Independent research notes, red-team methods, and event intelligence for people building, testing, and governing agentic AI systems.
Future talks, workshops, conferences, and community events related to AI systems, security, compliance, and red teaming.
The ninth AAAI/ACM Conference on AI, Ethics, and Society convenes technical, legal, philosophical, and social-science research in Malmö. The 2026 program examines the governance and societal consequences of AI systems as they move from experimental tools into entrenched infrastructure.
AI Security Summit San Francisco is a one-day, two-track event for security leaders and practitioners covering AI governance, vendor risk, prompt injection, jailbreak defense, red teaming, and incident response.
The Conference on Applied Machine Learning in Information Security brings researchers and practitioners from industry, academia, and government to Arlington to discuss machine learning and cybersecurity.
Zenity’s AI Agent Security Summit takes place October 21 at Pier Sixty in New York City. The organizer’s overview discusses agent autonomy, connector and MCP exposure, employee permissions, and shared responsibility for enterprise agents. The inspected event page confirms the venue and date, but its session agenda is not yet available.
Technical guides, hands-on exercises, and detailed implementation write-ups for testing and securing AI systems in practice.
Play video
The Managed Agents research-desk workshop turns a requested deliverable into an explicit rubric and an iterative evaluation loop. Anthropic’s documentation describes a grader with a separate context window, per-criterion feedback, and events for inspecting the result. Separating the grader’s context can reduce direct influence from the worker’s reasoning, but a satisfied rubric still does not establish that every fact or source in the artifact is correct.
Play video
This workshop Q&A covers configuration in CI/CD, long-running tools, and resource separation for customer-facing agents. Current documentation treats agent definitions as versioned resources and metadata as tracking fields. Labelling a session with a customer ID is not an authorization boundary. A deployment needs deliberate credential and resource separation, and self-hosted execution also requires the operator to supply its own sandbox controls.
Play video
Branislav Brzak describes timing measurements that infer model and workload characteristics on tested H100 configurations. Stealthium’s primary research explains how memory-barrier behavior can cross MIG partitions and how a weaker cross-GPU signal depends on device visibility and allocation permissions. Workload classification in the follow-up requires speculative decoding. The demonstrated signal does not recover the actual prompt or generated answer.
Play video
This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndcoslo.com/ Subscribe to our YouTube channel and learn every day: / @NDC Follow our Social Media!
Understand your AI readiness before the next review.
Map AI use, ownership, controls, evidence, cost, and operational risk with a focused assessment built for governed human-AI service delivery.
24 focused questions
Readiness score
PDF report
Recent notes and references across prompt injection, agent security, evaluations, responsible AI, and adjacent AI work.
Play video
Kevin Orellana describes using a coding agent through an MCP wrapper to exercise sandbox and browser workflows, storing results in a structured database. Reported failures include encoding, file handling, and resource exhaustion. The useful testing pattern separates interface defects from execution limits and preserves a reproducible case for each finding. An agent-generated test count is not evidence of coverage, and a passing test does not prove containment.
Play video
Michael Grinich introduces auth.md, a proposal for agent registration backed by public provider and service examples. The reference flow separates identity assertion, user claim or consent, and credential issuance, with issuer, audience, freshness, and replay checks. It also documents a hazard when the same credential gains permissions after an anonymous registration is claimed. This is an evolving reference implementation, not an established universal signup standard.
Play video
This Managed Agents workshop combines scheduled execution, session fan-out, and a research preview for memory updates. Current deployment documentation makes an operational distinction: pausing a schedule suppresses future automatic triggers while existing sessions continue and manual runs remain possible. Per-run budgets are separate caps, not a lifetime spending limit. The memory preview is not evidence of safe or reliable autonomous improvement.
Play video
Kim Maida contrasts an overprivileged triage agent with a staged workflow that carries user identity through delegated access and evaluates policy before tool actions. OAuth token exchange provides a mechanism for requesting downstream credentials; the security token service and resource still determine permitted access. The talk’s intent-based authorization design is a proposal. Neither a human approval button nor a short-lived token makes an unauthorized action legitimate.
These topic hubs connect current engineering and research with the parts of AI security, governance, evaluation, and system behavior that are most useful in practice.
Methods, case studies, and tooling for red teaming AI systems end to end.
Open topicPrompt design patterns, instruction hierarchy, and defensive prompt construction.
Open topicPrompt injection attacks, mitigations, detection, and design patterns for safer AI applications.
Open topicControls and attack paths for browsing, tool use, memory, identity, and action-taking agents.
Open topicSafety evaluations, system cards, preparedness, and security measurement for frontier models.
Open topicResponsible AI, governance, standards, and regulatory reference material for teams mapping AI systems to policy and operational controls.
Open topicAdversarial machine learning attacks, taxonomies, and mitigations across the ML lifecycle.
Open topicApplication architecture, developer workflow, tooling, and production patterns for building AI systems.
Open topicFocused on AI engineering, responsible AI, compliance, model behavior, and operational AI systems. Current work includes founding AI operational software for compliance and financial tracking.