AI Security Update

Someone told an AI chatbot that their lawyer was gaslighting them. In this episode, we talk about AI security in the context of the law and look at AI security from the legal perspective with Alyson Laderman. Alyson provides a lawyer's perspective on many of the emerging risks in AI security, whether you should use an AI tool for legal advice, and using AI as a starting point to figure out questions to ask. We also talk about instances where a woman used a chatbot to determine her lawyer was lying and how that actually ended up causing more harm when she got to court.

Check out this episode for in-depth overview of AI security from a legal perspective.

AI security is increasingly relevant for small businesses, where limited resources and fast-moving adoption can create unique challenges and opportunities. In this episode, Lisa Ventura joins the conversation to share UK-focused perspectives on how organisations can better understand and approach AI security in practice.

We explore how neurodiversity contributes valuable strengths to cybersecurity teams, particularly in identifying patterns, managing complexity, and improving resilience in AI-driven environments. The discussion also touches on the realities small businesses face as they adopt AI tools, from governance considerations to everyday security awareness.

Rather than focusing on hype, this episode looks at practical, real-world considerations shaping how AI security is understood and applied across the UK small business landscape. This conversation is for anyone interested in how AI security is evolving in real-world business environments, and the human factors that shape it.

In this episode, we’re joined by UK-based cybersecurity leader Michala Liavaag for a focused, real-world conversation on what the Companies House breach teaches us about modern security, AI, and accountability.

With a background as a classical pianist turned security strategist, and now founder of Cybility Consulting, Michala brings a distinctive, human-centered lens to cybersecurity.

We dive deep into the Companies House breach, which was a devastating breach in the UK, unpacking what happened, where controls and oversight fell short, and why incidents like this highlight the importance of cybersecurity awareness and education. Michala explains why AI can support detection and efficiency, but cannot replace human judgment, especially in complex, high-stakes scenarios. We also talk about accessibility considerations when traveling at airports and navigating security checkpoints which are now augmented by AI.

Grounded in a real incident and expert insight, this episode provides great advice for charities, non-profits, and leaders.

What if a simple baby photo could compromise an entire organization?

In this episode, we sit down with cybersecurity professional Hakeem Thomas, a U.S. military veteran with nearly two decades of experience across penetration testing, digital forensics, incident response, and Zero Trust initiatives.

Hakeem shares a real-world phishing campaign where AI-generated images—built from employee photos—were used to trick staff into clicking. The result? A highly effective social engineering attack that bypassed traditional red flags and exposed just how dangerous AI-powered OSINT has become.

We dive into how attackers are now automating reconnaissance across thousands of sites in minutes, cloning identities, and crafting hyper-personalized attacks that are nearly impossible to detect. From fake baby photos to voice cloning and sock puppet accounts, the threat landscape is evolving faster than most organizations can keep up.

But this isn’t just about tools—it’s about people. Why are these attacks so effective? And what does your digital footprint reveal to someone who knows how to look?

AI is transforming how we work—but with great power comes new security risks. Join Phillip Wylie as he breaks down the most critical lessons in AI cybersecurity, from everyday misconfigurations to the future of AI fluency in the workplace.

In this episode, you’ll learn why building a strong security culture is essential, how AI can both enhance and complicate penetration testing, and why continuous monitoring and vigilance are the keys to protecting data in a rapidly evolving digital landscape.

How safe is your data in the age of AI and quantum computing? In this episode, we sit down with cybersecurity expert Dr. Yolanda Reid as she breaks down the biggest digital threats today—and what you can do to stay protected. From AI-driven scams to QR code vulnerabilities and quantum-powered encryption risks, this episode is packed with actionable insights for anyone navigating the modern tech landscape.

Learn about what Quantum computing is, the different kind of QR code vulnerabilities, and the importance of protecting your data.

At RSA Conference, the real conversations don’t always happen on stage; they happen behind closed doors.

In this episode of AI Security Update, we sit down with Josh Peltz, VP at Zero Networks and a seasoned cybersecurity leader with 25+ years in tech and over a decade in cybersecurity. Josh brings a unique perspective from the frontlines of sales, strategy, and real-world customer conversations.

Vendors on the expo floor promise faster detection, and sometimes AI security marketing pitches sound the same.

Josh shares what CISOs are really saying in private and his advice on how to create a memorable marketing strategy.

Whether you're interested in developing a powerful marketing strategy or getting an inside scoop on the hidden conversations at RSAC this year, this episode is for you.

Open source AI is powerful, but it’s also quietly introducing risks most people never see coming.

In this episode, we talk with cybersecurity leader Yesenia Yser. Drawing from her work across the open source ecosystem and organizations like the Linux Foundation and Open Source Security Foundation, she breaks down why open source AI models can introduce hidden vulnerabilities. Through her nonprofit, The Lioness Instincts, Yesenia is redefining what security means and teaching women how to protect themselves both physically and digitally, blending cybersecurity with real-world self-defense. In this episode, we break down hidden vulnerabilities, copyright risks, algorithmic bias, and how to protect yourself from AI-driven scams online and in real life.

What does OpenClaw reveal about the future of AI security?

In this episode, we’re joined by Angela Saccone, Cybersecurity Professional, AI Security Enthusiast, and Podcaster, to explore how AI is reshaping the security landscape across core domains. We break down key concepts in virtual machines, cloud security, and application security, and how these environments are evolving in an AI-driven world.

We also discuss incident response in the context of AI-powered threats and the growing importance of governance.

Using OpenClaw as a real-world anchor, this conversation highlights emerging risks, practical security considerations, and how both practitioners and newcomers can better understand and navigate AI security today.

What happens when AI stops being a tool and starts acting like an employee?

In this episode, Dd Budiharto, who works as a Chief Security Advisor at Microsoft, dives into the real security challenge most organizations aren’t ready for: agentic AI with identities and access. We break down how “shadow AI employees” are already creeping into enterprises, and what it actually means to secure AI inside enterprise platforms.

The takeaway is simple but urgent: if you’re not managing AI like part of your workforce, you don’t have control, you have exposure.

Disclaimer: All opinions expressed in this episode are the individual opinions of the host and guest featured.

The opinions do not reflect that of any organization.

Resources:

Microsoft Resources:

- https://learn.microsoft.com/en-us/security/security-for-ai/

- https://www.microsoft.com/en-us/security/blog/2026/03/19/new-tools-and-guidance-announcing-zero-trust-for-ai/

- https://learn.microsoft.com/en-us/copilot/microsoft-365/copilot-control-system/security-governance

- https://learn.microsoft.com/en-us/copilot/security/responsible-ai-overview-security-copilot

Other resources:

- https://www.nist.gov/itl/ai-risk-management-framework

- https://www.cisa.gov/resources-tools/resources/ai-data-security-best-practices-securing-data-used-train-operate-ai-systems