BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-exeter-2026//talk//MDYRPK
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-exeter-2026-MDYRPK@pretalx.com
DTSTART;TZID=GMT:20260425T114000
DTEND;TZID=GMT:20260425T122000
DESCRIPTION:Being responsible for designing and implementing DLP policies i
 n my organisation\, I have seen first hand how companies suffer data loss 
 without even realising it. The individuals exfiltrating the data are unawa
 re what they are doing is even exfiltration of data through legitimate wor
 kflows.\n\nTraditional Data Loss Prevention programs were built to monitor
  email gateways\, USB devices\, and cloud storage. But generative AI has i
 ntroduced a new and largely unmonitored exfiltration channel.\n\nIn many o
 rganisations\, AI adoption is outpacing governance. Employees restricted f
 rom using approved AI tools often turn to personal accounts or unsanctione
 d platforms pasting sensitive board packs\, proprietary source code\, and 
 client data into public models in order to work more efficiently.\n\nExist
 ing DLP controls frequently fail to detect this behaviour because the acti
 vity appears legitimate and encrypted within normal web traffic.\n\nIn thi
 s talk\, I explore:\n\nHow generative AI creates blind spots in traditiona
 l DLP architectures\nReal-world scenarios where sensitive data leaves the 
 organisation without triggering alerts\nHow red teams and malicious inside
 rs can weaponize legitimate AI usage\nWhy most DLP programs measure activi
 ty instead of risk\nPractical approaches to regaining visibility without s
 hutting down innovation\n\nThis session bridges red\, blue\, and governanc
 e perspectives to challenge what data loss prevention really means.
DTSTAMP:20260501T081647Z
LOCATION:Seminar Room 7
SUMMARY:Shadow AI Is Your New Data Exfiltration Channel - Chijioke Okoye
URL:https://pretalx.com/bsides-exeter-2026/talk/MDYRPK/
END:VEVENT
END:VCALENDAR
