Beyond the bug: A hacker’s perspective on AI slop and the future of cloud-native hacking

​Abstract

​The world of bug hunting has turned upside-down in 2026. Claude Code changed everything about what hacking looks like. On the other hand, program owners who work with hackers are dealing with an influx of AI-slop vulnerabilities. This responsibility is shared with AWS as they work to help teams scale.

​There are so many pieces of this puzzle, and this session attempts to tackle the subject. We’ll look at it from several different perspectives:

• ​The hacker perspective—What they look for in a cloud-native attack surface, where they see the future of hacking going, and what parts of hacking are irreplaceable.

• ​The AWS perspective—How AWS thinks about the shared responsibility and scale when triaging external reports at hyperscale

• ​The customer perspective—What modern threats they’re most focused on, especially when the perimeter is identity and configuration rather than a network boundary

• ​The Bugcrowd perspective—How our triage team is responding and scaling in the age of AI slop vulnerabilities.

​Event Hosted by Bugcrowd & HPE Networking. Sponsored by Pi Security, Cytix, and Vijil.