News headlines show you the breaches at massive corporations, but it’s everyday organizations that face the most threats. Adversaries prey on the human psyche and use AI to advance their tactics and target the companies that keep our communities running.  For these companies, a ransomware or BEC attack isn’t just a stressful event—it’s the reason they can’t make payroll. This session explores how hackers plan to win, and why you don’t need a massive budget to fight back.  We’ll get into how Huntress brings cyber resilience through a powerful combo of purpose-built technology and human SOC expertise to stop threats before they cause damage—because organizations of ALL sizes deserve a fighting chance against attackers.

As threats have evolved so too has the approach to Modern Identity Security. A Privilege-Centric approach must be adopted and considered with this evolution. Identity and user management for all accounts within an organization must mature to meet the demands of the cloud, nonhuman identities, Agentic AI and modern attack vectors. Your PAM strategy must now manage and mitigate not only traditional privileged access (root and admin) but also attacks against identities with a path to privileged access. These paths to privilege still remain one of the most valuable targets for cybercriminals because many organizations are defending their environments with fragmented or siloed security strategies and solutions. Security gaps and risks lie in endpoints, cloud environments, Saas Applications, third-party access and now Agentic AI and NHI which make the battleground even harder to defend. Identity Security builds on the foundation of defense-in-depth, coupling visibility with least privilege and Zero Trust while addressing critical risks with priority and exposing less-than critical risks for awareness. Leverage a strategy that works, improves compliance, helps meet cyber insurance mandates, enhances security posture, while giving you the visibility needed to protect your environment.

Identity-based attacks are a CISO's nightmare, with 90% of cyber intrusions leveraging phished or leaked credentials and privilege escalation. Once compromised, attackers can move anywhere across the data estate and are frequently infiltrating your cloud environments. In this session, we'll dive into the unified approach of Rubrik Identity and Cloud Resilience, demonstrating how it goes beyond traditional data protection to secure your entire hybrid identity, including Active Directory and Entra ID, as well as safeguarding your ability to recover data after an incident. We'll explore how to proactively manage identity and data risk, continuously monitor for changes, and—when prevention fails—orchestrate a fast, clean recovery of all of your data across your identity and cloud platforms. You will learn how your organization can maintain business continuity, even in the face of a catastrophic event.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

Large-scale sporting events present a uniquely complex cybersecurity environment, where millions of fans, global media coverage, interconnected venues, and critical infrastructure create an expanded and highly visible attack surface. As events grow in scale and digital dependence, protecting them requires more than the efforts of a single organization; it demands a coordinated community approach. This presentation explores how collaboration among event organizers, government agencies, technology providers, venue operators, and local partners strengthens cybersecurity resilience before, during, and after major sporting events. Drawing on lessons learned from recent global competitions, it highlights the importance of shared intelligence, integrated planning, joint incident response, and public-private partnerships. By viewing cybersecurity as a collective responsibility across the entire event ecosystem, communities can better anticipate threats, protect critical systems, and ensure that athletes and fans experience safe, seamless, and secure events.

AI is reshaping enterprise security, demanding a new balance between speed and oversight. Security teams are now tasked with supporting rapid AI integration without becoming a bottleneck. This session breaks down the mechanics of securing AI usage at scale, offering a clear roadmap for maintaining data integrity and operational consistency in an AI-first landscape.

Workforce access has never been more dynamic or more unpredictable. Users connect from anywhere, on devices that shift daily between personal, managed, trusted, and unknown, and security teams are expected to make the right call every time. Identity tells you who is connecting, but today’s environments make it equally critical to understand what they’re connecting with.  

Because if you don’t trust the device, you can’t trust the access. This session explores how identity and device trust come together to meet the real access challenges organizations face and why this perspective is essential for secure, resilient workforce access. Curious how this story shapes the future of secure access in 2026? Join us to find out.

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

We stand at the dawn of a new security paradigm where autonomous systems on both sides of the battlefield are changing the dynamics of attack and defense. Drawing on recent Google Threat Intelligence findings, this session reveals how nation-state actors and cybercriminals are already weaponizing AI while showcasing how defensive AI agents can create self-improving security systems. Learn how the constraints of cost, latency, and efficacy are shaping this machine-vs-machine future, and discover how autonomous agents and domain-specific languages enable a continuous feedback loop to rapidly strengthen defenses.

Discover how Expel helps free security leaders and operators from SOC monotony, leading to better performance and happier analysts.

Healthcare organizations-and many enterprises like them-are built on decades of mission-critical systems that were never designed for today’s threat landscape, regulatory scrutiny, or cloud-centric operating models. These legacy platforms often remain indispensable, yet increasingly indefensible.    

This presentation examines the real risks posed by aging systems in modern hybrid environments, particularly when budgets, clinical dependencies, and regulatory constraints limit replacement options. Drawing on lessons learned from large healthcare environments, we will explore pragmatic, cost-conscious strategies to reduce exposure without disrupting patient care or business operations.    

Attendees will gain a clear understanding of why legacy systems remain one of the highest risk areas in the enterprise, how attackers exploit them, and what leadership can do today to contain that risk. The session concludes with concrete executive-level actions to initiate risk reduction, align stakeholders, and begin a realistic modernization roadmap that balances security, compliance, and operational reality.

The cyber threat landscape continues to evolve rapidly, with the IT sector regularly targeted as a gateway to impact broader supply chains. Drawing on insights from the Information Technology - Information Sharing and Analysis Center (IT-ISAC) updated annual cyber threat report, this session will provide a concise overview of the sector’s top threats of 2025. Highlights include an overview of the actors most aggressively targeting IT companies and a rundown of the tactics, techniques, and procedures most commonly used by these adversaries, as well as a more specific look at ransomware groups and their impact on the sector.

The presentation will also explore what lies ahead in 2026 as advances in technology, especially artificial intelligence, enable faster, more scalable cyberattacks. Attendees will leave with a clear understanding of the evolving IT threat landscape, and actionable insights to help their teams strengthen resilience and reduce risk across their own organizations and associated supply chains.

Attackers are no longer triggering alerts; they’re hiding in plain sight. This session shows how deception technology transforms attacker behavior into high-confidence detection signals. Learn how integrating deception into an Open Active XDR platform improves visibility, reduces noise, and enables faster, smarter response to real threats across modern enterprise environments

In most cases, identity-based breaches are not caused by "hacking" in the Hollywood sense, but rather by "logging in." In a standard Active Directory environment, human identities are often the weakest link in security due to risks from social engineering, credential reuse, and over-privilege.