OWASP Global AppSec USA 2026

OWASP Global AppSec USA 2026

10:30am PST

Hacking Your Life with AI Can Get You Hacked: How AI Orchestration Platforms Ship RCE by Design Room: Seacliff AB (Bay Level)Peyton Kennedy

11:30am PST

Beyond Detection: What We Learned Testing Every AI Approach to Vulnerability Classification Room: Seacliff AB (Bay Level)Arshan Dabirsiaghi • Ryan Dens

1:15pm PST

Reproducing the exploit, not the report Room: Seacliff AB (Bay Level)Hugo Guillaume • Hedi Sfaxi

2:15pm PST

Download, Merge, Compromised: A Live Backdoored Coding Model From a Public Hub Room: Seacliff AB (Bay Level)Vishal Khobare • Sandeep Kamble

3:30pm PST

Same Bug, Bigger Blast Radius: Breaking AI Control Planes with Classic AppSec Room: Seacliff AB (Bay Level)Aditi Bhatnagar

10:30am PST

When Finding Bugs Is the Easy Part: Lessons from an Agentic Vulnerability Harness Room: Seacliff AB (Bay Level)Venkata Suresh Sanga • Milind Daftari • Yuliana Martirosyan • Daniel Fernandez Coviella

11:30am PST

Context Confusion Is the New Broken Access Control Room: Seacliff AB (Bay Level)Anusha Vajha

1:15pm PST

XSS is the new RCE: How we broke Tauri's security model Room: Seacliff AB (Bay Level)Yuval Moravchick

2:15pm PST

The Hidden Risks of Service-to-Service Trust in Microservice Architectures Room: Seacliff AB (Bay Level)Bhaumik Shah

3:30pm PST

Finding the Infrastructure Trust Layer: AI-Assisted Discovery of Cross-Product SSRF Classes Room: Seacliff AB (Bay Level)Ofri Ouzan • Stav David