AI Security vs Application Security

Welcome back! 👋

After taking a little break to reset and redesign everything behind the scenes, I’m back — and consolidating all my content. This episode is part of both The AI Security Podcast (on Spotify and Apple Podcasts) and my YouTube channel, HarrietHacks — so whether you prefer to listen or watch, you’ll get the same great conversations (and bad jokes) across both platforms.

From now on, I’ll be posting at least fortnightly (with the occasional bonus episode when something big happens… like when I announced the book!).

I’ve been in a few conversations lately where people have tried to convince me that AI Security is just Application Security in disguise. Naturally, I disagree. 🤷‍♀️ So in this episode, we dive into AI Security vs Application Security — how they overlap, where they diverge, and why securing AI systems demands new thinking beyond traditional AppSec.

💌 Sign up for the newsletter: http://eepurl.com/i7RgRM

📘 Pre-order The AI Security Handbook: [link coming soon]

🎥 Watch this episode and more on YouTube: https://www.youtube.com/@HarrietHacks

🔗 Useful Links

SQL Injection Examples (W3Schools): https://www.w3schools.com/sql/sql_injection.asp
Application Security Blog (Medium): https://medium.com/@pixelprecisionengineering1/application-security-appsec-in-cybersecurity-855ad9ce5e5e
Echoleak Zero-Click Copilot Exploit (Dark Reading): https://www.darkreading.com/application-security/researchers-detail-zero-click-copilot-exploit-echoleak
Traditional AppSec vs AI Security (Pillar Security): https://www.pillar.security/blog/traditional-appsec-vs-ai-security-addressing-modern-risks