#rsac — Public Fediverse posts

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

At #RSAC, Claroty CSO Grant Geyer sat down with NYSE TV to discuss the trends shaping CPS security—from evolving geopolitical threats to the future of connected environments.

▶️ Watch here: https://youtu.be/Q-RQppMcA_g?si=MGSIwKPkCSw2cn7H

#FloorTalk #Cybersecurity #CPS #OTSecurity

At #RSAC, Claroty CSO Grant Geyer sat down with NYSE TV to discuss the trends shaping CPS security—from evolving geopolitical threats to the future of connected environments.

▶️ Watch here: https://youtu.be/Q-RQppMcA_g?si=MGSIwKPkCSw2cn7H

#FloorTalk #Cybersecurity #CPS #OTSecurity

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

My @OneRSAC information security book of the month review: Speak Security With A Business Accent: How to Communicate Cybersecurity Concepts Clearly, Ease Friction with Stakeholders & Influence Decision’ by Joshua Mason. Sage advice for #infosec pros. #RSAC https://www.rsaconference.com/library/blog/bens-book-of-the-month-speak-security

My @OneRSAC information security book of the month review: Speak Security With A Business Accent: How to Communicate Cybersecurity Concepts Clearly, Ease Friction with Stakeholders & Influence Decision’ by Joshua Mason. Sage advice for #infosec pros. #RSAC https://www.rsaconference.com/library/blog/bens-book-of-the-month-speak-security

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

🎙️Missed the expert insights during runZero Day at #RSAC?

You can watch it now on-demand!

Two options for watching the livestream on our website:

1. At the top of the page, you'll find the full recording of the program.

2. If you scroll down, you may choose a specific session.

Watch it today: https://www.runzero.com/rsac-live-2026/