Episode Player

In this episode of "Full Tech Ahead," host Amanda Razani interviews Javed Hasan, CEO and Co-Founder of Lineaje.

They discuss the critical importance of software supply chain security, emphasizing that 95% of modern software risks come from open-source ingestion.

Hasan introduces Lineaje's new product, "UnifAI," which is designed to make AI applications secure by design. He highlights a major industry blind spot: AI has become incredibly easy to build, but it is often not safe to run. UnifAI solves this by helping CISOs discover their AI inventory, derive the correct security policies, and autonomously apply those policies in both low-code and high-code environments.

The conversation also explores complex emerging threats such as runtime code generation, "reasoning compromise," and the growing danger of Shadow AI.

Key Quotes

"95% of the risk in modern software is ingested by using open source. So we make open source safe to use by companies."

"AI has become easy to build, but AI is not safe to run. So what UnifAI does, it makes the AI applications secure by design."

"Use AI to improve productivity safely."

Takeaways

Automate AI Security Policies: CISOs and developers are overwhelmed by rapidly changing AI regulations. Solutions like Unify streamline this by discovering all AI assets and autonomously applying the correct security policies directly into the development workflow, eliminating the need for manual rule-reading.

Beware of "Reasoning Compromise": Hackers are finding new ways to exploit AI without using explicitly bad prompts. By manipulating the context or the "reasoning" of an LLM (e.g., claiming the CEO ordered an action), attackers can bypass built-in controls and extract sensitive data.

The Threat of Shadow AI and Autonomous Code: Unauthorized AI tools or rogue agents (Shadow AI) can perform deep, unauthorized actions like sending emails or extracting credentials. Furthermore, AI agents writing code at runtime without human oversight represent a massive new security challenge that traditional policies cannot catch.

The Shift to "Security for AI": We are moving past just using AI to make existing security tasks faster ("AI for security"). The industry must now focus on an entirely new domain—"Security for AI"—to protect the newly established AI-centric software infrastructure.

Find Amanda Razani on LinkedIn.  https://www.linkedin.com/in/amanda-razani-990a7233/

Follow the FTA LinkedIn Page: https://www.linkedin.com/company/full-tech-ahead/

Visit the FTA website: https://fulltechahead.com/

Check out the Substack Channel: https://fulltechahead.substack.com/