Agenda

Security in an Agentic World

The agentic era is here. Autonomous AI agents, from email copilots and compliance checkers to fully autonomous security operations triage bots, are quickly maturing and being deployed across the enterprise. The rapid evolution from predictive LLMs to goal- and action-oriented agents represents a fundamental shift, bringing both unprecedented operational efficiency and profound security challenges. Put simply, our traditional governance and security frameworks are critically lagging behind agent capability.

In this session, we will explore the security risks and opportunities of the agentic world and how agents, with their ability to use tools, access data, and act on behalf of users, create new attack surfaces and a class of “shadow automation” risk.

Current security models are failing to keep up with the speed, complexity, and scale of modern software. Security professionals are doing their jobs—and yet, attacks still get through.
In this session, hear the story of four people caught in the aftermath of a breach: a developer, a SecOps lead, an AppSec engineer, and a compliance officer. All working in good faith. All stuck in a broken system.

This talk will introduce a new blueprint for modern software defense, modeled on the smartest of cities that have instrumented infrastructure to see, adapt, and respond in real time. Walk away with a prescriptive framework – based on context, coordination, and culture – that teams can use to stop guessing and start defending.

APIs and Large Language Models (LLMs) are transforming digital operations but also expanding the attack surface for cyber threats. As organizations integrate AI and interconnected applications, risks such as data leakage, prompt injection, and model poisoning rise sharply. This session explores the evolving security landscape, highlighting real-world attack vectors and the OWASP threats to GenAI and APIs. It emphasizes a multi-layered defense strategy—combining API security, data protection, and AI threat mitigation—to prevent data breaches, protect sensitive information, and maintain trust in AI-driven systems.