Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career from Canada's Communications Security Establishment to founding Linchpin Labs and building Field Effect as a holistic MDR provider focused on small and mid-sized businesses.
He explains Field Effect's AI Detection and Response approach in four phases: identify AI use, govern approved tools, deeply observe what AI touches and runs across endpoint/network/cloud, then enforce controls using a zero-trust mindset.
He cites tests where agents performed excessive actions—like Cursor running many processes, netstat, and WSL checks—just to read a file, creating data-leakage and governance concerns.
Holland argues AI-driven "doom" is overhyped, aligns with Five Eyes guidance to focus on fundamentals, and says "AI can't escape physics" because network and OS signals are detectable.
00:00 AI Tool Goes Wild
01:28 Meet Matt Holland
04:43 From CSE to Startup
08:20 Building Full Stack MDR
10:14 Four Phases of AIDR
14:53 Why Coverage Everywhere
18:40 Agents Acting Like Malware
24:39 Hype Versus Practical AI
30:26 AI Doom Cycle Reality Check
34:42 Critical Infrastructure Basics
36:30 Final Advice Don't Panic
Read the original article: