A pharmaceutical company discovered 35 unauthorized AI tools despite having a formal approval process. At [un]prompted II, two former CISOs revealed how a redesign quadrupled AI requests and slashed approval times.
Featured
At [un]prompted II, Gadi Evron reflects on AI replacing hacker skills, cybersecurity jobs and why the hacking profession must reinvent itself.
Endor Labs researcher Peyton Kennedy uncovered 14 vulnerabilities across seven AI platforms, exposing paths from prompt injection to remote code execution and data theft. (Sponsored by Endor Labs)
CYBR.SEC.CON 2026
STARTS IN
--
Days
--
Hours
--
Minutes
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
Own Your World Model
A kilometer of fiber, two houses, some very heavy machinery, and the world cybersecurity is supposed to protect.
AI Is Finding Old Vulnerabilities Faster Than We Can Fix Them
LLM-assisted bug hunting is uncovering critical vulnerabilities in old software such as FATFS, exposing a growing cybersecurity problem: AI is accelerating vulnerability discovery while patching and remediation struggle to keep pace.
Crypto Agility: Preparing Encryption for Quantum Threats
As quantum computers become cryptographically relevant, agentic networks will have to keep one step ahead of the decryption storm.
Building Determinism in an AI World: Why AI Agents Need Proof of Control
AI agents operate unpredictably, creating security blind spots that traditional controls can't address. The emerging Proof of Control standard aims to make agent actions auditable, traceable and independently verifiable.
AI Spend as a Security Control
What if the next attacker doesn’t want your data, but your AI budget? Why usage-based billing is a security risk, and what to do before the invoice arrives.
Latest Articles
See all
[un]prompted IIAI self-healing software
AI Agents and Self-Healing Software: What's Next
At [un]prompted II, Gadi Evron explored AI agents that detect vulnerabilities, patch live software and verify code before deployment.
Agentic AIAccess ControlEndor Labs
AI Agents Are Getting More Access Than Security Teams Can Control
As enterprises rush to deploy AI agents, Endor Labs researcher Peyton Kennedy warns that excessive privileges, weak isolation and misplaced trust are expanding the attack surface. (Sponsored by Endor Labs)
Critical PHP VulnerabilitiesPHP2ShellAI and Vulnerability Management
Certificate Authorities, PHP Runtimes, and the Limits of Defense-in-Depth in the “Vulnpocolypse” Era
The eMudhra vulnerability exposed a years-long window of significant certificate risk. The PHP2Shell vulnerability is ubiquitous. Last week’s five vulnerabilities targeted many of the security controls assumed to be trustworthy.
[un]prompted IIGitHub prompt injection
Who Is Prompt-Injecting Coding Agents? A Scan of 86 Million GitHub Items
At [un]prompted II, Radware researchers reveal how hidden prompt injections found in a scan of 86 million GitHub items can manipulate AI coding agents, redirect workflows and threaten sensitive data.
[un]prompted IIAgentic AIMicrosoft Security
From DARPA AIxCC to Microsoft FORGE Lab: Lessons Building Hyperscale AI Code Scanning Tools
Microsoft FORGE Lab's AI agents helped find 140 Windows CVEs. At [un]prompted II, Taesoo Kim explains why fixing bugs is the bigger challenge.
[un]prompted IIAgentic AICapsem
AI Agent Sandboxing: Google Researcher Unveils Capsem
Google DeepMind's Elie Bursztein presents Capsem at [un]prompted II, using hardware isolation to secure AI agents without sacrificing speed.
![[un]prompted II: Full Coverage](https://storage.ghost.io/c/ab/67/ab676516-71e3-473d-8f73-9e0692f5aaee/content/images/size/w652/format/webp/2026/10/20db4c11-e6e0-4989-9cf5-9b6e767a8f5f.png)
[un]prompted IIAgentic AI
[un]prompted II: Full Coverage
CYBR.SEC.Media's full coverage of [un]prompted II 2026: AI agent security research, expert talks, debates and analysis from San Francisco, October 27–29.
Podcasts & Video
See all
Video
CISO Series Podcast: Live at CYBR.SEC.CON. 2026
Podcast
AI, Risk, and Ewoks with Peyton Kennedy
Podcast
Building the Better Mouse Trap with Craig Wood
Podcast
Chasing the White Rabbit with Jacob Krell
Video
CrowdStrike 2026 Threat Hunting Report - Quang "Q" Nguyen
Video
The SOC in Transition: AI, Automation, and the Human Role - Jay Gregg and Daniel Morris
Video
Beyond the Black Box: Demanding Inspectability for Cyber Visibility - Blake Gilson
Sponsored
Sponsored