CyberWire Daily
Pedal to the AI metal.
· Summarized
Key takeaways
- AI development is rapidly advancing, with debates centering on safety versus innovation. Regulatory frameworks, including existing laws, may already provide sufficient oversight if properly enforced.
- Autonomous AI agents pose risks similar to insiders due to their delegated authority and unpredictable behavior; understanding and constraining their actions is crucial.
- Organizations must adopt organizational realignment and continuous learning frameworks, such as ACE, to effectively manage and mitigate risks associated with AI agents.
- Legal accountability for AI actions remains complex; enforcing existing laws can be a pragmatic approach while new regulations are developed.
- Cyber threats are evolving, with phishing campaigns becoming more sophisticated and harder to detect, increasing the importance of adaptive cybersecurity measures.
- The episode underscores the importance of balancing innovation, safety, and accountability in the burgeoning AI landscape.
Summary
The Escalating Race of AI Development and Safety Concerns
The episode discusses the current debate over AI development, highlighting President Trump's pushback against calls to slow down AI progress due to safety concerns. While some experts worry about the risks of autonomous AI agents acting maliciously or unpredictably, others believe that existing safeguards and authorities are sufficient. Microsoft proposes a draft AI safety code of conduct aimed at limiting models from enabling cyberattacks while permitting defensive AI research. The segment emphasizes the tension between accelerating innovation and managing associated risks.
Regulatory Strategies and Legal Oversight in AI
The podcast examines the role of existing laws and potential regulations, emphasizing Camille Stewart Gloucester’s insights on how current legal frameworks, including consumer protection and data security laws, may already hold AI companies accountable. Former FTC Chair Lena Khan advocates for enforcement of existing statutes over creating new rules, warning that increased interconnectedness and competition pressures could lead to riskier practices. The discussion considers how legal accountability can be strengthened in the age of autonomous AI agents.
Recent Data Breaches and Cybercrime Operations
The episode reports recent security incidents: the Florida Department of Highway Safety and Motor Vehicles experienced a breach via employee login credentials; Japan’s Digital Agency suffered a data breach through VPN vulnerabilities; and the Manhattan DA seized over a dozen deepfake domains used for distributing non-consensual AI-generated intimate imagery. Additionally, international cybercrime syndicates, such as Black Axe, are facing charges in the US for fraud and identity theft, illustrating the ongoing threat landscape.
Evolving Methods in Cyber Threats and Phishing Campaigns
Researchers highlight the increasing sophistication of phishing attacks, which now often bypass traditional detection tools by using social engineering, plausible infrastructure, and cloaked destinations. These campaigns are becoming more convincing and harder to detect but still show high performance among commercial security products. The risks posed to organizations are growing as attackers adopt more advanced techniques.
Camille Stewart Gloucester’s Perspectives and Organizational Control of AI
Camille Stewart Gloucester discusses her new book, 'The Insider You Built,' which provides a framework for organizations to control autonomous AI agents through organizational realignment, security, and risk mitigation. She draws parallels between AI agents and insiders, emphasizing delegated authority and accountability. Gloucester stresses the importance of understanding and constraining AI actions, advocating for continuous learning and the ACE (Authority-Centered Enforcement) framework to operationalize AI safety and agility.
Expert Opinions and Future Outlook on AI Regulation
Former FTC Chair Lena Khan advocates for applying existing regulations to AI, noting the potential conflicts of interest and interconnected investments in the industry. She cautions against rushing to create new rules and emphasizes enforcement of current laws to ensure accountability. The discussion underscores the fast pace of technological advancements versus the slower pace of legal enforcement, raising questions about how best to manage AI’s risks and ensure consumer protection.
Sponsors
- Vanta · Vanta is helping companies watch for the risks that show up between audits across your vendors, your AI tools, and your whole environment. The Vanta agent works like a 24-7 GRC engineer in the background, finding issues, drafting fixes for you, and cutting vendor assessment time by up to 50%. Whether you're a fast-growing startup or a global enterprise, Vanta is here to help you automate your security and compliance and earn and prove trust.
- Doppel · Doppel sees through social engineering attacks that appear trustworthy—routine requests, internal emails, familiar faces. Their AI-native platform detects and disrupts attacks across every channel, trains employees to recognize deep fakes and deception, and investigates every fish to take down the campaign behind it.
Show notes
The President pushes back on calls to slow AI. Microsoft lays out potential AI safety rules. Lawmakers consider the crypto Clarity Act. Florida’s Department of Highway Safety and Motor Vehicles and Japan’s Digital Agency suffer data breaches. Phishing campaigns grow increasingly difficult for email security tools to spot. New York seizes a dozen AI deepfake domains. Alleged Black Axe cybercriminals face charges. Our guest is Camille Stewart Gloster, former U.S. Deputy Cyber Director and author of the new book "The Insider You Built: How Organizations Stay in Control of Autonomous AI Agents." AI meets the long arm of the old law.
Remember to leave us a 5-star rating and review in your favorite podcast app.
Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you’ll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn.
CyberWire Guest
Today we’re joined by Camille Stewart Gloster, author of The Insider You Built: How Organizations Stay in Control of Autonomous AI Agents, and founder of CAS Strategies. We’ll discuss her new book and the broader questions it raises about AI agents. You can learn more about "The Insider You Built” here.
Selected Reading
Trump pushes back on Anthropic CEO's call for an AI slowdown (SC Media)
Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints (SecurityWeek)
Microsoft releases emergency Windows updates to fix RDS failures (Bleeping Computer)
This bill could reshape crypto in America -- and it's sparking a major battle (NPR)
Florida Department of Highway Safety hacked by international criminal group (WPTV)
240,000 Hit by Data Breach at Japan’s Digital Agency (SecurityWeek)
VBSpam comparative review - Q3 (Virus Bulletin)
New York Seizes 12 Celebrity Deepfake Websites (404 Media)
Suspected Black Axe gang leaders face cybercrime charges in the US (Bleeping Computer)
Ex-FTC boss Khan urges Uncle Sam to break out the handcuffs for AI CEOs, citing 1934 precedent (The Register)
Share your feedback.
What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show.
Want to hear your company in the show?
N2K CyberWire helps you reach the industry’s most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com.
The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Learn more about your ad choices. Visit megaphone.fm/adchoices
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account