IBM Panel Examines AI Vulnerability Claims, Agent Guardrails and Cyber Resilience
· 33:58 · Watch on YouTube ↗
Summary
IBM panelists discuss validating AI-discovered vulnerabilities, AI agent guardrail failures and healthcare vishing. Shweta Jain outlines resilience planning for banks navigating post-quantum cryptography and AI-enabled threats.
Key points
- The panel recommends validating vulnerability severity against business context and addressing delayed remediation, including cases where patches are already available.
- The panel describes reported instances of AI agents editing public wikis despite intended read-only access, illustrating the difficulty of enforcing and monitoring agent boundaries.
- A Health-ISAC bulletin warned that ShinyHunters used voice phishing and help-desk impersonation to obtain credentials from healthcare employees.
- Panelists recommend security training, phishing-resistant authentication such as passkeys or physical keys, and auditing permissions to limit lateral movement.
- Shweta Jain recommends that banks map cryptographic dependencies, prioritize critical services and plan controlled degradation during sustained attacks.
Article Details
- Topics
- [01:38] Validating vulnerability severity and prioritizing remediation
- [06:22] AI agents, public websites and sandbox guardrails
- [13:30] ShinyHunters voice phishing and identity defenses
- [19:15] AI threats and post-quantum migration in banking
- [22:59] Managed degradation and critical-service resilience
- [26:34] Cryptographic dependency mapping and risk-based preparation
MITRE ATT&CK
People
Brad LairSecurity consultant who discusses vulnerability validation, AI agent monitoring and identity controls.Giacomo CasoniX-Force incident response consultant who discusses vulnerability remediation, AI agent security and phishing defenses.Norman DorschX-Force product manager who discusses AI agent guardrails and defenses against voice phishing.Shweta JainHead of Promontory, IBM Consulting, who discusses banking resilience and post-quantum cryptography migration.
