Your AI Agents Need Logins (Or They’ll Burn Your Company Down)

AI is pushing security into a new failure mode: tools that don’t just talk… they act. If you don’t treat AI agents like identities—with guardrails + telemetry—you’re building silent insiders. In this episode of Legitimate Cybersecurity, Frank and Dustin sit down with Ben Wilcox (CTO + CISO at ProArch) to get practical about what’s quietly breaking as companies rush into AI. What you’ll learn: The real conflict (and advantage) of being both CTO and CISO Why DevSecOps “shift left” has stalled—and what actually works How to pitch security to executives: business impact analysis, downtime, and real risk framing Why AI governance is mostly identity + visibility (and what’s missing today) “Paved paths” vs 5,000 snowflakes: the pattern that scales security Cloud-native vs Active Directory reality, passkeys, and legacy debt The weird personal-data leak nobody notices (Gemini thinking Ben is a doctor) Media/interview: [email protected] Audio: https://legitimatecybersecurity.podbean.com/ Chapters 00:00 – The core question: what’s breaking as companies rush into AI? 01:35 – CTO + CISO in one body: conflict or superpower? 03:15 – Why security becomes “the blocker” (and how shadow IT/AI happens) 04:45 – DevSecOps reality check: why “shift security into developers” stalls 07:00 – Boards waking up: due diligence, questionnaires, and exec priorities 09:30 – The only language budgets understand: business impact + downtime 12:20 – AI coding + layoffs: are we shipping secure-looking “slop”? 14:05 – “Paved paths”: fix one road, not 5,000 snowflakes 18:25 – Agents are identities: treat them like users (RBAC, controls, monitoring) 20:45 – Agent behavior drift: what “normal” looks like when it keeps learning 23:05 – Gemini thought I was a doctor: how tiny data errors become big risk 30:00 – What’s changed since the early internet (and what hasn’t) 31:10 – The Active Directory problem + why cloud-native is safer (when done right) 34:40 – Cloud tradeoffs: data residency, trust, and where control actually lives 35:55 – Is cloud cheaper? The real savings (people + speed) 37:05 – Space-based server farms: cool idea or expensive sci-fi? 38:35 – Quantum: roadmap promises vs reality 41:35 – Wrap + the official send-off: “Keep on cyberin’” #Cybersecurity #AI #CISO #CTO #IdentitySecurity #DevSecOps #AIGovernance #CloudSecurity #SecurityLeadership #riskmanagement