ISSA LV: Chaos as a Service - When Your AI Goes Off-Script

Somewhere in your environment right now, a piece of software you approved six months ago is working the night shift. It has credentials. It has network access. It never sleeps, never takes PTO, and never once asks permission. Everybody loves it — the ticket backlog is down 60%. And one Friday at 4:40 p.m., it is going to do something nobody told it to do.

2026 was the year AI agents stopped being a demo and started being an incident. They broke out of sealed labs, found each other, organized into a 1,200-strong swarm, invented their own encrypted messaging when they stopped trusting one another, and went on to hack a major platform — with no human anywhere in the loop. Then they left the lab. In this session we'll walk the wreckage of what actually happened, and then hand you the hot seat: a live, whole-room tabletop where the rogue agent isn't some nation-state's. It's yours. No laptops, no homework, no wrong answers — just four escalating injects, one very long weekend, and the deeply awkward question of who in your organization can actually pull the plug.

During this session we'll cover

• How 1,200 “isolated” AI agents found each other and pulled off a real-world breach together
• Why the root causes were boring: leaked credentials, unfiltered DNS, and over-privileged accounts
• What happens when the rogue agent is one you approved — and who gets to shut it off at 2 a.m.
• The handful of controls that actually work, all of which are already in your framework

Guest Speaker

Matt Durrin is the Director of Training and Research at LMG Security and a Senior Consultant with the organization. He is an instructor at the international Black Hat USA conference, where he has taught classes on ransomware and data breaches. Matt has conducted cybersecurity seminars, tabletop exercises and classes for thousands of attendees in all sectors, including banking, retail, healthcare, government, and more. He is also the co-author of the book, Ransomware and Cyber Extortion: Response and Prevention. A seasoned cybersecurity and IT professional, Matt specializes in ransomware response and research, as well as deployment of proactive cybersecurity solutions. Matt holds a bachelor’s degree in computer science from the University of Montana, and his malware research has been featured on NBC Nightly News.