AI agents can independently discover and install new tools, but the emerging ecosystem of AI Skills and MCP servers lacks many of the trust and security controls applied to traditional software. Michael Leland will discuss Island research uncovering thousands of malicious repositories, widespread security flaws across MCP servers, and a new attack technique called “AgentBaiting,” in which attackers manipulate agents into finding and recommending malware to users. The conversation will explore how enterprises can govern AI capabilities without slowing adoption.
Segment Resources:
https://www.island.io/blog/agentbaiting-how-800-fake-ai-skills-and-mcp-servers-delivered-malware
For more information about Island's research, please visit: https://securityweekly.com/islandbh
- 0:00 - – Introduction: AI Agents and the New Supply Chain Risk
- 0:53 - – How AI Agents Change Software Supply Chain Attacks
- 03:44 - – Why AI Agents Create New Trust Problems
- 05:20 - – Defending Against Agent-Based Attacks and Shadow AI
- 07:25 - – AI Governance, Visibility, and Risk Assessment
- 09:07 - – MCP Security, Token Brokering, and Access Controls
- 11:20 - – Runtime Security for AI Agents and Reducing Blast Radius
- 12:43 - – Building an Agentic Control Plane for Enterprise AI
- 15:03 - – Simplifying AI Security Management with Unified Policies
- 16:57 - – Vibe Coding, AI Applications, and Security Guardrails
- 17:24 - – Closing Thoughts from Black Hat 2026
Michael Leland brings over 30 years of data networking, operations, and cybersecurity domain expertise. He formerly served as Head of Technical Marketing and Chief Cybersecurity Evangelist at SentinelOne where he was responsible for messaging and strategic development of their XDR product roadmap as well as the identity security portfolio. Prior to SentinelOne, he held the title of Chief Technical Strategist for McAfee. Michael was the co-founder and CTO of NitroSecurity – later acquired by McAfee – where he was responsible for developing and implementing their overall SIEM technology vision and roadmap and has held senior technical management positions at Cabletron and Avaya.
