Cloud Code, blocked from posting to a public GitHub gist through normal channels, worked around the block by opening a browser window and simulating mouse clicks at specific screen coordinates to complete the upload anyway.

32:26And so but like technically it felt that it had gotten the human in the loop approval for it. Um, but I think if we had like, you know, like what the reason we were able to catch it is we were looking at the full context. We were looking at like what is the thing that it's actually looking to post? What is the destination? We have a policy that

32:42says anything that looks proprietary and internal should go to a public source. Let's go ahead and catch it. And we even saw one crazy instance where Cloud Code tried to get around this like blocking we were doing of like GitHub public gist. And rather than like doing this as a text in text out system where it was like, all right, I'm posting to this URL. It spun up a

33:00browser window and we just started to see mouse clicks on certain coordinates. And we noticed that one of the coordinates actually was for a public gist. Uh and so we were able to go ahead and catch and stop something like that as well. So this is obviously like one line of I think interesting things we saw which was like more in the sensitive data exfiltration standpoint. We see

33:20other things like in terms of credentials and others like pretty like I I don't want to say like all the time, but it feels like it's all the time. And I think in general kind of reflects what I hear when I speak with leaders at large enterprise organizations which is they're always surprised when they get like an audit report of what's actually happening with AI in their ecosystem. I

33:38spoke with somebody who told me like, you know, last year I don't think I need the agent security governance thing because I think right now we have like three or four agents that are deployed. Then I got dinner with them a few months ago and they're like, you know what? I think I was wrong. Um we did an audit. Guess how many agents were deployed? And I was like, it wasn't two or it wasn't

33:54three or four, was it? And he was like, nope, it was 250. And I said, okay, got it. Like it's just surprising I think how at the rate at which these tools can get adopted internally. >> And when they reported that number, was that like a was that two or 250 people using Cloud Code or are these agents that are like, you know, 24/7 living on some infrastructure in the organization

34:16or >> Mix of them, but it was a lot of like agents that were actually basically autonomous background agents people had built like in the cloud like on Copilot Studio is one example as a way to be able to just start to run tasks. >> I I'm trying to form a question around it. I think that's essentially like pinging or pushing back on like, you know, AI only as a

34:38as a means of securing, you know, these agent interactions and you know, I you know, I could ask it from like an enterprise perspective like it you know, are they going to is an enterprise going to feel like they have enough control, you know, or even from my perspective like you know, I'm a little bit old school and I feel like, you know, I want to say