SOC Forum 2026 Reveals Full Program Featuring Chen Qiufan on AI Agents and Business Defense
Organizers of SOC Forum 2026 have released the full program for the cybersecurity event taking place on 27-28 October at Moscow's Lomonosov cluster. The main theme centers on the dual use of generative AI by attackers and defenders, examining both the benefits of the technology and the challenges that arise when AI assistants receive access to corporate systems.
The forum will feature more than 170 speakers and moderators from over 90 organizations, along with more than 60 sessions and 82 technical reports chosen from over 400 applications. On 27 October the agenda focuses on business and regulatory issues. Invited speaker Chen Qiufan, co-author of the book AI 2041, will deliver a 30-minute keynote and participate in a plenary discussion. Topics include the economic impact of AI, responsibility for mistakes, limits of autonomy, anti-fraud measures, and the risks of employees sending corporate data to external models.
On 28 October the program shifts to technical matters: the application of AI in attacks and defense, code security, cloud environments, and the protection of autonomous agents. Discussions will cover access rights, prompt attacks, and incident investigation procedures for AI systems. The AI & Cybersecurity track attracted 126 CFP submissions, 2.5 times more than last year. Participants represent banks, industrial companies, telecom operators, and cybersecurity firms. The forum is held within Russian Cybersecurity Week, with GK Solar serving as organizer and co-organizer. Registration remains open.
Related articles
Troubleshooting AI Bug Hunting: Seven Critical Mistakes That Destroy Report Validity
Two Russian researchers shared detailed lessons from six months of running AI agents on domestic bug bounty platforms. The presentation, originally delivered at OFFZONE, covers hallucinations, lack of validation, threat model misunderstandings, severity inflation, bloated reports, high token costs, and scope violations. Vladislav Bek and Daniil Shushakov describe practical fixes including tool-enabled agents, dual-agent verification, strict templates, and cascaded model architectures. They emphasize that AI must execute real commands in isolated environments rather than fabricate results. The speakers also address scaling on private events, handling model refusals, and the continued necessity of human final validation. Their checklist stresses business context, proven impact, and staying within program boundaries to produce accepted, high-value reports.
Skycode: Custom VS Code Extension Optimizes AI Coding Agent for Corporate Closed-Loop LLMs
A developer has released Skycode, an open-source VS Code extension that enables AI-assisted coding inside corporate closed environments using internal models such as Qwen. The project addresses strict data residency requirements in sectors like energy, where external services like GitHub Copilot or Cursor are prohibited because code would leave the perimeter. Key engineering efforts focused on aggressive context preservation within the model's roughly 100k token limit through incremental file reading, symbol-level extraction, history compression, and visual context monitoring. Additional features include tab-based parallel task handling, local voice dictation powered by Sber's GigaAM v3, and safeguards against repetitive loops or truncated file writes. The extension approach was chosen over forking the entire VS Code codebase to simplify deployment and compliance reviews, as extensions can often be installed from the Marketplace without separate approval. Skycode is positioned as a practical alternative for organizations running their own LLMs rather than relying on cloud models.
NICT and MITRE to Host AI Breach Challenge 2026 on Email Agent Security
The National Institute of Information and Communications Technology (NICT) and MITRE are organizing the AI Breach Challenge 2026: Email Agent Security competition in December 2026. The event will take place at George Mason University in Virginia and will focus on identifying security weaknesses in AI agents designed for workplace email operations. Participants will work in teams of two to four people, combining on-site and remote access over a 24-hour period on December 16 and 17. They will attempt to induce unintended behaviors in the agents and gain access to protected information within an isolated environment. NICT plans to analyze the results to evaluate the effectiveness and limitations of current AI agent security measures for future research and development.
AI Agents Becoming Core InfoSec Skill Like Microsoft Office Proficiency
Working with AI in information security is shifting from a specialized skill to a baseline expectation similar to using Microsoft Office tools. The key difference lies in the cost of errors: poor Word usage wastes time, while mishandling AI agents burns subscription limits and corporate funds. The article details practical workshops from the Engineering October series covering AI agents from beginner tools to securing the agents themselves. Core concepts include distinguishing models from agents, managing context windows to prevent forgotten instructions, and using skills, MCP connectors, and sub-agents for efficiency. Real-world examples show agents handling CVE analysis, alert triage, and threat report reviews while highlighting risks like hallucinations and data exposure. Guidance covers safe deployment in isolated environments and the irreplaceable role of human expertise in strategy and verification.