DevSecOps - London Gathering

## Details

Welcome to the DevSecOps London Gathering April Event on Wednesday 29 April! We bring another amazing speaker, as well as the usual conversations, pizza and beer!

📍 Hosted at Civo Tech Junction, 1st Floor, 32-37 Cowper Street, London, EC2A 4AW
📅 Wednesday, 29 April
🕕 6:00–8:00 PM

## Talk Abstract:

APIs are the hidden infrastructure that connects everything, like the plumbing of the modern age – though much like plumbing, you don't realise you've got a problem until it’s too late…

This is doubly true for the AI era. It doesn't matter if you're orchestrating agents through OpenClaw, Warcraft 3 or MCP – APIs remain the way AI escapes the bounds of the chat box into the real world.

But this new modality of APIs unfortunately didn't ship with more security. We’ve spent years lumping APIs into “web security” and calling it a day. As AI adoption accelerates, API abuse is becoming the easiest way to escalate impact: broken object-level auth, excessive data exposure, workflow manipulation, and agent overreach. So what actually matters and how are attackers exploiting it?

Join Dr Katie Paxton-Fear as we explore API hacking as its own discipline, in the AI era. No generic web security theory. Instead, you’ll walk away understanding:

• What makes APIs uniquely vulnerable
• The bugs attackers actually look for
• How AI-driven workflows expand impact
• How to test your own APIs effectively