Join in on weekly podcasts that aim to illuminate how AI transforms cybersecurity—exploring emerging threats, tools, and trends—while equipping viewers with knowledge they can use practically (e.g., for secure coding or business risk mitigation).
In this episode of BHIS Presents: AI Security Ops, the team continues its breakdown of the OWASP Agentic Skills Top 10, covering risks six through ten.
Agentic skills may look like simple instructions, but they operate inside AI systems with access to tools, files, networks, and other resources. So what happens when those skills aren’t isolated, verified, monitored, or governed?
We dig into:
- AST06: Weak Isolation
- AST07: Update Drift
- AST08: Poor Scanning
- AST09: No Governance
- AST10: Cross-Platform Reuse
- Why sandboxing the agent isn’t the same as isolating individual skills
- The security tradeoffs between automatic updates and outdated skills
- Why traditional scanners struggle with malicious instructions written in plain English
- The importance of maintaining an inventory of agentic skills
- How security controls can disappear when skills move between platforms
The takeaway: securing agentic skills requires more than checking them once before installation. Organizations need visibility into what skills are running, what they can access, how they change, and whether their security controls survive across environments. OWASPAgenticSkils-Part2.docx
This is Part 2 of our look at the OWASP Agentic Skills Top 10, covering AST06 through AST10.
Part 1 can be found here (https://aisecurityops.transistor.fm/episodes/will-ai-take-over-episode-71)
#AISecurity #CyberSecurity #AgenticAI #AIAgents #OWASP #LLMSecurity #InfoSec #BHIS #Antisyphon
(00:00) - Intro: OWASP Agentic Skills Top 10, Part 2
(01:41) - What Is an Agentic Skill?
(03:33) - AST06: Weak Isolation
(08:16) - AST07: Update Drift
(11:58) - AST08: Poor Scanning
(14:43) - AST09: No Governance
(19:49) - AST10: Cross-Platform Reuse
(26:40) - Final Thoughts and Closing
Click here to watch this episode on YouTube. (https://www.youtube.com/watch?v=exATQJD-i-0)
Creators & Guests
Bronwen Aker (https://aisecurityops.transistor.fm/people/bronwen-aker) - Host
Brian Fehrman (https://aisecurityops.transistor.fm/people/brian-fehrman) - Host
Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/)
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/ (https://www.blackhillsinfosec.com/fusion-penetration-testing/)
Antisyphon Training
https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/)
Active Countermeasures
https://www.activecountermeasures.com (https://www.activecountermeasures.com/)
Wild West Hackin Fest
https://wildwesthackinfest.com (https://wildwesthackinfest.com/)
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com (https://poweredbybhis.com/)
Click here to view the episode transcript. (https://share.transistor.fm/s/92ba0d79/transcript)
26 Sept 2026
Will AI Take Over? | Episode 71
In this episode of BHIS Presents: AI Security Ops, the team tackles a big question:
Could AI actually take over the internet?
Recent warnings from AI industry leaders have raised concerns about autonomous agent swarms escaping containment, compromising systems, and operating at a scale humans may struggle to match.
But what would “taking over the internet” actually require?
The team looks at the problem from a hacker’s perspective — examining compute requirements, persistence, botnets, vulnerable infrastructure, the recent Hugging Face incident, and the difference between AI acting autonomously and humans using AI to accelerate attacks.
We dig into:
- Whether an autonomous AI swarm could realistically operate at internet scale
- What the Hugging Face incident actually tells us about agentic security
- The compute and infrastructure required to sustain a rogue agent swarm
- How botnets and compromised systems could change the equation
- Why existing vulnerabilities may be a bigger concern than hypothetical AI takeover scenarios
- Whether slowing frontier AI development actually addresses the cybersecurity problem
- The difference between AI exhibiting dangerous behavior and AI having intent
- Why defenders need to focus on their real-world attack surface today
The takeaway: AI is dramatically increasing the speed and scale of cybersecurity operations, but powerful models still operate inside systems designed, deployed, and connected by people.
The immediate security question may be less “Will AI take over?” and more “What are we giving AI access to?”
#AISecurity #CyberSecurity #AgenticAI #AIAgents #ArtificialIntelligence #LLMSecurity #InfoSec #BHIS #Antisyphon
(00:00) - Intro: Could AI Take Over the Internet?
(01:18) - Why AI Leaders Are Warning About Agent Swarms
(06:15) - What the Hugging Face Incident Actually Shows
(09:40) - The Compute Problem for Rogue AI Swarms
(11:44) - Could a rogue agent swarm be detected?
(12:29) - Botnets, Crypto Miners, and Finding a Foothold
(14:27) - How much new risk does AI create?
(17:26) - A closer look at the agents’ attack timeline
(19:58) - AI regulation and competition
(22:44) - Human-directed AI versus autonomous AI
(28:06) - From Compromised Computers to Internet-Scale Attacks
(28:55) - What Does “Taking Over the Internet” Actually Mean?
(33:11) - What an AI Takeover Could Realistically Look Like
(34:00) - Practical security risks for organizations
(35:55) - Could AI Agents Hide What They’re Doing?
(37:00) - AI, the Hacker Mindset, and Anthropomorphic Fallacy
(39:56) - Final Thoughts and Closing
Click here to watch this episode on YouTube. (https://www.youtube.com/watch?v=0QNuCmW2P6U)
Creators & Guests
Derek Banks (https://aisecurityops.transistor.fm/people/derek-banks) - Host
Ethan Robish (https://aisecurityops.transistor.fm/people/ethan-robish) - Guest
Brian Fehrman (https://aisecurityops.transistor.fm/people/brian-fehrman) - Host
Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/)
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/ (https://www.blackhillsinfosec.com/fusion-penetration-testing/)
Antisyphon Training
https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/)
Active Countermeasures
https://www.activecountermeasures.com (https://www.activecountermeasures.com/)
Wild West Hackin Fest
https://wildwesthackinfest.com (https://wildwesthackinfest.com/)
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com (https://poweredbybhis.com/)
Click here to view the episode transcript. (https://share.transistor.fm/s/84962129/transcript)
21 Sept 2026
OWASP Agentic Top 10 [Part 1] | Episode 70
In this episode of BHIS Presents: AI Security Ops, the team breaks down the first five risks in the OWASP Agentic Skills Top 10 (Part 1).
Agentic skills can give AI systems reusable instructions, workflows, and capabilities — but they also introduce a new attack surface. A skill may look like a simple markdown file, yet the agent following those instructions could have access to your filesystem, credentials, network, shell, or other sensitive resources.
We dig into:
- AST01: Malicious Skills
- AST02: Supply Chain Compromise
- AST03: Overprivileged Skills
- AST04: Insecure Metadata
- AST05: Untrusted External Instructions
- Why skills should be treated more like software than configuration
- How excessive permissions increase an agent’s blast radius
- Why external content creates indirect prompt injection risks
- How isolation, least privilege, and trusted sources can reduce risk
The takeaway: “just markdown” isn’t necessarily harmless when an AI agent can act on what it reads.
This is Part 1 of our look at the OWASP Agentic Skills Top 10, covering AST01 through AST05.
—
Learn more about Black Hills Information Security:
https://www.blackhillsinfosec.com/
Check out Antisyphon Training:
https://www.antisyphontraining.com/
(00:00) - Intro: OWASP Agentic Skills Top 10, Part 1
(01:59) - AST01: Malicious Skills
(06:13) - AST02: Supply Chain Compromise
(09:37) - AST03: Overprivileged Skills
(13:56) - AST04: Insecure Metadata
(16:34) - AST05: Untrusted External Instructions
(22:36) - Final Takeaways and Part 2 Preview
Click here to watch this episode on YouTube. (https://www.youtube.com/watch?v=Zsl_n5bU8vw)
Creators & Guests
Brian Fehrman (https://aisecurityops.transistor.fm/people/brian-fehrman) - Host
Derek Banks (https://aisecurityops.transistor.fm/people/derek-banks) - Host
Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com (https://www.blackhillsinfosec.com/)
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/ (https://www.blackhillsinfosec.com/fusion-penetration-testing/)
Antisyphon Training
https://www.antisyphontraining.com/ (https://www.antisyphontraining.com/)
Active Countermeasures
https://www.activecountermeasures.com (https://www.activecountermeasures.com/)
Wild West Hackin Fest
https://wildwesthackinfest.com (https://wildwesthackinfest.com/)
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com (https://poweredbybhis.com/)
Click here to view the episode transcript. (https://share.transistor.fm/s/31b76eee/transcript)
Who has been a guest on AI Security Ops
Names identified in recent episode analyses. Showing up to five guests.
Josh Mason
Ethan Robish
Melisa Wachs
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
2.1 / 5
13 ratings
Contact AI Security Ops
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
