PODCAST · technology
The AI Security Podcast
by Harriet Farlow (HarrietHacks)
I missed the boat in computer hacking so now I hack AI instead. This podcast discusses all things at the intersection of AI and security. Hosted by me (Harriet Farlow aka. HarrietHacks) and Tania Sadhani and supported by Mileva Security Labs. Chat with Mileva Security Labs for your AI Security training and advisory needs: https://milevalabs.com/ Reach out to HarrietHacks if you want us to speak at your event: https://www.harriethacks.com/
Episodes
-
Explore the future or retreat from the present: a lecture by Jack Clark
This week I discuss a lecture by Jack Clark, check it out here. And check out his newsletter Import AI. https://www.youtube.com/watch?v=8zIcP5WlShw
-
Claude Mythos and Project Glasswing
This week we're finally delving into Claude Mythos and Project Glasswing! We discuss both the technical and geostrategic challenges, and what it means for the future of AI security. The announcement: https://red.anthropic.com/2026/mythos-preview/ Glasswing: https://www.anthropic.com/glasswing…
more -
How to get hired in AI security
If you’re trying to break into AI security, it can feel confusing — do you need to be a machine learning expert, a cybersecurity professional, or both? In this episode, we break down practical tips for getting hired in AI security, from the skills that actually matter to the types of projects and...
-
getting talks accepted into conferences! tips and tricks
Want to give a great conference talk (and not bore everyone to death)? In this episode, I share practical tips for giving a strong conference talk — from structuring your idea to actually delivering it on stage. #PublicSpeaking #Conferences #CFP #TechTalks #Cybersecurity #AI
-
Do we need to secure model weights?
In this episode, we dig into model weight security — what it means, why it’s emerging as a critical issue in AI security, and whether the framing in the recent RAND report on securing AI model weights actually helps defenders and policymakers. We discuss the RAND report Securing AI Model Weights:...
-
Model Context Protocol and Agent 2 Agent 🤖🕵️
In this episode, we dig into Model Context Protocol (MCP) and agent-to-agent (A2A) communication — what they are, why they matter, and where the real risks start to emerge.We cover:- What MCP actually enables beyond “tool calling”- How A2A changes the threat model for AI systems- Where trust...
-
Agentic AI Security | case studies by Microsoft, OWASP
As promised, I’m back with Tania for a deep dive into the wild world of agentic AI security — how modern AI agents break, misbehave, or get exploited, and what real case studies are teaching us. We’re unpacking insights from the Taxonomy of Failure Modes in Agentic AI Systems, the core paper…
more -
a hacky christmas message
A quick end-of-year message to say thanks. Thanks for being part of the channel this year — whether you’ve been watching quietly, sharing, or arguing with me in the comments. I really appreciate it.I hope you have a good Christmas and holiday period, whatever that looks like for you. Take a break...
-
Three Black Hat talks at just 18! My interview with Bandana Kaur.
In this episode, I’m joined by Bandana Kaur — a cybersecurity researcher, speaker, and all-round superstar who somehow managed to do in her teens what most people are still figuring out in their thirties. 🤔 Bandana is just 18 years old, entirely self-taught in cybersecurity, already working in…
more -
Effective Altruism and AI with Good Ancestors CEO Greg Sadler | part 2
Remember that time I invited myself over to Greg's place with my camera? This is part 2 from that great conversation. I'm curious to hear whether you've heard a lot about EA? It's something really big in the AI world but I'm conscious a lot of people outside the bubble haven't heard of it. Let me...
-
AI Safety with CEO of Good Ancestors Greg Sadler | part 1
This week I invited myself over to Greg Sadler's place, the CEO of Good Ancestors, about AI safety. I brought sushi but I didn't have lunch so I ate most of it, and then I almost made him late for his next meeting. We specifically chat through AI capabilities, his work in policy, and building a...
-
The United States AI Action Plan | will they win the AI race against China? 🤔
Hi! 👋 In this episode, we’re diving into the US AI Action Plan — the White House’s new roadmap for how America plans to lead in AI.. and beat China.We’ll look at what’s inside the plan, what it really means for AI security and regulation, and whether it’s more of a policy promise… or a political...
-
AI Security vs Application Security
Welcome back! 👋 After taking a little break to reset and redesign everything behind the scenes, I’m back — and consolidating all my content. This episode is part of both The AI Security Podcast (on Spotify and Apple Podcasts) and my YouTube channel, HarrietHacks — so whether you prefer to listen...
-
Agentic AI Security: A Primer
For a while we've been wanting to talk about Agentic AI Security.. the thing is that we could spend multiple episodes talking about it! So we decided to do just that. This is part 1 - a primer - where we talk about exactly what AI agents are and why we may need to consider their security a bit...
-
How Likely Are AI Security Incidents? Updates From Our Final Report!
Six months ago Tania and I made an episode about the interim report for our AI Security Likelihood Project.. and it is finally time to discuss the final report! You'll see it live at this link shortly: https://www.aisecurityfundamentals.com/ The premise was simple: are AI security incidents...
-
To open or close model weights?
In this episode, Tania and I discuss the debate around closed or open model weights. What do you think? The RAND report we mention: https://www.rand.org/pubs/research_reports/RRA2849-1.html
-
Creative prompt injection in the wild
In this episode, Tania and I talk through some creative examples of prompt injection/engineering we've seen in the wild.. think prompts hidden in papers, red-teaming and web-scraping. Your Brain on ChatGPT: https://arxiv.org/pdf/2506.08872 Paper with hidden text (p. 12):...
-
Threat intel digest: 23 June 2025
This week we discussed multiple AI vulnerabilities, including Echolink in M365 Copilot, Agent Smith in Langchain, and a SQL injection flaw in Llama Index, all of which have been patched. We also covered a data exposure bug in Asana's MCP server and OWASP's project to create an AI vulnerability...
-
AI safety evaluations with Inspect
I'm back from holiday, and this week Tania and I talk about a project she completed as part of the ARENA AI safety curriculum to replicate the findings of evaluations on frontier AI capabilities. Link to reasoning paper: https://arxiv.org/abs/2502.09696 Link to the Inspect dashboard:...
-
Threat intel digest: 9 June 2025
This week we try a new condensed format for the AI security digest! we covered critical CVEs, including vulnerabilities in AWS MCP, Llama Index, GitHub MCP integration, and tool poisoning attacks. We also reported on malware campaigns using spoofed AI installers, a supply chain attack via fake...
-
Threat intel digest: 26 May 2025
Sign up to receive in your inbox: http://eepurl.com/i7RgRM Tania Sadhani and Miranda R discussed various AI security topics, including critical CVEs affecting platforms like ChatGPT and Hugging Face, the potential for SharePoint Copilot in internal reconnaissance, and malicious npm packages...
-
AI Vulnerability Research with Aditya Rana
Ever wondered how security vulnerabilities are found in AI? Join us as we chat with Aditya, a Vulnerability Researcher at Mileva Security Labs!
-
Threat intel digest: 12 May 2025
Sign up to receive in your inbox: http://eepurl.com/i7RgRM This week we note regular CVEs in AI libraries such as Nvidia TensorFlow and PyTorch. We discuss a novel prompt injection technique called "policy puppetry", along with malware dispersal through fake AI video generators and Meta's release...
-
The evolution of data science and AI ethics with Dr Alberto Chierici
This week I'm joined by my friend Alberto, he has an incredible storied career - from data science, insurance, AI risk, advising Tesla.. check out his book here! https://www.amazon.com.au/Ethics-I-Facts-Fictions-Forecasts/dp/1636763650
-
Stanford's 2025 AI Index Report
We talk about Stanford Human-Centred AI's latest AI Index report, check it out here: https://hai.stanford.edu/ai-index/2025-ai-index-report
-
Threat intel digest: 28 April 2025
Did you know we have a fortnightly threat intel newsletter? We decided there was so much good research in there we have to talk about it here! We're joined by threat intel lead Miranda for this fortnight's biggest AI security news, coming out in this week's digest! http://eepurl.com/i7RgRM
-
Episode 28: the OWASP ML Security Top 10 with co-lead Shain Singh
My friend Shain joins me on the podcast to talk about his work with the OWASP MLSec Top 10 list and organisational guidance, as well as how he got here! For info about the list and how to contribute, check out the link: https://owasp.org/www-project-machine-learning-security-top-10/
-
Episode 27: all about AI red teaming
This week we talk about AI red teaming.. I can't quite believe we haven't talked about it already! We cover the origins of red teaming in the military, how red teaming is done in cyber security, and the fundamentals of AI red teaming. Resources:...
-
Episode 26: Microsoft's L33t Sp3ak AI security series ft. me
I didn't manage to get my act into gear to record a fresh episode between getting back from the UK and heading to New Zealand so I've pulled one from the vault.. it's a good one though! A year ago I was interviewed by Microsoft for their AI security series. Massive thanks to Microsoft for having…
more -
Episode 25: conversations at AI UK in London
I didn't want to do a solo episode so instead I enlist free content support by speaking to the vendors at AI UK, run by the Alan Turing Institute, in London! Thanks very much to those people, links below here: Datambit: https://datambit.com/ RAISE: https://raise-project.uk/ Contact us at...
-
Episode 24: examples of AI security incidents, from our Manchester airbnb (but sadly not the hot tub)
We're in Manchester but we can't talk about it much.. so instead we reflect on some of the latest digest incidents (and how we wish the hot tub in our airbnb had water in it). Sign up to the digest here: http://eepurl.com/i7RgRM
-
Episode 23: the AI lifecycle and what it means for security
In this episode we discuss the AI lifecycle.. we talk through important machine learning stages (training, inference etc), how they apply at the systems levels (agentic systems, APIs etc) and and example in context (facial recognition at airports but please forgive us we are not airport experts)....
-
Episode 22: security careers and content creation with Cyber Expanse host James Webb
In this episode I interview James Webb, host of the Cyber Expanse. We discuss careers at the intersection of AI and cyber security, how to get into the security workforce, and what it's like being 'influencers' (content creators) in the security space. This episode also has a video equivalent at...
-
Episode 21: is AI an optional risk? lessons in risk analysis from a road trip to the Society of Risk Analysis conference
Tania and I went to Melbourne to attend the Society of Risk Analysis Annual General Meeting. What a great group of people.. we learnt so much about risk analysis from these awesome people. We all came from totally different disciplines - climate, biosecurity, technology - but everyone working in...
-
Episode 20: threat intelligence vs vulnerability research in AI
Today I'm joined by Miranda, our threat intel lead at Mileva, to discuss how threat intel and vulnerability research works in the world of AI security. We also recently released a threat digest, sign up here to understand what AI security incidents and research are happening in the wild:...
-
Episode 19: the TikTok ban (also relevant to DeepSeek?!) part 2
This is part 2 of our discussion on the TikTok ban and its AI security implications. We have not yet recorded a podcast about DeepSeek (look, we're very busy) but you'll find that a lot of the discussion about Chinese national security laws is relevant and echoes those same conversations. Links...
-
Episode 18: what is going on with this TikTok ban? Part 1.
We chat about the TikTok ban and its AI security implications. We got so into this topic we had to split it in two parts! The AI security creative comms comp: https://milev.ai/reports/ai-security-communication-competition-2000-in-prizes/ Sign up to our new threat digest: http://eepurl.com/i7RgRM...
-
Episode 17: 30 lessons at 30 (AI security edition)
Harriet turned 30 recently and decided to try this trend - but AI security edition! We talk through 30 lessons - AI, security and life. Contact us at [email protected]
-
Episode 16: our top 3 AI security trends to start off 2025
Welcome to the AI security podcast! We decided to rebrand and claim this space since no-one else has taken it! We're looking forward to being your go-to podcast for AI security news, research and casual yaps. In this episode Tania and I each discuss our top three trends in AI security and AI for...
-
Episode 15: you didn't get enough of GRC last time with Annie-Mei - Part 2
We continue our discussion on key trends in GRC and its intersection with AI! Annie-Mei is also about to launch her own podcast and I highly recommend you check it out if you want more no-nonsense content and advice about the cyber space.
-
Episode 14: the AI Security Likelihood Project - Interim report and dataset now out!
This week we released the interim report and subset of the AI incident database for the AI Security Likelihood research Tania has been working on! We chat through the motivations for the project, our initial insights and takes, and where we hope to take it next. Now we want your input! Check it…
more -
Episode 13: what on earth is GRC with Annie-Mei Forster Part 1
Today we chat to my good friend Annie-Mei about GRC (governance, risk and compliance). She is a senior GRC consultant with a background in journalism! We discuss her career journey and an overview of what on earth GRC is.
-
Episode 12: from data analytics to start-up founder with Howjer Gu
This time we sit down with Howjer Gu, Founder of Planoverse, a start-up in our stream within the UNSW 10x accelerator! Fun fact - Howjer and I used to work together at Deloitte back in 2016 and couldn't believe it when we ran into each other during the application process. Howjer has a background...
-
Episode 11: the Mileva backstory.. also Harriet is in VOGUE?!
2024 has seen a lot of change for Mileva.. and we often get people asking about what we're doing and we got here, so this time Tania interviews Harriet about starting Mileva! We know lots of our audience are curious about starting a business and the different trade-offs that entails (quitting…
more -
Episode 10: how to up-skill in AI security
In this episode Tania and I chat through how we learnt about AI security and adversarial machine learning, and how you can too! Some resources we mention: - Crash Course AI https://thecrashcourse.com/topic/ai/ - 3 Blue 1 Brown https://www.youtube.com/c/3blue1brown - Kaggle...
-
Episode 9: why did California Governor Newsom veto the AI regulation bill and what other bills were passed?
People kept asking us about the recent AI laws in California and why some were passed but one was vetoed, so we decided we'd finally better do a podcast episode on it! Disclaimers: we're not lawyers (this will be immediately obvious) but I hope this is enlightening to other AI/tech folk. We...
-
BONUS: how are threat actors using language models?
In this bonus episode we're still with Miranda and we're talking about some of the trends we're seeing around LLMs (language models) being used by adversaries to augment attacks. This could be another episode, but we have a bite sized discussion for you here!
-
Episode 7: Is AI Security a subset of Cyber Security with AI security researcher Miranda
This time we are joined by another vital member of the Mileva team, Miranda R! Unlike Tania and myself, who are data scientists who got into security, Miranda actually started as a cyber security analyst and made her way into AI. She chats about her career journey and insights on the cyber/AI...
-
BONUS: we rode a Waymo and chat about the impact of automation
When we were in the US we rode a Waymo.. and now we chat about it here! We definitely want to chat about job displacement in another episode, but for now - here is our excuse to tax deduct the Waymo ride!
-
Episode 5: hacking the TikTok dance filter and facial recognition models at BSides Canberra and Singapore
We're finally back after a bit of a break (travel is tiring). Over the last couple of weeks we attended and spoke at BSides Singapore and BSides Canberra! In this episode we cover the research discussed in our talks and the highlights of BSides in general (you know we're massive BSides fans).
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
I missed the boat in computer hacking so now I hack AI instead. This podcast discusses all things at the intersection of AI and security. Hosted by me (Harriet Farlow aka. HarrietHacks) and Tania Sadhani and supported by Mileva Security Labs.
Chat with Mileva Security Labs for your AI Security training and advisory needs: https://milevalabs.com/
Reach out to HarrietHacks if you want us to speak at your event: https://www.harriethacks.com/
HOSTED BY
Harriet Farlow (HarrietHacks)
CATEGORIES
Loading similar podcasts...