AI Security Update

In this episode, Fredrick Wahome, cybersecurity expert and Vice President of the Kenya Cyber Security and Forensics Association, joins the show from Nairobi to explore how AI is reshaping the security landscape across Africa and beyond.
We dive into AI-assisted ransomware, ransomware-as-a-service, incident response, offline backups, open-source security risks, threat intelligence, and the growing need for AI-specific security assessments. Fredrick also explains why cybersecurity awareness is struggling to keep pace with AI adoption and what organizations, technical teams, families, and everyday users can do to stay protected.
The conversation also explores AI governance and cybersecurity policy across Africa, including the need for security by design and stronger alignment with emerging standards such as ISO 42001.

AI agents are moving fast, and most organizations are not ready for what happens when they get a key, a task, and access. John Morton reveals why the real AI security risk is not just the model - it is the identity, permissions, and guardrails around the digital worker itself. We discuss the recent attacks on water treatment plants as a case study and considerations of using AI in an educational setting.
John brings 30+ years in cyber, infrastructure, cloud, and digital transformation, plus his perspective as an adjunct faculty member in George Washington University's cyber analytics program. The conversation goes beyond enterprise risk. John and Anmol get into the growing threat to critical infrastructure, including water systems, power grids, and other legacy environments with technical debt and huge attack surfaces. John lays out what state and local leaders need to do first: understand what they have, map the interconnections, modernize where needed, and make AI security a legislative priority instead of an afterthought.
If you care about AI security, cyber policy, critical infrastructure, or the future of education in an AI-driven world, this episode is packed with practical guidance. Essential listening if you want to understand how to keep moving fast with AI without handing over the master key.

The real risk to AI lives in the ecosystem - chips, minerals, data centers, talent, geopolitics, and the criminals already exploiting all of it.
Dr. Cuneyt Gurer breaks down why security teams that only focus on the model are missing the bigger picture, and why AI is now colliding with illicit markets, organized crime, and state proxies. Anmol and Dr. Gurer unpack how AI changes the nature of traditional threats. You’ll discover why supply chains matter just as much as prompts, and how sovereign AI is tied to minerals and chip production
Dr. Gurer is a professor of international and security studies at the George C. Marshall European Center for Security Studies, where he designs courses for security professionals and studies how AI intersects with geopolitics, illicit markets, and defense. The opinions reflected in this episode are his own personal views and do not reflect those of any organization.

Emma Fang, senior security architect at EPAM and vice president at Women in Cybersecurity's UK and Ireland affiliate, draws from a decade of cybersecurity experience both as a practitioner and as a hiring manager for AI security roles. Her insights are vital for defenders and aspiring AI security professionals alike.
We talk about the incident where OpenAI broke out of its test environment, impacting Hugging Face, the changing landscape of AI attacks, and tips and tricks on how to get hired in AI security jobs.
Don't miss Emma's upcoming talks at DEF CON’s AI and AppSec villages, where she explores the failures of traditional zero trust and the risks of shadow APIs

In this episode, software veteran Carlos Echeverria, founder of QinniLabs — with over 20 years of experience at Fortune100 corporations including Amazon, Wells Fargo, and Allstate — uncovers the real-world strategies for managing AI risks in engineering. From implementing Behavior Driven Development (BDD) to enforcing non-negotiable tests, he shares how structured workflows can prevent ghost decisions, greenwashing, and uncontrolled AI chaos.
Discover how agile methods like Scrum and specific guardrails in agents.md can transform your AI team into a predictable, secure powerhouse. Carlos emphasizes that integrating traditional engineering principles—such as specification-driven development and rigorous governance—is more critical than ever in the age of rapid AI adoption. You’ll learn how to inject discipline into your AI workflows, avoid hallucinations, and maintain human oversight in a landscape pushing towards autonomous decision-making.