SEC536: Adversarial AI - Penetration Testing AI Systems

Virtual
Session details coming soon!
*Sponsored by Netwrix
Virtual
As AI agents begin acting on behalf of people and applications, security teams need to know what is actually making each request. This session explores how Zero Trust and microsegmentation can help verify access and control where AI-driven activity can go.
*Sponsored by Algosec
Virtual
Your Zero Trust strategy assumes segmentation holds. Does it? Once attackers are inside, your router, switch and firewall configurations decide whether they are contained or reach critical systems. Boundaries that look right on paper can fail in practice, and one broad rule can quietly override a restrictive one.
Join Titania Chief Product Officer Ian Robinson to see how Nipper OmniSight validates those configurations directly–without agents or live-network scanning–so you can prove segmentation holds, constrain lateral movement and fix the riskiest gaps first. Leave knowing where your Zero Trust strategy stops, and how to extend it.
*Sponsored by Titania
Virtual
Virtual
Zero Trust architectures verify users, sessions, and network traffic, but most still assume the underlying devices are trustworthy. Servers, laptops, network appliances, and AI infrastructure all run firmware and components that attackers can modify, and few organizations have a way to check them. This session covers how adversaries target device firmware, hardware, and the IT and AI infrastructure supply chain, and how to bring device integrity verification into a Zero Trust program.
*Sponsored by Eclypsium
Virtual
You've seen the analyst grids that sort vendors into four boxes to show who's leading and who's disrupting a market. We made one of our own, this time ranking the threats those tools are built to stop.
Welcome to the Huntress Tragic Quadrant, our decidedly less magical look at the attack techniques causing the most trouble right now.
Pulling from data across the 300,000 businesses we protect, and working with our own security experts, we mapped the tactics attackers are running today: ClickFix, device code phishing, AI platform abuse, and more. Each one is plotted by how often we see it and how much damage it causes, so you know exactly where to focus your defenses first.
*Sponsored by Huntress
Virtual
AI-powered cyber attacks are already here—and they're moving faster than traditional security controls can respond. With frontier AI models like Anthropic's Mythos, attackers can automate reconnaissance, exploit vulnerabilities, compromise identities, and escalate privileges in minutes. Traditional security architectures were built around the assumption that defenders would have time to detect, investigate, and respond. That assumption no longer holds. As attacks accelerate to machine speed, security must move to runtime—and identity is becoming the control plane for real-time protection.
In this presentation, Rob Ainscough and Colin Ferris of Silverfort, explores how AI-powered attacks are reshaping the threat landscape, why identity is emerging as the critical enforcement layer, and how organizations can adapt their security strategies to defend against frontier AI threats. You'll learn how to:
*Sponsored by Silverfort
Virtual
Virtual
Enterprise identity models rest on an assumption that is quietly dissolving: that a session belongs to a human. AI agents now authenticate, browse, click, and transact on behalf of employees—frequently inside the browser using the user’s own credentials and session, with no durable record that a machine, not a person, took the action. The result is an identity layer that can still answer “who logged in” but increasingly cannot answer “who acted.”
This session examines what agentic AI does to the foundations of identity-centric security and postures built on Zero Trust. We will look at where delegated agent activity breaks existing assumptions—attribution, least privilege, consent, and non-repudiation—and why the use of agentic AI poses an identity governance problem. From there, we will explore emerging approaches to distinguishing human activity from agent movement at the point of action, scoping agent authority independently of the user, and establishing observability over what AI can do with enterprise access. The goal is a practical set of questions security leaders should be asking now, before agent populations outgrow the governance models meant to contain them.
*Sponsored by Menlo
Virtual
Are you getting the most value out of your identity tools? Many organizations follow frameworks like CISA’s Zero Trust Maturity Model to guide their practice, but oftentimes they don’t see identity as central to strategy or business outcomes. The Okta Identity Maturity Model is a roadmap that helps organizations establish a mature identity foundation, enabling them to focus on strategic company imperatives, such as agentic AI implementations.
In this 30-minute session, we’ll walk you through what identity maturity journey looks like and pair this with live Okta demos to help you advance your own identity practice. We’ll discuss the operational friction and security risks typical at each stage, and explain how to optimize your security and compliance, operational agility, and end-user experiences using Okta’s identity solutions.
*Sponsored by Okta
Virtual
*Sponsored by Netwrix
Virtual
Virtual