OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

10:30am PST

Beyond Provenance: Integrating Weight-Integrity Attestation Into Your AIBOM Pipeline Room: Grand Ballroom A (Street Level)Bodhisattva Das

11:30am PST

Exploits of Agency: Mapping out insecure development patterns across the agentic landscape Room: Grand Ballroom A (Street Level)Dan Lisichkin

1:15pm PST

Intent Contracts: Giving AI Agents the Missing Context for Safe Infrastructure Changes Room: Grand Ballroom A (Street Level)Chris Wysopal

2:15pm PST

The Compromised Maintainer Problem: Detecting Malicious Code in Legitimate Dependencies Room: Grand Ballroom A (Street Level)Polina Moshenets • Amro Haddadah

3:30pm PST

Model Context Points of Failure: MCP Security Meets Scale Room: Grand Ballroom A (Street Level)Moshe Siman Tov Bustan

10:30am PST

Poisoning the Pipeline: Runner Cache Manipulation and OIDC Token Forgery Room: Grand Ballroom A (Street Level)Sneha Rangari

11:30am PST

Finding Pwn Requests in OSS: Auditing CI/CD Pipelines for Supply-Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Arpit Jain

1:15pm PST

LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails Room: Grand Ballroom A (Street Level)Aviv Donenfeld

2:15pm PST

Open Source Sleeper Agents: Compromising Agents via Chat Templates Room: Grand Ballroom A (Street Level)Ariel Fogel • Omer Hofman

3:30pm PST

RepoHunter: AI-Driven Discovery of CI/CD Supply Chain Vulnerabilities at Scale Room: Grand Ballroom A (Street Level)Barak Haryati