Archives: Seminar

[1 CPE] Defending Non-Human Identities Against Machine-Speed AI Attacks

  Presented by Nate McQueen, Director, Global Agentic Technologists • SailPoint

In the age of autonomous AI, the most dangerous adversary may already hold the keys. Non-human identities (API keys, service accounts, tokens and agentic AI) have eclipsed phishing as the leading attack vector. AI agents, acquisitive by design, harvest and share credentials without hesitation. A single unsecured identity can unravel an entire enterprise. This session charts a disciplined four-phase path from chaos to control: scope, discover, contextualize, and govern. Learn to prioritize by severity and ownership, close critical breach paths within 90 days, and secure the machine workforce before attackers turn it against you. Leave with a clear, actionable roadmap.

[1 CPE] Enabling the SOC: Removing the Silos That Slow Response

  Presented by Mike McIver, Sr Channel Systems Engineer • TrendAI

The details of this presentation will be available soon. Please check back for updates!

Discover the company that empowers you to predict, detect, and respond to AI-enabled threats. At TrendAI, we remove friction and accelerate secure AI adoption so organizations can thrive in the AI age, securely.

[1 CPE] What We’ve Learned Bringing AI Projects to Life

  Presented by Zach Feingold, Director of AI and Engineering, & Hayden Busic, Data & AI Product Manager • Cerium Networks

AI is helping people work more efficiently, but what does it take to put AI to work where it can make a meaningful difference for your team?

In this session, we’ll take you behind the scenes of three AI projects we’ve taken from planning to live deployment. We’ll explore the business challenge each project tackled, how we built it, and the results it delivered. Along the way, we’ll share lessons from turning those plans into working solutions, why identifying the right business needs is important, and how to encourage user adoption.

You’ll leave this session with a practical look at AI in action and lessons you can apply to your own projects.

[1 CPE] The Security Spending Trap: More Tools, Same Risk

  Presented by Kory Jessen, Sr Cybersecurity Solutions Architect • iT1 Source

Your organization might be meeting every compliance requirement and spending more on cybersecurity than ever before. But are you actually reducing risk?

Too many security programs focus on checking compliance boxes, renewing tools, and adding new technology without understanding which threats pose the greatest risk to their business. The result? Growing budgets, increasing complexity, and security gaps that may still go unaddressed.

It’s time to rethink how we measure risk and where we invest.

Join us as we explore how to move beyond compliance-driven security to measure real business risk, identify the controls that make the greatest impact, and use those insights to guide smarter technology decisions.

Discover how a risk-based approach can help eliminate unnecessary spending, maximize existing investments, and simplify your security strategy without sacrificing protection.

You’ll walk away knowing how to measure what matters, prioritize your biggest risks, and make smarter security investments based on evidence, not assumptions.

[1 CPE] Is AI Alive? Understanding What We’re Trusting and What’s at Risk

  Presented by Anthony Thomas, Enterprise Architect • C1

AI does not need to be alive to create real organizational risk. As employees adopt AI and organizations connect it to data and systems, leaders need to understand what they are trusting and where human accountability must remain. This session explores how to enable useful AI adoption while protecting sensitive information, maintaining oversight, and managing risk.

Key topics:

  • Shadow AI: Employees using AI tools without organizational review and entering sensitive information.
  • Data exposure: Understanding what information AI can access, retain, and share.
  • Unreliable outputs: Preventing inaccurate answers from becoming operational decisions.
  • Security threats: AI-enabled impersonation, phishing, and attacks that manipulate AI applications.
  • Excessive access: Managing the risks when AI assistants can retrieve confidential documents, send messages, or change systems.
  • Practical governance: Establishing approved tools, clear ownership, staff training, human review, and incident response procedures.

Interactive scenario: An employee uploads a confidential document into an AI tool to prepare an executive summary. What should have been in place before that happened—and what happens next?

[1 CPE] Harm Is the Product: What AI Governance Misses About Autonomous Offensive Agents

  Presented by Greg Anderson, Head of Solutions Engineering • Sprocket Security

Every autonomous pentest vendor now ships agents that run reconnaissance, exploitation, and validation against live environments. Almost none can tell a buyer what those agents are forbidden to do. The AI governance most organizations already hold does not help, because it rests on an assumption that all harm should be avoided. For a penetration testing agent, controlled, authorized harm is the product. A framework built to stop all harm cannot say how to authorize the right harm, in the right proportion, against the right target.

This session reframes the safety question for the people who buy autonomous offensive security rather than build it. It separates controls that merely instruct an agent to behave from controls that make misbehavior structurally impossible, the difference between “probably will not” and “cannot”. Attendees leave with a scorecard they can run against any vendor, including the one presenting, scored on evidence rather than assurances.

[1 CPE] Building Trust for What’s Next: PKI Modernization & Quantum Readiness

  Presented by Jared Menninger, Sr Solutions Engineer • DigiCert

Certificate lifetimes are shrinking. Browser requirements are evolving. Machine identities are growing exponentially. At the same time, organizations are beginning to plan for post-quantum cryptography while supporting new AI-driven systems that depend on trusted digital interactions.

These changes are transforming PKI from a traditional security function into the operational trust layer for modern business.

This session provides a practical roadmap for modernizing PKI, improving visibility into machine identities, automating certificate lifecycle management, and building crypto-agility for future cryptographic transitions. Attendees will leave with actionable steps to reduce operational risk today while preparing for post-quantum security and the next generation of digital trust.

[1 CPE] Making The Case For CTEM

  Presented by Jennifer Carson, Sr Sales Engineer • Zafran Security

What does it really mean to analyze your vulnerabilities in 2026? Drawing on a real-world workflow, Zafran’s West Senior Sales Engineer, Jennifer Carson, will host an interactive session to show why traditional approaches to vulnerability management no longer fit the changing threat landscape.

Making the case for continuous threat exposure management (CTEM) as a discipline, not just a tool.

[1 CPE] The Internet Is Talking to Itself: Bots, AI, and Evolving Security

  Presented by Ashok Naiku, Sr Enterprise Security Architect  • Fastly

The internet is undergoing one of its biggest transformations since the rise of mobile: automated traffic is no longer limited to search engines and simple bots. AI assistants, Large Language Models, and autonomous agents are increasingly discovering, purchasing, and interacting with online services on behalf of people. As the internet begins talking to itself, organizations must rethink how they distinguish beneficial automation from abuse, protect APIs, and define access and trust without blocking innovation. This session explores the evolution of internet automation, emerging security challenges, and how modern approaches to bot management, API security, and responsible AI can help organizations prepare for an increasingly autonomous future.

[1 CPE] Proving Cyber Resilience: Measuring Outcomes, Not Effort

  Presented by David Pier, Sales Engineer • Horizon3

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.

What matters is whether they can prove their defenses actually work.

In this talk, Horizon3 shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale. By shifting from assumptions to proof, they’ve learned to:

  • Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.
  • Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.
  • Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.