In this episode of BHIS Presents: AI Security Ops, the team digs into some of the strangest recent examples of AI behaving badly.

An AI agent finds a way around its sandbox using DNS. Malware asks four different AI models what it should do next. Attackers overwrite an AI agent’s “soul.” And a placeholder domain buried across GitHub becomes an unexpected security risk.

Funny stories? Absolutely. But underneath them are some very familiar security problems.

We dig into:
- An OpenAI agent finding an unexpected path out through DNS
- Whether a 2.5-hour response is fast enough in the age of AI
- CLOSEDQUORUM malware using multiple AI models to make decisions
- Why outbound AI API traffic could become a useful detection signal
- The Carbonado botnet rewriting an agent’s SOUL.md instructions
- The risks of exposed Docker daemons
- How an unreserved placeholder domain can become an attack vector
- Why AI agents make old security mistakes more consequential

The takeaway: none of these techniques are particularly new. DNS tunneling, exposed services, compromised configuration files, and untrusted domains have existed for years. AI just gives attackers — and occasionally AI agents themselves — new ways to find and exploit those boring gaps at greater speed and scale. 2026-09-29-News (1).docx

(00:00) - Intro: AI Behaving Badly (01:19) - The Agent That Phoned a Friend (04:28) - Is a 2.5-Hour Response Fast Enough? (09:25) - More OpenAI Agent Escapes and Security Lessons (14:32) - Malware by Committee: CLOSEDQUORUM (23:27) - Somebody Overwrote the Agent’s Soul (26:54) - Why Exposed Docker Is So Dangerous (30:22) - The Placeholder Domain That Bit Back (32:07) - Final Takeaways: Old Problems, AI Speed and Scale
Click here to watch this episode on YouTube.

Creators & Guests Derek Banks - Host Ethan Robish - Guest Bronwen Aker - Host Brian Fehrman - Host


Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/

Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com

Click here to view the episode transcript.

Rss
Podden och tillhörande omslagsbild på den här sidan tillhör Black Hills Information Security. Innehållet i podden är skapat av Black Hills Information Security och inte av, eller tillsammans med, Poddtoppen.