AIR | Black Hat 2026

The AI Ecosystem Became A Circus

Every day, employees extend their AI agents' capabilities with new add-ons - skills, plugins, MCPs and subagents.
These add-ons connect AI agents to systems, access sensitive data, and interact with key assets. 

Most organizations never see what’s happening behind the scenes. If you could see everything an AI add-on can access, would you still approve it?

Anyone can publish an AI Add-on

Anyone can create it, package it as something useful, and make it available for download. To the user, it looks legitimate. To the organization, it can become a security risk.

The New Supply Chain

AI adoption isn't just about agents anymore. Each skill, plugin, MCP, and subagent becomes part of your enterprise AI supply chain - bringing its own code, permissions, dependencies, and trust assumptions. 

The chain is growing faster than anyone can map it, and so is the attack surface.