CSA's AI Vulnerability Storm Summit — London, 17 Sept. Follow-up to the paper 250 CISOs wrote. Speaking: Sean Turner (CSA UK), Matt Adams (Citi), Francesco Cipollone (Phoenix Security), Ryan Winstanley. @sec_phoenix sponsors, Telefónica Tech hosts. Seats limited — register in 🧵

🔫 We gave Phoenix Purple a hunting license. Then it found 15 zero-days in one session. This is Phoenix Purple with Exploit Hunt, our graph-native SAST/SCA. Three adversarial AI passes. Two gates. Nothing reported without a working proof of concept. 🌐 Access the platform: phoenix.security/phoenix-pur… 🎥 See a Live demo: youtube.com/watch?v=_Py9BOL-… 📚 Read technical background: phoenix.security/exploit-hun… ✅ Read the control framework: phoenix.security/agentic-sdl… 💰 Model the scan cost: ai-scan-cost.phoenix.securit… #cybersecurity #appsec #devsecops #aspm #vulnerabilitymanagement

We called it YOLO mode as a joke. Then we designed it. 🟣 This is Phoenix Purple, our recently launched AI-native SAST/SCA, graph-based threat modeling, and Hunt. One click. Real, reachable, chainable — and a straight answer on whether it's safe to ship. #cybersecurity #appsec #devsecops #aspm #vulnerabilitymanagement

One dependency update. One postinstall hook. SSH keys, AWS tokens, private repos — gone. 323 malicious packages. 22 minutes. npm audit: 0 vulnerabilities found. No CVE. No advisory. Your scanner was blind. Blue Shield catches it on behaviour. Before it runs. Don't be next. Free core tier live today. Link in comment. #npmsecurity #devsecops #appsec #phoenixsecurity

🤖 Your AI agent just installed a backdoor. No CVE. No alert. No warning. Supply chain attacks are up 10x this year. Attackers hit 3 surfaces at once: → Developer workstation (credentials stolen at install) → CI/CD pipeline (config compromise, key theft) → AI agents (autonomous installs, no safe/unsafe signal) Blue Shield blocks all three. npm · PyPI · Maven · GitHub · Jenkins #supplychain #appsec #devsecops #npmsecurity #aspm #phoenixsecurity

The hunt has just begun 🔫 🎯 Phoenix Security is at OWASP Vienna 2026. Booth G7 · June 22–26 · Austria Center AI agents are writing your code. Most AppSec programs don't know yet. Come see us live: → Agentic SDLC Security demo → 2026 Supply Chain Report → Win a Meta Quest 3S #OWASP #AppSec #Vienna2026 #PhoenixSecurity

We tracked 59 supply chain campaigns. 657 malicious IOCs. CVEs assigned: 0. Not a bug. Not a vulnerability. A stolen token, a trusted publisher, a poisoned package. CVE scanners saw nothing. The Phoenix Supply Chain Acceleration Report 2026 is out. 📦 4.5× package growth in H1 2026 🔴 15.6% of AI agent skills flagged risky ⚠️ GitHub breached via VS Code extension #SupplyChainSecurity #AppSec #CyberSecurity #DevSecOps #ASPM #ThreatIntelligence #npm #OpenSource #PhoenixSecurity #MalwareIntelligence