Antisyphon Training

Summit Talk: When AI Lies to Your SOC
2026-08-14 12:00 - 12:25 (America/New_York)
Molly Correia

Register Here

What happens when AI confidently recommends the wrong security action in your IT environment, or on your plant floor?

Join Molly Correia, cybersecurity consultant, as she turns a virtual talk into a live experiment: you’ll prompt your preferred AI model — ChatGPT, Claude, Gemini, Copilot, or whichever model your team relies on — to analyze a real-world CVE, then compare results against authoritative sources to see exactly where the models hallucinate facts, recommendations, and unsupported conclusions.

You’ll walk away knowing how to distinguish confidence from correctness, why AI outputs require validation before they drive operational decisions, and how an AI Assurance Control can help your SOC measure trustworthiness before AI becomes a security control.

Before AI becomes a security control, it needs one.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Molly Correia

Bio

Molly Wellesly Correia is a Sr. Security Engineer at Consolidated Edison, protecting critical infrastructure, with more than six years’ experience in cybersecurity, spanning OT/ICS environments, network detection, and enterprise security. She holds an M.S. in Cyber Security and Privacy from NJIT.
Molly Correia | LinkedIn

Summit Panel: Hunting Shadow AI: Where the Guardrails Belong
2026-08-14 13:00 - 13:50 (America/New_York)
Kip Boyle, Ross Young, Jake Bernstein, and Courtney Hans

Register Here

How much of your company’s data is already sitting inside an AI tool nobody approved?

This panel moderated by Kip Boyle brings together two hands-on AI security pros, a privacy and AI attorney, and a cyber-insurance expert to work through where the guardrails actually belong and who owns them once they’re set.

You’ll leave knowing how to let your people use AI productively without leaking data or letting business grind to a halt.

Bring your toughest questions: the panel will open the floor for live Q&A so you can finally get straight answers to your shadow AI questions.

AI is already in your environment. This is the panel that tells you what to do about it.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

Kip Boyle will teach the workshop Hunting Shadow AI on Sept. 25.

About the Instructor

Kip Boyle

Bio

Kip Boyle is a husband, dad, small business owner, and experienced cybersecurity hiring manager. Over the years, Kip has built many InfoSec teams in a variety of settings including as a captain on active duty in the US Air Force, as the CISO of PEMCO Insurance in Seattle, and vCISO in his own company, Cyber Risk Opportunities LLC. Kip is the primary author and leader of the open source “Cybersecurity Hiring Manager Handbook.” He’s also the co-host of “The Cyber Risk Management Podcast” and the co-host of the “Your Cyber Path” podcast.

Ross Young

Bio

From CIA intelligence officer to CISO, Ross Young has spent more than two decades pushing the boundaries of cybersecurity.

Ross is the CEO of Clear Capabilities Inc., co-host of CISO Tradecraft, author of Cybersecurity’s Dirty Secret: Why Most Budgets Go to Waste, creator of the OWASP Threat and Safeguard Matrix (TaSM), and a seasoned cybersecurity executive. He has served as CISO in Residence at Team8, CISO of Caterpillar Financial, and an instructor at Johns Hopkins University. Previously, Ross was a divisional CISO at Capital One and spent more than a decade in cybersecurity roles at the CIA, NSA, and the Federal Reserve Board.

Jake Bernstein

Bio

Jake Bernstein is the Global AI and Innovation Partner at K&L Gates, where he practices in the firm’s Technology Transactions and Sourcing and Data Protection, Privacy, and Security groups. A Certified Information Systems Security Professional (CISSP), he advises clients at the intersection of cybersecurity, privacy, and emerging technology. Jake began his career as an Assistant Attorney General in the Washington State Attorney General’s Consumer Protection Division, where he spent nearly eight years leading cybersecurity, privacy, and consumer-protection investigations. He is recognized by Chambers USA for Privacy & Data Security (Nationwide) and was named to the 500 Leading Global Cyber Lawyers in 2024 and 2025. He is based in Seattle.

Courtney Hans

Bio

Currently the Vice President of Cyber Services for ANV Cyber, Courtney Hans brings a variety of experience into her engagements via her ability to unite a command of business strategy with the ability to lead technical work. In her early career, Courtney was an adventure travel guide with a short window to make a strong impression. Curiosity became her superpower as she learned how to uncover the inner motivation of diverse groups of guests. Guiding, just like cybersecurity, requires agility and a cool head during a crisis. Formerly the Head of Security and IT for a rapid-growth SaaS startup, Courtney joined ANV to help reduce risk and strengthen the partnership between carrier and insured.

Courtney Hans | LinkedIn

Summit Talk: AI Up Your Incident Readiness and Response Planning
2026-08-14 14:00 - 14:25 (America/New_York)
Gerard Johansen

Register Here

Do you dread writing incident response documentation?
Gerard Johansen of IR Proactive shows how LLMs can quickly create, refine, and validate incident response policies, plans, workflows, and communications playbooks.

Topics include:

Why LLMs are effective for IR documentation

Getting set up: Local vs Cloud

Prompting for policies, plans, workflows, and communications

Reviewing, testing, and validating outputs

You’ll learn practical methods to create and maintain incident response documentation faster and with less effort.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Gerard Johansen

Bio

A cyber security professional with over a decade of experience specializing in digital forensics, incident response, and threat intelligence. After a decade in law enforcement, transitioned into the private sector working in large enterprise and consulting. During my tenure in cyber security, I have been fortunate enough to work on complex digital investigations as well as develop training and enablement programs for cyber security defenders all over the world.
Gerard Johansen | LinkedIn

Summit Talk: When Your Logs Attack Your Security Agent
2026-08-14 14:30 - 14:55 (America/New_York)
Faan Rossouw

Register Here

What happens when the adversary can write directly into the evidence your AI is analyzing?

Join Faan Rossouw (aionsec.ai) for a 25-minute, demo-driven session on a blind spot in every security system that puts an LLM agent in the analysis loop: the data the agent reads is partly authored by the adversary, which turns your own telemetry into a potential prompt-injection channel.

You’ll see a live attack flip a confirmed detection into a dismissed one, then learn a layered, deterministic defense – control/data separation, output grounding gates, capability containment, and an injection eval suite – that holds even when the model is fooled, because the core rule is never ask the model to defend the model.

Walk away able to find this vulnerability in your own AI-assisted workflows and build defenses that don’t depend on the model “resisting” anything.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Faan Rossouw

Bio

Faan Rossouw is a security researcher focused on the intersection of threat hunting and agentic AI. Faan is currently working on aionsec.ai, a complete educational ecosystem that helps threat hunters master AI agents – from using them effectively, to building their own, to securing them. He also has a deep interest in developing robust systems that produce coherent synthetic telemetry for security model training at scale. In his free time, Faan likes to hang out with his family and go for forest runs with his dog.
Faan Rossouw | LinkedIn

Summit Talk: Jailbreak the Enterprise: Attacking Agentic AI & LLM Infrastructure
2026-08-14 15:00 - 15:25 (America/New_York)
Alicia Cuestas

Register Here

Your organization just hired an AI employee. Did you check its attack surface?

Join Alicia Cuestas, CEO of Open-Sec and offensive security professional, as she demonstrates how to exploit agentic AI systems by treating the LLM itself as a vulnerable jump-box. Using indirect prompt injection and tool-use manipulation, she’ll show you how attackers leak sensitive data, move laterally across internal APIs, and bypass system-level guardrails.

You’ll learn a technical methodology for attacking the AI infrastructure your organization is deploying right now — the same techniques red teamers and real-world adversaries will use against autonomous systems connected to your APIs, databases, and CLI tools.

If your org is deploying AI agents, someone is going to test this attack surface. Make sure it’s you first.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Alicia Cuestas

Bio

Alicia Cuestas is a seasoned offensive security professional, CTI specialist, and the CEO of Open-Sec. Bridging the gap between high-level business strategy and deep technical execution, she spends her days leading advanced Red Team operations and breaking into complex environments to help organizations stay one step ahead of real-world adversaries. With a strong foundation in Cyber Threat Intelligence, she doesn’t just simulate attacks—she mimics actual threat actor TTPs with precision. As both a leader and a practitioner, she is dedicated to pushing the boundaries of offensive security and sharing actionable insights with the community.
Alicia Cuestas | LinkedIn
Discord: @A.C.#8328

Summit Talk: Build Custom MCP Servers to Arm Your Threat Hunting Agents
2026-08-14 15:30 - 15:55 (America/New_York)
Matt Franz

Register Here

Can your SIEM find the needle in the haystack — or does it need a smarter partner?

Join Matt Franz, AI Security Lead at Bespin Global, as he shows you how to vibe-code a custom MCP Server for your SIEM in Go, whether or not your vendor already ships one.

In 25 minutes, you’ll benefit from Matt’s experience building tools for SentinelOne, Osquery, Coralogix, and Elastic and learn:

A method for building and reusing client libraries even when your vendor offers no SDK or API spec

Hands-on techniques for wiring your MCP Server into coding agents and agent frameworks

Practical approaches to tuning tool calling, prompting, and query guardrails to cut latency

Testing, observability, and caching strategies to optimize queries for your datasets

A git/markdown threat-hunting workflow you can operationalize into a persistent knowledge base

MCP security concerns are real, but local MCP servers can be built and run safely, with significant payoff for your team (human and agentic alike).
You might even save a token or two!

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Matt Franz

Bio

Matt Franz is the AI Security Lead at Bespin Global, where he builds products at the intersection of Cloud, SecOps, and AI. With over 25 years of experience in early-stage startups and mature enterprises, Matt blends the strategic perspective of an executive with the hands-on expertise of a builder. His background includes founding the Helix Cloud Operations team at Mandiant/FireEye, serving as VP of Production Engineering at Cofense, and directing global security operations at Ping Identity.

A former U.S. Army Intelligence Analyst, Matt currently focuses on large-scale data platforms, security analytics, infrastructure automation, and applying generative AI to offensive and defensive use cases. He builds daily in Python and Golang, with a focus on agentic blue team capabilities.

Summit Panel: Ask Us Anything: Straight Answers on AI
2026-08-14 16:00 - 16:30 (America/New_York)
John Strand, Bronwen Aker, Hayden Covington, Jason Haddix, BB King and Ashley Knowles

Register Here

What does AI actually change about how we attack, defend, and think about security, and what’s just noise?

Join John Strand, Founder/Owner of Black Hills Information Security, Jason Haddix, Hacker in Charge at Arcanum, and BHIS experts for a live, no-filter AMA to close out our AI summit.

Bring your hardest questions about AI agents in production, offensive and defensive tradecraft, what’s working in the real world, and where the industry is headed — and get straight answers from people who’ve spent the past year doing the work.

No agenda: just answers.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

Kip Boyle will teach the workshop Hunting Shadow AI on Sept. 25.

About the Instructor

John Strand

Bio

John Strand has both consulted and taught hundreds of organizations in the areas of security, regulatory compliance, and penetration testing. He is a coveted speaker and much-loved SANS teacher. John is a contributor to the industry-shaping Penetration Testing Execution Standard and 20 Critical Controls frameworks.

Jason Haddix

Bio

Jason Haddix, also known as jhaddix, is the CEO and “Hacker in Charge” at Arcanum Information Security. Arcanum is a world-class assessment and training company.

Jason has had a distinguished 20-year career in cybersecurity, previously serving as CISO of FLARE, CISO of Buddobot, CISO of Ubisoft, Head of Trust/Security/Operations at Bugcrowd, Director of Penetration Testing at HP, and Lead Penetration Tester at Redspin. He has also held positions doing mobile penetration testing, network/infrastructure security assessments, and static analysis. Jason is a hacker and bug hunter and is currently ranked 57th all-time on Bugcrowd’s bug bounty leaderboards. Currently, he specializes in recon, web application analysis, and emerging technologies. Jason has also authored many talks on offensive security methodology, including speaking at conferences such as DEFCON, Bsides, BlackHat, RSA, OWASP, Nullcon, SANS, IANS, BruCon, Toorcon and many more.

Bronwen Aker

Bio

Bronwen Aker is a cybersecurity professional, data scientist, and veteran technical educator with more than forty years of public speaking experience. She began her career as a full-stack web developer before moving into penetration testing and other aspects of cybersecurity, earning both a bachelor’s and a master’s degree in cybersecurity, along with industry certifications including GSEC, GCIH, and GCFE. Bronwen’s work bridges defensive security, applied data science, and the rapidly evolving landscape of artificial intelligence, where she focuses on making AI both reliable and safe.

Hayden Covington

Bio

Hayden Covington is a Senior Analyst in Black Hills Information Security’s SOC where he specializes in training, quality assurance, detection engineering, and investigative analysis. With a previous background as a SOC analyst for a US naval contractor, Hayden has extensive experience in Digital Forensics and Incident Response (DFIR), Security Orchestration, Automation, and Response (SOAR), and insider threat.

BB King

Bio

BB started pentesting professionally in 2008 at the largest financial services company you’ve never heard of. As the second hire on the application security team, he helped define standards and grow the team to a group of more than 30 testers. Through teaching in that environment and elsewhere, he has come to believe that the keys to success are a strong interest in how things work, a willingness to ask questions, and an ability to work through discouragement when things don’t work.

Ashley Knowles

Bio

Ashley Knowles joined Black Hills Information Security (BHIS) in Fall 2021. As a Security Consultant, Ashley’s role is to perform network (internal/external), social engineering, and cloud penetration tests, as well as participating in red team assessments. Since joining the infosec community in 2013, she has developed and taught hacking classes, worked as a security consultant, and been a team lead on a red team. Ashley serves as a mentor at a local high school’s cybersecurity class and, as someone who loves to learn and teach, she looks forward to developing and teaching classes that add to BHIS’s educational catalogue. In her free time, Ashely enjoys photography, hiking and exploring new places with her kids, and building Legos.

Keeping Things Local: Build Private LLMs for Your Team
2026-08-17 08:00 - 12:00 (America/New_York)

Prompt Engineering with Local LLMs
2026-08-17 13:00 - 17:00 (America/New_York)

Agentic AI Fundamentals for Cybersecurity Professionals
2026-08-18 13:00 - 17:00 (America/New_York)

Assessing AI Security: Model Context Protocol
2026-08-21 10:00 - 18:00 (America/New_York)

Workshop: Job Hunt Like a Hacker - 2026 Edition
2026-08-25 10:00 - 16:30 (America/New_York)

SOC Core Skills in the Age of AI
2026-08-31 12:00 - 2026-09-03 16:00 (America/New_York)

Professionally Evil CISSP Mentorship Program
2026-09-01 14:00 - 2026-09-06 16:00 (America/New_York)

OSINT Crash Course
2026-09-08 12:00 - 16:00 (America/New_York)

Professionally Evil Application Security: From Mapping to Exploitation
2026-09-14 10:00 - 2026-09-15 18:00 (America/New_York)

Ransomware Attack Simulation and Investigation for Blue Teamers
2026-09-21 10:00 - 2026-09-22 18:00 (America/New_York)

Hunting Shadow AI
2026-09-25 12:00 - 16:00 (America/New_York)

Professionally Evil API Testing: A Practical Course for Beginners
2026-09-28 08:00 - 16:00 (America/New_York)

Professionally Evil API Testing: AAA and Keys are Not Just for Cars
2026-09-29 08:00 - 12:00 (America/New_York)

Wild West Hackin' Fest Deadwood 2026
2026-10-06 08:00 - 2026-10-09 20:30 (America/Denver)

Active Directory Security and Hardening
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Attacking and Defending AI
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Advanced Endpoint Investigations
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Practical iOS Application Security Testing
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Cybersecurity Incident Command
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Defending M365 and Azure with Kevin Klingbile
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Enterprise DFIR Investigations: Ransomware & APT Attacks
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Foundations of Security Operations with Hayden Covington
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Fundamentals of Android Application Security Testing
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)
