Ignore Previous Instructions: Offensive Intelligence in the AI Era
Oct 27, 2026 · Time to be announced
We keep trying to secure AI the same way we secure software, and that assumption is already costing us. Modern AI systems don't behave like traditional applications. They write code, call tools, chain decisions, and interact with the world with increasing autonomy -- and most organizations are still spending their time trying to control what the model says. That's not where the bodies are buried. I've spent three years red teaming AI systems across enterprise and government environments, and the same pattern shows up every time. The interesting failures aren't in the model. They emerge in everything built around it. These systems expose a different kind of attack surface: agents with delegated authority, tool sprawl across environments, workflows that drift from read to action, memory and context that outlast any single session. This talk walks through how those surfaces get exploited. We'll look at real adversarial scenarios -- a benign prompt that becomes an action chain, a low-privilege interaction that escalates through tool access, an agent that routes around intended controls without touching a traditional vulnerability, ""allowed behavior"" that becomes the attack path. To make sense of why this keeps happening, I use a simple frame: behavior, authority, and control. The industry is obsessed with behavior. Attackers aren't. They're going after authority and the absence of meaningful control around it. What that produces is a class of systems that don't need to be broken in order to be exploited. They only need to be used as designed.
Session status: scheduled
Saving a session is not registration. Check the official agenda for availability, eligibility and any additional fees.
Speakers and their event affiliations
- David Campbell
Affiliation at this event: OWASP AIVSS Project / AIUC-1
Parent event
Hybrid · Hyatt Regency San Francisco Airport, Burlingame, California, United States
This describes the parent event. Confirm the session’s attendance requirements with the organizer.
Companies participating in the parent event
These are event-level relationships, not confirmed sponsorship of this session.
- AGI House · Speaker company Source
- Ambiguous AI · Speaker company Source
- Anthropic · Speaker company Source
- Apollo Research · Speaker company Source
- Archer · Speaker company Source
- Audible · Speaker company Source
- Bechberger Consulting · Speaker company Source
- BGB Group · Speaker company Source
- BlackRock · Speaker company Source
- Blitzscaling Ventures · Speaker company Source
- Clair Sullivan & Associates, LLC · Speaker company Source
- CodeRabbit · Speaker company Source
- Cognizant · Speaker company Source
- Cohere Labs · Speaker company Source
- Comet · Speaker company Source
- CoreWeave · Speaker company Source
- Cursor · Speaker company Source
- CXAI · Speaker company Source
- Daily · Speaker company Source
- Data Driven Intuition · Speaker company Source
- Datasaur · Speaker company Source
- DataSQRL · Speaker company Source
- Daytona · Speaker company Source
- eBay · Speaker company Source
Showing 24 of 90 company relationships. View all on the event page.