AI is moving faster than our ability to secure it. In just eight years, we've gone from natural language processing to competing GPT systems embedded in nearly every corner of the enterprise, often before security and IT leaders were ever in the room.
Join Aaron Mog, Field CISO, Adviser, and host of ZeroSum and Will Gragido, Author, Co-founder Salience Cyber for a candid, hype-free session for security leaders on shadow AI, real AI value, and prevention-first security.
Most security leaders weren’t asked before AI showed up in their environment. It arrived in browser extensions, copilots, SaaS features, and personal accounts, and the models, prompts, and data flowing through them now sit largely outside traditional controls. Meanwhile, attackers are using the same tools to find and exploit weaknesses faster than patch cycles can keep up.
In this session, Will and Aaron cut through the noise: where AI is actually paying off, where it’s quietly creating exposure, and what a realistic, prevention-first posture looks like when you can’t simply say no. Expect practitioner stories, honest disagreement, and a framework you can bring to your next board conversation.
In this session, you'll learn:
How to find the AI you don’t know about. Practical ways to inventory shadow AI across browsers, SaaS, and endpoints, and why “we blocked ChatGPT” isn’t an inventory.
Where AI is delivering real security value today, and where vendors are selling a roadmap as a product.
Why prevention beats detection in an AI-accelerated threat landscape. The 2026 DBIR shows exploitation is now the #1 initial access vector.
How to talk about AI risk with your board and CFO in terms of exposure, spend, and compliance, not model names.
What governance looks like when your own teams are building agents, and how to enable builders without losing control.
Built for CISOs, CIOs, and security leaders responsible for AI adoption, governance, or compliance, and for the operators who’ll be asked to make it work. If AI is showing up in your environment faster than your policies are, this one’s for you.
45 minutes. No slides for slides’ sake. Walk away knowing what to ask about AI exposure in your organization.
Will Gragido
CEO and Co-founder, Salience Cyber
Author of three pivotal books on the subject — Cybercrime and Espionage, Blackhatonomics, and Threat Forecasting — and an international speaker who sets the prevention-first conviction behind the platform.
Field CISO, Adviser, and host of ZeroSum
Aaron Mog is a Chicago-area cybersecurity entrepreneur and founder of yellowteam.ai, a vendor-neutral AI skills marketplace that helps practitioners build tools and automation connecting offensive and defensive work. He hosts two podcasts: ZeroSum, covering AI in security, the job market, and vendor–buyer dynamics, and prompt to prod, about shipping AI security. Previously he was Field CISO and Head of Community at System Two Security, with a background in detection engineering, product-led growth, and practitioner communities. He champions collective defense and open, vendor-neutral collaboration that empowers security teams to build their own tools.
The 2026 Verizon DBIR Just Dropped — And It Proves Why Predictive Prevention Beats Detection.
Vulnerability exploitation is now the #1 way breaches begin, and AI is accelerating everything. Here's what CISOs need to do next.
This white paper provides a Representative-Sample Analysis of Browser- and AI-Workflow Threat Trends and the Mitigation Efficacy of the Salience Cyber User Edge Platform
Stop guessing about shadow AI. We’re offering a completely free SIGHT Assessment for your organization. Deploy 25 lightweight sensors, run them for 7 days, and receive a definitive report on every AI model, token, and threat in your environment.