Speaker
Abstract
AI workloads on Kubernetes inherit every cloud native vulnerability. And from GPU mega-clusters training hundred-million-dollar models, to MCP servers acting as universal adapters for autonomous agents, non-deterministic systems create a threat landscape that traditional cloud native security wasn't designed for.
In this talk, we examine the real-world attack surface of AI on Kubernetes: from NVIDIA container escapes and GPU memory side-channels, through tool poisoning and agent trust boundary failures, finishing with the governance gap that leaves critical services exposed.
Using the FINOS AI Readiness Governance Framework, we map controls to infrastructure, demonstrate potential gaps and highlight risk, and demonstrate that securing AI is still fundamentally Kubernetes security, with new crown jewels to protect.
Topics
QCon London 2026 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.
Part of the track
Software Security & Risk Management Hosted by Chris Swan Engineer @atsigncompany, InfoQ EditorFrom the same track
Tuesday 17 March
10:35 Mountbatten (6th Fl.) Session security Why Governance Matters: The Key to Reducing Risk Without Slowing Down Sarah Wells Independent Consultant and Author When you hear “governance,” you might think of red tape, bureaucracy, or someone telling you what you can’t do. But real governance is about alignment and reducing technical risk. And that matters more than ever. 11:45 Mountbatten (6th Fl.) Session Kernel Building on Bedrock: A Security Philosophy from Bootloader to Runtime Alex Zenla Founder & CTO @Edera In Minecraft, every world is built from blocks. At the very bottom lies bedrock: an unbreakable foundation that everything else rests on. Above it sit layers of stone, dirt, sand, and other materials. 13:35 Mountbatten (6th Fl.) Session SBOMs From Chaos to Clarity: Modern SBOM Practices That Actually Work Viktor Petersson Founder of sbomify, Co-founder & CEO of Screenly, Host of Nerding Out with Viktor In this talk, Viktor will walk you through everything you need to know to build a practical and future ready SBOM strategy. 14:45 Rutherford (4th Fl.) Unconference Unconference: Software Security & Risk Management 15:55 Windsor (5th Fl.) Session security Exploding GPUs Andrew Martin Founder and CEO @ControlPlane, CISO OpenUK, CNCF Security Advisory Group AI workloads on Kubernetes inherit every cloud native vulnerability. 17:05 Windsor (5th Fl.) Session security Adopting Memory-Safety and Fine-Grained Compartmentalisation With CHERI David Chisnall Director of System Architecture @SCI Semiconductor, OS, Compiler, and Computer-Architecture Expert, Maintainer of the CHERIoT Platform This talk will describe how CHERI achieves memory safety for existing code with just a recompile and how that non-bypassable memory safety can be used as a building block for higher-level security abstractions.