BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//fwd-cloudsec-2026//speaker//G7UUJY
BEGIN:VTIMEZONE
TZID:PST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T100000Z
TZNAME:PST
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:PST
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T110000Z
TZNAME:PDT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:PDT
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-fwd-cloudsec-2026-GL88RE@pretalx.com
DTSTART;TZID=PST:20260601T133000
DTEND;TZID=PST:20260601T135000
DESCRIPTION:Neoclouds are here whether we planned for them or not - and the
  security assumptions we carry over from the hyperscalers don't transfer c
 leanly. The IAM ergonomics and audit trails we'd taken for granted aren't 
 a given. How are secrets stored? If you hand an AI agent an access key\, c
 an you scope it to read-only - and can you even tell afterward which actio
 ns were the agent's?\n\nThese are what Amy Edmondson calls "ambiguous thre
 ats": warning signals that don't fit our existing mental models and so get
  rationalized away by competent people\, working in good faith\, applying 
 reasonable assumptions - not because teams are reckless\, but because the 
 mental model required to interpret the platform signals doesn't exist yet 
 - and the mental bandwidth required to build that model from scratch doesn
 't exist either. \n\nThis talk isn't about which platforms are safe. It's 
 about methodology for laying out the facts so a security team can form a c
 lear\, opinionated posture - one it can defend internally\, and that we ca
 n start to standardize as an industry instead of re-deriving for every new
  provider.\n\nTo make that practical\, I'll also share an open-source agen
 t skill that runs the same evaluation against any platform's public surfac
 e\, turning a week-long investigation into a 40-minute pass.\n\nAnd it's a
 n open invitation to the researchers who already probe AWS for a living: l
 et's point that lens at the neoclouds.
DTSTAMP:20260531T022620Z
LOCATION:Room 1
SUMMARY:Pattern matching and head scratching with our new friends The Neocl
 ouds - Matthew Gladney
URL:https://pretalx.com/fwd-cloudsec-2026/talk/GL88RE/
END:VEVENT
END:VCALENDAR