About this episode

Jeremy Snyder discusses the security implications of AI agents and how organizations can manage their attack surface.

While LLMs and agents are new to appsec and everyone else, a lot of AI security requirements translate to well-known API security requirements. Jeremy Snyder helps us frame the OWASP LLM Top 10 into five layers in order to help orgs understand and prioritize their attack surface. A lot of orgs don't have to deal with model-specific threats or building their own GPU architecture, but every org adopting LLMs and agents should be aware of how those agents are being invoked and the output those agents are producing. That awareness of input and output helps in identifying and mitigating prompt injection attacks, ensuring agents are working within their expected boundaries, and taming token budgets. Resources: https://genai.owasp.org/llm-top-10/ https://github.com/rtk-ai/rtk https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-caching.html https://www.firetail.ai/blog/beyond-the-spectacle-rsac-2026-and-the-5-layers-of-ai-security Show Notes: https://securityweekly.com/asw-391

People in this episode

Guest: Jeremy Snyder

Topics covered

• AI security
• LLM
• API security
• prompt injection attacks
• attack surface
• OWASP LLM Top 10

Keywords

• AI security
• LLM
• OWASP
• prompt injection
• API security
• attack surface
• token budgets

Mentioned in this episode

Organizations: OWASP, AWS, Firetail

Products: LLM, GPU, AI Agent

More episodes of Security Weekly (Download Only)

• LegacyHive, ACR Stealer, Hugging Face, Route 53, and Kieran Human from Threatlocker - Kieran Human - SWN #600 · July 21, 2026 · 37 min
• MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392 · July 21, 2026 · 1h 12m
• AI Security at Scale, CMMC phase II paused, and the Weekly Enterprise News - Keith Hollender - ESW #468 · July 20, 2026 · 1h 42m
• M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More - SWN #599 · July 17, 2026 · 34 min
• 1999 Called and It Wants It's Exploits Back - PSW #935 · July 16, 2026 · 2h 12m
• Take Back Control as Enterprises Struggle to Incorporate Risks They Don't Understand - Ben Lipczynski - BSW #456 · July 15, 2026 · 55 min

Explore listener stats, chart rankings, contacts and more on the Security Weekly (Download Only) podcast page.