Dr. Ron Ross, a living legend in cybersecurity and one of the most influential architects of our nation’s cyber defense frameworks, joins us in-person for an extraordinary keynote conversation not to be missed. With decades of pioneering work at NIST, including authoring landmark initiatives like the Risk Management Framework and the NIST Systems Security Engineering Guidelines, Dr. Ross brings unmatched insight into the future of cybersecurity. This powerful session will explore the most urgent priorities and transformative strategies needed to ignite meaningful change in our cyber posture. Dr. Ross will also share freely available tools and resources designed to empower practitioners across sectors. Don’t miss this rare opportunity to engage with one of cybersecurity’s most visionary leaders.

In this presentation, cybersecurity consultant Michael Quinn draws from extensive experience investigating thousands of cyber incidents to share practical insights on high-volume incident response. The talk explores key lessons learned from real-world investigations, highlighting common patterns, recurring challenges, and the importance of structured approaches when dealing with frequent security events. Attendees will hear about proven best practices for effective triage, prioritization, and coordination during investigations, as well as strategies for improving overall response maturity — such as refining processes, leveraging available tools and intelligence, and conducting thorough post-incident reviews to strengthen defenses over time. Through anonymized war stories from the field, the session illustrates how seemingly routine matters can escalate, the value of quick but measured decision-making, and the critical role of preparation and teamwork in containing impact and supporting recovery. These relatable accounts underscore broader takeaways applicable to organizations of various sizes and sectors. Ideal for security professionals, incident responders, and leadership looking to build or enhance their investigative and response capabilities in environments where incidents are frequent and demands are high.

News headlines show you the breaches at massive corporations, but it’s everyday organizations that face the most threats. Adversaries prey on the human psyche and use AI to advance their tactics and target the companies that keep our communities running.  For these companies, a ransomware or BEC attack isn’t just a stressful event—it’s the reason they can’t make payroll. This session explores how hackers plan to win, and why you don’t need a massive budget to fight back.  We’ll get into how Huntress brings cyber resilience through a powerful combo of purpose-built technology and human SOC expertise to stop threats before they cause damage—because organizations of ALL sizes deserve a fighting chance against attackers.

This session outlines the critical challenges and strategic pivots required for 2026, using real-world data to focus on the "humanly impossibility" of solving for challenges like incomplete vendor patches, high-impact threat actor tactics, outdated approaches to alert prioritization. To help deal with the problem of overwhelming alert volume and chronic understaffing, attendees will learn how foresight is now possible and can help them gain precious minutes, hours, or days of lead time ahead of an attack.

APIs are now the primary interface for modern digital businesses, concentrating identity, data, and control in a single layer, and making them a prime target for attackers. Across cloud, SaaS, and enterprise environments, adversaries increasingly exploit APIs for initial access, establish persistence using tokens or service identities, and move laterally through internal APIs and trusted service-to-service communication.  

This session breaks down the modern API-driven attack path using real-world incidents, explaining why API breaches so often escalate, why perimeter-based defenses fail to contain them, and how organizations can shift toward runtime detection and east-west containment. The focus is on resilience: limiting blast radius and keeping API incidents from becoming full-environment compromises.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

KISS" (Keep It Simple, Stupid) is a luxury rarely afforded to modern security teams dealing with legacy tool sprawl. While executives push for consolidation to reduce budget and risk, the transition from disjointed "best-of-breed" tools to a unified ecosystem is fraught with friction. Too often, security tools serve SecOps well but remain invisible obstacles to the DevOps pipeline. This session guides security leaders through the difficult journey of dismantling complexity to build a team-neutral "Golden Path", as coined by Spotify back in 2020.  We will move beyond emotional attachments to specific tools and focus on defining objective business and regulatory requirements. Learn how to transform your security program from a bottleneck into a streamlined pipeline that delivers safer software, faster.  Unify Tooling: Integrate disparate tools into a simplified process that reduces paths to production.  Define Metrics: Develop KPIs that demonstrate success to Developers, Audit, and the C-Suite.  Drive Culture Change: Educate and encourage stakeholders to adopt the path of least resistance.  Prevent Drift: Implement detection mechanisms to ensure the pipeline remains streamlined.

Attackers are using AI to move like coordinated swarms, compressing weeks of work into hours. This talk covers why traditional security stacks can't keep up and what it looks like when defenders start fighting back at machine speed.

AI-driven cyberattacks are growing in sophistication, threatening your business critical Entra ID and Microsoft 365 data. In this session, explore how these threats are evolving, and how to prepare for incident response. Learn why clean recovery, not just data recovery, is essential to strengthening your organization’s cyber resilience.

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

Firewalls are built to be the gatekeepers of the network—but what happens when the gatekeeper becomes the target? Over several years, Sophos tracked and disrupted a sophisticated, state-linked campaign targeting edge devices across the industry.

This session unpacks what we learned from Project Pacific Rim: how advanced attackers exploit trust at the perimeter, how real-world response reshaped our product design and monitoring strategy, and why edge security must evolve beyond static defenses. We’ll explore the broader industry implications of compromised firewalls and what vendors and practitioners must do differently to reduce exposure, accelerate response, and build resilience into the very infrastructure designed to protect us.

Today's threats evolve faster than we can train our teams, and CISOs know that legacy awareness programs are no longer enough to stop sophisticated and adaptive attacks. By empowering users to take ownership of their daily cyber habits and actions, CISOs can limit their exposure to attacks, enable clearer reporting on key metrics, and build a stronger shared security posture across the organisation.

From vibe coding and autonomous agents to generative chatbots in everyday workflows, AI adoption is constant and occurring at a pace that most security programs have not been able to realistically govern. Well-intentioned employees, misaligned agents, overly permissive access, and weak data controls are introducing new forms of risk, often without malicious intent. At the same time, adversaries are actively probing these gaps through indirect prompt injection and jailbreaking techniques. But there's good news too. More often than not, failures leave signals long before they become significant incidents. In this session, you’ll learn how an AI security blueprint can help you identify emerging risk, align controls to new AI projects, and ensure adoption and deployment happen securely without impacting speed or access.

Abstract:
Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Key Takeaways:

• Understand how diversity strengthens problem-solving, innovation, and threat response.
• Learn approaches to recruit and retain talent from non-traditional backgrounds.
• Explore how different perspectives and thinking styles reveal hidden risks.
• Gain strategies to create teams that are adaptable, collaborative, and resilient.
• Walk away with practical ideas for integrating diversity into cybersecurity team design and strategy.

Credential Theft remains the #1 way to breach data from the enterprise. The current solution set of SSO, password managers and cyber education have not made a dent in the associated threat vectors. The core of the problem: passwords remain the target and users continue to use critically weak, easily guessable and redundant passwords and continue to fall prey to various credential theft techniques. This session will introduce a revolutionary new approach to discovering and remediating credential liabilities and all associated risks by employing Key Derived Authentication (KDA). Attendees will gain an understanding of how KDA turns unmanaged applications into managed apps that no longer have user controlled passwords, resulting in eliminating all threats of credential theft, phishing, and AiTM attacks.

Healthcare organizations-and many enterprises like them-are built on decades of mission-critical systems that were never designed for today’s threat landscape, regulatory scrutiny, or cloud-centric operating models. These legacy platforms often remain indispensable, yet increasingly indefensible.

This presentation examines the real risks posed by aging systems in modern hybrid environments, particularly when budgets, clinical dependencies, and regulatory constraints limit replacement options. Drawing on lessons learned from large healthcare environments, we will explore pragmatic, cost-conscious strategies to reduce exposure without disrupting patient care or business operations.

Attendees will gain a clear understanding of why legacy systems remain one of the highest risk areas in the enterprise, how attackers exploit them, and what leadership can do today to contain that risk. The session concludes with concrete executive-level actions to initiate risk reduction, align stakeholders, and begin a realistic modernization roadmap that balances security, compliance, and operational reality.