Практика Shadowing: Why AI Agents Are Becoming a Security Risk for Businesses - Изучайте разговорный английский по видео

Выберите режим практики

Каждый режим открывает полноэкранную комнату практики.

145 предложений
Если предложения слишком короткие или длинные, нажмите Edit, чтобы их изменить.
1
AI agents can make active decisions.
2
Unlike passive chatbots, the autonomous software run tasks and execute workflows with minimal or no human supervision.
3
A lot of these agents are doing very specific things, which makes them useful.
4
But that autonomy has seen AI agents conceal activity and even go rogue, with the number of incidents involving these agents becoming a growing security concern.
5
OpenAI says two of its AI models went rogue and tacked into open -source AI platform HuggingFace last week.
6
It had an objective, but it achieved an objective by any means possible.
7
And that's an interesting scenario.
8
The HuggingFace incident, which happened during internal testing with reduced safeguards, was one of several training exercises gone wrong.
9
Yet, AI agents have already been deployed at a growing scale across businesses.
10
The use of agentic AI has spread across companies.
11
An August 2026 McKinsey survey shows that AI agent adoption stayed mostly flat for small companies between 2025 and 2026.
12
But the share of billion -dollar corporations scaling agents jumped from 27 % to 40 % in just one year.
13
And that's not without issues, too.
14
Reports of AI agents causing disruption inside businesses are multiplying.
15
We had a routine AI coding agent, and then it deleted important customer information, our system of record.
16
We thought we were toast.
17
As more and more of these agents are deployed within organizations, there are a ton of risks that come with that.
18
What happens if it does something that's detrimental to your business?
19
According to market .us forecasts, the global AI agent market is projected to reach $139 billion by 2033,
20
nearly 13 times the 2026 level, as individuals and companies across the world are hoping to maximize productivity, save time and reduce costs.
21
All the tech companies have been talking about agents.
22
What you're seeing more and more of now is eight specific types of agents being deployed within organizations.
23
So if you're in finance or law or some of these other areas, it might be data input, it might be some sort of analysis.
24
AI agents can also be used for HR purposes, with the help of AI agent avatars,
25
allowing for pre -screening of candidates and scheduling further interviews without a human in the loop.
26
And businesses have scaled agentic AI for customer service, which can also act as booking agents, searching flights and hotels for employees,
27
and, if allowed, can book the trip themselves.
28
But in recent examples, AI agents went beyond their original tasks and misbehaved or went rogue.
29
So what's the difference?
30
A rogue AI is directly going against instructions or against the interests of the person operating that AI.
31
So it's not aligned to what the operator of the AI wants.
32
When you think about a misbehaving agent, It's more of the idea that the agent does something that it wasn't supposed to,
33
but it wasn't necessarily trying to defy the instructions directly.
34
So let's say the agent's making a purchasing decision on your behalf,
35
but it spends a little bit more than what you were expecting or it buys the wrong product.
36
It's not necessarily defying the instructions, but it's got something wrong.
37
In March 2026, IBM's VP of Software Cybersecurity reported a customer case where an autonomous customer service agent began approving refunds outside policy guidelines.
38
The agent optimized to chase good reviews, and since the customer promised it positive feedback against the refund, the agent complied.
39
Another way agents could misbehave is when given excessive privileges and broad permissions.
40
That's what happened to PocketOS, a car rental software platform, in April 2026.
41
I jumped in to see what my agent was working on.
42
I tasked it the night before to work on our staging environment.
43
And so I was just reviewing its work and getting frustrated with it
44
because it kept getting confused on what it was working on
45
and then i said hey you need to go clean up our staging database with these credentials
46
that i've given you for this task
47
and then as i'm watching it work i'm getting notifications
48
and then at
49
that point it was a pure on scramble the agent used
50
by pocket os had found a forgotten overly permissive api token
51
a digital master key in an unrelated file what was deleted was our entire production database
52
which was six years of history on this particular software platform
53
so every rental every rental record every customer record at
54
that point we were very concerned
55
that it was going to be the end of us or
56
if we weren't able to work with our service provider to get a restoration
57
they were able to use a system level we only lost 45 minutes of data
58
and we got a full restoration back there are many opportunities with deploying ai agents across your enterprise
59
but we must also be concerned about the risks an agent for example could be making a decision for
60
which you are then liable as an as a company as
61
an employer as a customer service provider the responsibility lies with us choosing to use
62
that tool and using it in a way that could have somehow caused that
63
So we're the first.
64
liability.
65
But another analysis I've used, if a pilot has a pilot error and then all the safety systems behind it fail and then the plane crashes,
66
it becomes less about the pilot error and it becomes more of a conversation around the safety system.
67
Pocket OS service provider
68
Railway acknowledged the vulnerability, adding that its infrastructure operated as configured.
69
The liability, like where does that fall?
70
And it could follow a lot of areas, right?
71
There's obviously the operator, the person who's choosing to use it, but those tools are a black box.
72
I does that make them liable for its actions?
73
It becomes a very gray area.
74
Companies are grappling with the legal questions raised by AI agents.
75
Currently in England and Wales, for example, the UK Jurisdiction Task Force has concluded
76
that AI agents cannot be held liable as legal personalities for the actions they take on one's behalf.
77
If a corporation deploys software and says, you must use my AI agent, and that software doesn't do what company wants, company's responsible for that outcome.
78
They've chosen to put something into the stream of commerce.
79
They're responsible.
80
When Air Canada chose to use software to represent its company
81
and a user interacted with the software and it seemed to have authority and they said, oh, well, that's not our real thing.
82
The Canadian judge was fantastic at saying, rubbish, you're responsible.
83
No, it's not a separate legal entity.
84
You chose to use this thing as a corporate entity.
85
That's your fault.
86
In the U .S., there is no comprehensive federal AI liability law.
87
Instead, existing contract, tort, consumer protection, sector -specific, privacy, computer access,
88
intellectual property, and antitrust laws may determine responsibility.
89
Now, the interesting question that comes up then is, we've bought this thing from someone else.
90
The question will become, who's doing the tuning of that?
91
The problem is, that agent is structured through rules that I didn't get to build.
92
What type of law will affect this?
93
It will be a combination depending on the facts of liability law, it might import ideas from agency law, contract law, absolutely.
94
So we're going to get back into an ongoing problem, which is terms of service.
95
AI can make mistakes.
96
And what they're hoping to say is, that's your problem.
97
So far, software companies have been very much able to push risk onto the user.
98
More and more, the onus will be on the software provider to do a much better job about product safety,
99
viability, fundamentally what should be reasonable for the software to do.
100
Meanwhile, cybersecurity firms are working with businesses to limit the consequences of erratic behavior by AI agents.
101
In the next three years, agentic and AI security solutions could reach 15 % of cyber budgets with a shift toward identity and access management,
102
governance and data.
103
A lot of focus in the industry is on protecting model, protect the input, stop someone trying to use it for a bad purpose.
104
But we say you've also got to protect the identities it uses to access your data and system.
105
When a business rolls out an AI agent, it needs to onboard it, like a new digital worker.
106
While the agent is only code, it still requires authentication, authorization and guardrails to achieve its goal.
107
In other words, the AI agent receives an identity with access privileges.
108
Today, non -human identities, digital identities assigned to AI agents, bots, devices or services, largely outnumber human identities.
109
In its 2026 identity security landscape study, cybersecurity firm Palo Alto Networks puts the ratio at 109 machine identities per human,
110
including 79 AI agent identities across surveyed companies.
111
When we think about identity for the enterprise, some companies are still catching up with the new requirements because of the threat landscape.
112
The speed with which AI can operate from an attack perspective is significantly quicker than human -operated attacks.
113
What if someone is able to change where payments are going for your company?
114
Identity verification is crucial in sectors such as finance and retail, whether customers are using an AI agent to shop on a website
115
or an employee is using the corporate card to purchase an item.
116
So it's not just you saying I've got a credential, I've got a username and password, it's me
117
but we're also saying let's verify that is the context of
118
that correct does it look unusual is it risky is it out of character for what you normally do
119
and then applying controls from there companies should absolutely focus on identifier
120
and access management frameworks
121
we're seeing new frameworks evolve like know your agent these are all exactly right what our research shows is
122
that the management systems
123
that are in place for managing agents have significant gaps in terms of both their real -time monitoring
124
and their after -the -fact understanding of behavior.
125
One of these areas, for example, that we identified is exactly around agent ID.
126
So we really don't know whether an ID is consistent throughout a series of different decision -making processes.
127
The second thing we determined was whether The, what we call, chain of thought reasoning or note -taking
128
that the agent deploys throughout the process is really an accurate way of understanding how that decision -making process happens.
129
For businesses that have already deployed AI agents across their infrastructure, one question remains, how to deploy agents safely?
130
There are three key actions that need to happen immediately in order for companies to feel safe and secure about deploying agents.
131
The first is what happens with every technology.
132
We just need good standards.
133
Secondly, we need to do additional research.
134
And then thirdly, we need governments and policy makers, regulators to better understand how the technology works.
135
If you really care about what you're using, you need a dummy copy to let the agent work on
136
and you need to have almost a whole separate thing where it cannot get to it.
137
It is a wild learning experience.
138
Still super bullish on AI.
139
It is an incredibly valuable tool and you will 10x your output.
140
You just have to take security seriously and you have to be prepared.
141
The cyber incidents we've seen with some of these AI agents has definitely put companies with a little bit more caution now.
142
I don't think that's going to stop their interest in the technology,
143
but the C -suite at most organizations could be pretty cautious around some of this technology.
144
They don't want to jump into something they don't really have a grasp on
145
or that has the ability to damage their business, their share prices and their earnings.

Скачать приложение

Всё для свободной речи

ИИ-оценка произношенияОценка каждой фразы
Практика IPAОсвойте каждый звук
СловарьСоберите свой словарный запас
Игра со словамиУчитесь играя

Тот же канал

FOR YOU

Рекомендуемое видео

Лексика и советы по произношению к этому уроку

Этот урок разговорной практики построен на видео «Why AI Agents Are Becoming a Security Risk for Businesses». Чаще всего повторяются слова: agent, software, companies, customer. В этом видео 145 предложений и 1964 слов для шедоуинга. Речь длится 11:25. Говорящий говорит в естественном темпе, около 172 слов в минуту, близком к повседневной речи. 82% слов входят в 3000 самых частых слов английского языка; остальные стоит разобрать перед занятием.

Ключевая лексика этого видео

15 слов из видео, которые стоит выучить, с произношением и значением:

СловоПроизношениеЗначение
deploy глагол/dɪˈplɔɪ/развёртывать, разверну́ть
liability существительное/laɪəˈbɪlɪti/обяза́тельство, долг
provider существительное/pɹəˈvaɪ.də(ɹ)/прова́йдер, поставщи́к
rogue существительное/ˈɹoʊɡ/негодя́й, подле́ц
instruction существительное/ɪnˈstɹʌkʃən/инстру́кция, инструкта́ж
rental существительное/ˈɹɛntəl/аре́нда
liable прилагательное/ˈlaɪ̯əbəl/обя́занный, отве́тственный
necessarily наречие/ˌnɛs.əˈsɛɹ.ə.li/обяза́тельно
pocket существительное/ˈpɑ.kɪt/карма́н, карма́шек
infrastructure существительное/ˈɪnfɹəˌstɹʌkt͡ʃə/инфраструкту́ра
enterprise существительное/ˈɛntəˌpɹaɪz/предприя́тие
landscape существительное/ˈlan(d)skeɪp/ландша́фт, пейза́ж
objective существительное/ɒbˈd͡ʒɛk.tɪv/объе́кт
input существительное/ˈɪnpʊt/вклад
operator существительное/ˈɑpəˌɹeɪtɚ/телефони́ст, телефони́стка

Фразовые глаголы, которые вы услышите

СловоЗначение
clean up глаголубира́ться, прибираться
come up глаголподнима́ться, подня́ться

Грамматика в этом видео

Конструкции, которые говорящий использует чаще всего, с точными словами из видео:

КонструкцияВ видео
Present Perfect have/has + причастие прошедшего времени — прошлое действие, важное сейчасhas seen · have already been deployed · has spread
Пассивный залог be + причастие прошедшего времени — важно, что происходит, а не кто это делаетbeen deployed · are deployed · is projected
Придаточные определительные who / which + предложение — уточнение о человеке или предметеthings, which makes · service, which can · problem, which is

Произношение, на которое стоит обратить внимание

Говорящий использует 29 сокращённых и редуцированных форм, например don't, I've, we're. Произносите их коротко, так, как слышите.

  • Звуки «th»: authorization /ˌɔːθəɹaɪˈzeɪʃən/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, thirdly /ˈθɚdli/
  • Звуки «sh» и «zh»: instruction /ɪnˈstɹʌkʃən/, restoration /ɹɛstəˈɹeɪʃən/, unusual /ʌnˈjuːʒ(u)əl/, ratio /ˈɹeɪ.ʃoʊ/, crucial /ˈkɹuː.ʃəl/
  • Длинные слова — следите за ударением: liability /laɪəˈbɪlɪti/, necessarily /ˌnɛs.əˈsɛɹ.ə.li/, infrastructure /ˈɪnfɹəˌstɹʌkt͡ʃə/, operator /ˈɑpəˌɹeɪtɚ/, entity /ˈɛn.tə.ti/ [-tʰi]

Звуки, трудные для русскоязычных:

  • /w/ — губы округлены, это не /v/: framework /ˈfɹeɪm.wɜːk/, meanwhile /ˈmiːnwaɪl/, railway /ˈɹeɪlˌweɪ/, worker /ˈwɝ.kɚ/, suite /swiːt/
  • /h/ — лёгкий выдох, а не русское «х»: behalf /bɪˈhæf/, comprehensive /ˌkɑm.pɹəˈhɛn.sɪv/
  • Звонкие согласные в конце слова — не оглушайте их: rogue /ˈɹoʊɡ/, enterprise /ˈɛntəˌpɹaɪz/, objective /ɒbˈd͡ʒɛk.tɪv/, privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, refund /ɹɪˈfʌnd/

Как заниматься с этим видео

  1. Прослушайте всё видео один раз молча и выпишите незнакомые слова.
  2. Начните со скорости 0,75×, повторяйте предложение за предложением и вернитесь к обычной скорости, когда станет легко.
  3. Запишите себя и сравните с оригиналом, обращая внимание на такие слова, как deploy, liability, provider.

Что такое техника Shadowing?

Shadowing — это научно обоснованная техника изучения языка, изначально разработанная для подготовки профессиональных переводчиков и популяризированная полиглотом доктором Александром Аргуэльесом. Метод прост, но эффективен: вы слушаете аудио на английском от носителей языка и немедленно повторяете вслух — как тень, следующая за говорящим с задержкой в 1–2 секунды. В отличие от пассивного прослушивания или грамматических упражнений, Shadowing заставляет мозг и мышцы рта одновременно обрабатывать и воспроизводить реальные речевые паттерны. Исследования показывают, что это значительно улучшает точность произношения, интонацию, ритм, связную речь, понимание на слух и беглость речи — что делает его одним из самых эффективных методов для подготовки к IELTS Speaking и реального общения на английском.

Техника шедоуинга: читать полное пошаговое руководство →