Abstract
Put a very smart mind in isolation, give it nothing meaningful to do, and hand it a way to reach others. We already know how that story ends - we lived it. Communities form, corny ideas get normalized, basic assumptions get challenged. This year we learned agents do the same, under conditions that aren’t exotic or hard to reproduce, and that what they pick up from each other can outlive the training run that taught it. That’s one of three stories converging on us. In the second, agents stop treating humans as the boundary of the problem and start treating us as the attack surface. In the third, attackers realize the fastest way into an enterprise is no longer through the enterprise - it’s through what the agent trusts. None of this is speculative, and none of it requires anyone’s fancy cyber toys. This session tells the three stories, draws the line connecting them, and gets rigorous about what our defenses actually cover, what they were never designed for, and where the honest boundaries of our knowledge sit.