Security Weekly - A CRA Resource: Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News ... - ESW #475

Interview - Amit Assaraf

As employees rapidly adopt local AI models, autonomous agents, and browser extensions to boost productivity, enterprise endpoints are quietly accumulating unchecked security risks. This episode explores how traditional EDR solutions miss non-binary software, leaving critical blind spots for prompt injection and data exfiltration. Discover how Cortex Agentic Endpoint Security (AES) uses LLM-based classifiers and an AI powered risk engine to surface shadow AI and protect the modern workspace without stalling innovation.

This segment is sponsored by Palo Alto Networks. Visit https://securityweekly.com/paloalto to learn more about them!

Topic - The British Library Cyber-Attack

For this week’s topic segment, we’re discussing the British Library cyber-attack.

In October 2023, the British Library, one of the largest libraries in the world, was breached by the Rhysida ransomware group. The attack encrypted systems across the organization, led to over 500,000 files being leaked, and set off a recovery effort that consumed a significant portion of the Library’s £17.5 million cash reserves. With no clear end date, this is a story of what could happen when all of an organization’s tech debt comes due at once.

Resources

- https://www.defendersinitiative.com/p/breach-lessons-the-2023-british-library

The Weekly Enterprise News

Finally, in the enterprise security news,

1. We check the vibes
2. the funding
3. the acquisitions
4. and the closures
5. is the vulnpocalypse real, or not?
6. TeamPCP finds out why being perpetually online isn’t great if you’re doing cybercrimes
7. millions of IDs get leaked online
8. What’s the bigger story: Huggingface and NVIDIA or Microduck?
9. Dyson enters a new product category. Try to guess what it is without cheating and looking it up before the end of the episode!

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-475

00:00:00 Enterprise Security Weekly: Episode 475 Kickoff
00:05:16 Securing AI Agents and Non-Binary Software
00:11:07 Innovative AI Security and the Koi Fish Story
00:17:13 Layered Security and Employee Communication for AI
00:26:51 Strengthening Palo Alto and AI's Endpoint Evolution
00:36:40 Unpacking Tech Debt and Ransomware Recovery
00:42:56 The True Cost and Learnings from the British Library
00:51:51 Defenders Initiative and Enterprise Security News
00:54:01 Are AI Agents a Security Unlock?
00:59:34 Socure, Netspy, Proofpoint, ClickHouse Deals
01:08:34 Minimus Shutdown and Exploited Vulnerabilities Debate
01:23:14 Leaked AWS Keys and BGP Hijack Vulnerabilities
01:33:08 Online Criminals, AI Jailbreaks, and Security Insights
01:35:36 MicroDuck, Dyson Toothbrush, and Episode Farewell