#rsac — Public Fediverse posts

My @OneRSAC book review of: How AI and Quantum Impact Cyber Threats and Defenses: Reshaping Your Cyber Defense Strategies. Another great book by @rogeragrimes. Details the coalescence of #AI & #quantum. A really good #infosec read. #RSAC https://www.rsaconference.com/library/blog/bens-book-of-the-month-how-ai-and-quantum-impact-cyberthreats-and-defenses

82% of enterprises are running AI agents they don't know about.

That number came out of #RSAC Conference 2026 — and it wasn't the most alarming stat on the table.

Sean Martin sat back down with Itamar Apelblat, Co-Founder and CEO of Token Security, to unpack what he heard walking the show floor and what the CSA data now makes impossible to ignore: 65% of organizations have already had an AI agent-related incident in the last twelve months. 82% found agents in their environment that nobody authorized. Only 21% have any formal process to retire an agent when it's done.

Discovery alone is not governance. Intent-based enforcement is. That's where this conversation lands — and it's worth your time.

A huge thank you to the team at Token Security for joining Sean Martin and Marco Ciappelli on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://youtu.be/ZeI5bSbQ070
🎙️ On Location: https://youtu.be/uWjCQC3LnaY
🌐 RSAC Coverage: https://www.itspmagazine.com/rsac
🌐 Next Coverages: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage

#TokenSecurity #AIAgents #AgentSecurity #CyberSecurity #CISO #CloudSecurity #AIGovernance #IdentitySecurity #CSAReport #InfoSec #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, the vendors were louder, the booths were bigger, and the AI claims were everywhere.

So Sean Martin & Marco Ciappelli reconnected with Michael Parisi, Chief Growth Officer at Steel Patriot Partners, to ask what was actually happening beneath all that noise — and where the conversations that actually matter were taking place.

Mike's read from the floor is simple: the "fog of more" is winning. Not because the technology is bad, but because every vendor is saying nearly the same thing and CISOs are running out of ways to tell them apart.

The real conversations? Not in the keynote halls. They're happening in hallways, at dinners, in closed-door rooms where buyers can finally speak honestly.

A huge thank you to the team at Steel Patriot Partners for joining us on this journey — both on the floor at #RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/ggGQtz2t
🎙️ On Location: https://lnkd.in/gYRuPaPe
🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH
🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#SteelPatriotPartners #CISO #CyberSecurity #RSACConference #FogOfMore #SecurityStrategy #VendorNoise #InfoSec #GRC #CyberSecurityLeadership #RSAC2026 #InfosecurityEurope #BlackHatUSA #CyberSecurityPodcast

After #RSAC Conference 2026, every booth was screaming the same thing: AI, AI, AI. 😱

So Sean Martin & Marco Ciappelli sat back down with Lisa Liu, Corporate Marketing and Communications Manager at Stellar Cyber, to ask what was actually true on that show floor — and what was just a sticker.

Stellar Cyber has been building machine learning into its platform since 2015, long before AI became the default marketing label. Lisa pulls no punches on the AI-washing problem, the difference between a marketing label and an architectural decision, and why a "fully autonomous SOC" is exactly the part of the pitch that should set off your alarm bells.

A huge thank you to the team at Stellar Cyber for joining us on this journey — both on the floor at hashtag#RSAC2026 and in the recap. We loved sharing your story and we're looking forward to many more conversations ahead. 🙌

📍 Where are we headed next? Glad you asked: Infosecurity Europe and Black Hat USA — see you there.

🎙️ Recap: https://lnkd.in/gEs67ue3

🎙️ On Location: https://lnkd.in/g6zg4t7x

🌐 RSAC Coverage: https://lnkd.in/gW-6ZtH

🌐 Next Coverages: https://lnkd.in/gaGVUjgg

#StellarCyber #AIWashing #SOC #AgenticAI #CyberSecurity #infosec #soc #ai

RE: https://social.heise.de/@heiseonlineenglish/116408592675390149

Is That a Bad Apple in Your Pocket? We Used Prompt Injection to Hijack Apple Intelligence | RSAC Conference

<https://www.rsaconference.com/library/blog/is-that-a-bad-apple-in-your-pocket-we-used-prompt-injection-to-hijack-apple-intelligence> @onersac

＂… The RSAC Research Lab disclosed this attack to Apple on October 15, 2025, through the Apple Security Research portal. Apple has since hardened the affected systems against this attack, and those protections were rolled out in iOS 26.4 and macOS 26.4. Luckily, RSAC has not seen any evidence of this vulnerability being exploited by attackers out in the wild, but users running earlier versions of iOS and macOS should upgrade to the hardened versions as soon as is practicable. …＂

Technical details: <https://www.rsaconference.com/library/blog/rotten-apples-the-technical-details-of-rsacs-successful-apple-intelligence-prompt-injection-attack>

Also: <https://www.theregister.com/2026/04/09/security_researchers_tricked_apple_intelligence/>

#RSAC #research #AI #Apple #intelligence #iOS #macOS #iPadOS

We did something a bit different at #RSAC this year—instead of simply hanging around a booth, we launched a live, multi-hour broadcast, runZero Day, bringing some of the best conference insights directly to the global security community—no travel required!

We hosted founders, journalists, and security leaders to unpack the real-time trends defining cybersecurity. 👉️ If you missed it, you can watch it now or read our recap blog.

Blog: https://www.runzero.com/blog/runzero-day/

Watch: https://www.runzero.com/rsac-live-2026/

Who's missing #BSidesSF & #RSAC 2026? 💙 Quick runZero recap:

✅ Making memories: #BSidesSF social sponsor & special Yeti badge!
✅ 2 RSA talks (available on RSAC website).
✅ Tongacon!
✅ Hosted book signings w/Caroline Wong & Joseph Menn.
✅ Debuted the runZero Day livestream!

Ready for all the highlights? Read the full recap: https://www.runzero.com/blog/rsac-bsidessf-2026/

With Nigel Smart’s recent #RSAC Math Award, he becomes the 4th COSIC member to receive this recognition over the years - joining Bart Preneel, Joan Daemen and Vincent Rijmen.
Proud of COSIC’s long‑standing contributions to cryptography. 🔐
#COSIC #KULeuven #RSAC2026 #RSAC

For the past three years, one of the highlights of my week at #RSAC has been joining @euroinfosec in the Information Security Media Group (ISMG) studio to talk about the intersection of my research and the security themes we’re seeing emerge at the conference:

https://www.bankinfosecurity.com/multi-cloud-security-straining-ciso-teams-a-31240

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. https://api.cyfluencer.com/s/rsac-2026-what-ai-agent-security-looks-like-now-26300 #RSAC

🎙️Missed the expert insights during runZero Day at #RSAC?

You can watch it now on-demand!

Two options for watching the livestream on our website:

1. At the top of the page, you'll find the full recording of the program.

2. If you scroll down, you may choose a specific session.

Watch it today: https://www.runzero.com/rsac-live-2026/

Reading people's posts about #RSAC and can't help feeling this is what is was like

Uhoh, my work phone number is broken, and it looks like has been for almost two weeks 😬 I can see a missed call and a bunch of text message notifications within the app, but I've not gotten any call forwarding or push notifications, and I still can't see text message contents.

I thought it was odd that I'd not gotten text-based #rsac spam, but I remained unreasonably hopeful. Updating, clearing cache and restarting the app all didn't get it.

Anybody else seen this kind of VoIP problem? How did you fix it?

A round of hot or not, at #rsac.

https://youtu.be/D2BgOCm_WhE?si=B1-tQ6piE-baamvU

The Qantas lounge in LAX seems to have the entire #RSAC Aussie contingent in it tonight 😆

Well, that’s a wrap on my first #RSAC since 2019! Great to catch up with old and new friends and and perhaps not so great to be reminded of the sensory overload of the expo hall and unrelenting sessions/events/parties.

But 11/10 would still RSAC again. Now, to sleep.

#RSAC 2026: Done! ✅

It was fantastic connecting with so many of you and sharing how runZero helps teams gain unrivaled visibility across their entire internal and external attack surface.

Thanks to everyone who joined our events this week. See you next year! 👋

Honestly, in a sea of lame superficial AI labor replacement takes, it was refreshing to see something at #RSAC that drives at an outcome that will actually resonate with SOC folks.

“Christ you’be gotten big, Timmy. What’s that glowing yellow thing that’s hurting my eyes?”

My plans for tonight got cancelled, #RSAC, what should I do? What's up?

This guy is handcuffed in our village! If you want to learn how to get out of handcuffs come by RSAC, in Moscone South 204 before we close at 2pm! #RSAC #RSAC2026 #RSAConference #physicalsecurity #handcuffs #physicalsecurityvillage

What an intriguing session title. I kinda wish I had seen it back when I was picking #RSAC sessions.
#RSAC2026

XKCD 2347 Dependencies reference in the #RSAC The CVE Program's Past, Present, and Future session.
#RSAC2026

https://xkcd.com/2347/

#RSAC 2026
People and (crime) Markets
Lorrie Cranor
Director and Bosch Distinguished Professor, Carnegie Mellon University, CyLab Security & Privacy Inst.

CyberCanon-related Thursday sessions at #RSAC!

🔮 Nicole Perlroth - The Cyber Threat Landscape: Year in Review, Future in Focus, 8:30 AM

🧑‍🍳 Rick Howard - Cooking with CISOs, 9-12 PM: https://luma.com/a3i11jre

🧑‍💻 George Kurtz - Hacking Exposed, 10:50 AM

⛓️ Cassie Crossley - Book Signing at Bookstore for Software Supply Chain Security: Securing the End-to-End Supply Chain for Software, Firmware, and Hardware, 11 AM

(1/2...)