Palo Alto Networks EVP: Securing AI Agents in the Enterprise
Enterprises are running more AI agents than their security teams realize, and attackers only need to be right once. Anand Oswal, EVP of Network Security at Palo Alto Networks, explains how to secure agents across four surfaces: enterprise, SaaS, endpoints, and the browser. With host Michael Krigsman, he covers shadow agent discovery, MCP and browser risks, prompt injection, agent identity, and why a unified platform beats a stack of point products.
YOU’LL DISCOVER
✅ The four agent surfaces every CISO must secure at once: enterprise, SaaS, endpoints, and the browser
✅ Why discovery comes first: you cannot secure agents, models, tools, and plugins you cannot see
✅ The Palo Alto Networks finding that one third of public MCP servers carry takeover level vulnerabilities
✅ How vibe coding agents demand privileged access to local files, terminals, and cloud credentials
✅ How browser agents inherit your session and cookies and can perform identity impersonation
✅ Runtime threats to know: prompt injection, memory poisoning, tool misuse, and model DoS
✅ How MCP and A2A protocols expand the attack surface, and why a centralized AI gateway anchors identity, runtime, and observability controls
✅ The case for zero trust, an AI-driven SOC, and one unified platform over point products, and where Prisma AI fits
⏱️ TIMESTAMPS
0:00 Introduction
0:22 Agent memory poisoning and tool misuse
0:59 Discovering shadow agents across four surfaces
2:32 Vibe coding agents and MCP risk
4:46 Browser agents and session misuse
6:20 Runtime threats and prompt injection
7:17 Agent-to-agent protocols and attack surface
8:04 Agent identity and the control plane
9:16 Centralizing control at the AI gateway
10:23 Zero trust and an AI-driven SOC
11:29 One platform, not point products
Subscribe for weekly conversations with the business and technology leaders shaping the enterprise.
Get the CXOTalk newsletter: https://newsletter.cxotalk.com
Show notes, transcript, and summary: https://www.cxotalk.com/episode/palo-alto-networks-evp-securing-ai-agents-in-the-enterprise
Episode 924
#CXOTalk #EnterpriseAI #CIO #AIGovernance #AgenticAI #IBM #DigitalTransformation #AIStrategy #AILeadership
YOU’LL DISCOVER
✅ The four agent surfaces every CISO must secure at once: enterprise, SaaS, endpoints, and the browser
✅ Why discovery comes first: you cannot secure agents, models, tools, and plugins you cannot see
✅ The Palo Alto Networks finding that one third of public MCP servers carry takeover level vulnerabilities
✅ How vibe coding agents demand privileged access to local files, terminals, and cloud credentials
✅ How browser agents inherit your session and cookies and can perform identity impersonation
✅ Runtime threats to know: prompt injection, memory poisoning, tool misuse, and model DoS
✅ How MCP and A2A protocols expand the attack surface, and why a centralized AI gateway anchors identity, runtime, and observability controls
✅ The case for zero trust, an AI-driven SOC, and one unified platform over point products, and where Prisma AI fits
⏱️ TIMESTAMPS
0:00 Introduction
0:22 Agent memory poisoning and tool misuse
0:59 Discovering shadow agents across four surfaces
2:32 Vibe coding agents and MCP risk
4:46 Browser agents and session misuse
6:20 Runtime threats and prompt injection
7:17 Agent-to-agent protocols and attack surface
8:04 Agent identity and the control plane
9:16 Centralizing control at the AI gateway
10:23 Zero trust and an AI-driven SOC
11:29 One platform, not point products
Subscribe for weekly conversations with the business and technology leaders shaping the enterprise.
Get the CXOTalk newsletter: https://newsletter.cxotalk.com
Show notes, transcript, and summary: https://www.cxotalk.com/episode/palo-alto-networks-evp-securing-ai-agents-in-the-enterprise
Episode 924
#CXOTalk #EnterpriseAI #CIO #AIGovernance #AgenticAI #IBM #DigitalTransformation #AIStrategy #AILeadership
Loading content...
Read the full transcript
Matterfact has every podcast on Apple Podcasts and Spotify: 700K+ channels, 120M+ episodes.
The candid version is on a podcast,
not the earnings call.
Matterfact turns the conversations your coverage is already having into a searchable, citable record — across every episode, not just this one.