OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

10:30am PST

When the Fraud Analyst Becomes an Agent: Threat Modeling Autonomy in High-Stakes AppSec Workflows Room: Grand Ballroom C (Street Level)Hamza Abubakar Kheruwala Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design Room: Seacliff AB (Bay Level)Peyton Kennedy

1:15pm PST

Controlling Decryption in Zero Trust Cloud Workloads Room: Grand Ballroom C (Street Level)Anjali Mangal • Vamshi Krishna Thotempudi • Mahima Agarwal • Raghav Batta

2:15pm PST

The Compromised Maintainer Problem: Detecting Malicious Code in Legitimate Dependencies Room: Grand Ballroom A (Street Level)Polina Moshenets • Amro Haddadah

3:30pm PST

Model Context Points of Failure: MCP Security Meets Scale Room: Grand Ballroom A (Street Level)Moshe Siman Tov Bustan Pattern, Graph, Prompt: What Happens When You Layer Three Analysis Paradigms on the Same Codebase Room: Grand Ballroom B (Street Level)Mudita Khurana Assume Code Execution: Securing Multi-Tenant Code-Ingestion Platforms Room: Grand Ballroom C (Street Level)Raphael Karger

1:15pm PST

XSS is the new RCE: How we broke Tauri's security model Room: Seacliff AB (Bay Level)Yuval Moravchick

2:15pm PST

Open Source Sleeper Agents: Compromising Agents via Chat Templates Room: Grand Ballroom A (Street Level)Ariel Fogel • Omer Hofman

3:30pm PST

RepoHunter: AI-Driven Discovery of CI/CD Supply Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Barak Haryati