AI Summary
→ WHAT IT COVERS A16z's Joel De La Garza speaks with Nick Warner of Neo and Max Pollard of Kotul at Black Hat about how AI agents create a security blind spot: existing tools were built to detect humans and malware, and AI agents are neither, forcing a fundamental rethink of enterprise defense strategies. → KEY INSIGHTS - **AI Guardrail Conflict:** Security teams triaging incidents ask models the same questions attackers do — "what's vulnerable, how do I exploit it?" — triggering refusals that block defenders. Blue teams need fallback routing to open-weight models like GLM or Qwen that lack commercial guardrails, making model flexibility a core operational requirement, not a preference. - **Agentic Software Scale:** 50% of enterprise applications will be agentic by end of 2025, inside environments averaging 6,000–7,000 unique software instances. Security teams cannot vet each one's backend model, guardrails, or data access. Defenders must shift focus from perimeter control to visibility into what each agentic process is installed to do and what it actually does. - **Behavioral Detection Breakdown:** Behavior-based security tools assume defenders can define what normal software looks like — agentic software invalidates that assumption entirely. Because AI agents take unpredictable paths to complete tasks, teams cannot tune detection thresholds up or down effectively. The required shift is toward pre-execution governance: controlling what software can do before it runs. - **Honeypot False Positive Problem:** Deception-based defenses — previously considered high-precision — now generate noise when AI agents autonomously discover planted credentials and attempt to use them legitimately. One deployment saw customer alert rates shift from near-100% true positives to high false-positive volumes overnight. Teams relying on honeypots need to audit whether agentic processes have access to those environments. - **Signature Detection Obsolescence:** Static detection rules and signature-based approaches are no longer viable as a primary defense layer against AI-driven attacks. Targeted rules still serve narrow use cases — flagging admin access to specific production services — but broad signature coverage will degrade regardless of tuning investment. Teams should reallocate resources toward dynamic, model-assisted detection pipelines. → NOTABLE MOMENT Nick Warner noted that building Neo's software taxonomy five to seven years ago would have required hundreds of threat researchers and years of work. Using AI agents, the same taxonomy was completed in weeks — illustrating how defenders now access capabilities previously unavailable at any budget. 💼 SPONSORS None detected 🏷️ AI Security, Agentic Software, Endpoint Defense, Behavioral Detection, Enterprise Cybersecurity