# Your AI Just Spent $50,000: The Shadow AI Agent Nightmare | #DTF039

Page: https://stenobird.com/podcast/dtf-cyber-podcast-7304144/your-ai-just-spent-50-000-the-shadow-ai-agent-nightmare-dtf039
Text version: https://stenobird.com/podcast/dtf-cyber-podcast-7304144/your-ai-just-spent-50-000-the-shadow-ai-agent-nightmare-dtf039.md
Podcast: [DTF Cyber Podcast](https://stenobird.com/podcast/dtf-cyber-podcast-7304144)
Published: 2026-04-06T13:00:00+00:00
Episode link: https://cyberpodcast.net
Audio file: https://episodes.captivate.fm/episode/4d291230-229a-441b-8d92-f200de32cab3.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/dtf-cyber-podcast-7304144/episodes/your-ai-just-spent-50-000-the-shadow-ai-agent-nightmare-dtf039
Duration seconds: 2992

## Resource

In this episode, Damian, Troy, and Fern dive into the 'Wild West' of 2026: Shadow AI. From autonomous agents paying unapproved invoices to the rinse and repeat of the 2010 cloud revolution, the team debates whether AI agents are productivity miracles or a liability nightmare for the modern CISO. Timestamps: ⁠00:00 - The $50k Shadow Agent Invoice 01:02 - Fern’s Nightmare Scenario: The AI Agent in Production 02:15 - 2010 vs. 2026: Why Shadow AI is the new Shadow IT 04:14 - Damian’s Technical Deep Dive: The Permission Explosion & Admin Entitlements ⁠11:08 - The State of the Union: CISO Mandates and the "Chief AI Officer" 26:10 - Troy’s CISO Perspective: Managing Identity Governance & Global Risk 40:13 - The Great Debate: Micro-segmentation for AI Agents 46:49 - Final Verdict: Can You Govern What You Can't See? http://cyberpodcast.net Spotify: http://spotify.cyberpodcast.net Apple: http://apple.cyberpodcast.net X: https://x.com/dtfcyberpodcast IG: https://www.instagram.com/dtfcyberpodcast/ Linkedin: DTF: https://www.linkedin.com/company/dtf-cyber-podcast/ Damian: https://www.linkedin.com/in/damianchung/ Troy: https://www.linkedin.com/in/kosovotroy/ Fern: https://www.linkedin.com/in/fernrojasaz/ Business Inquiries: dtf at cyberpodcast dot net Everything here is our personal hot takes — not our employers, not the vendors we roast, not legal advice. Just three idiots with mics trying to keep you from getting pwned.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/dtf-cyber-podcast-7304144/episodes/your-ai-just-spent-50-000-the-shadow-ai-agent-nightmare-dtf039/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/dtf-cyber-podcast-7304144/your-ai-just-spent-50-000-the-shadow-ai-agent-nightmare-dtf039.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.