Signal//Noise #037 - Agents Won't Keep You Safe

Signal//Noise #037 - Agents Won't Keep You Safe NCSC says agents won't keep you safe: why defensive AI can't match attackers, and what you can safely automate. EPISODE OVERVIEW The UK's National Cyber Security Centre argues that defenders cannot deploy agentic AI the way attackers can. Offensive work has clear success states that automation handles well. Defensive work is an organizational problem where a wrong automated action can harm the business as badly as an attack. Chris Loehr and Bob Miller break down the NCSC guidance, including its five-dimension scorecard for deciding what you can safely automate, and compare the same article across five AI engines: Claude, ChatGPT, Perplexity, Grok, and Gemini. One engine never read the source and still produced the most confident, and the least accurate, report. WHAT WE COVER \- The offense versus defense asymmetry, and Halvar Flake's maxim that offensive problems are technical and defensive problems are political \- The three principles behind defensive automation that already works, and why agentic AI strains all three \- The NCSC five-dimension risk scorecard: potency, scope, criticality, rollout confidence, and recoverability \- Cyber Shield, the NCSC and DSIT national blueprint for agentic cyber defence, and the research gap that has to close first \- Where five AI engines agreed, where they drifted, and the one that reconstructed the article without reading it \- A practical starting point for teams: what to automate first and what to keep a human on KEY TAKEAWAYS \- Automate the advice, keep a human on the action, and earn autonomy as risk becomes provable \- Score any state-changing automation on the five dimensions before you enable it, and treat unknown criticality as high risk \- Do not wait for national agentic defence to arrive; keep hardening the traditional way ABOUT THE SHOW Signal // Noise is a cybersecurity podcast where Chris Loehr and Bob Miller break down the latest security incidents, threats, and trends. Each episode runs the same incident through five leading AI analysis tools (Claude, ChatGPT, Perplexity, Grok, and Gemini) then compares results live on air. Subscribe for weekly analysis that helps security professionals and business leaders stay ahead of emerging threats. RESOURCES \- Original article: https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically \- Cyber Shield blueprint (NCSC/DSIT): https://www.ncsc.gov.uk/blogs/cyber-shield-the-path-to-an-agentic-ai-future-for-cyber-defence \- CETAS Autonomous Cyber Defence: https://cetas.turing.ac.uk/publications/autonomous-cyber-defence-autonomous-agents \- Supporting files: https://tinyurl.com/C-B-QuickPicks TAGS cybersecurity, infosec, agentic AI, AI security, cyber defense, NCSC, Cyber Shield, autonomous agents, SOC, security operations, CISO, threat intelligence, AI agents, prompt injection, SOAR, Claude AI, ChatGPT, Gemini, Perplexity, Grok