Information Security
https://blackhillsinfosec.com

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Ben Bowman Derek Banks Joff Thyer Brian Fehrman Why is AI Security Important? 1 1 Why is AI Security Important? full c06c4735-8f31-46ae-a4bb-0b6550c93725 https://share.transistor.fm/s/6eb12f44 Welcome to the first episode of AI Security Ops! This week, join Brian Fehrman, Derek Banks, and Joff Thyer as they dive into why AI security matters more than ever. From how large language models work to the risks of prompt injection, jailbreaking, and AI-powered social engineering, this episode unpacks the challenges and opportunities at the intersection of AI and cybersecurity.

]]> Welcome to the first episode of AI Security Ops! This week, join Brian Fehrman, Derek Banks, and Joff Thyer as they dive into why AI security matters more than ever. From how large language models work to the risks of prompt injection, jailbreaking, and AI-powered social engineering, this episode unpacks the challenges and opportunities at the intersection of AI and cybersecurity.

]]> Thu, 17 Apr 2025 16:46:57 -0400 Black Hills Information Security Black Hills Information Security 2847 Welcome to the first episode of AI Security Ops! This week, join Brian Fehrman, Derek Banks, and Joff Thyer as they dive into why AI security matters more than ever. From how large language models work to the risks of prompt injection, jailbreaking, and AI-powered social engineering, this episode unpacks the challenges and opportunities at the intersection of AI and cybersecurity.

]]> Cyber Security, Artificial Intelligence, A.I.,AI,infosec No Brian Fehrman Derek Banks Joff Thyer