Lightning Talk: AIxCC Results and New Open Source AI Projects To Help Secure Open Sou... Jeff Diecks

Presenters Jeff Diecks Source OpenSource SecurityCon NA 2025 AI Cyber Challenge: Revolutionizing Open Source Security with Intelligent Automation 🚀 The world of open-source software is the backbone of our digital infrastructure, but it’s also a prime target for cyber threats. For years, the challenge has been not just finding vulnerabilities, but fixing them efficiently. Enter the AI Cyber Challenge (AICC), a groundbreaking initiative that brought together cutting-edge AI and the open-source community to tackle this critical problem head-on. ...

November 24, 2025 · 5 min

Securing Cloud-Native Workloads from the Metal Up - Tyler Schade, GEICO

Presenters Tyler Schade Source OpenSource SecurityCon NA 2025 From Bare Metal to Bulletproof: Securing Your Cloud-Native Kingdom with TPMs and SPIRE 🚀 The quest for secure, modern infrastructure is a constant battle, especially in the dynamic world of cloud-native. Geico Insurance, a company at the forefront of digital transformation, is tackling this challenge head-on, not just in the cloud, but right down to the foundational bare metal of their data centers. Tyler Shade, a Software Engineer at Geico, shared his team’s compelling journey into bootstrapping trust and building a truly secure, identity-first infrastructure. ...

November 24, 2025 · 5 min

Threat Modeling for Kubernetes: Enhancing Security Posture in Complex and Regulat... Maxime Coquerel

Presenters Maxime Coquerel Source OpenSource SecurityCon NA 2025 Revolutionizing Kubernetes Security: From Weeks to Days with AI-Powered Threat Modeling 🚀 In today’s rapidly evolving cloud landscape, securing Kubernetes deployments isn’t just a good idea; it’s an absolute necessity. The intricate nature of Kubernetes, with its distinct control and data planes, presents a complex web of potential vulnerabilities. But what if we told you that the arduous task of threat modeling, which traditionally consumes weeks, could be slashed down to mere days? That’s precisely the promise of an innovative AI-powered solution presented by Maxim Cochril, Principal Cloud Security Architect at RBC and CNCF Ambassador. ...

November 24, 2025 · 6 min

Who Let the Agents Out? Securing AI Workflows the Right Way - Mariusz Sabath & Maia Iyer

Presenters Mariusz Sabath Maia Iyer Source OpenSource SecurityCon NA 2025 Agent Security Unleashed: Building Trustworthy AI with a Zero Trust Approach 🚀 The modern developer’s life is a juggling act. Between managing code on GitHub, collaborating on Slack, and countless other tools, the quest for efficiency is constant. Enter agentic applications – the promise of automating those repetitive tasks and offering a single, powerful interface to control your entire digital ecosystem. Sounds amazing, right? While setting up local agents with API keys is relatively straightforward, taking these intelligent assistants to the cloud unlocks a whole new world of security challenges. ...

November 24, 2025 · 5 min

Applying DevSecOps Lessons To MLSecOps - Sarah Evans, Dell Technologies

Presenters Sarah Evans Source OpenSource SecurityCon NA 2025 Securing the AI Frontier: A New Era of MLOps Security 🚀 The world of Artificial Intelligence is exploding, and with it, the urgent need for robust security practices. But let’s be honest, for many traditional security teams, diving into the intricate world of machine learning can feel like stepping into uncharted territory. That’s where Sarah Evans and her groundbreaking white paper come in! Fresh from a pivotal presentation, this new resource, born from a collaboration with the AI/ML working group, is set to become your go-to guide for securing the AI frontier by translating time-tested DevOps and DevSecOps principles into the unique realm of Machine Learning Operations (MLOps). ...

November 24, 2025 · 4 min