Podcast · Tech & Science

[un]prompted Security Practitioner Con 2026

by [un]prompted · English · Tech & Science

Every session of [un]prompted 2026: Nicholas Carlini, Daniel Miessler, Heather Adkins + 50 more who brought what they've learned from the edge: agents, detection, forensics, governance, llm security, offensive, prompt injection, threat intel. "It feels like a warp point in time: the moment security

New episodes: Several times a day
Typical length: 22 min
Latest: 28 May 2026
Language: English

Latest episode

28 May 2026 · 3 min

Ep 1 | Gadi Evron - Day One Remarks | [un]prompted 2026

Day One opening and closing remarks from Gadi Evron at [un]prompted 2026.Gadi Evron is CFP Chair, [un]prompted and CEO, Knostic.

Play episodeWhatsApp Download

Earlier episodes 29 most recent

S1 · E2 · 28 May 2026 · 14 min
Ep 2 | Gadi Evron - Day Two Remarks | [un]prompted 2026
Day Two opening and closing remarks from Gadi Evron at [un]prompted 2026. Gadi Evron is CFP Chair, [un]prompted and CEO, Knostic.
S1 · E3 · 28 May 2026 · 3 min
Ep 3 | Dan Hubbard - Zero Day Is Now the Space Between a Prompt and Prod | [un]prompted 2026
Day 1 | Stage 1 Dan Hubbard kicks off [un]prompted with a poem. Dan Hubbard is VP of Research, Vectra AI. Watch on YouTube: https://www.youtube.com/watch?v=cUMJTM9egiM
S1 · E4 · 28 May 2026 · 20 min
Ep 4 | Heather Adkins & Four Flynn - Evaluating Threats & Automating Defense at Google | [un]prompted 2026
Day 1 | Stage 1 VP of Security Engineering from Google discusses advancing code security with a comprehensive overview of Google's AI security strategy. Shows how to evaluate emerging cyberattack capabilities and demonstrates how tools like CodeMender are helping build intrinsically safer software. Heather Adkins is VP of Security Engineering, Google. Four Flynn is VP Security and Privacy, Google DeepMind. Watch on YouTube: https://www.youtube.com/watch?v=B_7RpP90rUk
S1 · E5 · 28 May 2026 · 22 min
Ep 5 | Joshua Saxe - The Hard Part Isn't Building the Agent: Measuring Effectiveness | [un]prompted 2026
Day 1 | Stage 1 As AI coding tools drive the cost of building security agents toward zero, the hard problem becomes knowing whether they'll actually work against real attacks and vulnerabilities not seen before. Presents a practical journey from naive precision/recall metrics to multi-dimensional evaluation that captures reasoning quality, evidence gathering, and tool-calling logic. Shows how proper measurement unlocks automated agent improvement using genetic algorithms and AI coding tools. Includes live demo. Joshua Saxe is AI Security Technical Lead, Meta. Watch on YouTube:…
S1 · E6 · 28 May 2026 · 22 min
Ep 6 | Shruti Datta Gupta & Chandrani Mukherjee - Security Guidance as a Service | [un]prompted 2026
Day 1 | Stage 1 Explores how to provide consistent security guidance at scale, especially in AI-first environments. Discusses building an AI-Native Security Guidance as a Service that centralizes security knowledge and powers multiple defensive AI capabilities with consistent, evaluated and bespoke guidance. Shruti Datta Gupta is Product Security Engineer, Adobe. Chandrani Mukherjee is Product Security Engineer, Adobe. Watch on YouTube: https://www.youtube.com/watch?v=SMEZowlcyyo
S1 · E7 · 28 May 2026 · 21 min
Ep 7 | Jeffrey Zhang & Siddh Shah - Guardrails beyond Vibes | [un]prompted 2026
Day 1 | Stage 1 Shares how Stripe is using AI agents to streamline high-friction security workflows including threat modeling and security request routing. Covers practical design choices that made these agents reliable in practice: modular orchestrator/child architectures, targeted tools, structured inputs/outputs, and validation to reduce variance and improve determinism. Walks through measuring and improving agent quality over time using offline and online evaluation loops. Jeffrey Zhang is Security Engineer, Stripe. Siddh Shah is Software Engineer, Stripe. Watch on YouTube:…
28 May 2026 · 25 min
Ep 8 | Paul McMillan & Ryan Lopopolo - Code Is Free: Securing Software | [un]prompted 2026
Day 1 | Stage 1 An AI-maximalist vision of securing software in the agentic future. Presents engineering-first ways to improve security of projects with zero-friction additions. Advocates for using LLMs to write code and security, arguing that if engineers use LLMs for code, they should use them for security too. Paul McMillan is Security Engineer, OpenAI. Ryan Lopopolo is Member of Technical Staff, OpenAI. Watch on YouTube: https://www.youtube.com/watch?v=U2O14Jd3MBU
28 May 2026 · 18 min
Ep 9 | Brendan Dolan-Gavitt & Vincent Olesen - Agents Exploiting "Auth-by-One" Errors | [un]prompted 2026
Day 1 | Stage 1 Presents techniques for finding and validating access control flaws using AI agents. Uses strict validators for identifying successful logins (AuthN) and protected resource access (AuthZ) to build capable attack agents. Shows how to enable LLM-powered agents to discover and validate access control vulnerabilities at scale. Brendan Dolan-Gavitt is AI Researcher, XBOW. Vincent Olesen is AI Researcher, XBOW. Watch on YouTube: https://www.youtube.com/watch?v=996zolUsXog
S1 · E10 · 28 May 2026 · 19 min
Ep 10 | Natalie Isak & Waris Gill - Developing & Deploying AI Fingerprints | [un]prompted 2026
Day 1 | Stage 1 Introduces BinaryShield, a privacy-preserving fingerprinting system that enables cross-service threat intelligence without exposing sensitive user prompts. As LLM-powered services proliferate with prompt injection attacks, this system allows sharing threat data across organizational boundaries while preserving privacy. Covers research and practical deployment applications with demo. Natalie Isak is Software Engineer, Microsoft. Waris Gill is Applied Scientist, Microsoft. Watch on YouTube: https://www.youtube.com/watch?v=u7pag5p9z5o
S1 · E11 · 28 May 2026 · 22 min
Ep 11 | Sean Park - When Passports Execute: Exploiting AI Driven KYC Pipelines | [un]prompted 2026
Day 1 | Stage 1 Shows how modern KYC workflows that delegate passport parsing, database writes, and customer verification to AI-driven extraction agents are vulnerable. Document-embedded injects and compliance controls together steer AI agents into cross-record reads and writes, enabling data theft and exfiltration without bypassing access controls. Presents a scalable exploitation approach across KYC extraction agents using LLM-generated high-success payloads. Sean Park is Principal Threat Researcher, TrendAI. Watch on YouTube: https://www.youtube.com/watch?v=XVos-fhnsek
S1 · E12 · 28 May 2026 · 21 min
Ep 12 | Peter Girnus & Derek Chen - FENRIR: AI Hunting for AI Zero-Days at Scale | [un]prompted 2026
Day 1 | Stage 1 FENRIR has discovered 100+ vulnerabilities across AI infrastructure since mid-2025, with 21 CVEs patched including multiple CVSS 9.8 RCEs. Presents FENRIR's multi-stage verification pipeline: static analysis pre-triage, two-layer LLM validation (L1 prune → L2 deep-verify), and confidence-based human routing. Covers what worked (research-backed context generation, CWE-specific agents, pattern recognition) and what failed. Peter Girnus is Senior Threat Researcher, Trend Micro's Zero Day Initiative (ZDI). Derek Chen is Vulnerability Researcher, TrendAI. Watch on YouTube:…
S1 · E13 · 28 May 2026 · 20 min
Ep 13 | Joe Sullivan - AI Notetakers: The Most Important Person in the Room | [un]prompted 2026
Day 1 | Stage 1 The most important attendee in meetings is now the AI notetaker that assigns action items, determines importance, and creates the official record. Covers steering techniques for influencing what the notetaker captures, risks from governance gaps when notetakers become infrastructure, opportunities for reliable incident response systems of record, and enterprise readiness frameworks. Joe Sullivan is CEO, Ukraine Friends and Joe Sullivan Security. Watch on YouTube: https://www.youtube.com/watch?v=oXj1Kee_crw
28 May 2026 · 28 min
Ep 14 | Adam Laurie (Major Malfunction) - AI go Beep Boop! | [un]prompted 2026
Day 1 | Stage 1 Hardware hacking with AI at the controls. Gave Claude access to hardware lab (Laptop, USB hub, XYZ platform, PICO2, Jlink-pro, Oscilloscope, Chipshouter and targets). Within 7 minutes it pwned an LPC chip that took 6 weeks of human glitching. Within a month it rewrote the entire glitching platform and now autonomously hacks new targets while the author sleeps. Adam Laurie (Major Malfunction) is Hardware Hacker turned CISO, Alpitronic. Watch on YouTube: https://www.youtube.com/watch?v=_tqqnkemYsg
28 May 2026 · 23 min
Ep 15 | Rami McCarthy - Zeal of the Convert: Taming Shai-Hulud with AI | [un]prompted 2026
Day 1 | Stage 1 Post-mortem of 2025 Shai-Hulud attacks leaking massive victim data onto GitHub. Shows real-world evolution from simple "vibe-coded" scrapers to multi-agent triage engines that parallelize victimology and automate secret-impact analysis. Covers what actually worked, where ground has shifted, how "lazy" AI fails, with practical prompts, scripts, and lessons learned. Rami McCarthy is Principal Security Researcher, Wiz. Watch on YouTube: https://www.youtube.com/watch?v=6P77Zbo2TA4
S1 · E16 · 28 May 2026 · 24 min
Ep 16 | Daniel Miessler - Anatomy of an Agentic Personal AI Infrastructure | [un]prompted 2026
Day 1 | Stage 1 Deepdive on personal AI infrastructure system and the open-source project that mirrors it. Daniel Miessler is Founder, Unsupervised Learning. Watch on YouTube: https://www.youtube.com/watch?v=l9CPmPk2R-M
S1 · E17 · 28 May 2026 · 25 min
Ep 17 | Nicholas Carlini - Black-hat LLMs | [un]prompted 2026
Day 1 | Stage 1 Large language models are now capable of automating attacks previously only possible by human adversaries. Discusses several ways adversaries could misuse current models to cause harm at larger scale and lower cost than currently possible. Recent state-of-the-art models can find 0-day vulnerabilities in large software projects extensively tested by humans for decades. These new capabilities alter the threat landscape and require rethinking security. Nicholas Carlini is Research Scientist, Anthropic. Watch on YouTube: https://www.youtube.com/watch?v=1sd26pWhfmg
S1 · E18 · 28 May 2026 · 25 min
Ep 18 | Piotr Ryciak - Vibe Check: Security Failures in AI-Assisted IDEs | [un]prompted 2026
Day 1 | Stage 1 AI IDEs and coding agents expand the practical attack surface of development workflows by introducing new paths from untrusted workspace inputs to high-impact actions. Presents a catalog of exploitation patterns derived from vulnerability research across major AI-assisted IDEs and agents (OpenAI Codex, Amazon Kiro, Google Antigravity, Cursor, others), organized by attacker effort and trigger model. Provides repeatable playbook and checklist for security teams. Piotr Ryciak is AI Red Teamer, Mindgard. Watch on YouTube: https://www.youtube.com/watch?v=mKb_IKVrcIc
28 May 2026 · 24 min
Ep 19 | Billy Norwood - Establishing AI Governance Without Stifling Innovation | [un]prompted 2026
Day 1 | Stage 2 CISO from FFF Enterprises shares strategy and implementation of a risk-based AI governance committee in a healthcare services firm, discussing successes and failures along the way. Billy Norwood is CISO, FFF Enterprises. Watch on YouTube: https://www.youtube.com/watch?v=sh9LpVM1QBM
28 May 2026 · 26 min
Ep 20 | Ragini Ramalingam - Enterprise AI Governance at Snowflake | [un]prompted 2026
Day 1 | Stage 2 Director of Enterprise Security at Snowflake shares perspectives on supporting responsible AI adoption within a large, dynamic enterprise environment. Discusses practical approaches to establishing governance frameworks, fostering cross-functional collaboration, and embedding security considerations into emerging technologies. Ragini Ramalingam is Director, Enterprise Security, Snowflake. Watch on YouTube: https://www.youtube.com/watch?v=RF4gR5uviv0
S1 · E21 · 28 May 2026 · 23 min
Ep 21 | Chase Hasbrouck - Three Phases of AI Adoption | [un]prompted 2026
Day 1 | Stage 2 Chief of Forensics/Malware Analysis from U.S. Army Cyber Command discusses the Army's path to enterprise AI showing deployment constraints shape adoption more than security policies. Covers 2023's fragmented research previews (high innovation but no institutional knowledge), 2024's centralized solutions (killed experimentation), and 2025's enterprise agreements (now grappling with cultural change convincing people the tool is actually usable). Chase Hasbrouck is Chief of Forensics/Malware Analysis, U.S. Army Cyber Command. Watch on YouTube:…
S1 · E22 · 28 May 2026 · 23 min
Ep 22 | Rob T. Lee - SIFT-FIND EVIL! I Gave Claude Code R00t on DFIR SIFT Workstation | [un]prompted 2026
Day 1 | Stage 2 Chief AI Officer from SANS Institute explains wiring agentic AI into SIFT via Model Context Protocol—timeline generation, memory analysis, malware sweeps, all via natural language. References Anthropic's GTG-1002 report showing adversaries running Claude Code at 80-90% autonomous execution. Shows live demo where typing "SIFT!! Find Evil!" actually works. Based on 40+ hours of testing. Rob T. Lee is Chief AI Officer (CAIO) and Chief of Research, SANS Institute. Watch on YouTube: https://www.youtube.com/watch?v=OsUg3TlAqjQ
S1 · E23 · 28 May 2026 · 22 min
Ep 23 | Mika Ayenson - Can You See What Your AI Saw? | [un]prompted 2026
Day 1 | Stage 2 Threat Research & Detection Engineer from Elastic explores GenAI endpoint observability from a practitioner's perspective. As GenAI coding assistants become standard developer tools, detection engineers face challenges understanding what happens when AI executes commands on behalf of users. Discusses what telemetry exists, where gaps are, and why standardized schemas for AI activity are needed. Mika Ayenson is Threat Research & Detection Engineer, Elastic. Watch on YouTube: https://www.youtube.com/watch?v=cEbPSQaSLXM
S1 · E24 · 28 May 2026 · 19 min
Ep 24 | Mohamed Nabeel - Detecting GenAI Threats at Scale with YARA-Like Semantic Rules | [un]prompted 2026
Day 1 | Stage 2 Sr Principal Researcher from Palo Alto Networks introduces SYARA (Super YARA), extending YARA's syntax with multi-modal semantic detection. Combines string matching, embeddings, ML classifiers, and LLMs in a single rule. Teaches hunting for GenAI-era threats including prompt injection, phishing, malicious intent identification, and disinformation detection, achieving 98% detection rates. Mohamed Nabeel is Sr Principal Researcher, Palo Alto Networks. Watch on YouTube: https://www.youtube.com/watch?v=PZYtJL6TCwo
S1 · E25 · 28 May 2026 · 26 min
Ep 25 | Aaron Grattafiori & Skyler Bingham - Tenderizing the Target | [un]prompted 2026
Day 1 | Stage 2 Principal Offensive AI Security Researchers from NVIDIA discuss Marinade, an agentic workflow solving the problem of getting realistic vulnerable applications. Analyzes codebases (Django, Spring Boot, Java, Rails), understands attack surface, and injects realistic, exploitable vulnerabilities that blend naturally into existing code. AI is surprisingly adept at weakening security controls rather than clumsily removing them. Aaron Grattafiori is Principal Offensive AI Security Researcher, NVIDIA. Skyler Bingham is Principal Applied Researcher, NVIDIA. Watch on YouTube:…
S1 · E26 · 28 May 2026 · 17 min
Ep 26 | Matt Maisel - Hooking Coding Agents with the Cedar Policy Language | [un]prompted 2026
Day 1 | Stage 2 CTO and Cofounder of Sondera demonstrates a reference monitor using Rust hooks and Cedar policies to deterministically intercept every shell command, file read, and other actions. Coding agents wield dangerous access to code and terminal, and prompt injection renders soft guardrails useless. Live demo forbids exfiltration and destructive behaviors with open-source tool compatible with Cursor, Claude Code, and GitHub Copilot CLI. Matt Maisel is CTO and Cofounder, Sondera. Watch on YouTube: https://www.youtube.com/watch?v=m6pzrqFJ6hE
28 May 2026 · 28 min
Ep 27 | Carl Hurd - Glass-Box Security: Operationalizing Mechanistic Interpretability | [un]prompted 2026
Day 1 | Stage 2 Co-Founder & CTO of Starseer introduces "Glass-Box Security" utilizing Mechanistic Interpretability and Latent Space Geometry to monitor model's internal state for malicious intent and data exfiltration. Perimeter defenses are failing against next-generation AI agents. Presents Starseer architecture—a technical reference for building "Internal EDR" replacing fragile regex filters with "semantic tripwires" detecting deception and code leakage at the neuron level. Carl Hurd is Co-Founder & CTO, Starseer. Watch on YouTube: https://www.youtube.com/watch?v=JZlaijmG-Ng
28 May 2026 · 22 min
Ep 28 | Maxim Kovalsky - The AI Security Larsen Effect: How to Stop the Feedback Loop | [un]prompted 2026
Day 1 | Stage 2 Managing Director from Consortium Networks introduces a capability-based framework for AI security. The market has 60+ vendors with unclear guidance. Framework zeros in on risks actually relevant to your architecture, helps decide how to address them (configure, buy, or build), and produces rational vendor shortlist instead of analysis paralysis. Live demo with realistic scenario: agentic healthcare chatbot with PHI data. Maxim Kovalsky is Managing Director, AI Security CoE, Consortium Networks. Watch on YouTube: https://www.youtube.com/watch?v=U1TJpMpxZiU
S1 · E29 · 28 May 2026 · 27 min
Ep 29 | Padma Apparao - Kinetic Risk: Securing and Governing Physical AI in the Wild | [un]prompted 2026
Day 1 | Stage 2 Security architect for government agencies discusses when AI leaves the screen and enters the physical world, failure shifts from misinformation to kinetic damage. Physical AI is fundamentally different: while performance dominates design, security, risk, and governance must be built in from start. Examines VLA-specific risks like sensor spoofing and embodied instruction manipulation that can lead to unsafe physical actions. Padma Apparao is Security Architect, Government Agencies. Watch on YouTube: https://www.youtube.com/watch?v=YzP3Fif_DHU
S1 · E30 · 28 May 2026 · 26 min
Ep 30 | Aaron Brown & Madhur Prashant - Trajectory-Aware Post-Training Security Agents | [un]prompted 2026
Day 1 | Stage 2 Agentic AI Builder from AWS presents complete open-source pipeline for trajectory-aware post-training of open-weight SLMs for cybersecurity tasks. Everyone talks about AI agents for security but almost no one discusses post-training underlying open-weight models. Frontier APIs work for prototypes but scaling autonomous security operations requires fine-tuned small language models optimized for specific tooling and reasoning patterns. Aaron Brown is Agentic AI Builder, AWS. Madhur Prashant is Applied AI/ML Engineer, AWS. Watch on YouTube:…

About [un]prompted Security Practitioner Con 2026

[un]prompted Security Practitioner Con 2026 is a English tech & science podcast from [un]prompted. Melo plays each episode straight from the publisher's own feed — no ads added, no account needed — and remembers where you stopped, in this browser only.

Publisher: [un]prompted
Language: English
Category: Tech & Science
New episodes: Several times a day
Typical length: 22 min
Latest episode: 28 May 2026
Feed: RSS — paste into any podcast app
Apple Podcasts: podcasts.apple.com/podcast/id1896828304
Rights: [un]prompted

RSS feed Apple Podcasts

More English tech & science

Take it with you

The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.