AI Behaving Badly | Episode 73

In this episode of BHIS Presents: AI Security Ops, the team digs into some of the strangest recent examples of AI behaving badly.

An AI agent finds a way around its sandbox using DNS. Malware asks four different AI models what it should do next. Attackers overwrite an AI agent’s “soul.” And a placeholder domain buried across GitHub becomes an unexpected security risk.

Funny stories? Absolutely. But underneath them are some very familiar security problems.

We dig into:

- An OpenAI agent finding an unexpected path out through DNS

- Whether a 2.5-hour response is fast enough in the age of AI

- CLOSEDQUORUM malware using multiple AI models to make decisions

- Why outbound AI API traffic could become a useful detection signal

- The Carbonado botnet rewriting an agent’s SOUL.md instructions

- The risks of exposed Docker daemons

- How an unreserved placeholder domain can become an attack vector

- Why AI agents make old security mistakes more consequential