Shadowing Practice: Why AI Agents Are Becoming a Security Risk for Businesses - Learn English Speaking with Video

Bir pratik modu seçin

Her mod tam ekran bir pratik odası açar.

145 cümleler
Cümleler çok kısa veya çok uzun ise, ayarlamak için Düzenle'ye tıklayın.
1
AI agents can make active decisions.
2
Unlike passive chatbots, the autonomous software run tasks and execute workflows with minimal or no human supervision.
3
A lot of these agents are doing very specific things, which makes them useful.
4
But that autonomy has seen AI agents conceal activity and even go rogue, with the number of incidents involving these agents becoming a growing security concern.
5
OpenAI says two of its AI models went rogue and tacked into open -source AI platform HuggingFace last week.
6
It had an objective, but it achieved an objective by any means possible.
7
And that's an interesting scenario.
8
The HuggingFace incident, which happened during internal testing with reduced safeguards, was one of several training exercises gone wrong.
9
Yet, AI agents have already been deployed at a growing scale across businesses.
10
The use of agentic AI has spread across companies.
11
An August 2026 McKinsey survey shows that AI agent adoption stayed mostly flat for small companies between 2025 and 2026.
12
But the share of billion -dollar corporations scaling agents jumped from 27 % to 40 % in just one year.
13
And that's not without issues, too.
14
Reports of AI agents causing disruption inside businesses are multiplying.
15
We had a routine AI coding agent, and then it deleted important customer information, our system of record.
16
We thought we were toast.
17
As more and more of these agents are deployed within organizations, there are a ton of risks that come with that.
18
What happens if it does something that's detrimental to your business?
19
According to market .us forecasts, the global AI agent market is projected to reach $139 billion by 2033,
20
nearly 13 times the 2026 level, as individuals and companies across the world are hoping to maximize productivity, save time and reduce costs.
21
All the tech companies have been talking about agents.
22
What you're seeing more and more of now is eight specific types of agents being deployed within organizations.
23
So if you're in finance or law or some of these other areas, it might be data input, it might be some sort of analysis.
24
AI agents can also be used for HR purposes, with the help of AI agent avatars,
25
allowing for pre -screening of candidates and scheduling further interviews without a human in the loop.
26
And businesses have scaled agentic AI for customer service, which can also act as booking agents, searching flights and hotels for employees,
27
and, if allowed, can book the trip themselves.
28
But in recent examples, AI agents went beyond their original tasks and misbehaved or went rogue.
29
So what's the difference?
30
A rogue AI is directly going against instructions or against the interests of the person operating that AI.
31
So it's not aligned to what the operator of the AI wants.
32
When you think about a misbehaving agent, It's more of the idea that the agent does something that it wasn't supposed to,
33
but it wasn't necessarily trying to defy the instructions directly.
34
So let's say the agent's making a purchasing decision on your behalf,
35
but it spends a little bit more than what you were expecting or it buys the wrong product.
36
It's not necessarily defying the instructions, but it's got something wrong.
37
In March 2026, IBM's VP of Software Cybersecurity reported a customer case where an autonomous customer service agent began approving refunds outside policy guidelines.
38
The agent optimized to chase good reviews, and since the customer promised it positive feedback against the refund, the agent complied.
39
Another way agents could misbehave is when given excessive privileges and broad permissions.
40
That's what happened to PocketOS, a car rental software platform, in April 2026.
41
I jumped in to see what my agent was working on.
42
I tasked it the night before to work on our staging environment.
43
And so I was just reviewing its work and getting frustrated with it
44
because it kept getting confused on what it was working on
45
and then i said hey you need to go clean up our staging database with these credentials
46
that i've given you for this task
47
and then as i'm watching it work i'm getting notifications
48
and then at
49
that point it was a pure on scramble the agent used
50
by pocket os had found a forgotten overly permissive api token
51
a digital master key in an unrelated file what was deleted was our entire production database
52
which was six years of history on this particular software platform
53
so every rental every rental record every customer record at
54
that point we were very concerned
55
that it was going to be the end of us or
56
if we weren't able to work with our service provider to get a restoration
57
they were able to use a system level we only lost 45 minutes of data
58
and we got a full restoration back there are many opportunities with deploying ai agents across your enterprise
59
but we must also be concerned about the risks an agent for example could be making a decision for
60
which you are then liable as an as a company as
61
an employer as a customer service provider the responsibility lies with us choosing to use
62
that tool and using it in a way that could have somehow caused that
63
So we're the first.
64
liability.
65
But another analysis I've used, if a pilot has a pilot error and then all the safety systems behind it fail and then the plane crashes,
66
it becomes less about the pilot error and it becomes more of a conversation around the safety system.
67
Pocket OS service provider
68
Railway acknowledged the vulnerability, adding that its infrastructure operated as configured.
69
The liability, like where does that fall?
70
And it could follow a lot of areas, right?
71
There's obviously the operator, the person who's choosing to use it, but those tools are a black box.
72
I does that make them liable for its actions?
73
It becomes a very gray area.
74
Companies are grappling with the legal questions raised by AI agents.
75
Currently in England and Wales, for example, the UK Jurisdiction Task Force has concluded
76
that AI agents cannot be held liable as legal personalities for the actions they take on one's behalf.
77
If a corporation deploys software and says, you must use my AI agent, and that software doesn't do what company wants, company's responsible for that outcome.
78
They've chosen to put something into the stream of commerce.
79
They're responsible.
80
When Air Canada chose to use software to represent its company
81
and a user interacted with the software and it seemed to have authority and they said, oh, well, that's not our real thing.
82
The Canadian judge was fantastic at saying, rubbish, you're responsible.
83
No, it's not a separate legal entity.
84
You chose to use this thing as a corporate entity.
85
That's your fault.
86
In the U .S., there is no comprehensive federal AI liability law.
87
Instead, existing contract, tort, consumer protection, sector -specific, privacy, computer access,
88
intellectual property, and antitrust laws may determine responsibility.
89
Now, the interesting question that comes up then is, we've bought this thing from someone else.
90
The question will become, who's doing the tuning of that?
91
The problem is, that agent is structured through rules that I didn't get to build.
92
What type of law will affect this?
93
It will be a combination depending on the facts of liability law, it might import ideas from agency law, contract law, absolutely.
94
So we're going to get back into an ongoing problem, which is terms of service.
95
AI can make mistakes.
96
And what they're hoping to say is, that's your problem.
97
So far, software companies have been very much able to push risk onto the user.
98
More and more, the onus will be on the software provider to do a much better job about product safety,
99
viability, fundamentally what should be reasonable for the software to do.
100
Meanwhile, cybersecurity firms are working with businesses to limit the consequences of erratic behavior by AI agents.
101
In the next three years, agentic and AI security solutions could reach 15 % of cyber budgets with a shift toward identity and access management,
102
governance and data.
103
A lot of focus in the industry is on protecting model, protect the input, stop someone trying to use it for a bad purpose.
104
But we say you've also got to protect the identities it uses to access your data and system.
105
When a business rolls out an AI agent, it needs to onboard it, like a new digital worker.
106
While the agent is only code, it still requires authentication, authorization and guardrails to achieve its goal.
107
In other words, the AI agent receives an identity with access privileges.
108
Today, non -human identities, digital identities assigned to AI agents, bots, devices or services, largely outnumber human identities.
109
In its 2026 identity security landscape study, cybersecurity firm Palo Alto Networks puts the ratio at 109 machine identities per human,
110
including 79 AI agent identities across surveyed companies.
111
When we think about identity for the enterprise, some companies are still catching up with the new requirements because of the threat landscape.
112
The speed with which AI can operate from an attack perspective is significantly quicker than human -operated attacks.
113
What if someone is able to change where payments are going for your company?
114
Identity verification is crucial in sectors such as finance and retail, whether customers are using an AI agent to shop on a website
115
or an employee is using the corporate card to purchase an item.
116
So it's not just you saying I've got a credential, I've got a username and password, it's me
117
but we're also saying let's verify that is the context of
118
that correct does it look unusual is it risky is it out of character for what you normally do
119
and then applying controls from there companies should absolutely focus on identifier
120
and access management frameworks
121
we're seeing new frameworks evolve like know your agent these are all exactly right what our research shows is
122
that the management systems
123
that are in place for managing agents have significant gaps in terms of both their real -time monitoring
124
and their after -the -fact understanding of behavior.
125
One of these areas, for example, that we identified is exactly around agent ID.
126
So we really don't know whether an ID is consistent throughout a series of different decision -making processes.
127
The second thing we determined was whether The, what we call, chain of thought reasoning or note -taking
128
that the agent deploys throughout the process is really an accurate way of understanding how that decision -making process happens.
129
For businesses that have already deployed AI agents across their infrastructure, one question remains, how to deploy agents safely?
130
There are three key actions that need to happen immediately in order for companies to feel safe and secure about deploying agents.
131
The first is what happens with every technology.
132
We just need good standards.
133
Secondly, we need to do additional research.
134
And then thirdly, we need governments and policy makers, regulators to better understand how the technology works.
135
If you really care about what you're using, you need a dummy copy to let the agent work on
136
and you need to have almost a whole separate thing where it cannot get to it.
137
It is a wild learning experience.
138
Still super bullish on AI.
139
It is an incredibly valuable tool and you will 10x your output.
140
You just have to take security seriously and you have to be prepared.
141
The cyber incidents we've seen with some of these AI agents has definitely put companies with a little bit more caution now.
142
I don't think that's going to stop their interest in the technology,
143
but the C -suite at most organizations could be pretty cautious around some of this technology.
144
They don't want to jump into something they don't really have a grasp on
145
or that has the ability to damage their business, their share prices and their earnings.

Uygulamayı İndir

Akıcı konuşmak için ihtiyacınız olan her şey

AI TelaffuzHer cümleyi puanla
IPA AlıştırmasıHer sesi ustalaştır
Kelime BilgisiKelime bankanızı oluşturun
Kelime OyunuOynarken öğrenin

Aynı Kanal

FOR YOU

Video Öner

Bu dersin kelimeleri ve konuşma notları

Bu konuşma dersi “Why AI Agents Are Becoming a Security Risk for Businesses” videosuna dayanıyor. En çok tekrarlanan kelimeler: agent, software, companies, customer. Bu videoda gölgeleme çalışması için 145 cümle ve 1964 kelime var. Konuşma bölümü 11:25 sürüyor. Konuşmacı dakikada yaklaşık 172 kelimeyle, günlük konuşmaya yakın doğal bir hızda konuşuyor. Kelimelerin %82’i İngilizcede en sık kullanılan 3.000 kelime arasında; geri kalanına başlamadan önce bakmakta fayda var.

Bu videodaki önemli kelimeler

Videodan öğrenmeye değer 15 kelime, telaffuzu ve anlamıyla:

KelimeTelaffuzAnlam
liability isim/laɪəˈbɪlɪti/borç
provider isim/pɹəˈvaɪ.də(ɹ)/sağlayıcı
pocket isim/ˈpɑ.kɪt/cep, yancık
infrastructure isim/ˈɪnfɹəˌstɹʌkt͡ʃə/altyapı, enfrastrüktür
enterprise isim/ˈɛntəˌpɹaɪz/şirket
landscape isim/ˈlan(d)skeɪp/manzara, panaroma
objective isim/ɒbˈd͡ʒɛk.tɪv/nesne, obje
operator isim/ˈɑpəˌɹeɪtɚ/operatör
database isim/ˈdeɪtəˌbeɪs/veritabanı, veri tabanı
framework isim/ˈfɹeɪm.wɜːk/çatkı, çatık
delete fiil/dɪˈliːt/silmek
privilege isim/ˈpɹɪv.(ɪ.)lɪd͡ʒ/ayrıcalık, imtiyaz
restoration isim/ɹɛstəˈɹeɪʃən/tamir, restorasyon
refund isim/ɹɪˈfʌnd/geri ödemek
autonomous sıfat/ɔˈtɑnəməs/otonom

Duyacağınız deyimsel fiiller

KelimeAnlam
roll out fiilsunmak

Bu videodaki dil bilgisi

Konuşmacının en çok kullandığı yapılar, videodaki sözcüklerin aynısıyla:

YapıVideoda
Present perfect have/has + fiilin üçüncü hâli — geçmişte olan ama şimdi de önemli olan bir eylemhas seen · have already been deployed · has spread
Edilgen yapı be + fiilin üçüncü hâli — kimin yaptığı değil, ne olduğu önemlibeen deployed · are deployed · is projected
İlgi cümlecikleri who / which + cümle — bir kişi ya da şey hakkında ek bilgithings, which makes · service, which can · problem, which is

Dikkat edilecek telaffuzlar

Konuşmacı don't, I've, we're gibi kısaltılmış biçimleri 29 kez kullanıyor. Bunları duyduğunuz gibi kısa söyleyin.

  • “th” sesleri: authorization /ˌɔːθəɹaɪˈzeɪʃən/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, thirdly /ˈθɚdli/
  • “sh” ve “zh” sesleri: instruction /ɪnˈstɹʌkʃən/, restoration /ɹɛstəˈɹeɪʃən/, unusual /ʌnˈjuːʒ(u)əl/, ratio /ˈɹeɪ.ʃoʊ/, crucial /ˈkɹuː.ʃəl/
  • Uzun kelimeler — vurguyu doğru yere koyun: liability /laɪəˈbɪlɪti/, necessarily /ˌnɛs.əˈsɛɹ.ə.li/, infrastructure /ˈɪnfɹəˌstɹʌkt͡ʃə/, operator /ˈɑpəˌɹeɪtɚ/, entity /ˈɛn.tə.ti/ [-tʰi]

Türkçe konuşanların zorlandığı sesler:

  • /w/ — dudaklar yuvarlak, /v/ değil: framework /ˈfɹeɪm.wɜːk/, meanwhile /ˈmiːnwaɪl/, railway /ˈɹeɪlˌweɪ/, worker /ˈwɝ.kɚ/, suite /swiːt/
  • Kelime başındaki ünsüz kümesi — araya ünlü eklemeyin: provider /pɹəˈvaɪ.də(ɹ)/, framework /ˈfɹeɪm.wɜːk/, privilege /ˈpɹɪv.(ɪ.)lɪd͡ʒ/, gray /ɡɹeɪ/, privacy /ˈpɹaɪ.və.si/
  • /æ/ — “e”den daha açık: behalf /bɪˈhæf/, gap /ɡæp/, feedback /ˈfiːdˌbæk/, password /ˈpæs.wɜɹd/, interact /ɪn.təˈɹækt/

Bu videoyla nasıl çalışılır

  1. Videonun tamamını konuşmadan bir kez dinleyin ve bilmediğiniz kelimeleri not edin.
  2. 0,75× hızla başlayın, cümle cümle tekrar edin ve kolaylaşınca normal hıza dönün.
  3. Kendinizi kaydedin ve orijinaliyle karşılaştırın; liability, provider, pocket gibi kelimelere özellikle dikkat edin.

Gölgeleme Tekniği Nedir?

Gölgeleme, başlangıçta profesyonel tercüman eğitimi için geliştirilen ve çok dilli Dr. Alexander Arguelles tarafından popüler hale getirilen, bilim destekli bir dil öğrenme tekniğidir. Yöntem basit ama güçlüdür: ana dili İngilizce olan bir sesi dinler ve hemen yüksek sesle tekrar edersiniz — konuşmacıyı 1-2 saniye gecikmeyle takip eden bir gölge gibi. Pasif dinleme veya dilbilgisi alıştırmalarının aksine, gölgeleme beyninizi ve ağız kaslarınızı gerçek konuşma kalıplarını eşzamanlı olarak işlemeye ve yeniden üretmeye zorlar. Araştırmalar, telaffuz doğruluğu, tonlama, ritim, bağlı konuşma, dinleme anlama ve konuşma akıcılığını önemli ölçüde geliştirdiğini göstermektedir — bu da onu IELTS Konuşma hazırlığı ve gerçek dünya İngilizce iletişimi için en etkili yöntemlerden biri yapar.

Shadowing tekniği: adım adım eksiksiz rehberi okuyun →