Oct 10, 2026

The Lethal Trifecta Is Already on Your Laptops — Michael Patterson, Coder

Michael Patterson of Coder explains Simon Willison's lethal trifecta: private data access, exposure to untrusted content, and external communication, and why coding agents running on developer laptops hit all three. He covers prompt injection, the organizational blockers to enterprise agent rollout such as shadow AI and alert fatigue, and three architectural guardrails: cloud development environments, a model proxy, and an agent firewall.

Sep 30, 2026

The Death of the Code Review: What the Data Actually Says — Laurie Voss, Arize AI

Agents have multiplied code output, but human review cannot keep pace, and reviewer effectiveness collapses past roughly 400 lines. This talk by Laurie Voss surveys what OpenAI, METR, Cognition, Cursor, GitHub, Carlini, and Bun are doing about it, from mergeability benchmarks and multipass automated review to prompt injection and production monitoring as the last line of defense.

Sep 24, 2026

AI Engineer Paris 2026 Opening Keynotes: Mistral, Langfuse & Sizzy | Day 1

The AI Engineer Paris 2026 main stage featured discussions on the historical impact of AI as a general-purpose technology, the evolving landscape of AI engineering towards sophisticated "software factories," and Mistral AI's strategic vision for building frontier AI, ensuring agentic safety, and addressing data sovereignty through advanced models and infrastructure.

Sep 14, 2026

We let an AI agent execute Bash and lived to talk about it — Sarah Sanders, PostHog

Sarah Sanders, a context engineer at PostHog, discusses the security implications of building an agentic CLI tool, "The Wizard," which automates developer workflows. She highlights the inherent risks of agents capable of executing commands, labeling it a "malware starter pack," and details how PostHog evolved its security posture from basic allow lists to a sophisticated "defense in depth." Key insights include the principle that "attacks compose, code review doesn't," the discovery of internal supply chain vulnerabilities through the "Context Mill," and the development of "The Warlock," a deterministic scanner using YARA rules. Sanders emphasizes the critical distinction between deterministic enforcement and probabilistic judgment, explaining how an LLM-powered "Triage" layer acts as an adviser (failing closed) rather than a bouncer, preserving the integrity of their security model.

Aug 26, 2026

Who’s afraid of an open-weight model? GLM, context bombing and post-Black Hat attacks

This episode dives into GLM-5.3's advanced vulnerability discovery, debating its potential for good or harm. It then explores "context bombing," an innovative defensive use of prompt injections, and analyzes recent social engineering attacks targeting cybersecurity pros after the Black Hat conference, emphasizing human vulnerability and the need for robust AI defenses.

Aug 19, 2026

Why Your Enterprise Tech Stack Isn’t Ready for AI Agents — Christopher Lovejoy & Saul Howard

Chris Lovejoy and Saul Howard discuss the critical challenges of deploying AI agents in highly regulated enterprise environments, particularly healthcare. They advocate for a "constraints-first" architectural approach, proposing three core primitives – an immutable event log for auditability, schema-driven object storage for sensitive data, and human-agent equivalency for seamless escalation – which collectively enable privacy-preserving evaluations as a fundamental byproduct of the system design, rather than being an afterthought.