Lightning Talk: Your Most Privileged User Isn't Human: The Agent Security Blinds... Atulpriya Sharma

Presenters Atulpriya Sharma Source OpenSource SecurityCon 2026 Your Most Privileged User Isn’t Human: Securing AI Agents in Production 🤖💡 Ever wonder who’s the most powerful entity in your system today? It’s probably not a human. It’s your AI agent. And while these autonomous digital workers are revolutionizing how we operate, they’re also creating gaps in our security postures that we urgently need to address. Atulpriya Sharma, a Senior Developer Advocate at Improving (formerly InfraCloud), CNCF Ambassador, and co-chair of KubeCon India 2025, recently shed light on this critical challenge. He compellingly argued that our existing security paradigms, built for humans, are simply not ready for the unique nature of AI agents. ...

March 24, 2026 · 6 min

Quantum Proofing Sigstore: A Tale of Three Approaches - Kevin Conner & Firas Ghanmi, Red Hat

Presenters Kevin Conner Firas Ghanmi Source OpenSource SecurityCon 2026 Quantum-Proofing Sigstore: Three Bold Approaches to Secure Our Software Supply Chain 🚀 The digital world runs on trust, and in the realm of software, that trust increasingly relies on robust supply chain security. Sigstore stands as a critical pillar, ensuring the integrity and authenticity of software artifacts. But what happens when the very foundations of our cryptographic security are threatened? Enter quantum computing – a game-changer that could render today’s most secure algorithms obsolete. ...

March 24, 2026 · 8 min

Simplifying Global Compliance for CNCF Projects With the OpenSSF OSPS Baseline - Madalin Neag

Presenters Madalin Neag Source OpenSource SecurityCon 2026 Navigating the Global Compliance Maze: How OpenSSF OSPO’s Baseline Simplifies Security for Open Source 🌐🛡️ The world of open source software is a vibrant, collaborative engine powering critical infrastructure across the globe. From finance and healthcare to transportation and energy, open source projects are the unsung heroes. But as these projects grow in importance, so does the scrutiny they face, particularly regarding security and compliance. Madalin Neag, an EU Policy Advisor at OpenSSF, sheds light on the increasingly complex regulatory landscape and introduces a powerful solution: the OpenSSF OSPO’s Baseline. ...

March 24, 2026 · 6 min

Upstream Collaboration for the Win (of the CRA)! - Georg Kunz & Jan Melen

Presenters Georg Kunz Jan Melen Source OpenSource SecurityCon 2026 Navigating the Cyber Resilience Act (CRA): Why Upstream Collaboration is Your Secret Weapon 🛡️🤝 The digital world is evolving at lightning speed, and with it, the complexities of securing our software supply chains. Enter the Cyber Resilience Act (CRA), a formidable new regulation poised to reshape how software manufacturers operate. But what if this challenge isn’t just a hurdle, but a golden opportunity? ...

March 24, 2026 · 7 min

Zero Privilege Architecture - 3 Years Onward - Thijs Ebbers & Tadeo Sanchez, ING

Presenters Thijs Ebbers Tadeo Sanchez Source OpenSource SecurityCon 2026 🛡️ Beyond Zero Trust: How ING Achieves Zero Breaches with Zero Privilege Architecture Imagine a world where production environments run autonomously, human error is designed out of the system, and security breaches simply don’t happen. For the team at ING, this isn’t a pipe dream—it is their daily reality. In a recent deep dive, Thijs Ebbers (Architect) and Tadeo Sanchez (Lead Engineer) shared the secrets behind their container hosting platform’s success. The numbers speak for themselves: zero security breaches and 100% uptime. 🚀 ...

March 24, 2026 · 5 min