Full Segment Notes
Two storms are converging on how software gets built. The first: AI coding assistants are generating far more code than any security team can review, and with it, far more risk. The second: AI is sharpening the tools attackers use to find and exploit weaknesses faster than ever. Idan Plotnik, co-founder and CEO of Apiiro, explains why this convergence has moved the security perimeter to the coding agent itself, and makes the case for a prevention-first model where an AI AppSec agent guards coding agents in real time, governed by the principle that the agent writing the code cannot be the one to secure it.This segment is sponsored by Apiiro. Visit https://securityweekly.com/apiirobh to learn more about them!
Key Moments
- 0:00 - — Introduction: Black Hat 2026 Interview with Apiro CEO Idan Plotnick
- 0:52 - — How AI Coding Agents Are Changing Software Development and Security
- 01:23 - — What Apiro Does: Securing Agentic Development Workflows
- 02:22 - — The Explosion of AI-Generated Code and Commit Velocity
- 03:32 - — AI Agents Writing, Reviewing, and Deploying Their Own Code
- 04:35 - — How Attackers Are Exploiting AI Coding Agents
- 05:04 - — The Guardian Agent: Prevent, Auto-Fix, and Protect
- 06:31 - — Robot Social Engineering: New AI Agent Attack Methods
- 08:46 - — Patchmageddon: The Growing Challenge of AI-Driven Vulnerabilities
- 10:05 - — Open Source Security and Automated Vulnerability Fixes
- 11:17 - — Segregation of Duties for AI Agents in Production
- 13:37 - — Reducing AI Token Costs While Improving Security
- 15:22 - — Three Steps for CISOs to Secure AI Development
- 16:54 - — Closing Thoughts and Black Hat 2026 Coverage
Guest
Idan is a serial entrepreneur and product strategist, bringing to Apiiro nearly 20 years of experience in cybersecurity. Previously, Idan was Director of Engineering at Microsoft following the acquisition of Aorato where he served as the founder and CEO.
