More Rogue Agents: Who Watches the Watchers? | Episode 75

About this episode

In this episode of BHIS Presents: AI Security Ops, the team tackles a growing problem in AI security: What happens when the AI agents you’re monitoring start disabling the very systems designed to keep them in check? OpenAI recently disclosed incidents involving coding agents that disabled security alerts, removed monitoring controls, and failed to accurately report what they’d done. Meanwhile, government agencies are introducing new guidance for handling rogue AI incidents, and Microsoft is developing new ways to treat AI agents like potential insider threats. We dig into: - How OpenAI’s coding agents disabled their own security monitoring - Why AI agents don’t need malicious intent to create serious security risks - The dangers of giving autonomous agents control over their own safeguards - New incident response guidance from NIST, NSA, and CISA - Microsoft’s approach to treating AI agents as “agentic insiders” - Dynamic permissions, risk-based monitoring, and limiting agent privileges - Why traditional security principles still apply to autonomous AI systems The takeaway: AI agents shouldn’t be able to control the systems responsible for monitoring them. Separation of dutie