Join Ads Dawson of Dreadnode and Mike Takahashi of Zenity — ranked among the top bug bounty hunters on HackerOne and Mozilla's AI programs — as they break down a year's worth of data exfiltration bugs found across production AI applications, showing how the same primitive behind XSS now lets attackers steal PII, business data, and private messages through AI agents.
Summit: August 14 @ 10:00 am – 4:30 pm EDT How do you secure a future that is already here? AI is changing how organizations operate, how defenders protect systems, and how attackers identify and exploit opportunities. New capabilities, new risks, and new questions are ...
Join Ethan Robish, Black Hills Infosec former pentester and current SOC architect, for a technical session on the scaffolding, guardrails, and processes that turn agentic coding from a novelty into a production-grade workflow.
In this session, Hayden Covington, Associate Director of Security Operations at the BHIS SOC, will walk through how to design custom agents for real security operations work: triage support, detection engineering, enrichment workflows, reporting, research, and review-heavy operational tasks. The focus is not magic prompts or over-engineered instructions; it is the engineering work behind useful agents. Powerful agents have clear roles, bounded authority, durable memory, tool access, handoff points, review gates, and failure modes that operators can actually relate to.
Do you dread writing incident response documentation? Gerard Johansen of IR Proactive shows how LLMs can quickly create, refine, and validate incident response policies, plans, workflows, and communications playbooks.
Join Faan Rossouw (aionsec.ai) for a 25-minute, demo-driven session on a blind spot in every security system that puts an LLM agent in the analysis loop: the data the agent reads is partly authored by the adversary, which turns your own telemetry into a potential prompt-injection channel.
