
AI Security Update
Water Treatment Plant Security and AI in Student Research with John Morton
AI agents are moving fast, and most organizations are not ready for what happens when they get a key, a task, and access. John Morton reveals why the real AI security risk is not just the model - it is the identity, permissions, and guardrails around the digital worker itself. We discuss the recent attacks on water treatment plants as a case study and considerations of using AI in an educational setting. John brings 30+ years in cyber, infrastructure, cloud, and digital transformation, plus his perspective as an adjunct faculty member in George Washington University's cyber analytics program. The conversation goes beyond enterprise risk. John and Anmol get into the growing threat to critical infrastructure, including water systems, power grids, and other legacy environments with technical debt and huge attack surfaces. John lays out what state and local leaders need to do first: understand what they have, map the interconnections, modernize where needed, and make AI security a legislative priority instead of an afterthought. If you care about AI security, cyber policy, critical infrastructure, or the future of education in an AI-driven world, this episode is packed with practical guidance. Essential listening if you want to understand how to keep moving fast with AI without handing over the master key.

