A.I. Grab Bag - Episode 205

On this episode of Compliance Unfiltered, Todd Coshow and cybersecurity expert Adam Goslin delve into the hidden dangers of AI's rapid adoption. They uncover why organizations are neglecting essential safeguards, leaving sensitive data vulnerable, and how AI is being exploited as a malware command center. With insights into recent security failures and emerging standards from ISO, NIST, and IEEE, this episode is a must-listen for security professionals and business leaders. Learn how to implement responsible AI strategies and avoid becoming a cautionary tale. Hit play to understand what's truly at stake with AI.Episode Transcript:Well, Adam, we're going to do a little bit of something different. This is the episode that we're calling the AI Grab Bag. Now, there continues to be a lot of chatter. Things continue to heat up in the world of AI. It seems like we've got a number of topics in that area to discuss. Why don't you kick it off for the folks today? Sure. I mean, in the AI space, I mean, this has been relatively well-documented, you know, that I'm like, eh, let's just kind of luggies our way into this and take it slow, and let's be smart, and you know, all that fun stuff. And I don't regret that approach, you know, as it relates to AI.I mean, with any new technology, there's certainly a lot of opportunity, but there's also a lot of risk involved, et cetera. And really what you're depending on is you're depending on organizations to, oh, I don't know, act in a scrupulous manner to, you know, take this stuff seriously, to, you know, do their part as an upstanding member of society that's taking their responsibility seriously. So, you know, I mean, I don't typically crack out the good old tinfoil hat that often, but, you know, this arena especially tends to remind me a lot of lessons that don't appear to have been learned from the, you know, from the fine days of good old Edward Snowden. So, you know what? I was surprised about it. That was like 13 years ago that that hit the airwaves and everybody's like, oh, you know, shock and awe, right? Oh my God, what do you mean that, you know, there were, you know, surreptitious programs that were collecting up information and data on everybody under the F and so on, most of it illegal, you know, yada, yada, yada from, you know, the biggest tech giants that existed at the time, sharing information surreptitiously with the governments, you know, and, and, and, you know, and, you know, you just, you sit and you think about, you know, just the nature of the information and data that exists today. And especially in this world of, you know, world of AI, I personally find it perplexing that more people haven't been on the side of, you know, asking some real tough questions, some hard questions, you know, what are you doing with this information? Who are you sharing it with? Where does it reside? Who has access to it? And, you know, are there, are there back doors into the, you know, into the, into the vaults of data that, that these AI platforms are, you know, are grab bagging themselves, you know, so, you know, there's just, there's a, I think there's a lot of lessons to be learned. You would hope that people learn the lessons, but, you know, it's been, it's, it's been pretty entertaining kind of watching where people's headspace is, you know, for the last couple of years on this, you know, kind of AI trek, if you will. No doubt about it. And it's funny how things quickly, how quickly things move in the tech space, like 13 years ago is an eternity as you're talking about technology.So now I know you've been extra cautious when it comes to what you call the zombie walk toward AI over the course of the last couple of years. Um, it seems like you're not alone there. Tell us more. Well, I mean, one of the things that as I walked into it is, you know, kind of a slow cautious, you know, let's, you know, let's wait for this arena to mature and, you know, and all that fun stuff.