[un]prompted Security Practitioner Con 2026

Day 2 | Stage 2 Senior Security Engineer from Dave discusses vibe coding with AI tools like Cursor being fast but quietly bypassing traditional AppSec controls. Demos MCP server injecting security context directly into AI coding loop. Before code generation, pulls threat models, security requirements, OWASP guidance. After generation, verifies output for vulnerabilities and security standards comp...

Day 2 | Stage 2 Principal Security Engineer and Application & GenAI Security from Netflix discuss getting tired of LLMs crying wolf about every string concatenation. Built agentic pipeline that thinks before it screams. Explores improving accuracy and actionability of LLM-driven first-party vulnerability discovery in real-world codebases. Therapy session for anyone who mass-closed 200 AI-gener...

Day 2 | Stage 2 AI Red Teaming Specialist from CrowdStrike presents 100+ textual obfuscation methods against 9 leading AI models with 17,000+ malicious prompts. LLMs designed with robust multilingual support create new security vulnerability. Systematic empirical study reveals significant gaps in current AI safety systems. Gains insights into evolving prompt injection attack surface and which enco...

Day 2 | Stage 2 AI Researcher from Pebblebed covers counterintuitive lessons from training on 125K Linux kernel commits. Most obvious ML-based vulnerability detection approaches failed. Why "hard negatives" hurt performance, why subsystem boundaries are where bugs hide, and why average kernel security bug survives 2.1 years undetected. Practical takeaways for building vuln discovery systems. Jenny...

Day 2 | Stage 2 Lead Security Data Scientist and Staff Security Data Scientist from Salesforce discuss securing 12,000 autonomous agents when anyone can build one. Static rules alone can't catch abuse without drowning SOC in noise. Process millions of daily prompts across thousands of organizations. Created behavioral baselines like Asset Rarity and Query Complexity, distilling unpredictable activ...

Day 2 | Stage 2 CEO of AI Sequrity Company discusses running modern AI agents with security guarantees, even for complex setups such as computer use. Ilia Shumailov is CEO, AI Sequrity Company. Watch on YouTube: https://www.youtube.com/watch?v=NU6l0Qcf5rU

Day 2 | Stage 2 Senior Staff Machine Learning Engineer from Palo Alto Networks walks through production AI pipeline turning millions of unstructured threat reports into queryable knowledge graph. Extracts threats and relationships from raw OSINT data. Architectural decisions making it work at scale. Dongdong Sun is Senior Staff Machine Learning Engineer, Palo Alto Networks. Watch on YouTube: https...

Day 2 | Stage 2 Principal Cyber Data Scientist from Expel compares traditional ML and LLMs for classification tasks. Xenia Mountrouidou is Principal Cyber Data Scientist, Expel. Watch on YouTube: https://www.youtube.com/watch?v=fAmr0N2rHIU