![AI Agent Security Gaps Take Center Stage at [un]prompted II](https://storage.ghost.io/c/ab/67/ab676516-71e3-473d-8f73-9e0692f5aaee/content/images/size/w1304/format/webp/2026/10/Screenshot-2026-10-26-at-9.31.22---AM.png)
A review of submissions during the CFP found 71% of 490 conference submissions focused on AI agents, exposing gaps in production defenses, vulnerability remediation and threat intelligence.
Featured
Cybersecurity pioneer Sean Bodmer leaves a lasting legacy as a threat intelligence researcher, author, inventor and mentor who advanced cyber counterintelligence, championed deception technology and helped wounded veterans build careers in security.
Large enterprises are naming AI security leaders inside security organizations while leaving AI governance accountability with CIOs, chief AI officers, and CTOs, a 1,400-respondent report finds.
CYBR.SEC.CON 2026
STARTS IN
--
Days
--
Hours
--
Minutes
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
Own Your World Model
A kilometer of fiber, two houses, some very heavy machinery, and the world cybersecurity is supposed to protect.
AI Is Finding Old Vulnerabilities Faster Than We Can Fix Them
LLM-assisted bug hunting is uncovering critical vulnerabilities in old software such as FATFS, exposing a growing cybersecurity problem: AI is accelerating vulnerability discovery while patching and remediation struggle to keep pace.
Crypto Agility: Preparing Encryption for Quantum Threats
As quantum computers become cryptographically relevant, agentic networks will have to keep one step ahead of the decryption storm.
Building Determinism in an AI World: Why AI Agents Need Proof of Control
AI agents operate unpredictably, creating security blind spots that traditional controls can't address. The emerging Proof of Control standard aims to make agent actions auditable, traceable and independently verifiable.
AI Spend as a Security Control
What if the next attacker doesn’t want your data, but your AI budget? Why usage-based billing is a security risk, and what to do before the invoice arrives.
Latest Articles
See all
Critical PHP VulnerabilitiesCybersecurity Job DescriptionsCybersecurity HiringAI and HiringIT-OT convergenceCapture The FlagAI vs. CTFHow to CISOCYBR.SEC.Media weekly Updates
Cybersecurity Job Postings Plunge 26%, AI Upends CTFs, and Critical PHP Flaws Demand Action
AI reshapes cybersecurity jobs, transforms security training, revives deception technology, disrupts capture-the-flag competitions and alters the path to quantum computing. Meanwhile: Critical PHP vulnerabilities trigger urgent patching.
Security Awareness TrainingHuman Risk ManagementLeadership
Companies Make Cybersecurity Too Hard, Then Blame Employees for Mistakes. Here's a Better Approach
Why do employees bypass cybersecurity rules? Craig Wood and Dr. Dustin Sachs explain how broken workflows and workplace pressure undermine security training. (includes video and infographic)
AI and Incident ResponseIncident ResponseAgentic AI
The Federal AI Agent Incident Playbook is Out: AI Safety Teams Wrote the Framework. Security Teams Have to Make It Real
Incident readiness for agentic systems means red teams, logging architecture and recovery. Not policy documents.
PHP2ShellCritical PHP Vulnerabilities
PHP2Shell Patches Released: Critical RCE Flaws Threaten 70% of the Web
PHP has released emergency fixes for two critical remote code execution vulnerabilities affecting its widely deployed web engine. Wiz researchers warn that AI-assisted exploitation raises the stakes, leaving organizations racing to patch exposed servers.
AI vs. CTFCapture The FlagAI and Threat Hunting
AI Is Killing Capture the Flag Competitions. What Happens to Human Hackers?
AI agents are solving hacking challenges faster than humans, threatening CTF competitions and forcing cybersecurity professionals to rethink how offensive security skills are developed and measured.
AI-powered deception technologyDeceptionAI hacking
AI-Powered Hacking Is Giving Deception Technology a Second Life
As AI agents accelerate cyberattacks and vulnerability discovery, security experts see new opportunities to turn honeypots, false targets and dynamic deception into powerful defenses against automated threats.
Critical PHP VulnerabilitiesVulnerability ManagementCVE-2026-109618CVE-2026-109619
Critical PHP RCE Flaws: 5 Steps to Take Now (Updated)
PHP is preparing emergency fixes for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. With patches expected October 21, security teams must identify exposed servers, prepare emergency updates and prioritize internet-facing systems. (Includes infographic)
Podcasts & Video
See all
Podcast
Building the Better Mouse Trap with Craig Wood
Podcast
Chasing the White Rabbit with Jacob Krell
Video
CrowdStrike 2026 Threat Hunting Report - Quang "Q" Nguyen
Video
The SOC in Transition: AI, Automation, and the Human Role - Jay Gregg and Daniel Morris
Video
Beyond the Black Box: Demanding Inspectability for Cyber Visibility - Blake Gilson
Video
OT Is Not Hard. It's Different. A Practical Guide for IT Practitioners. - Aaron Crow
Video
Defensive Incident Containment Exercises: An AI-Moderated, Dice Driven Breach Simulator and Training Platform for Security Practitioners
Sponsored
Sponsored