In this session of Offensive Engineering Live Sessions, Dan DeCloss, founder of PlexTrac, now part of Brinqa, who has worked two decades in offensive security across the US Department of Defense, Veracode, Mayo Clinic and Anthem, walks through where agents fit inside a penetration test and where they do not. He is speaking independently, and the views he shares are his own.

The conversation covers:

• Why reconnaissance and enumeration are safe to delegate immediately, and what makes them different from everything that follows

• Where the line moves once an exploit runs against a live machine, and why rules of engagement cannot be encoded in a prompt

• How evidence handling becomes the real exposure, since penetration tests routinely dump databases and credentials that must stay inside the engagement

• Why an agent granted domain administrative access has effectively granted it to whoever compromises the model

• What it means to threat model the agent itself before scoping what it is allowed to do

• Why senior testers get faster with agents while junior ones get slower at building the judgment that makes seniors

In this session of Offensive Engineering Live Sessions, Mahesh Kumar Goyal, a Senior Data and AI Engineer at Google specializing in advanced agentic AI systems and responsible AI architectures, walks through the mechanics of governing and securing autonomous workflows. He’s speaking independently, and the views he shares are his own.

The conversation covers:

• Why the non-deterministic nature of agents breaks traditional identity and access management (IAM) frameworks

• How the line between data and code blurs when documents and log files become instructions for an AI

• Why prompt injection is evolving into the SQL injection of the agentic era, capable of poisoning long-term memory

• The critical need to treat an agent’s memory like a database with isolated, ephemeral context windows

• Why relying on standard enterprise observability and EDR tools for agentic workflows is a dangerous enterprise misconception

• Mandatory governance controls for production, from centralized agent inventories to unique cryptographic identities and short-lived tokens

In this session of Offensive Engineering Live Sessions, Siri Verma Veggiraju, a tech lead at Microsoft Azure Security with hands-on experience across cloud security architecture, identity, and the control plane, walks through the mechanics of how these attacks actually unfold. He’s speaking independently, and the views he shares are his own.

The conversation covers:

• How the attack landscape against cloud infrastructure has shifted with large language models and agentic AI

• Why secondary accounts are the real entry point to control plane compromise

• What a realistic attack chain looked like in the early days of cloud, and why the same principles still apply

• How managed identities work and where organizations consistently over-privilege them

• Why API proliferation is a blind spot that most security teams underestimate

• What least privilege looks like when you’re securing sub-agents in a hierarchical AI architecture

• How to think about the line between a security incident and a sovereignty problem