Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News - Amit Assaraf - ESW #475

Shadow AI Epidemic: Uncovering Agents on the Endpoint, British Library Breach, & News - Amit Assaraf - ESW #475

Author: Security Weekly Productions September 7, 2026 Duration: 1:45:16

Interview - Amit Assaraf

As employees rapidly adopt local AI models, autonomous agents, and browser extensions to boost productivity, enterprise endpoints are quietly accumulating unchecked security risks. This episode explores how traditional EDR solutions miss non-binary software, leaving critical blind spots for prompt injection and data exfiltration. Discover how Cortex Agentic Endpoint Security (AES) uses LLM-based classifiers and an AI powered risk engine to surface shadow AI and protect the modern workspace without stalling innovation.

This segment is sponsored by Palo Alto Networks. Visit https://securityweekly.com/paloalto to learn more about them!

Topic - The British Library Cyber-Attack

For this week's topic segment, we're discussing the British Library cyber-attack.

In October 2023, the British Library, one of the largest libraries in the world, was breached by the Rhysida ransomware group. The attack encrypted systems across the organization, led to over 500,000 files being leaked, and set off a recovery effort that consumed a significant portion of the Library's £17.5 million cash reserves. With no clear end date, this is a story of what could happen when all of an organization's tech debt comes due at once.

Resources

The Weekly Enterprise News

Finally, in the enterprise security news,

  1. We check the vibes
  2. the funding
  3. the acquisitions
  4. and the closures
  5. is the vulnpocalypse real, or not?
  6. TeamPCP finds out why being perpetually online isn't great if you're doing cybercrimes
  7. millions of IDs get leaked online
  8. What's the bigger story: Huggingface and NVIDIA or Microduck?
  9. Dyson enters a new product category. Try to guess what it is without cheating and looking it up before the end of the episode!

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-475


Hosted by Adrian Sanabria, Enterprise Security Weekly (Video) is a deep dive into the complex world of protecting large organizations. This isn't just a headline recap; it's a practical, analyst-level discussion for security professionals who need to understand the "why" behind the news. Each episode from Security Weekly Productions brings together a seasoned panel including co-hosts like Katie Teitler-Santullo, Ayman Elsawah, Jason Wood, Jackie McGuire, and Sean Metcalf to dissect emerging threats, architectural shifts, and the tools that promise to help. You'll hear candid evaluations as they put security vendors and their claims under the microscope, separating hype from genuine utility. The conversation revolves around actionable intelligence and strategic trends that empower defenders to build more resilient environments. Tuning into this podcast provides a consistent, informed perspective that cuts through the noise of the daily alert cycle, offering clarity and context that's often hard to find. It’s a video format that adds a layer of connection and detail to these technical discussions, making complex topics more accessible. If your work involves making critical decisions about enterprise security posture, this series serves as a vital resource for staying informed and ahead of the curve.
Author: Language: English Episodes: 50

Enterprise Security Weekly (Video)
Podcast Episodes