Craig Thomas

speaker

382 appearances 2 recordings 1 series first heard Jun 2026 last heard 8 Jul

Craig Thomas’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 2 in all, peaking in Jul 2026 with 1.

Appearances

newest first · ▶ plays the moment

Code Story | Startup Podcast for CTOs, CEOs and Technical Founders · The AI Control Loop: When AI Goes Rogue - with Craig Thomas of Wallarm · 24 Jun 2026 podcast

But how do we better discover, observe, enforce and govern that and do it at the speed of AI, right?

And so some of those are starting with rogue.

And to your question, rogue doesn't necessarily mean malicious.

And a lot of times it isn't malicious.

Most common Roeg AI scenarios we're seeing are similar to what we saw in the API world, right?

They're not attacks, they're legitimate systems, but they're behaving outside their intended boundaries.

So their intent was fine, but the outcomes weren't from that perspective.

We kind of look at that and I'll look at that from three various categories.

Unsanctioned AI, that AI that nobody approved it.

It's running in your environment, kind of gets into shadow a bit.

Unmonitored AI, so we have AI that no one's watching at all and then

Unpredictable AI.

So that gets in a bit of the point to the rogue.

It was approved and watched, but it's doing things no one anticipated, whether those be from the business side or the security side.

So that you've got agents emerging kind of is that biggest emerging category because they're doing things on behalf of users and all.

So rather than just a specific question to a chat bot and a specific answer, now it's going and taking actions on that behalf and that's introducing even more rogue actions at scale.

The operating definition I like to use is it's working as a design, but not as intended.

And so this goes back to computer science 101, right?

Is we're capturing a developer or a designer designs it one way, but then it's being used for other ways, whether maliciously by bad actors or just from the software responding different than you expect.

But one of the most common ways is prompt injection.

Showing 201–220 of 382 · page 11 of 20