AIR | Black Hat 2026

Colorful circus entrance with sign ‘Circus of Skills’ and pixelated figure standing in front.

Pixelated figure faces a brightly lit circus entrance labeled 'Circus of Skills' with signs for AI and security.

Pixelated character faces a circus entrance with pink and white tents and a Ferris wheel under blue lights.

Pixelated character stands facing a colorful Circus of Skills entrance with horses and stalls.

Pink-toned desert landscape with winding path, cacti, and a lamppost.

Pink stylized cloud with soft rounded edges on a transparent background.

The AI Ecosystem Became A Circus

Every day, employees extend their AI agents' capabilities with new add-ons - skills, plugins, MCPs and subagents.
These add-ons connect AI agents to systems, access sensitive data, and interact with key assets. 

Most organizations never see what’s happening behind the scenes. If you could see everything an AI add-on can access, would you still approve it?

Pixel art carousel with blue and white horses and a rider flying off on a pink background.

Anyone can publish an AI Add-on

Anyone can create it, package it as something useful, and make it available for download. To the user, it looks legitimate. To the organization, it can become a security risk.

Pixel art characters performing circus acts labeled Skills, Plugins, Subagents, and MCPs on a pink podium.

Pixelated seesaw with four stacked characters on left and one character holding shield on right.

The New Supply Chain

AI adoption isn't just about agents anymore. Each skill, plugin, MCP, and subagent becomes part of your enterprise AI supply chain - bringing its own code, permissions, dependencies, and trust assumptions. 

The chain is growing faster than anyone can map it, and so is the attack surface.