Jeremiah Grossman

[25 DAYS OUT!] I get to moderate Joshua Corman @joshcorman, Michael Collins, and Daniel Miessler @DanielMiessler and I am not playing it cool. No chance. SANS Summit attendees, buckle up. Joshua Corman @joshcorman does not think a patch is an apology. Sometimes the fix is a valve, a person, or taking the system off the network. He founded I Am The Cavalry and now leads UnDisruptable27, which is water, hospitals, food, and power staying up. Michael Collins has spent twenty years breaking into networks. He found a crashed drone at his datacenter, built a hacking kit he could fly, and then watched someone use the idea in a real attack. Still no thank-you note. He thinks the change is writing the exploit, not finding the bug. He is a senior principal security engineer at Mastercard. Daniel Miessler @DanielMiessler says an AI sounds smartest when you do not know the subject, and that defenders are losing to their own process. He also knows he grabs the wheel and ruins the result. He runs Unsupervised Learning and builds AI systems meant to carry a person’s goals into the work. Before that he did security at Apple, Robinhood, and HP. @SANSInstitute AI Cybersecurity Summit, November 2–3 in Arlington, Virginia or online. Come train and learn with us. Registration includes [un]prompted @unpromptedconf online: go.sans.org/YjGCXr Legendary Summit speaker lineup includes Morgan Adamski Pedram Amini @pedramamini Chris Cochran @chrishvm Michael Collins Joshua Corman @joshcorman Andy Dennis Steve de Vera Sergej Epp @EppSecurity Caleb Evans Gadi Evron @gadievron Jeremiah Grossman @jeremiahg Trinity Harrison Amy Herzog John Hultquist @JohnHultquist Marcus Hutchins @MalwareTechBlog Rob T. Lee @robtlee Ciaran Martin Daniel Miessler @DanielMiessler Maggie Miller @magmill95 Katie Moussouris @k8em0 Vinh Nguyen William Reyor Kyle Shields, CISM, GCIH, GCPN Adrian Wood @WHITEHACKSEC Joshua Wright @joswr1ght Sounil Yu @sounilyu Lenny Zeltser @lennyzeltser

@GadiEvron does not use community as another word for agreement. He told @jeremiahg in a LinkedIn thread, “I’ve never disagreed with you more. Look forward to our next discussion.” Glad we don't have to wait long for Gadi and Jeremiah to talk. They'll be live onstage alongside @k8em0 Katie Moussouris, Marcus Hutchins, @EppSecurity Sergej Epp with Ciaran Martin moderating at the @SANSInstitute AI Cybersecurity Summit. (54 days out!) A Gadi non-negotiable is building and serving the security community. The rest, I think, is up for discussion. At the first @unpromptedconf AI Security con (which could be the next DEF CON) he said, “the only thing that really matters is not the talks. You can see them online for free. It’s the people you met. When it comes down to it, we are people. We talk to each other.” Gadi is the founder and CEO of @knosticai, CISO-in-Residence for AI at the @cloudsa, and chair of [un]prompted. His work is not merely to “secure AI.” Example - OpenAnt (open source LLM-based vulnerability discovery product, "similar to Anthropic's Claude Code Security, but free") forces an AI-generated vulnerability claim to survive a constrained attacker test, traces the exploit path, and then runs the exploit in a disposable sandbox. Smart people are reaching very different conclusions about AI security. If we stop talking, we end up working against each other from separate echo chambers. That would be a spectacularly stupid way to handle a hard problem. (Cybersecurity has produced a few of those.) Be like our friend Gadi and talk to people who you disagree with. I think this could be one of the best panels of the year. (Yes, I know how low that bar is.) Join us Nov 2-3. Your registration includes access to the @unpromptedconf AI Security Online conference: go.sans.org/YjGCXr