Day 1 | Stage 2

AI Security Researchers from AISLE discuss AI finding 12 zero-days in OpenSSL (one of the most audited codebases on the planet). Three had been hidden for over two decades. AI has fundamentally changed vulnerability discovery economics—what once required elite expertise and months can now be done in hours. Explores what it takes to make AI vulnerability discovery effective at scale.

Adam Krivka is AI Security Researcher, AISLE.

Ondrej Vlcek is Co-founder & CEO, AISLE.

Watch on YouTube: https://www.youtube.com/watch?v=IjL2qN1KDe8

Day 2 | Stage 1

CEO of Trail of Bits explains strategy to turn the consulting firm into an AI-native organization. AI isn't a feature to "adopt"—it's a force that commoditizes effort and shortens half-life of best practices, especially in security work. Core idea is a compounding operating system built from incentives, defaults, guardrails, and verification loops letting humans and autonomous agents ship high-rigor work at dramatically higher throughput.

Dan Guido is CEO, Trail of Bits.

Watch on YouTube: https://www.youtube.com/watch?v=kgwvAyF7qsA

Day 2 | Stage 1

CISO from Sysdig discusses two AI-assisted attack campaigns caught: an 8-minute AWS escalation from stolen creds to full admin, and EtherRAT (fileless Node.js implant using Ethereum smart contracts for C2). Neither introduced novel attack primitives but compressed known techniques to speeds/scales breaking traditional detection models. Introduces behavioral methodology for attributing AI-assistance and shows why blockchain C2 is actually the defender's greatest forensic gift.

Sergej Epp is CISO, Sysdig.

Watch on YouTube: https://www.youtube.com/watch?v=xCtcQkJBReQ

Day 2 | Stage 1

Security Engineer from Datadog discusses operationalizing Apple's partial open-source codebase for offensive security. While Apple is known for closed ecosystem, significant portions of macOS and iOS are open source including security components. Walks through integrating generative AI and AI tooling into workflow for automating triage of open-source diffs, identifying code changes with high exploit potential.

Olivia Gallucci is Security Engineer, Datadog.

Watch on YouTube: https://www.youtube.com/watch?v=_f30RyXc_8Q

Day 2 | Stage 1

Director of Research at Interrupt Labs built an agentic AI to hunt bugs for Pwn2Own. Found vulnerability in Samsung's own AI assistant, Bixby. Shows how it was wired up, what worked, what didn't, and why letting machines hunt bugs made Pwn2Own fun again.

Georgi G is Director of Research, Interrupt Labs.

Watch on YouTube: https://www.youtube.com/watch?v=c5XAvRbma6Y

Day 2 | Stage 1

AI Security Lead from Stripe addresses the prompt injection elephant in the AI Security room—there's no deterministic defense, yet urgency driving AI adoption means many teams feel forced to accept risk or hobble agents. Presents a third path: containment. Shows Stripe's architectural guardrails for protecting agent platform: preventing data exfiltration through controlled egress, UI patterns for human confirmation flows, enforcing guardrails at CI-time using tool annotations.

Andrew Bullen is AI Security Lead, Stripe.

Watch on YouTube: https://www.youtube.com/watch?v=cNE7P5FkqR8

Day 2 | Stage 1

AI Security Researcher & Security Engineer from Dropbox shows what actually breaks when building agents used every day. Walks through real patterns from building specialized agents: capability bounding to prevent tool abuse, prompt injection detection requiring real-world tuning, multi-agent memory isolation failures and fixes, OAuth device flow for headless operation. Includes live demos and actual code.

Brooks McMillin is AI Security Researcher & Security Engineer, Dropbox.

Watch on YouTube: https://www.youtube.com/watch?v=SzLVXAzjOEU

Day 2 | Stage 1

Staff Security Engineer from Airbnb addresses how security agents remain rooted in narrow, outcome-only benchmarks. These evaluations tell whether agent produced correct answer but not "how" or whether behavior remains stable once deployed. In practice, security is connected end-to-end workflow (find → confirm exploit → patch → validate loop). Introduces practical, capability-centric framework for evaluating security agents.

Mudita Khurana is Staff Security Engineer, Airbnb.

Watch on YouTube: https://www.youtube.com/watch?v=uImn7_dmeoY

Day 2

Flash talks from Ilia Shumailov, Rob Joyce, Ragini Ramalingam, and more.

Day 2 | Stage 1

Principal Engineer from Google Workspace Security discusses GenAI agents navigating a perilous "Perfect Storm" of access to sensitive data, exposure to untrusted content, and capability to execute external commands. Technical deep dive into architectural principles and defense strategies protecting Gemini and Google Workspace ecosystem. Shares real-world attacks including vulnerability where attacker could hijack agent via calendar invitation.

Nicolas Lidzborski is Principal Engineer,Google Workspace Security.

Watch on YouTube: https://www.youtube.com/watch?v=J9B6Ez2ynvk