Hello everyone,
Join us on Wednesday, June 17, 2026 for our next OWASP Toronto event:
Beyond Mythos: A New Operating Model for Code Security
Description:
AI split AppSec into two attack surfaces: your code, and the code factory that produces it—coding agents, the models and MCP tools they call, the developer environment itself. With exploits now landing in under ten hours and vulnerabilities shipping from more authors than ever, this talk lays out a staged path to a "Mythos-ready" program—reprioritizing around reachable risk, accelerating remediation, and securing the AI-SDLC—and argues security should stop filing tickets and start shipping fixes.
Speaker: Nate Michalov
Nate Michalov is a Solution Architect at Endor Labs, where he works at the intersection of application security and the emerging agentic SDLC. With roughly 13 years spanning software development, security officer roles, and enterprise AppSec presales across Veracode, Snyk, Apiiro, and Endor Labs, he brings cross-vendor depth in SCA, SAST, reachability analysis, and software supply chain security.
His current work focuses on deterministic security controls for AI agents and how AI-driven development is reshaping the threat surface across product security and the software supply chain. He holds a graduate background in computational linguistics, with earlier research in deception detection.
Thank you to Security Compass for hosting us in person!
See you there,
Yuk Fai
Yuk Fai ChanOWASP Toronto Chapter