"AppSec is dead". Long live AppSec. In a short time frame we've had to reframe our thinking of "finding vulnerabilities is hard" to "vulnerability researchers may soon be out of a job", and long before developers.
Wherever the AI future may lead, and whether the user will even know that software operates in the background, as an industry we will have to adapt.
To new attack surface, such as with agents and the wider agentic supply chain (such as with the recent GitHub breach).
With a shifting focus to remediation first - if patches will even still exist.
...All the way to a world where vendors may no longer be needed, at least as they are now, and code is secure at generation.
This talk is about our industry, the change brought by AI, and most of all about relevance, from our companies and industry, to our own careers.
