Generative AI and enterprise platforms continue to reshape the workplace and produce crazy headlines, CIOs and CISOs are under increasing pressure to enable innovation while maintaining operational integrity and governance. With rapid adoption of GenAI applications — often outside of IT oversight — organizations are facing growing challenges around data exposure, policy enforcement and unmanaged AI usage. This keynote will explore: Aligning AI adoption with business objectives while maintaining governance and control Mitigating risks associated with shadow AI and unmanaged applications Designing scalable policies and controls to support secure AI adoption across the enterprise

Quantum resilience is no longer a distant technology discussion; it is a national imperative. As quantum computing advances and 2030 readiness expectations accelerate, federal agencies, financial institutions, and mission-critical infrastructure organizations must prepare now to protect the cryptographic systems that secure identities, transactions, communications, data, software, and digital trust. This keynote will explore how cybersecurity leaders can move from awareness to action through discovery and inventory, risk assessment and prioritization, remediation and governance. Attendees will learn how to align cybersecurity strategy with emerging federal direction, NIST standards, risk governance, and operational resilience goals.

Attackers are using AI to move like coordinated swarms, compressing weeks of work into hours. This talk covers why traditional security stacks can't keep up and what it looks like when defenders start fighting back at machine speed.

The arrival of Anthropic Mythos has fundamentally altered the cyber threat landscape. We have moved from theoretical risk to real-world acceleration, where AI vulnerability discovery is now fully operational. While traditional security cycles of research, disclosure, and patching once took months or years, AI now enables simultaneous discovery paths that rapidly compress the time to exploit.  

This session explores why humans can no longer keep up with this machine speed of autonomous discovery and exploitation. With vulnerability volumes predicted to increase by 2x to 10x, and the National Vulnerability Database (NVD) under significant pressure to prioritize only known exploited vulnerabilities, the public signals organizations rely on are falling further behind.    

Attendees will learn a new architectural model for defense. By shifting control to the start of the software supply chain—at the point of component selection—organizations can block risky or malicious components before they ever enter the build

As AI agents proliferate across the enterprise, the attack surface is expanding faster than most security teams can track. This session explores how organizations can secure agentic workflows without sacrificing the speed and autonomy that make AI valuable — and what a governed, resilient AI security architecture actually looks like in practice.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

Stop attacks before they start by discovering your entire attack surface, identifying the exposures that matter, and remediating the most important business risks.

Workforce access has never been more dynamic or more unpredictable. Users connect from anywhere, on devices that shift daily between personal, managed, trusted, and unknown, and security teams are expected to make the right call every time. Identity tells you who is connecting, but today’s environments make it equally critical to understand what they’re connecting with.  

Because if you don’t trust the device, you can’t trust the access. This session explores how identity and device trust come together to meet the real access challenges organizations face and why this perspective is essential for secure, resilient workforce access. Curious how this story shapes the future of secure access in 2026? Join us to find out.

AI is now both a weapon and a shield. TrendAI™ research shows malicious actors using large language models to do reconnaissance, craft convincing phishing lures, automate vulnerability research, and generate malware at scale, lowering the barrier for even less sophisticated threat groups. At the same time, defenders are using AI to correlate signals across massive attack surfaces, surface behavioral anomalies, and respond with a speed and precision that simply wasn't possible before. I'll share what we're seeing in active campaigns and how AI is fundamentally shifting the economics of defense in our favor

Healthcare organizations and many enterprises like them-are built on decades of mission-critical systems that were never designed for today’s threat landscape, regulatory scrutiny, or cloud-centric operating models. These legacy platforms often remain indispensable, yet increasingly indefensible.    

This presentation examines the real risks posed by aging systems in modern hybrid environments, particularly when budgets, clinical dependencies, and regulatory constraints limit replacement options. Drawing on lessons learned from large healthcare environments, we will explore pragmatic, cost-conscious strategies to reduce exposure without disrupting patient care or business operations.    

Attendees will gain a clear understanding of why legacy systems remain one of the highest risk areas in the enterprise, how attackers exploit them, and what leadership can do today to contain that risk. The session concludes with concrete executive-level actions to initiate risk reduction, align stakeholders, and begin a realistic modernization roadmap that balances security, compliance, and operational reality.

You cannot protect what you cannot see — and right now, most organizations can't see their AI.  

According to the 2026 Netskope AI Risk and Readiness Report, 94% of organizations have gaps in AI visibility, 88% can't tell personal AI accounts from corporate ones, and only 6% have full visibility into their AI pipeline. That's not a minor gap. That's a blindfold.  In this session, we'll cover three things:  Why your current tools might be failing you. Traditional security tools weren't built for AI environments — they create dangerous blind spots across managed, shadow, and personal AI instances.  What complete visibility actually looks like. Not just knowing what AI tools exist, but who's using them, what data is flowing through them, and what attack paths are hiding in plain sight—including MCP and SaaS AI usage.  Where to start. You don't need a perfect program on day one. You need a governance baseline — and we'll show you how to build one fast using the Netskope One AI Command Center, the industry's first unified view across all AI states and contexts.

As organizations expand their digital ecosystems, cybersecurity risk is no longer confined to networks, it has become a systemic threat impacting critical infrastructure, public safety, and operational continuity. From healthcare disruptions to supply chain compromise, cyber incidents now produce cascading effects that extend beyond technical systems into real-world consequences. This session examines cybersecurity through a systems-level lens, connecting infrastructure risk, identity compromise, and third-party dependencies to broader organizational and societal impact. Drawing on real-world case studies, including ransomware attacks on healthcare systems, supply chain compromises, and identity-based intrusions, this presentation highlights how interconnected vulnerabilities amplify risk across sectors.

Participants will gain a framework for understanding cyber risk as an ecosystem challenge, not an isolated technical issue. The session also explores emerging risks introduced by advanced technologies, including quantum computing, which has the potential to disrupt current cryptographic standards and redefine long-term security strategies.

Attendees will gain actionable strategies for strengthening resilience through identity-centric security, continuous risk monitoring, and forward-looking approaches such as quantum-resistant cryptography. The session concludes with a strategic perspective on aligning cybersecurity with mission assurance, operational resilience, and human impact in an increasingly complex digital environment.

Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Frontier AI models can now turn a freshly disclosed vulnerability into a working exploit in hours. In that environment, "patch faster" is a race the defender has already lost. The problem isn't effort; it's the doctrine. CVSS scores don't surface which CVEs are reachable in your specific environment, which have compensating controls, or which carry real business impact. Patching harder at the wrong things isn't a defense strategy — it's a resource drain. This session makes the case for a different posture: filtering from a flood of vulnerabilities down to the exposures that are genuinely material, and acting on those first. We'll cover the signals driving this shift, a real-world example of what that prioritization looks like in practice, and how predictive threat exposure management is changing what effective vulnerability programs actually look like.

For forty years, cybersecurity has done one thing each time the threat evolved: moved the trust boundary. Every generation asked the same question: what should we actually trust? — and built a better answer.  

AI has changed the question.   Software is no longer written only by developers. It is generated, assembled, and executed by systems moving faster than any prior trust model was built for. The signals organizations rely on to trust code were designed for a world that no longer exists.  

In this session, Ken Ammon, CEO of CodeHunter, draws on four decades in cybersecurity, from the Air Force and NSA to founding multiple security companies, to make a single argument about where the trust boundary is moving next and why the organizations that learn to answer one question before their adversaries force it will define the next era of security.  Not whether code can execute. Whether it deserves to.

The cyber threat landscape is in constant flux, and staying ahead requires more than reactive defense. In this session, Jonathan Braley, Director of Threat Intelligence at IT-ISAC, will provide a comprehensive midyear overview of the actors and forces reshaping today's threat environment. From the rise of sophisticated nation-state actors and ransomware-as-a-service ecosystems to supply chain vulnerabilities and the growing exploitation of AI-enabled attack methods, this session will map the key threats organizations face in the second half of 2026. Attendees will leave with a clearer picture of where the threat landscape stands today, where it's heading, and what it means for their security posture.

The traditional boundary separating the technical aspects of cyber threats from physical threats has permanently collapsed. The digital and physical environments have become fully intertwined.  This presentation explores why treating cybersecurity as a mere technical issue confined to the IT department is a dangerous, obsolete strategy. Drawing from frontline experience in law-enforcement, counterterrorism, and national security, this presentation explores the dynamic, volatile and rapidly evolving hybrid threat environment facing law enforcement and security professionals where cyber operations, empowered by emerging technologies like advanced computing,  are a part of a multi-dimensional tool box used by foreign and domestic threat actors to carry out geopolitical aggression, acts of terrorism, attacks directed at high visibility events like the World Cup, and target law enforcement and government officials with violence. The presentation  will describe how as a Nation, we are at an inflection point and just as we learned after the attack of 9-11, public and private sector analytic and operational personnel can no longer operate within organizational and disciplinary stovepipes while adversaries exploit the gaps between our physical and technical silos. What applied to counter-terrorism now applies to cyber security and this presentation will also describe emerging strategies to dismantle these barriers, fusing technical defense directly into the daily fabric of law enforcement, national security, and homeland defense operations