Jeff Crume and Patrick Fussell from IBM's X-Force team share a real-world ethical hacking war story, demonstrating an attack from an 'assume breach' perspective. They break down how vulnerabilities in Identity and Access Management (IAM) and legacy systems can lead to a full compromise, starting from an insider threat and escalating to domain administrator privileges through advanced C2 attacks and lateral movement.
The video explores the risks of Agentic AI, which acts rather than just chats, and the emergence of 'Shadow AI'—unofficial, unmonitored AI systems. It proposes a unified control plane for AI security and governance, using a continuous loop of discovery, assessment, governance, and auditing to ensure safe automation. The concepts are illustrated with practical use cases in healthcare and public services.
Dr. Vijoy Pandey of Cisco's Outshift incubator discusses his vision for a future where multi-agent human societies collaborate to solve major scientific and physical challenges. He introduces AGNTCY, an open-source project for the "Internet of Agents," designed to address the critical hurdles of agent interoperability and trust through a Zero Trust framework and Task-Based Access Control (T-BACK).
Experts discuss the security implications of Windows 10's end-of-life, the transformative but cautious integration of AI into Security Operations Centers (SOCs), the promise and peril of AI-driven automated code repair, and the ongoing battle against social engineering attacks like payroll fraud.
VP of Security and Privacy at Google DeepMind, Four Flynn, discusses the landmark 'Operation Aurora' cyberattack, the 'defender's dilemma,' and how AI is now being used both to create novel threats and to build a new generation of defenses to find and automatically patch software vulnerabilities.
A discussion on novel methods for hijacking AI agents through social engineering, the evolution of DDoS attacks, the legacy of Zero Trust, and the glaring security flaws in AI training data apps.