How Microsoft Is Securing the Agentic Enterprise | Aaron Zollman

The top story has been that the AI models are happy. The models went out under the under the Internet and tested the security of several organizations. Is it something to be scared of? Yes. Is it something to throw up your hands and worry about? No. You've done all of these things before. We have created containerization in factories. We have secured applications with vulnerabilities. The qualities of these agents, they're unpredictable. They're irrational. They're prone to lashing out. And as you go through this list, you arrive at the point where you're like, Jesus. These sound like interns. If you just start with, oh, well, it's just gonna run as me. That's gonna end poorly. Yes. You're going back to first principles, but you also have to go even a little deeper and start to redefine, what does containerization even mean for you? The issue was never that the CISO didn't know it was broken. The issue and the difficult part of being a CISO was knowing what to fix. Because you had a finite resource, which was a programmer, and now that seems that the math is gone. We're only three weeks out from NASA's supply chain chain, but Wait. What's the NASA's supply chain thing? Oh, man. When Open Claw first appeared inside Microsoft, the security team's reaction was familiar. How do we ban this? The next question turned out to be much more important. How do we make it work? In this episode from Black Hat, a 16 Joel De La Garza sits down with Microsoft gaming deputy CISO Aaron Zollman to talk about securing AI agents that can access data, use tools, write code, and act on behalf of employees. They discuss why agents need their own identities, what air gapped means when a model can find unexpected paths to the Internet, and why securing this new generation of software requires both new controls and some very old security fundamentals. They also explore a bigger shift happening inside security teams. As AI becomes impossible for companies to ignore, the CISO's job is increasingly not just to prevent risk, but to figure out how to safely say yes. So today, we've got Aaron Zollman from Microsoft, a deputy CISO over there responsible for a whole lot of different things. And you've been at the forefront, like everyone, I guess, at this point, dealing with AI. AI rollout into an environment, and you're probably at a company that's leaning in a lot more to AI than probably most companies, and everybody is leaning in significantly. So thank you so much for joining. We'd love to talk, like the last couple weeks it's funny. It's like weeks have become like dog years. Right? It's like every week is seven weeks in old world. Yeah. The last couple weeks have been very focused on the top story has been that the AI models are hacking. And we saw there was a disclosure from OpenAI that they were doing …