The session’s core message is that agentic AI should be secured using lessons from insider risk: once AI systems receive identity, access, tools, and autonomy inside an organization, their failure modes can resemble the risks created by trusted employees. The speakers opened with a recent AI-driven ransomware investigation handled by their computer emergency response team. They found Claude-generated reports and even an authorization letter giving the attacker apparent permission from the organization. Unlike a linear ransomware attack through one route, this case involved multiple attack paths running in parallel across cloud environments, applications, identities, and databases. More than 95% of the attack was attributed to AI, included over 50 victim-specific scripts, and unfolded in hours.