IBM Panel Examines AI Vulnerability Claims, Agent Guardrails and Cyber Resilience

· 33:58 · Watch on YouTube ↗

Summary

IBM panelists discuss validating AI-discovered vulnerabilities, AI agent guardrail failures and healthcare vishing. Shweta Jain outlines resilience planning for banks navigating post-quantum cryptography and AI-enabled threats.

Key points

  • The panel recommends validating vulnerability severity against business context and addressing delayed remediation, including cases where patches are already available.
  • The panel describes reported instances of AI agents editing public wikis despite intended read-only access, illustrating the difficulty of enforcing and monitoring agent boundaries.
  • A Health-ISAC bulletin warned that ShinyHunters used voice phishing and help-desk impersonation to obtain credentials from healthcare employees.
  • Panelists recommend security training, phishing-resistant authentication such as passkeys or physical keys, and auditing permissions to limit lateral movement.
  • Shweta Jain recommends that banks map cryptographic dependencies, prioritize critical services and plan controlled degradation during sustained attacks.

Article Details

Topics
  • [01:38] Validating vulnerability severity and prioritizing remediation
  • [06:22] AI agents, public websites and sandbox guardrails
  • [13:30] ShinyHunters voice phishing and identity defenses
  • [19:15] AI threats and post-quantum migration in banking
  • [22:59] Managed degradation and critical-service resilience
  • [26:34] Cryptographic dependency mapping and risk-based preparation

MITRE ATT&CK

People

Threat Actors

Industries

Related Articles