AI Agents Are Deleting Production. Cloud Security Has to Catch Up | Matt Lea
From Security Unfiltered · 00:53:04
Show by Joe South
Matt Lea, founder of Schematical and an AWS consultant since 2010, joins Joe South on Security Unfiltered.From dropping out of college to crash a startup, to calling a CEO straight from his WHOIS record, Matt explains why he bet his career on infrastructure, and why vibe coding is creating a whole new class of breaches. They get into the OpenAI agent that escaped its sandbox, model distillation, stolen API keys, an AI agent that posted environment data to Postbin, and the Terraform change that wiped a production database and its backups. Plus AWS vs Azure vs GCP, why Azure MFA took 12 checks to verify, Cloud War Games for training incident responders under pressure, the "lone wolf programmer" problem, and where to focus if you're breaking into cloud and AI security now.Chapters00:00 Seven months in the making (and a tornado)01:40 Matt's path: Q Basic, a failed startup, AWS in 201004:03 Why infrastructure is the steady career04:51 AI security is cloud security (for now)05:44 Vibe coding and the mid-market security gap06:39 "AI will take your job" vs reality08:22 Organized crime goes cyber12:28 Startups, scale and constant attacks13:24 OpenAI's agent escaped the sandbox18:02 Models are now worth stealing19:09 Model distillation explained23:35 Stolen API keys and vibe coding27:00 AI agents gone wrong: Postbin and a deleted prod database30:17 Why AWS (and when GCP)32:03 Azure frustration vs AWS34:37 GCP security by default37:46 Twelve places to check MFA in Azure39:35 Security spend vs runway40:47 Cloud War Games: training under pressure44:01 Tabletops, runbooks and the lone wolf programmer48:47 Where to start learning cloud and AI security51:50 Where to find MattMatt Lea / Schematical: https://schematical.comLone Wolf Programmer comics: https://schematical.com/comicsTech Debt (Steam, playtesters wanted): search "Tech Debt" on Steam (verify link)Subscribe: https://www.youtube.com/@securityunfilteredpodcastShow site: https://www.securityunfiltered.comAffiliates➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh➡️ OffGrid Coupon Code: JOE➡️ Unplugged Phone: https://unplugged.com/Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.Tesla Referral Code: https://ts.la/joseph675128Follow the Podcast on Social Media!Instagram: https://www.instagram.com/secunfpodcast/Twitter: https://twitter.com/SecUnfPodcast
More episodes of Security Unfiltered
More episodes
- AI Agent Guardrails: OpenAI Sandbox Escape | Bill Gurling, Rubrik
- Prioritization Is Dead: Every CVE Has an Exploit Now | Shimon Tolts
- Open Models Will Do Anything: AI Is Speeding Up Attacks | Rob Chapman, ArmorCode
- Securing AI at Scale: Why Your Logs Can't Read Agent Intent | Ashish Rajan
- Joe Grand: The Hardware Hack That Can Never Be Patched
- Your AI Agents Will Try Every Permission You Gave Them | Nadav Cornberg Eve
- Why Antivirus Fails at File Scanning | OPSWAT CEO Benny Czarny on CDR
- 100,000 OAuth Grants Later, Security Teams Still Can’t See the Risk
- Breaking the Sky: How Vulnerable Are Our Satellites?
- The Future of AI: Security, Ethics, and Human Augmentation
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.