DEF CON 34 — What CISOs Should Take Away From the Hacker’s View of the Future
DEF CON 34 reveals a fundamental shift in cybersecurity: attackers increasingly exploit relationships, not isolated assets. This 13-part CISO series explores AI agents, MCP, identity, automation and the rise of authority-path governance.
Part 12 — Autonomous Offensive Research Changes the Defender’s Clock
AI may not just accelerate attacks—it may automate experimentation itself. As the path from hypothesis to exploit compresses, CISOs must rethink vulnerability management, attack-path governance and the time assumptions behind modern defense.
Part 13 — The CISO Security Model After DEF CON 34
DEF CON 34 exposed a fundamental shift: attackers increasingly exploit relationships, not isolated components. CISOs must move beyond assets and vulnerabilities toward governing authority paths—who can instruct, authenticate, invoke and ultimately cause what to happen.
Part 11 — When Cyber Attacks Leave the Computer
When software controls physical reality, a cyberattack no longer ends at the computer. DEF CON 34 showed how attacks can traverse IT, industrial protocols and controllers to reach physical processes—forcing CISOs to think beyond compromise toward consequence and safety.
Part 10 — Below the EDR: The Security Layers We Forgot
What if reimaging a compromised server does not restore trust? DEF CON 34 hardware research exposes the layers below EDR—from firmware and BMCs to SMM, security processors and memory—forcing CISOs to rethink what cyber recovery actually means.
Part 9 — Security Infrastructure Can Become Offensive Infrastructure
Security tools increasingly consume hostile data, interpret it with AI and act with privileged authority. DEF CON 34 showed how telemetry, evidence and agentic security workflows can be manipulated—turning the infrastructure built to defend the enterprise into an attack path.
Part 8 — Human Approval Is Becoming Another Attack Surface
Human-in-the-Loop is not automatically a security control. When approvals become routine, humans stop verifying consequences and start clearing friction. Agentic AI may turn approval fatigue into the next MFA fatigue.
Part 7 — AI Compute Is Becoming a Stealable Cyber Capability
From cryptojacking to inferencejacking: attackers can turn exposed AI infrastructure into reconnaissance, reasoning and attack capability. For CISOs, AI usage telemetry is becoming security telemetry—and inference itself a cyber asset worth protecting.
The Shadow AI Economy: From Shadow IT to Shadow Agency
Shadow AI is becoming Shadow Agency. At PAC Horizons 2026, I discussed how AI agents, identities, tokens and delegated authority are changing the CISO agenda — and why Least Privilege may no longer be enough.
