AI may be dominating cybersecurity headlines, conference stages, and boardroom conversations, but the risks keeping security leaders up at night haven’t suddenly disappeared. In many cases, AI is simply accelerating familiar challenges like phishing, identity and access management, social engineering, Zero Trust, and protecting critical data.

In this fireside discussion, J.D. Miller sits down with Mario Villatoro, CISO at Jamf, to talk about staying focused when the next shiny object is always competing for attention. They’ll explore why strong cybersecurity leadership still comes down to getting the fundamentals right, how AI is changing the speed and scale of existing threats, and where leaders should focus their time, resources, and teams to build a resilient security program without getting distracted by the hype.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

Organizations invest heavily in technology, controls, and frameworks, yet many consequential security failures still begin with people: information that wasn’t shared, assumptions that weren’t challenged, or risks that weren’t escalated. Trust at Scale explores trust as part of an organization’s cybersecurity infrastructure and how leaders can intentionally build environments where people communicate risk openly, challenge assumptions, exercise appropriate autonomy, and maintain accountability. Attendees will leave with a practical way to think about trust as both a leadership capability and a security control.

Abstract:
Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Key Takeaways:

• Understand how diversity strengthens problem-solving, innovation, and threat response.
• Learn approaches to recruit and retain talent from non-traditional backgrounds.
• Explore how different perspectives and thinking styles reveal hidden risks.
• Gain strategies to create teams that are adaptable, collaborative, and resilient.
• Walk away with practical ideas for integrating diversity into cybersecurity team design and strategy.

Theoretical AI safety frameworks often fall short when applied to production environments. This session dives into empirical failure modes, real-world edge cases, and practical red-teaming techniques observed in the deployment of Retrieval-Augmented Generation (RAG) and multi-agent systems at scale within enterprise platforms.

Key Takeaways for Attendees:

• Anatomy of Failure Modes: Case studies analyzing context-window manipulation, data poisoning in RAG pipelines, and state hijacking in multi-agent environments.
• Defensive Architecture Patterns: Hands-on strategies for input sanitization, dynamic output guardrails, and deterministic fallback mechanisms.
• Rigorous Security Testing: Moving beyond subjective LLM evaluation to automated, continuous security regression testing prior to production release.

About the Presenter:
I am a Senior Product Manager specializing in AI architecture, token optimization, and enterprise platform governance. Prior to my current role, I managed platform procurement and contract intelligence tools at Amazon and held consulting roles at PwC and Accenture. In addition to industry product leadership, I serve as an academic peer reviewer and Area Chair for major AI conferences, including ICML and NeurIPS.

Recent Speaking Engagements:

• 2x Invited Speaker at Salesforce Dreamforce on AI-driven contract intelligence and system governance.
• Presenter at NIST Additive Construction & AI Risk Conferences on platform reliability and risk management.