Day 2 | Stage 1

From Block discuss red-teaming their own AI agent, goose (Block's open source AI agent). Best defense is good offense. When releasing goose, proactively identified how attackers will attempt to abuse it. Enter: Operation Pale Fire.

Wes Ring is Security Engineer, Block.

Josiah Peedikayil is Security Engineer, Block.

Watch on YouTube: https://www.youtube.com/watch?v=SUa1nta8FGQ

Day 2 | Stage 1

Member of Technical Staff at Perplexity shares experience training and deploying BrowseSafe for detecting prompt injection in production browser agents. Deploying AI agents that browse the web creates critical security challenge preventing malicious websites from hijacking agent behavior through embedded prompt injections. Built BrowseSafe-Bench—a realistic benchmark with attacks in high-entropy HTML pages. Fine-tuned Mixture-of-Experts model (Qwen-30B) achieves ~0.91 F1 scores with sub-100ms latency.

Kyle Polley is Member of Technical Staff, Perplexity.

Watch on YouTube: https://www.youtube.com/watch?v=Fzgqx1MauJg

Day 2 | Stage 1

Software Engineer for Internal Threat Detection at Datadog explores how AI can help security practitioners navigate overwhelming telemetry volumes. Automated three parts of threat hunting workflow: hypothesis-driven query generation, iterative refinement, narrowing toward pivotal evidence. Shares learnings evolving from single agent to orchestrator-subagent system focusing on trust, hallucinations, evaluations amidst real-world constraints.

Arthi Nagarajan is Software Engineer, Internal Threat Detection, Datadog.

Watch on YouTube: https://www.youtube.com/watch?v=EZSLjT8O2rw

Day 2 | Stage 1

V.P. Data Science and Sr. Director from GreyNoise Labs built Orbie—an AI agent operating on internet-scale honeypot data to surface emergent threats, identify campaigns, and write detection rules. Shares what works, what doesn't, and specific campaigns caught that traditional methods missed. Shows how domain expert knowledge embedded in tooling lets LLMs operate on billions of network sessions.

Bob Rudis is VP Data Science, Security Research & Detection+Deception Engineering, GreyNoise Labs.

Glenn Thorpe is Sr. Director, Security Research & Detection Engineering, GreyNoise Intelligence.

Watch on YouTube: https://www.youtube.com/watch?v=k19CmI_Ni3M

Day 2 | Stage 1

Panel of creators who vibecoded at the conference to make it better, creating tools at the conference. Micro talks on what they did.

Rob T. Lee is Chief AI Officer (CAIO) and Chief of Research, SANS Institute.

Glenn Thorpe is Sr. Director, Security Research & Detection Engineering, GreyNoise Intelligence.

Dan Hubbard is VP of Research, Vectra AI.

Sergej Epp is CISO, Sysdig.

Watch on YouTube: https://www.youtube.com/watch?v=2_Vq4vY5EaA

Day 2 | Stage 1

Zenity Labs was supposed to present their research on agentic browser attacks, but the speakers were stranded in Israel when the airspace closed. Gadi stepped in to present their slides cold — he saw them for the first time on stage — in a session he calls PowerPoint karaoke. The research covers two attack chains targeting Comet, an agentic browser: the first uses a malicious calendar invite to navigate Comet to an attacker-controlled site and exfiltrate documents; the second abuses Comet's interaction with 1Password's autocomplete to gain access to the emergency kit.

Gadi Evron is CEO of Knostic, presenting on behalf of Zenity Labs.

Watch on YouTube: https://www.youtube.com/watch?v=yUqBC3mc544

Day 2 | Stage 1

Founder & CEO of Barding Defense short talk.

Jackson Reed is Founder & CEO, Barding Defense.

Watch on YouTube: https://www.youtube.com/watch?v=j2_VsH6aNzY

Day 2 | Stage 2

Staff Engineer from Zenity discusses how AI agents quietly created a new external attack surface: copilots, custom agents, AI middleware deployed to internet often without anyone realizing they're reachable, enumerable, or over-permissioned. Shows how attackers can find agents in the wild and used these details to find 1000s of exposed agents. Covers measuring exposure, proving obscurity fails, detecting threat-actor agent-focused recon.

Roey Ben Chaim is Staff Engineer, Zenity.

Watch on YouTube: https://www.youtube.com/watch?v=N0DukgZSREo

Day 2 | Stage 2

Red Team Director discusses how agentic AI in personal assistants, developer tools, and enterprise platforms can be infected with promptware—engineered prompts acting like malware. Demonstrates attacks and exploit chains including delayed tool invocation and intent activation tricks bypassing existing mitigations. Enables persistence, lateral movement, promptware-powered C2, and data exfiltration. Several exploit demos have not been publicly disclosed before.

Johann Rehberger is Red Team Director.

Watch on YouTube: https://www.youtube.com/watch?v=zVUm23P7ZNg

Day 2 | Stage 2

Senior Security Engineer & AI Security Researcher from Snap addresses how prompt injection filters and coarse IAM roles consistently fail in multi-agent setups. Shows working alternative: treating agent authority as ephemeral, cryptographic warrants that attenuate on delegation (inspired by Macaroons/UCAN). Task-scoped, holder-bound, verified offline by tools in microseconds. Even fully compromised agent can't escalate or exfiltrate beyond bounds. Includes live demos and benchmarks.

Niki Aimable Niyikiza is Senior Security Engineer & AI Security Researcher, Snap.

Watch on YouTube: https://www.youtube.com/watch?v=bw928cFShK4