AI Agents Will Use Every Permission You Give Them | Guest: Dan Barahona
Source: YouTube · GRC Engineering Club · published Oct 3, 2026 · 50:44
Dan Barhana, founder of AI Security University (formerly APIsec University), explains how AI agents are transforming API security—and why he gives away all his AI security courses for free 0:32.
Key Takeaways:
• APIs are "the glue that makes the internet work," and AI agents have created a "hyper API world" by consuming them in ways humans never did 1:42
• Govern agents like digital employees—onboarded, credentialed, monitored, even "fired"—but more tightly, since they lack judgment and will exploit every permission granted 6:31
• Prompt-based guardrails can't work because AI is intentionally non-deterministic; you need physical impediments like kill switches and rollbacks 11:47
• Courses are free, funded by corporate training, with community volunteers building most content 15:58
• Most agentic AI sits at "level 3" autonomy—the most dangerous—lacking Waymo-level governance and failsafes 43:31
• Accountability stays human: Dan accidentally published an AI-hallucinated bio, learning that AI output is still your output 38:45
Dan argues AI surpasses PCs, the internet, or mobile as a disruption—so learn it, secure it, and share knowledge, because cybersecurity is a community mission where we win together 33:19.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome friends to another scintillating edition of the anti-checkbox podcast. I always say I do this really to talk to cool people and this is one of the ones where I'm like yo there's you know very very excited had the date circled very fired up we have the and I say this completely free of iron the Dan Barhana. Dan let the folks know who you are. Oh man, thank you for that warm introduction and the honor is mine honestly. Um, yeah, I'm Dan Barona. I'm the founder of AI Security University. It's a site I launched a couple of months ago and it's going pretty well. It's quite popular. You might know me or your audience might know me as the founder of APIC University. So, similar thing. I started about four years ago and we really wanted to tackle API security. I I've moved on from there an…