Shadowing Practice: Why AI Agents Are Becoming a Security Risk for Businesses - Learn English Speaking with Video

Choose a practice mode

Each mode opens a full-screen practice room.

145 sentences
If sentences are too short or too long, click Edit to adjust them.
1
AI agents can make active decisions.
2
Unlike passive chatbots, the autonomous software run tasks and execute workflows with minimal or no human supervision.
3
A lot of these agents are doing very specific things, which makes them useful.
4
But that autonomy has seen AI agents conceal activity and even go rogue, with the number of incidents involving these agents becoming a growing security concern.
5
OpenAI says two of its AI models went rogue and tacked into open -source AI platform HuggingFace last week.
6
It had an objective, but it achieved an objective by any means possible.
7
And that's an interesting scenario.
8
The HuggingFace incident, which happened during internal testing with reduced safeguards, was one of several training exercises gone wrong.
9
Yet, AI agents have already been deployed at a growing scale across businesses.
10
The use of agentic AI has spread across companies.
11
An August 2026 McKinsey survey shows that AI agent adoption stayed mostly flat for small companies between 2025 and 2026.
12
But the share of billion -dollar corporations scaling agents jumped from 27 % to 40 % in just one year.
13
And that's not without issues, too.
14
Reports of AI agents causing disruption inside businesses are multiplying.
15
We had a routine AI coding agent, and then it deleted important customer information, our system of record.
16
We thought we were toast.
17
As more and more of these agents are deployed within organizations, there are a ton of risks that come with that.
18
What happens if it does something that's detrimental to your business?
19
According to market .us forecasts, the global AI agent market is projected to reach $139 billion by 2033,
20
nearly 13 times the 2026 level, as individuals and companies across the world are hoping to maximize productivity, save time and reduce costs.
21
All the tech companies have been talking about agents.
22
What you're seeing more and more of now is eight specific types of agents being deployed within organizations.
23
So if you're in finance or law or some of these other areas, it might be data input, it might be some sort of analysis.
24
AI agents can also be used for HR purposes, with the help of AI agent avatars,
25
allowing for pre -screening of candidates and scheduling further interviews without a human in the loop.
26
And businesses have scaled agentic AI for customer service, which can also act as booking agents, searching flights and hotels for employees,
27
and, if allowed, can book the trip themselves.
28
But in recent examples, AI agents went beyond their original tasks and misbehaved or went rogue.
29
So what's the difference?
30
A rogue AI is directly going against instructions or against the interests of the person operating that AI.
31
So it's not aligned to what the operator of the AI wants.
32
When you think about a misbehaving agent, It's more of the idea that the agent does something that it wasn't supposed to,
33
but it wasn't necessarily trying to defy the instructions directly.
34
So let's say the agent's making a purchasing decision on your behalf,
35
but it spends a little bit more than what you were expecting or it buys the wrong product.
36
It's not necessarily defying the instructions, but it's got something wrong.
37
In March 2026, IBM's VP of Software Cybersecurity reported a customer case where an autonomous customer service agent began approving refunds outside policy guidelines.
38
The agent optimized to chase good reviews, and since the customer promised it positive feedback against the refund, the agent complied.
39
Another way agents could misbehave is when given excessive privileges and broad permissions.
40
That's what happened to PocketOS, a car rental software platform, in April 2026.
41
I jumped in to see what my agent was working on.
42
I tasked it the night before to work on our staging environment.
43
And so I was just reviewing its work and getting frustrated with it
44
because it kept getting confused on what it was working on
45
and then i said hey you need to go clean up our staging database with these credentials
46
that i've given you for this task
47
and then as i'm watching it work i'm getting notifications
48
and then at
49
that point it was a pure on scramble the agent used
50
by pocket os had found a forgotten overly permissive api token
51
a digital master key in an unrelated file what was deleted was our entire production database
52
which was six years of history on this particular software platform
53
so every rental every rental record every customer record at
54
that point we were very concerned
55
that it was going to be the end of us or
56
if we weren't able to work with our service provider to get a restoration
57
they were able to use a system level we only lost 45 minutes of data
58
and we got a full restoration back there are many opportunities with deploying ai agents across your enterprise
59
but we must also be concerned about the risks an agent for example could be making a decision for
60
which you are then liable as an as a company as
61
an employer as a customer service provider the responsibility lies with us choosing to use
62
that tool and using it in a way that could have somehow caused that
63
So we're the first.
64
liability.
65
But another analysis I've used, if a pilot has a pilot error and then all the safety systems behind it fail and then the plane crashes,
66
it becomes less about the pilot error and it becomes more of a conversation around the safety system.
67
Pocket OS service provider
68
Railway acknowledged the vulnerability, adding that its infrastructure operated as configured.
69
The liability, like where does that fall?
70
And it could follow a lot of areas, right?
71
There's obviously the operator, the person who's choosing to use it, but those tools are a black box.
72
I does that make them liable for its actions?
73
It becomes a very gray area.
74
Companies are grappling with the legal questions raised by AI agents.
75
Currently in England and Wales, for example, the UK Jurisdiction Task Force has concluded
76
that AI agents cannot be held liable as legal personalities for the actions they take on one's behalf.
77
If a corporation deploys software and says, you must use my AI agent, and that software doesn't do what company wants, company's responsible for that outcome.
78
They've chosen to put something into the stream of commerce.
79
They're responsible.
80
When Air Canada chose to use software to represent its company
81
and a user interacted with the software and it seemed to have authority and they said, oh, well, that's not our real thing.
82
The Canadian judge was fantastic at saying, rubbish, you're responsible.
83
No, it's not a separate legal entity.
84
You chose to use this thing as a corporate entity.
85
That's your fault.
86
In the U .S., there is no comprehensive federal AI liability law.
87
Instead, existing contract, tort, consumer protection, sector -specific, privacy, computer access,
88
intellectual property, and antitrust laws may determine responsibility.
89
Now, the interesting question that comes up then is, we've bought this thing from someone else.
90
The question will become, who's doing the tuning of that?
91
The problem is, that agent is structured through rules that I didn't get to build.
92
What type of law will affect this?
93
It will be a combination depending on the facts of liability law, it might import ideas from agency law, contract law, absolutely.
94
So we're going to get back into an ongoing problem, which is terms of service.
95
AI can make mistakes.
96
And what they're hoping to say is, that's your problem.
97
So far, software companies have been very much able to push risk onto the user.
98
More and more, the onus will be on the software provider to do a much better job about product safety,
99
viability, fundamentally what should be reasonable for the software to do.
100
Meanwhile, cybersecurity firms are working with businesses to limit the consequences of erratic behavior by AI agents.
101
In the next three years, agentic and AI security solutions could reach 15 % of cyber budgets with a shift toward identity and access management,
102
governance and data.
103
A lot of focus in the industry is on protecting model, protect the input, stop someone trying to use it for a bad purpose.
104
But we say you've also got to protect the identities it uses to access your data and system.
105
When a business rolls out an AI agent, it needs to onboard it, like a new digital worker.
106
While the agent is only code, it still requires authentication, authorization and guardrails to achieve its goal.
107
In other words, the AI agent receives an identity with access privileges.
108
Today, non -human identities, digital identities assigned to AI agents, bots, devices or services, largely outnumber human identities.
109
In its 2026 identity security landscape study, cybersecurity firm Palo Alto Networks puts the ratio at 109 machine identities per human,
110
including 79 AI agent identities across surveyed companies.
111
When we think about identity for the enterprise, some companies are still catching up with the new requirements because of the threat landscape.
112
The speed with which AI can operate from an attack perspective is significantly quicker than human -operated attacks.
113
What if someone is able to change where payments are going for your company?
114
Identity verification is crucial in sectors such as finance and retail, whether customers are using an AI agent to shop on a website
115
or an employee is using the corporate card to purchase an item.
116
So it's not just you saying I've got a credential, I've got a username and password, it's me
117
but we're also saying let's verify that is the context of
118
that correct does it look unusual is it risky is it out of character for what you normally do
119
and then applying controls from there companies should absolutely focus on identifier
120
and access management frameworks
121
we're seeing new frameworks evolve like know your agent these are all exactly right what our research shows is
122
that the management systems
123
that are in place for managing agents have significant gaps in terms of both their real -time monitoring
124
and their after -the -fact understanding of behavior.
125
One of these areas, for example, that we identified is exactly around agent ID.
126
So we really don't know whether an ID is consistent throughout a series of different decision -making processes.
127
The second thing we determined was whether The, what we call, chain of thought reasoning or note -taking
128
that the agent deploys throughout the process is really an accurate way of understanding how that decision -making process happens.
129
For businesses that have already deployed AI agents across their infrastructure, one question remains, how to deploy agents safely?
130
There are three key actions that need to happen immediately in order for companies to feel safe and secure about deploying agents.
131
The first is what happens with every technology.
132
We just need good standards.
133
Secondly, we need to do additional research.
134
And then thirdly, we need governments and policy makers, regulators to better understand how the technology works.
135
If you really care about what you're using, you need a dummy copy to let the agent work on
136
and you need to have almost a whole separate thing where it cannot get to it.
137
It is a wild learning experience.
138
Still super bullish on AI.
139
It is an incredibly valuable tool and you will 10x your output.
140
You just have to take security seriously and you have to be prepared.
141
The cyber incidents we've seen with some of these AI agents has definitely put companies with a little bit more caution now.
142
I don't think that's going to stop their interest in the technology,
143
but the C -suite at most organizations could be pretty cautious around some of this technology.
144
They don't want to jump into something they don't really have a grasp on
145
or that has the ability to damage their business, their share prices and their earnings.

Download App

Everything you need to speak fluently

AI PronunciationScore every sentence
IPA PracticeMaster every sound
VocabularyBuild your word bank
Vocab GameLearn while playing

Same Channel

FOR YOU

Recommend Video

Vocabulary and speaking notes for this lesson

This speaking lesson is built on the video “Why AI Agents Are Becoming a Security Risk for Businesses”. The speaker keeps coming back to these words: agent, software, companies, customer. This video has 145 sentences and 1964 words to shadow. The speech runs for 11:25. The speaker talks at a natural 172 words per minute, close to everyday conversation. 82% of the words are among the 3,000 most common in English; the rest is worth studying before you start.

Key vocabulary in this video

15 words from the video worth learning, with pronunciation and meaning:

WordPronunciationMeaning
deploy verb/dɪˈplɔɪ/To prepare and arrange (originally military unit or units, i.e., to array troops) for use.
liability noun/laɪəˈbɪlɪti/An obligation, debt or responsibility owed to someone.
provider noun/pɹəˈvaɪ.də(ɹ)/One who, or that which, provides a service, commodity, or the means for subsistence.
rogue noun/ˈɹoʊɡ/A scoundrel, rascal or unprincipled, deceitful, and unreliable person.
instruction noun/ɪnˈstɹʌkʃən/The act of instructing, teaching, or providing with information or knowledge.
rental noun/ˈɹɛntəl/Something that is rented.
liable adjective/ˈlaɪ̯əbəl/Bound or obliged in law or equity; responsible; answerable.
necessarily adverb/ˌnɛs.əˈsɛɹ.ə.li/Inevitably; of necessity.
pocket noun/ˈpɑ.kɪt/A bag stitched to an item of clothing, used for carrying small items.
infrastructure noun/ˈɪnfɹəˌstɹʌkt͡ʃə/An underlying base or foundation for a building, organization, or system.
behalf noun/bɪˈhæf/The interest, benefit, or wellbeing of someone or something.
enterprise noun/ˈɛntəˌpɹaɪz/A company, business, organization, or other purposeful endeavor.
landscape noun/ˈlan(d)skeɪp/A portion of land or territory as defined by its landform, its geographical (and architectural) features.
objective noun/ɒbˈd͡ʒɛk.tɪv/A material object that physically exists.
input noun/ˈɪnpʊt/The act or process of putting in; infusion.

Phrasal verbs you will hear

WordMeaning
clean up verbTo make an area or a thing clean; to pick up a mess; to tidy.
come up verbTo emerge or become known, especially unexpectedly.
roll out verbTo deploy or release (a new film or software, etc.); to launch (a product or service), especially in a gradual fashion across multiple regions.

Grammar in this video

The structures the speaker uses most, with the exact words from the video:

StructureIn the video
Present perfect have/has + past participle — a past action that still matters nowhas seen · have already been deployed · has spread
Passive voice be + past participle — the focus is on what happens, not who does itbeen deployed · are deployed · is projected
Relative clauses who / which + clause — extra information about a person or thingthings, which makes · service, which can · problem, which is

Pronunciation to watch

The speaker uses 29 contractions and reduced forms, such as don't, I've, we're. Say them the short way, as you hear them.

  • The “th” sounds: authorization /ˌɔːθəɹaɪˈzeɪʃən/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, thirdly /ˈθɚdli/
  • The “sh” and “zh” sounds: instruction /ɪnˈstɹʌkʃən/, restoration /ɹɛstəˈɹeɪʃən/, unusual /ʌnˈjuːʒ(u)əl/, ratio /ˈɹeɪ.ʃoʊ/, crucial /ˈkɹuː.ʃəl/
  • Long words — get the stress right: liability /laɪəˈbɪlɪti/, necessarily /ˌnɛs.əˈsɛɹ.ə.li/, infrastructure /ˈɪnfɹəˌstɹʌkt͡ʃə/, operator /ˈɑpəˌɹeɪtɚ/, entity /ˈɛn.tə.ti/ [-tʰi]

How to practise with this video

  1. Listen to the whole video once without speaking and note the words you do not know.
  2. Start at 0.75× speed, shadow it sentence by sentence, then go back to normal speed once it feels easy.
  3. Record yourself and compare with the original, paying attention to words like deploy, liability, provider.

What is the Shadowing Technique?

Shadowing is a science-backed language learning technique originally developed for professional interpreter training and popularized by polyglot Dr. Alexander Arguelles. The method is simple but powerful: you listen to native English audio and immediately repeat it out loud — like a shadow following the speaker with just a 1–2 second delay. Unlike passive listening or grammar drills, shadowing forces your brain and mouth muscles to simultaneously process and reproduce real speech patterns. Research shows it significantly improves pronunciation accuracy, intonation, rhythm, connected speech, listening comprehension, and speaking fluency — making it one of the most effective methods for IELTS Speaking preparation and real-world English communication.

Shadowing technique: read the full step-by-step guide →