Day 1 | Stage 1

Shows how modern KYC workflows that delegate passport parsing, database writes, and customer verification to AI-driven extraction agents are vulnerable. Document-embedded injects and compliance controls together steer AI agents into cross-record reads and writes, enabling data theft and exfiltration without bypassing access controls. Presents a scalable exploitation approach across KYC extraction agents using LLM-generated high-success payloads.

Sean Park is Principal Threat Researcher, TrendAI.

Watch on YouTube: https://www.youtube.com/watch?v=XVos-fhnsek

Day 1 | Stage 1

FENRIR has discovered 100+ vulnerabilities across AI infrastructure since mid-2025, with 21 CVEs patched including multiple CVSS 9.8 RCEs. Presents FENRIR's multi-stage verification pipeline: static analysis pre-triage, two-layer LLM validation (L1 prune → L2 deep-verify), and confidence-based human routing. Covers what worked (research-backed context generation, CWE-specific agents, pattern recognition) and what failed.

Peter Girnus is Senior Threat Researcher, Trend Micro's Zero Day Initiative (ZDI).

Derek Chen is Vulnerability Researcher, TrendAI.

Watch on YouTube: https://www.youtube.com/watch?v=c6_bRzHCf3U

Day 1 | Stage 1

The most important attendee in meetings is now the AI notetaker that assigns action items, determines importance, and creates the official record. Covers steering techniques for influencing what the notetaker captures, risks from governance gaps when notetakers become infrastructure, opportunities for reliable incident response systems of record, and enterprise readiness frameworks.

Joe Sullivan is CEO, Ukraine Friends and Joe Sullivan Security.

Watch on YouTube: https://www.youtube.com/watch?v=oXj1Kee_crw

Day 1 | Stage 1

Hardware hacking with AI at the controls. Gave Claude access to hardware lab (Laptop, USB hub, XYZ platform, PICO2, Jlink-pro, Oscilloscope, Chipshouter and targets). Within 7 minutes it pwned an LPC chip that took 6 weeks of human glitching. Within a month it rewrote the entire glitching platform and now autonomously hacks new targets while the author sleeps.

Adam Laurie (Major Malfunction) is Hardware Hacker turned CISO, Alpitronic.

Watch on YouTube: https://www.youtube.com/watch?v=_tqqnkemYsg

Day 1 | Stage 1

Post-mortem of 2025 Shai-Hulud attacks leaking massive victim data onto GitHub. Shows real-world evolution from simple "vibe-coded" scrapers to multi-agent triage engines that parallelize victimology and automate secret-impact analysis. Covers what actually worked, where ground has shifted, how "lazy" AI fails, with practical prompts, scripts, and lessons learned.

Rami McCarthy is Principal Security Researcher, Wiz.

Watch on YouTube: https://www.youtube.com/watch?v=6P77Zbo2TA4

Day 1 | Stage 1

Deepdive on personal AI infrastructure system and the open-source project that mirrors it.

Daniel Miessler is Founder, Unsupervised Learning.

Watch on YouTube: https://www.youtube.com/watch?v=l9CPmPk2R-M

Day 1 | Stage 1

Large language models are now capable of automating attacks previously only possible by human adversaries. Discusses several ways adversaries could misuse current models to cause harm at larger scale and lower cost than currently possible. Recent state-of-the-art models can find 0-day vulnerabilities in large software projects extensively tested by humans for decades. These new capabilities alter the threat landscape and require rethinking security.

Nicholas Carlini is Research Scientist, Anthropic.

Watch on YouTube: https://www.youtube.com/watch?v=1sd26pWhfmg

Day 1 | Stage 1

AI IDEs and coding agents expand the practical attack surface of development workflows by introducing new paths from untrusted workspace inputs to high-impact actions. Presents a catalog of exploitation patterns derived from vulnerability research across major AI-assisted IDEs and agents (OpenAI Codex, Amazon Kiro, Google Antigravity, Cursor, others), organized by attacker effort and trigger model. Provides repeatable playbook and checklist for security teams.

Piotr Ryciak is AI Red Teamer, Mindgard.

Watch on YouTube: https://www.youtube.com/watch?v=mKb_IKVrcIc

Day 1 | Stage 2

CISO from FFF Enterprises shares strategy and implementation of a risk-based AI governance committee in a healthcare services firm, discussing successes and failures along the way.

Billy Norwood is CISO, FFF Enterprises.

Watch on YouTube: https://www.youtube.com/watch?v=sh9LpVM1QBM

Day 1 | Stage 2

Director of Enterprise Security at Snowflake shares perspectives on supporting responsible AI adoption within a large, dynamic enterprise environment. Discusses practical approaches to establishing governance frameworks, fostering cross-functional collaboration, and embedding security considerations into emerging technologies.

Ragini Ramalingam is Director, Enterprise Security, Snowflake.

Watch on YouTube: https://www.youtube.com/watch?v=RF4gR5uviv0