At OWASP Global AppSec 2026, Scott Clinton, chair of the OWASP GenAI Security Project, joins CyberRisk TV to discuss the project’s expanding work to secure AI applications and agents. Clinton explores how agents can inherit user permissions and introduce insider risks, why security fundamentals and governance remain essential, and how the community is translating research into practical guidance. He also highlights new data security resources, the project’s MCP server, and opportunities for practitioners to contribute to the future of AI security.
This segment is sponsored by The OWASP GenAI Security Project. Visit https://securityweekly.com/owasp to learn more about them!
- 0:00 - Introduction to OWASP Global AppSec 2026
- 0:36 - The Rapid Evolution of Generative AI Security
- 01:02 - Expanding the OWASP Gen AI Security Project
- 02:32 - Research Council and Academic Partnerships
- 03:40 - Key Initiatives and Community Contributions
- 05:46 - Practical AI and Data Security Guidance
- 06:10 - Introducing the OWASP Gen AI Security MCP Server
- 08:02 - Applying Traditional Security Practices to AI
- 09:21 - How to Get Involved in the OWASP Community
- 11:45 - AI Agents as Insider Threats
- 12:31 - Understanding Agent Permissions and Inherited Credentials
- 15:19 - What's Next for the OWASP Gen AI Security Project
- 16:29 - Where to Find OWASP Gen AI Security Resources
Scott Clinton is Chair of the OWASP GenAI Security Project, leading strategy, operations, and growth. A 25+ year industry executive and 20-year open source leader, he has built and scaled open source businesses and industry consortiums across security, DevOps, AI/ML, and data markets. Scott is a published author and research lead, including the Gen AI Security Landscape and AI Security Center of Excellence Guide. Scott also holds multiple board and advisory roles with technology companies helping guide organization scale and growth.
