Thu, Nov 26 Β· 6:00 PM CET
Thanks to Aikido Security for hosting this event! π
This edition is about where cloud native, security and AI meet: running AI agents on Kubernetes, keeping untrusted code contained, and how attackers think about the tools we use every day.
ββββββββββββββββββββ
π
AGENDA
π 18.00 β Doors open | Food & drinks
π€ 19.00 β Welcome + sponsor talk (Aikido)
π€ 19.10 β Suspend, Sandbox, Scale: Kubernetes for the Agentic Era (Steven Trescinski, Gluo)
π€ 19.40 β The HAMi Project. How to slice a gpu! (Olivier Calzi, Golden Kubestronaut)
β 20.10 β Break
π€ 20.30 β Hacking Browsers: The Easy Way (Robbe Van Roey, Aikido)
π€ 21.00 β Networking
Whether you're running AI workloads in production, securing your clusters, or just curious how the two fit together, this is the place to be.
Food and drinks provided. See you there! π
ββββββββββββββββββββ
π€ SESSION 1
Suspend, Sandbox, Scale: Kubernetes for the Agentic Era
Steven Trescinski, Gluo
AI agents don't fit the "one workload, one pod" model. They sit idle most of the time, wake up for a tool call that needs an answer in milliseconds, and often run code an LLM just wrote. That wastes compute, strains the control plane, and turns every agent into a new attack surface in your cluster. This talk explores a new wave of open source projects that add an agent-aware layer on top of Kubernetes. These projects snapshot idle agents, pack thousands of them onto a small pool of isolated workers, and resume them in under a second. In a live demo, we'll look at how it works, how it keeps untrusted agent code contained, and where the gaps still are.
π€ Bio: Steven is a long-time open source and Kubernetes enthusiast at Gluo. He's currently experimenting with running and securing AI agents on cloud native platforms.
ββββββββββββββββββββ
π€ SESSION 2
The HAMi Project. How to slice a gpu!
Olivier Calzi, Golden Kubestronaut
Most clusters waste their GPUs: one pod, one card, mostly idle. HAMi, a CNCF incubating project, slices a GPU by memory and compute and enforces the limits at runtime. I'll go under the hood: how the pieces fit, how isolation actually works, and when slicing is the right call.
π€ Bio: From pulling Ethernet cables as a student in France to becoming a Golden Kubestronaut, I have spent 10 years learning the stack from the ground up. Now a Cloud Native Expert with 15 CNCF certifications, I focus on SRE and infrastructure architecture. I'm a firm believer in the "work-study" model and a lifelong student who still finds engineering deeply fun.
ββββββββββββββββββββ
π€ SESSION 3
Hacking Browsers: The Easy Way
Robbe Van Roey, Aikido
When you think of hacking browsers, you perhaps think of V8 heap exploitation, deep-dive fuzzing, crazy sandbox escapes, and so on. But what if I told you that you can still find vulnerabilities in major browsers that don't require any technical knowledge? Bugs you can even run into by accident!
In this talk, I'll take you through my journey of how I "accidentally" found a vulnerability in Google Chrome. And how that led me to find more vulnerabilities in Chrome as well as some vulnerabilities in Mozilla Firefox and many more bugs in other products.
So if you're keen to find out how I could, with minimal user-interaction, steal your private GitHub repositories, then this talk is for you!
π€ Bio:
Hi! I'm Robbe Van Roey π
I'm a hacker. I like breaking stuff. I'm a security researcher @ Aikido Security, I've worked for a bug bounty company, and I've found 35+ CVEs. I love hacking web apps, mobile applications, AI systems, and Active Directory.
I'm also a teacher. I teach developers about secure coding, I teach beginners about Red Teaming for Hack The Box and I've created a bunch of YouTube videos on my channel.
In the online realm, you may know me as PinkDraconian. Come up to me and say hi!
My life motto is "Hacking you so you don't get hacked" and I'd like to show you part of that ideology during my talk. See you there!