Day 2 | Stage 2

Senior Security Engineer from Dave discusses vibe coding with AI tools like Cursor being fast but quietly bypassing traditional AppSec controls. Demos MCP server injecting security context directly into AI coding loop. Before code generation, pulls threat models, security requirements, OWASP guidance. After generation, verifies output for vulnerabilities and security standards compliance.

Srajan Gupta is Senior Security Engineer, Dave.

Watch on YouTube: https://www.youtube.com/watch?v=DmO3cVOijNY

Day 2 | Stage 2

Principal Security Engineer and Application & GenAI Security from Netflix discuss getting tired of LLMs crying wolf about every string concatenation. Built agentic pipeline that thinks before it screams. Explores improving accuracy and actionability of LLM-driven first-party vulnerability discovery in real-world codebases. Therapy session for anyone who mass-closed 200 AI-generated "findings."

Scott Behrens is Principal Security Engineer, Netflix.

Justice Cassel is Application & GenAI Security, Netflix.

Watch on YouTube: https://www.youtube.com/watch?v=bxwEZMhqeR0

Day 2 | Stage 2

AI Red Teaming Specialist from CrowdStrike presents 100+ textual obfuscation methods against 9 leading AI models with 17,000+ malicious prompts. LLMs designed with robust multilingual support create new security vulnerability. Systematic empirical study reveals significant gaps in current AI safety systems. Gains insights into evolving prompt injection attack surface and which encoding mechanisms pose greatest threat.

Joey Melo is AI Red Teaming Specialist, CrowdStrike.

Watch on YouTube: https://www.youtube.com/watch?v=nbXqlc9HjWU

Day 2 | Stage 2

AI Researcher from Pebblebed covers counterintuitive lessons from training on 125K Linux kernel commits. Most obvious ML-based vulnerability detection approaches failed. Why "hard negatives" hurt performance, why subsystem boundaries are where bugs hide, and why average kernel security bug survives 2.1 years undetected. Practical takeaways for building vuln discovery systems.

Jenny Guanni Qu is AI Researcher, Pebblebed.

Watch on YouTube: https://www.youtube.com/watch?v=93jhfuL-ndo

Day 2 | Stage 2

Lead Security Data Scientist and Staff Security Data Scientist from Salesforce discuss securing 12,000 autonomous agents when anyone can build one. Static rules alone can't catch abuse without drowning SOC in noise. Process millions of daily prompts across thousands of organizations. Created behavioral baselines like Asset Rarity and Query Complexity, distilling unpredictable activity into fewer than 30 high-fidelity daily alerts.

Matt Rittinghouse is Lead Security Data Scientist, Salesforce.

Millie Huang is Staff Security Data Scientist, Salesforce.

Watch on YouTube: https://www.youtube.com/watch?v=PtWwrOm3BeE

Day 2 | Stage 2

CEO of AI Sequrity Company discusses running modern AI agents with security guarantees, even for complex setups such as computer use.

Ilia Shumailov is CEO, AI Sequrity Company.

Watch on YouTube: https://www.youtube.com/watch?v=NU6l0Qcf5rU

Day 2 | Stage 2

Senior Staff Machine Learning Engineer from Palo Alto Networks walks through production AI pipeline turning millions of unstructured threat reports into queryable knowledge graph. Extracts threats and relationships from raw OSINT data. Architectural decisions making it work at scale.

Dongdong Sun is Senior Staff Machine Learning Engineer, Palo Alto Networks.

Watch on YouTube: https://www.youtube.com/watch?v=lib_KZKISOo

Day 2 | Stage 2

Principal Cyber Data Scientist from Expel compares traditional ML and LLMs for classification tasks.

Xenia Mountrouidou is Principal Cyber Data Scientist, Expel.

Watch on YouTube: https://www.youtube.com/watch?v=fAmr0N2rHIU