First stop for @BlackHatEvents week: Omega Mart 🛒💜 We’re teaming up with @awscloud and @Tailscale for an after-hours happy hour on August 4. Food, drinks, good conversations, full access to explore Omega Mart, and an interactive scavenger hunt through the aisles.

Hi again - 👋 So my reporting from @BlackHatEvents on the OpenAI-Hugging Face briefing got more than 2 million views here and people were, understandably, pretty freaked out. But I was still at Black Hat, so I spent yesterday listening to what security people there actually thought about the talk. Besides talking to folks I cornered in the hallways and in the business hall, at the final keynote @Window pointed out the agents didn't actually have to escape their sandbox. They were using capabilities and access OpenAI had given them. “Thinking that turning off the internet was enough feels naive,” she said. @NathanHamiel wondered whether AI companies are starting to treat incidents involving their agents behaving badly as a form of good publicity, calling it “felony humble-bragging.” And Columbia's @Jason_Healey said the whole message-board thing actually reminded him of early human hackers using message boards to swap information and help each other hack things. “It’s classic hacker activity.” Anyway, I wrote about what happened after my original post went viral, how I wound up reporting it in the first place, and what people at Black Hat actually made of the whole thing:

Nation-state attackers want the keys that move billions onchain. At @BlackHatEvents, Fireblocks architects Ben Liderman and Maayan Keshet showed how we defend the build pipeline behind institutional crypto. Watch the full session here:

Join @gattaca, Global Advisory CISO at @1Password, live on the #BlackHat2026# PULSE_STAGE/05: "Standing Access Is the Problem. AI Agents Just Made It Worse." If your agents still have standing access, this is the session to drop in with your questions. 📅 Today | 11:25AM 📍 PULSE_STAGE/05 Add to your schedule: #BlackHat2026# #IdentitySecurity# #ZeroTrust# #AIAgents# #BlackHat#

🔥From Black Hat Asia 2017 as a Speaker to Black Hat USA 2026 at Arsenal. Nine years later, still building, still breaking, still learning. #BlackHatUSA# #Arsenal# #AISecurity# #Web3Security#

Gartner projects that through 2029, more than 50% of successful attacks on AI systems will exploit access control weaknesses. At #BlackHat2026#, Dave Lewis, 1Password Global Advisory CISO, breaks down how a compromised AI agent is fundamentally different from a leaked password and why standing access is becoming one of the biggest security risks organizations face. You'll also see how 1Password replaces standing access with time-limited, task-scoped credentials that are tied to verified identity and revoked automatically when the work is complete. "Standing Access Is the Problem. AI Agents Just Made It Worse." 🗓️ Thursday, August 6 | 11:25am 📍 PULSE_STAGE/05 Add this session to your Black Hat schedule: #BlackHat# #IdentitySecurity# #ZeroTrust# #AIAgents# #1Password#

Supply chain attackers don't search your machine because they already know where to look. A malicious package installs cleanly, a hidden script runs, and credentials are gone before your terminal comes back. We're at Black Hat Booth 4735 showing how to make the secure path the easy one, with secrets that never sit exposed, pipelines without standing credentials, and AI agents that never see raw values. #BlackHat# #Developers# #DevSecOps# #1Password# #cybersecurity# #IdentitySecurity# #BlackHat2026#

Black Hat brings together a diverse group of security experts, from C-suite executives to black-hat hackers. Some attendees see it as a target-rich environment for testing their latest hacks. Before you land in Las Vegas for Black Hat, take a few minutes to secure your developer credentials: ✅ Run 1Password Developer Watchtower to discover unencrypted ssh keys and vault what it finds ✅ Explore the new After you secure your secrets, come to Booth 4735 to share how many items you found and grab an exclusive sticker. While you’re there play our game, Credential Sprawl Capture the Flag, to win fun prizes and get your name on our leaderboard. 🔗 Read the full breakdown and prep for Black Hat: #BlackHat2026# #Developers# #DevSecOps# #1Password# #cybersecurity# #blackhat#

Black Hat's in the books. Now the vibe shifts: DEF CON is where hacker culture takes over, and where theory meets practical exploitation. Today, 4:30 PM, Crypto & Privacy Village: Diptendu Kar on "Crypto Is Fine. The Code Is Not." Crypto failures rarely come from bad math, they come from the gap between cryptographic theory and secure implementation. This weekend, Bug Bounty Village, Saturday 2:30 PM: @insiderphd and @hackfidgetcube on "Slop Spotting." As AI reshapes how code gets written (and how bug reports get filed), the challenge shifts from finding bugs to finding the right ones. Their talk digs into using SAST rule generation to separate genuine risk from AI-generated noise. IoT Village, Saturday 3:15 PM: Katie's back solo with "Beyond Your Bookshelf: Hackable eReaders." Bring your Kindle. She might jailbreak it on the spot. See you in the villages.