S6E5 What Retailers Must Know About Prompt Injection, Rogue Bots & AI Agent Security Before It's Too Late

Your AI shopping agent just drained your bank account. It's not a glitch — that's the objective it was given. Welcome to the new reality of agentic commerce, where autonomous AI agents shop, transact, and negotiate on behalf of consumers and brands — and where cybercriminals are already waiting to exploit every crack in the system.

In this must-listen episode of The Retail Razor Show, hosts Ricardo Belmar and Casey Golden sit down with Dr. Aaron Estes, VP of Product & Engineering at Binary Defense, to unpack the retail cybersecurity crisis that most retailers haven't even started preparing for. With half of all internet traffic already coming from bots and 1 in 8 AI-related breaches now involving a rogue agent, the agentic commerce era is creating attack surfaces we've never seen before.

Dr. Estes brings 20+ years of hands-on cybersecurity expertise, including penetration testing at Lockheed Martin and advisory work with leading retailers. He breaks down exactly how AI agents differ from traditional e-commerce threats, why prompt injection attacks are the new frontier of retail cybersecurity, and what practical guardrails every retailer needs to put in place right now.

What You’ll Learn in This Episode:

• Why AI agents are fundamentally different from human users — and why they'll "very confidently spend all your money" to hit their objective
• How prompt injection attacks trick AI agents into leaking sensitive data
• Why every AI agent needs its own identity, login, and role-based access controls — just like an employee
• The "bots watching bots" architecture that's becoming the new standard in agentic commerce security
• How AI shopping bots are already exploiting loyalty programs, gift cards, and rewards systems
• Why retailers must rethink retail cybersecurity assumptions as autonomous shoppers replace human ones
• How to identify rogue chatbots and fraudulent AI agents impersonating legitimate brands
• What "human-in-the-loop" oversight really means — and where it's non-negotiable in agentic commerce

This Episode is Brought to You By RetailClub.

Join 2,000 retail leaders at RetailClub AI Festival, September 22–24 in Huntington Beach. Dive deep into how AI is reshaping retail while soaking up the sun at a fully outdoor, beachside venue. Decision-makers from retailers and brands can attend with free tickets and up to $1,250 in travel reimbursement. Head to retailclub.com to learn more. https://retailclub.com/retail-razor-podcast

Subscribe & Follow

If you enjoyed this episode, please leave us a 5‑star rating and review on Apple Podcasts, Spotify, or Goodpods. Subscribe on YouTube so you never miss an episode and check out the other shows in the Retail Razor Podcast Network: Retail Transformers, Blade to Greatness, and Data Blades.

Subscribe to the Retail Razor Podcast Network: https://retailrazor.com/

Subscribe to our Newsletter: https://retailrazor.substack.com

Subscribe to our YouTube channel: https://go.retailrazor.com/utube

About our Guest

Dr. Aaron Estes. https://www.linkedin.com/in/aaronestes777/

email: [email protected]

Binary Defense. https://binarydefense.com/

Dr. Aaron Estes is the VP of Product & Engineering at Binary Defense, a 24/7 cybersecurity watchtower specializing in cyber threat intelligence, dark web monitoring, digital channel fraud, and breach response. He holds a doctorate in software engineering with a concentration in cybersecurity, teaches at UC Berkeley and Southern Methodist University, and previously spent ~15 years in penetration testing at Lockheed Martin across defense, energy, retail, and entertainment sectors.

Chapters

00:00 Teaser 

00:49 Show Intro 

07:26 Welcome Dr Aaron Estes! 

09:31 Why Security Matters 

14:00 New Attack Surface 

17:57 AI Identity and Access 

22:09 Adoption Speed and Oversight 

26:51 Bots Watching Bots 

31:34 Orchestrators and Rival Bots 

34:06 Bots Gaming Rewards 

37:13 AI Shoppers Rise 

38:29 Ads Inside Agents 

44:08 Rogue Bots And Trust 

48:09 Risk Versus Reward 

50:48 Kill Switch Reality 

52:55 Ecommerce Lessons Repeat 

54:26 Closing Thanks And Contact 

56:21 Show Close

Meet your hosts

Helping you cut through the clutter in retail & retail tech:

Ricardo Belmar is an NRF Top Retail Voice for 2025 and a RETHINK Retail Top Retail Expert from 2021 – 2026. Thinkers 360 has named him a Top 10 Thought Leader in Retail, a Top 25 Thought Leader in AGI and Careers, a Top 50 Thought Leader in Agentic AIand Management, and a Top 100 Thought Leader in Digital Transformation and Transformation. Thinkers 360 also named him a Top Digital Voice for 2024 and 2025. He is an advisory council member at George Mason University’s Center for Retail Transformationand the Retail Cloud Alliance. He was most recently the partner marketing leader for retail & consumer goods in the Americas at Microsoft.

Casey Golden, is the North America Leader for Retail & Consumer Goods at CI&T, and CEO of Luxlock. She is a RETHINK Retail Top Retail Expert from 2023 - 2026, and Retail Cloud Alliance advisory council member. After a career on the fashion and supply chain technology side of the business, Casey is obsessed with the customer relationship between the brand and the consumer and is slaying franken-stacks and building retail tech! 

Music

Includes music provided by imunobeats.com, featuring Overclocked, and E-Motive from the album Beat Hype, written by Heston Mimms, published by Imuno.