Allow? [Y/N] The Hidden Risks of AI Coding Tools — and the Button we Keep Clicking
About This Session
AI coding assistants have become far more than autocomplete. Today's agents can read repositories, execute commands, install packages, access secrets, and push code—often with little human oversight. While they're transforming developer productivity, they're also introducing entirely new security risks.
In this session, we'll break down the five biggest threats organizations face when adopting AI coding tools, from prompt injection and CI/CD compromise to malicious plugins, insecure AI-generated code, and the growing challenge of governing autonomous AI agents. Using real-world exploits and recent security research, we'll show how these attacks work, why they're succeeding, and what security and engineering leaders should do about them.
Attendees will leave with a practical framework for securing AI-assisted software development, reducing enterprise risk, and enabling developers to safely take advantage of the next generation of AI coding tools. (Presented by HiddenLayer)
In this session, we'll break down the five biggest threats organizations face when adopting AI coding tools, from prompt injection and CI/CD compromise to malicious plugins, insecure AI-generated code, and the growing challenge of governing autonomous AI agents. Using real-world exploits and recent security research, we'll show how these attacks work, why they're succeeding, and what security and engineering leaders should do about them.
Attendees will leave with a practical framework for securing AI-assisted software development, reducing enterprise risk, and enabling developers to safely take advantage of the next generation of AI coding tools. (Presented by HiddenLayer)
Speaker
Jacob Rideout
Chief Technology Officer - HiddenLayer
Jacob Rideout is the Chief Technology Officer of HiddenLayer, a cybersecurity start-up dedicated to preventing adversarial machine learning attacks. He has over a decade of experience leading engineering, product management, threat research, and data science teams, with a focus on security products at organizations such as Salesforce and Agari. Jacob has successfully brought multiple cutting-edge products to market, overseen acquisition transitions, collaborated with technical working groups at M3AAWG, ETIS, IETF, and MITRE, and managed research patents. Jacob lives in Raleigh, North Carolina, with his wife Sarah and son Solomon.
