Security Weekly - A CRA Resource: Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News ... - ESW #475

Interview - Amit Assaraf

As employees rapidly adopt local AI models, autonomous agents, and browser extensions to boost productivity, enterprise endpoints are quietly accumulating unchecked security risks. This episode explores how traditional EDR solutions miss non-binary software, leaving critical blind spots for prompt injection and data exfiltration. Discover how Cortex Agentic Endpoint Security (AES) uses LLM-based classifiers and an AI powered risk engine to surface shadow AI and protect the modern workspace without stalling innovation.

This segment is sponsored by Palo Alto Networks. Visit https://securityweekly.com/paloalto to learn more about them!

Topic - The British Library Cyber-Attack

For this week’s topic segment, we’re discussing the British Library cyber-attack.

In October 2023, the British Library, one of the largest libraries in the world, was breached by the Rhysida ransomware group. The attack encrypted systems across the organization, led to over 500,000 files being leaked, and set off a recovery effort that consumed a significant portion of the Library’s £17.5 million cash reserves. With no clear end date, this is a story of what could happen when all of an organization’s tech debt comes due at once.

Resources

- https://www.defendersinitiative.com/p/breach-lessons-the-2023-british-library

The Weekly Enterprise News

Finally, in the enterprise security news,

1. We check the vibes
2. the funding
3. the acquisitions
4. and the closures
5. is the vulnpocalypse real, or not?
6. TeamPCP finds out why being perpetually online isn’t great if you’re doing cybercrimes
7. millions of IDs get leaked online
8. What’s the bigger story: Huggingface and NVIDIA or Microduck?
9. Dyson enters a new product category. Try to guess what it is without cheating and looking it up before the end of the episode!

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-475