Ironbridge CISO Consulting's Jim Almerico on the end of AI euphoria and the flaws emerging

Oh, right.

Yeah.

The secure by design and all that.

So you just mentioned something interesting too, the data underneath and, uh, you know, there's different elements of, you know, data as it relates to AI and, uh, one of the interesting things I've been looking at is MCP servers and how th- they are querying data.

And interesting conversation I had this week was the, the lessons learned when everyone ran to the cloud and they left their S3 buckets open, and they said, "Whoops, guess we gotta configure this stuff." And now there's all these very mature hardening guides and-

That was my other example.

Uh, IoT internet and, and the rush to the cloud.

Thank you for that.

Yeah.

Yeah.

Uh, I'm just curious, how much of that have you seen or are you already hearing where, uh, there just hasn't been proper, uh, deployment? And it's not even anything like a crazy AI attack, it's just something simple like misconfigurations.

Uh, people are just misconfiguring it.

Uh, are you seeing that or hearing that yet?

Man, the, you know, misconfigurations, I mean, that's from the dawn of technology.

Right.

Yeah.

[laughs]

Those pesky humans involved and it's misconfigured and, um...

But, uh, I was just reading, um, and I, I won't profess that I, I have dug deep into it because it was just another, "Ay, ay, ay," um, where you mentioned MCP, and that is, you know, basically, you know, the API type connector and it's, and it's encrypted and-- but it's sending encrypted blocks basically to the third-party app.

But what researchers discovered is, well, if let's say Claude is running on the other side of that API, it can read that package and maybe its purpose is something else, and all of a sudden that data is no longer protected as it was intended to be on the other side because Claude goes, "Oh, I know that," and can open it.

And I don't know if you've heard that, and I don't wanna, uh, misspeak, but that was another thing where MCP and API are those safe ways to interact with third parties, and it's like, that's not true, apparently.

So it's like, what are we gonna do? You know? I, I, I wish I had the answer.

I wish I could tell your users right now or viewers, um, this is, this is what we need to do for that instance.

But it's in that painful phase of finding all the problems.

We're in that phase.