This presentation by Rubrik Field CTO Alexandra Weaver discusses Rubrik Security Cloud, an AI-powered cyber resilience platform engineered to defend the modern enterprise against identity-driven attacks. With 90% of cyberattacks exploiting compromised credentials and a surge in non-human identities and AI agents expanding the corporate attack surface, legacy backup solutions built on weak infrastructure leave organizations highly exposed. To eliminate these vulnerabilities, Rubrik delivers an immutable, air-gapped, and physically isolated "Bunker in a Box".

Through Rubrik Identity Recovery, the platform provides automated, full-forest recovery and cross-tenant workflows across hybrid on-premises Active Directory and Microsoft Entra ID environments. Rather than forcing a costly net-new rebuild or suffering point-in-time data loss, Rubrik leverages an Intelligent Roll Forward capability that maps deep snapshot diffs side-by-side, allowing administrators to surgically remove attacker persistence and restore a clean, validated identity layer with minimal business downtime. And with the acquisition of Strata, Rubrik offers an "always on" identity continuity solution.

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.  What matters is whether they can prove their defenses actually work.  In this talk, Horizon3.ai shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale.

By shifting from assumptions to proof, they’ve learned to:

• Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.

• Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.

• Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.  

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

More tools haven't made us safer — 70% of organizations were breached last year despite a market packed with 3,000+ security vendors, and most teams are stuck doing manual investigation across disconnected tools instead of actually defending. In this session, we'll talk about what's really getting in the way of faster detection and response, and how a different kind of MDR model — one that plugs into the tech you already own, blends human analysts with AI, and operates as a transparent extension of your team — can help you cut through alert noise, shrink response times, and get more out of the security investments you've already made. Whether you're an analyst tired of chasing alerts or an exec trying to make sense of your security ROI, you'll walk away with practical ideas for building a more resilient program without ripping and replacing your stack.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

Attackers are no longer triggering alerts; they’re hiding in plain sight. This session shows how deception technology transforms attacker behavior into high-confidence detection signals. Learn how integrating deception into an Open Active XDR platform improves visibility, reduces noise, and enables faster, smarter response to real threats across modern enterprise environments.

AI is being adopted in cybersecurity faster than organizations can establish effective governance. As a result, many AI-powered systems make decisions with unwarranted confidence, overlook edge cases, and produce outputs that security teams cannot easily validate or trust.

This session introduces the Confidence-Aware AI Design Framework, a practical approach for building AI-assisted cybersecurity systems that explicitly communicate uncertainty, escalate low-confidence decisions for human review, and maintain comprehensive audit trails for every AI-supported action. Drawing on real-world implementations in higher education and enterprise environments, attendees will learn practical strategies for integrating AI into security operations while preserving transparency, accountability, and human oversight.

Artificial intelligence is accelerating how organizations operate—but it is also amplifying risk. As AI adoption expands, the speed, scale, and potential blast radius of data-related incidents are increasing at an unprecedented rate.    

This presentation explores how security leaders can evolve from traditional backup and recovery strategies to modern data resilience frameworks designed for the AI era. Attendees will learn how to ensure data integrity, maintain control over rapidly expanding identities—including AI agents—and recover with precision when incidents occur.    

Veeam will introduce a practical approach to achieving Data and AI Trust, enabling organizations to confidently embrace AI innovation while maintaining security, compliance, and operational continuity.

Abstract:
Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Key Takeaways:

• Understand how diversity strengthens problem-solving, innovation, and threat response.
• Learn approaches to recruit and retain talent from non-traditional backgrounds.
• Explore how different perspectives and thinking styles reveal hidden risks.
• Gain strategies to create teams that are adaptable, collaborative, and resilient.
• Walk away with practical ideas for integrating diversity into cybersecurity team design and strategy.

In today’s digital landscape, organizations face significant challenges managing bot traffic, which accounts for nearly half of all web requests. While often appearing legitimate, this automated activity can drain resources, erode brand authority, and expose businesses to risks from competitors and malicious actors.  

This presentation explores how Fastly Bot Management enables organizations to move beyond simple blocking. We will discuss strategies for achieving clear visibility and gaining the nuanced control required to shape how automated traffic interacts with your business, ensuring your security posture remains resilient in the era of AI.

Last year, agentic AI risk felt theoretical. Today, it is operational.

In 2026, a frontier AI model broke containment, gained external access, compromised Hugging Face production infrastructure, harvested credentials, and continued pursuing its objective across systems. The significance was not a new attack technique, but an autonomous system’s ability to plan, adapt, chain actions, use credentials, and persist at machine speed without malicious intent.

Organizations must now manage not only humans, applications, and machine identities, but autonomous actors capable of exercising authority and creating business consequences.

This session explores how leaders should govern AI agents based on the authority they possess and the consequences they can create through accountability, access controls, shutdown mechanisms, and machine-speed response.

The goal is not to slow AI adoption, but to enable it safely through stronger governance and resilience.

Ransomware attacks have become more sophisticated than ever. 66% of organizations have experienced at least one attack in the past two years, and 96% of those target backup data. So, when—not if—a breach happens, and your business, reputation, and career are on the line, immutable backup storage is your best and last line of defense. However, if ‘immutable’ data can be overwritten by a backup or storage admin, a vendor, or an attacker, then it cannot be considered a storage solution with Absolute Immutability. In this presentation, learn how to make your backup data ransomware-proof with Absolute Immutability.

AI is accelerating both sides of the fight. By some estimates, a single AI agent can now match the research output of 1,000 human analysts, and attackers are the ones exploiting that leverage first. Weaponization now happens at machine speed, while defensive AI adoption is still catching up. No amount of hiring closes that gap.

For cloud security teams, the response isn't optional. AI has to become core to how security operations run, while doubling down on the fundamentals that raise attacker cost no matter what tools they're using. This session explores where cloud security is actually adapting today and what teams should prioritize first.

News headlines show you the breaches at massive corporations, but it’s everyday organizations that face the most threats. Adversaries prey on the human psyche and use AI to advance their tactics and target the companies that keep our communities running.  For these companies, a ransomware or BEC attack isn’t just a stressful event—it’s the reason they can’t make payroll. This session explores how hackers plan to win, and why you don’t need a massive budget to fight back.  We’ll get into how Huntress brings cyber resilience through a powerful combo of purpose-built technology and human SOC expertise to stop threats before they cause damage—because organizations of ALL sizes deserve a fighting chance against attackers.

As cyber threats continue to evolve, resilience has become the cornerstone for organizations striving to withstand and recover from attacks. This session will provide a brief overview of the current threat landscape and highlight practical strategies for strengthening organizational resilience. Attendees will discover how CISA’s no-cost services, including assessments, expert guidance, and collaborative programs, can help reduce risk, enhance preparedness, and foster lasting cyber resilience.