Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.  What matters is whether they can prove their defenses actually work.  In this talk, Horizon3.ai shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale.

By shifting from assumptions to proof, they’ve learned to:

• Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.

• Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.

• Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.  

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

Gain insight into how real-world security incidents are managed and resolved with ESET. In this session we share a series of real customer incidents that highlight the challenges organizations face and how our services helped them detect, investigate, and respond to evolving threats. Through these practical examples, attendees will learn how proactive monitoring, expert guidance, and coordinated response efforts can help reduce risk, improve resilience, and strengthen an organization's overall security posture. Whether you're responsible for security strategy, operations, or business continuity, this session provides valuable insights into the benefits of a managed security partnership.

News headlines show you the breaches at massive corporations, but it’s everyday organizations that face the most threats. Adversaries prey on the human psyche and use AI to advance their tactics and target the companies that keep our communities running.

For these companies, a ransomware or BEC attack isn’t just a stressful event—it’s the reason they can’t make payroll. This session explores how hackers plan to win, and why you don’t need a massive budget to fight back.  

We’ll get into how Huntress brings cyber resilience through a powerful combo of purpose-built technology and human SOC expertise to stop threats before they cause damage—because organizations of ALL sizes deserve a fighting chance against attackers.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

AI is accelerating both sides of the fight. By some estimates, a single AI agent can now match the research output of 1,000 human analysts, and attackers are the ones exploiting that leverage first. Weaponization now happens at machine speed, while defensive AI adoption is still catching up. No amount of hiring closes that gap.

For cloud security teams, the response isn't optional. AI has to become core to how security operations run, while doubling down on the fundamentals that raise attacker cost no matter what tools they're using. This session explores where cloud security is actually adapting today and what teams should prioritize first.

Cloud adoption and AI integration are opening new doors, bringing with them a need for clear, integrated security. Many teams navigate a complex security landscape, often with disconnected tools that struggle to provide a complete view. Learn the Wiz vision for cloud security that moves beyond reactive fixes to a unified platform approach, simplifying operations and accelerating innovation.

Attackers are no longer triggering alerts; they’re hiding in plain sight. This session shows how deception technology transforms attacker behavior into high-confidence detection signals. Learn how integrating deception into an Open Active XDR platform improves visibility, reduces noise, and enables faster, smarter response to real threats across modern enterprise environments.

AI coding agents have collapsed build timelines, and they've quietly collapsed the security review windows that used to live inside them. When an agent can scaffold a service in an afternoon, the traditional "security reviews the PR" model isn't just slow; it is structurally irrelevant. The answer isn't to slow the agent down; it is to make the guardrails part of the build process itself.

This session presents AISDLC, a spec-driven development methodology that treats security requirements as first-class specifications. Requirements are written before code, traced through implementation, and enforced by CI gates the agent cannot bypass. Rather than trusting the model to "remember" security context, AISDLC makes ownership mechanical. Every requirement maps to a control, every control maps to a gate, and nothing merges without traceability intact.

Attendees will leave with:

1. A practical framework for converting security requirements into machine-enforceable specifications that AI agents must satisfy before code merges
2. CI gate patterns that enforce traceability from requirement to control to implementation, removing reliance on agent memory or developer discipline
3. Real-world failure modes observed when AI agents build under guardrails, and how to design gates that catch them

Ransomware attacks have become more sophisticated than ever. 66% of organizations have experienced at least one attack in the past two years, and 96% of those target backup data. So, when—not if—a breach happens, and your business, reputation, and career are on the line, immutable backup storage is your best and last line of defense.

However, if ‘immutable’ data can be overwritten by a backup or storage admin, a vendor, or an attacker, then it cannot be considered a storage solution with Absolute Immutability. In this presentation, learn how to make your backup data ransomware-proof with Absolute Immutability.

Security teams are getting blindsided by “shadow AI” as MCP servers, AI agents, and AI-enabled tools proliferate across their organizations. And, AI tools can quietly hold ongoing access to company data through OAuth grants and app-to-app connections, flying under the radar of traditional network-centric security tools.A new approach is needed for modern teams to get control of shadow AI risks.

This presentation will cover the four steps every org should take to gain control of shadow AI, and how Nudge Security can help:  

- Discovery of SaaS and AI: Effective governance starts with discovery. Learn how you can find every shadow app and account quickly.

- Insights into AI data access: AI data security risks extend across your SaaS ecosystem via OAuth grants that provide access to your data. Learn how to uncover MCP server connections, AI agents, and risky integrations.

- Third-party risk reviews: AI tools require special attention when it comes to security reviews. See how you can quickly assess new and unfamiliar vendors and be the first to know when new tools are introduced.

- Automated governance guardrails: Blocking often drives risks further into the shadows. Learn how to guide employees toward safe, compliant AI use when and where they are working.