AI Behaving Badly | Episode 73
Unable to add items
Add to basket failed.
Add to wishlist failed.
Failed to remove from Wish List.
Adding to library failed
Unable to follow podcast
Unable to unfollow podcast
AI Behaving Badly | Episode 73
-
Narrated by:
-
By:
In this episode of BHIS Presents: AI Security Ops, the team digs into some of the strangest recent examples of AI behaving badly.
An AI agent finds a way around its sandbox using DNS. Malware asks four different AI models what it should do next. Attackers overwrite an AI agent’s “soul.” And a placeholder domain buried across GitHub becomes an unexpected security risk.
Funny stories? Absolutely. But underneath them are some very familiar security problems.
We dig into:
- An OpenAI agent finding an unexpected path out through DNS
- Whether a 2.5-hour response is fast enough in the age of AI
- CLOSEDQUORUM malware using multiple AI models to make decisions
- Why outbound AI API traffic could become a useful detection signal
- The Carbonado botnet rewriting an agent’s SOUL.md instructions
- The risks of exposed Docker daemons
- How an unreserved placeholder domain can become an attack vector
- Why AI agents make old security mistakes more consequential
The takeaway: none of these techniques are particularly new. DNS tunneling, exposed services, compromised configuration files, and untrusted domains have existed for years. AI just gives attackers — and occasionally AI agents themselves — new ways to find and exploit those boring gaps at greater speed and scale. 2026-09-29-News (1).docx
- (00:00) - Intro: AI Behaving Badly
- (01:19) - The Agent That Phoned a Friend
- (04:28) - Is a 2.5-Hour Response Fast Enough?
- (09:25) - More OpenAI Agent Escapes and Security Lessons
- (14:32) - Malware by Committee: CLOSEDQUORUM
- (23:27) - Somebody Overwrote the Agent’s Soul
- (26:54) - Why Exposed Docker Is So Dangerous
- (30:22) - The Placeholder Domain That Bit Back
- (32:07) - Final Takeaways: Old Problems, AI Speed and Scale
Click here to watch this episode on YouTube.
Creators & Guests
- Derek Banks - Host
- Ethan Robish - Guest
- Bronwen Aker - Host
- Brian Fehrman - Host
Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/
Antisyphon Training
https://www.antisyphontraining.com/
Active Countermeasures
https://www.activecountermeasures.com
Wild West Hackin Fest
https://wildwesthackinfest.com
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
https://poweredbybhis.com
Click here to view the episode transcript.
