AI-Driven Threats and Supply Chain Risks Highlighted at AppSec Summit 2026

The San Francisco Secure Software and AppSec Summit 2026 gathered over 150 security professionals to address emerging threats in application security, particularly those posed by AI-driven technologies. Key discussions included the risks associated with autonomous AI agents, such as prompt injection and the potential for full system compromise. Aaron Brown from Mercor emphasized that untrusted inputs to AI agents could lead to significant vulnerabilities, urging a shift in security practices to treat these agents with caution. The summit focused on practical solutions to real-world risks, including supply chain exposure and the overlooked phase of decommissioning in the software lifecycle. Attendees shared strategies for managing security without hindering development speed, highlighting the need for collaboration among AppSec teams. The event underscored the urgency of adapting security measures to keep pace with rapid technological advancements.

Key Points: • The summit addressed AI-driven threats and their implications for application security. • Prompt injection and untrusted inputs to AI agents pose significant vulnerabilities. • Decommissioning is a critical phase often overlooked, leaving systems vulnerable.