General session image of Knowledge Forum B

No AI - No Cookies

What does it mean for a company's cybersecurity if the DAU is suddenly no longer a human but an AI agent?

Topic

AI & Quantum SecurityIdentity and access managementGovernance, Riskmanagement and ComplianceData security / DLP / Know-how protection

When & Where

calendar_month

Thu, 10/29/2026 10:45 AM - 11:00 AM

location_on

Forum B, Booth 7A-206

Download session as iCaldownload_for_offline

Details

  • Format:

    Technology lecture

  • Language:

    German

Session description

Speakers: Daniel Fall, difesa and Timm Lotter, unosecur 

Commercial break: this presentation won’t be about a specific product or service. Instead, it will focus on the sense - or nonsense - of using AI, and the challenge of rolling it out for both people AND agents.

In IT, we’re familiar with the DAU - the “dumbest assumed user” - a person who doesn’t read error messages or instructions and can’t even solve simple problems on their own (think paper jam). But what if this usual suspect is suddenly not a human but an AI agent who, on top of that, also has extensive credentials and permissions? Or who might simply grant them to itself if it deems it helpful?

An AI agent from the company Pocket OS destroyed PocketOS’s production database, including its backups, in ju ...