The phishing email asking a CFO to wire funds is yesterday's problem. In 2026, the attacker doesn't email the CFO. They clone the CFO's voice, leave a voicemail for an AI assistant that has calendar access, payment approval permissions, and a helpful disposition, and the AI does the rest. No human in the loop. No malware on the endpoint. No anomaly the SOC was trained to catch.

This session is about the collision the security industry has not fully reckoned with yet: deepfakes and synthetic media on one side, autonomous AI agents with real enterprise privileges on the other, and the identity layer in the middle that was never designed for either.

Drawing on years of architecting large-scale enterprise AI systems and serving on NIST's AI Agent Security subcommittee, I'll walk through the new attack chain step by step. How a few minutes of LinkedIn video becomes a convincing voice clone. How that clone bypasses help-desk verification. How it manipulates an AI agent that trusts authenticated channels more than it trusts judgment. And how a single compromised agent then cascades into others through the trust relationships your teams have quietly been building all year.