{"podcast":{"title":"Cyberside Chats: Cybersecurity Insights from the Experts","slug":"cyberside-chats-cybersecurity-insights-from-the-experts-7144591","podcast_index_feed_id":7144591,"rss_url":"https://www.chatcyberside.com/feed.xml","website_url":"https://www.chatcyberside.com","image_url":"https://pbcdn1.podbean.com/imglogo/image-logo/19905215/Cyberside-Logo-3000px_1_91wyj.jpg","author":"Chatcyberside","episode_count":87,"summary":"Stay ahead of the latest cybersecurity trends with Cyberside Chats! Listen to our weekly podcast on Tuesdays at 6:30 am ET and join us live once a month for breaking news, emerging threats, and actionable solutions. Whether you’re a cybersecurity pro or an executive who wants to understand how to protect your organization, cybersecurity experts Sherri Davidoff and Matt Durrin will help you understand and proactively prepare for today’s top cybersecurity threats, AI-driven attack and defense strategies, and more!","last_synced_at":"2026-09-16T04:19:50.137953+00:00","page_url":"https://stenobird.com/podcast/cyberside-chats-cybersecurity-insights-from-the-experts-7144591"},"episode":{"title":"Shadow Agents: When Your AI Workforce Has No Boss","slug":"shadow-agents-when-your-ai-workforce-has-no-boss","published_at":"2026-05-26T10:30:00+00:00","page_url":"https://stenobird.com/podcast/cyberside-chats-cybersecurity-insights-from-the-experts-7144591/shadow-agents-when-your-ai-workforce-has-no-boss","show_page_url":"https://stenobird.com/podcast/cyberside-chats-cybersecurity-insights-from-the-experts-7144591","url":"https://www.chatcyberside.com/e/shadow-agents-when-your-ai-workforce-has-no-boss/","audio_url":"https://mcdn.podbean.com/mf/web/2fet2vsym2ztjv88/EP74_-_shadow_aibj33f.mp3","summary":"Your organization is already running an AI workforce and almost nobody knows who they report to, what they can touch, or how to shut them down. In this episode, Sherri Davidoff and Matt Durrin break down the shadow AI agent problem: what makes an agent a \"shadow\" agent, how real breaches are already happening because of them, and what security leaders can do about it this week. Using three case studies: Anthropic's Claude Dispatch as a canonical product example, the April 2026 Vercel breach (the cleanest illustration yet of the OAuth supply chain attack model), and Meta's internal Sev-1 incident (when the agent itself is the failure mode). Sherri and Matt walk through the four layers where shadow agents accumulate risk and close with five concrete, actionable takeaways for security teams at any size. Key takeaways 1. Start with discovery, not policy. You can't govern what you can't see. The right question to ask your team isn't \"are you using unauthorized AI tools?\" — it's \"what AI tools are you using to do your job?\" Check OAuth grants in Google Workspace and Microsoft Entra, and look at expense reports. The real number of agents in your environment is typically two to five times what you initially find. 2. Audit and restrict OAuth scopes — especially \"Allow All\". The Vercel breach was enabled by a single broad OAuth grant an employee made during onboarding for a third-party AI productivity tool. Most enterprise Google Workspace and Microsoft 365 tenants allow users to grant full OAuth scopes to external apps with no admin review. Requiring admin approval for OAuth grants — and auditing existing ones — is a control that can be implemented today and would have prevented the Vercel incident. An OAuth token is as good as — if not better than — a username, password, and M…","meta_description":"Your organization is already running an AI workforce and almost nobody knows who they report to, what they can touch, or how to shut them down. In this ep…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1733,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cyberside-chats-cybersecurity-insights-from-the-experts-7144591/episodes/shadow-agents-when-your-ai-workforce-has-no-boss/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cyberside-chats-cybersecurity-insights-from-the-experts-7144591/shadow-agents-when-your-ai-workforce-has-no-boss.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}