The Cyber Archive
Security domain
S

Secure Software Development

All Deep Dives For Infosec Conference Talks Covering Secure Software Development. Talks analyzed in full.

13 deep dives
5 conferences

Latest deep dives

Securing Workspace GenAI at Google Speed | [un]prompted 2026
Unprompted 2026

Securing Workspace GenAI at Google Speed | [un]prompted 2026

Learn how Google's Workspace security team built a defense-in-depth architecture against indirect prompt injection and rogue agent actions in production GenAI systems.

Nicolas Lidzborski 27 April 2026
Hooking Coding Agents with the Cedar Policy Language | [un]prompted 2026
Unprompted 2026

Hooking Coding Agents with the Cedar Policy Language | [un]prompted 2026

Learn how to build a Cedar-based policy harness that hooks into Gemini CLI, Claude Code, and Cursor to enforce ABAC rules, track PII taint, and block AI agent data exfiltration.

Matt Maisel 24 April 2026
Tenderizing the Target | [un]prompted 2026
Unprompted 2026

Tenderizing the Target | [un]prompted 2026

Learn how NVIDIAs Project Marinade uses LLM coding agents to inject realistic, tunable vulnerabilities into real codebases - giving you ground-truth benchmarks to evaluate your security tools.

Aaron Grattafiori Skyler Bingham 22 April 2026
Vibe Check: Security Failures in AI-Assisted IDEs | [un]prompted 2026
Unprompted 2026

Vibe Check: Security Failures in AI-Assisted IDEs | [un]prompted 2026

Discover how 37 AI-assisted IDE vulnerabilities across 15+ vendors enable zero-click RCE, prompt injection chains, and silent config poisoning — and how to test your tools.

Piotr Ryciak 15 April 2026
Black-hat LLMs | [un]prompted 2026
Unprompted 2026

Black-hat LLMs | [un]prompted 2026

Discover how LLMs now autonomously find and exploit zero-day vulnerabilities in the Linux kernel and Ghost CMS — and what the AI capability curve means for defenders right now.

Nicholas Carlini 13 April 2026
Anatomy of an Agentic Personal AI Infrastructure | [un]prompted 2026
Unprompted 2026

Anatomy of an Agentic Personal AI Infrastructure | [un]prompted 2026

Learn how to architect a unified Personal AI Infrastructure (PAI) stack with Council multi-agent debate, the PAI algorithm, and Arbo pipelines to amplify your security engineering practice.

Daniel Miessler 12 April 2026
Code Is Free: Securing Software | [un]prompted 2026
Unprompted 2026

Code Is Free: Securing Software | [un]prompted 2026

Learn how OpenAI engineers built LLM-powered security reviewers, living threat models, and a daily dependency scanner using ~40 lines of GitHub Actions YAML and checked-in Markdown files.

Paul Mcmillan Ryan Lopopolo 4 April 2026
Guardrails beyond Vibes | [un]prompted 2026
Unprompted 2026

Guardrails beyond Vibes | [un]prompted 2026

Learn how Stripe built and deployed two production AI security agents with multi-agent architecture, LLM-as-judge eval pipelines, and phased rollout.

Jeffrey Zhang Siddh Shah 3 April 2026
Security Guidance as a Service | [un]prompted 2026
Unprompted 2026

Security Guidance as a Service | [un]prompted 2026

Learn how Adobe built a RAG-powered security guidance platform delivering org-specific recommendations across Jira, Slack, and IDE at scale.

Shruti Datta Gupta Chandrani Mukherjee 1 April 2026
Evaluating Threats & Automating Defense at Google
Unprompted 2026

Evaluating Threats & Automating Defense at Google

Discover how Google's Big Sleep and Code Mender use agentic AI to find and patch deep memory safety bugs with zero false positives.

Heather Adkins Four Flynn 30 March 2026
Plugins Gone Rogue: Attacking Developer Environments
Owasp global appsec usa 2025

Plugins Gone Rogue: Attacking Developer Environments

Learn how malicious VS Code extensions bypass Microsoft's safeguards to steal credentials and execute code on developer machines — and the only defense that actually works.

Raphael Silva 26 March 2026
AI Code Generation - Benefits, Risks and Mitigation Controls
Owasp global appsec usa 2024

AI Code Generation - Benefits, Risks and Mitigation Controls

Learn to assess AI code generation security risks—from package hallucination to IP liability—and apply governance controls that protect your SDLC.

Aruneesh Salhotra 19 February 2026
Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail
Owasp global appsec usa 2024

Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail

Learn why server-side HTML sanitization is structurally broken and how client-side tools like DOMPurify eliminate parser differential XSS bypasses.

Yaniv Nizry 12 February 2026