Topic: Information Security

Seminar Topics

[1 CPE] The Future of Ransomware is Here: ESET’s Latest Threat Report

  Presented by Juan Portillo, Strategic Account Manager • ESET

Join us for an in‑depth walkthrough of the most significant insights from ESET’s latest Threat Report. This session will examine the rise of AI‑assisted attacks, including the discovery of PromptLock, an AI‑powered ransomware prototype. We’ll also explore key shifts in malware‑as‑a‑service, NFC‑driven fraud, and PowerShell‑based delivery techniques, and gain a clear understanding of how ransomware operations are evolving and reshaping today’s threat landscape.

[1 CPE] Cybersecurity in the Era of Mythos

  Presented by Avi Mileguir, Global Head of Exposure Management • Check Point Software & Optiv

Explore the growing gap between cybersecurity perception and reality in an age defined by AI, automation, and increasingly sophisticated threats. Join Avi Mileguir, Global Head of Exposure Management, as he examines common security myths, emerging risks, and the strategies organizations can use to gain true visibility into their attack surface and make more informed risk decisions.

[1 CPE] From Initial Access to Full Control: Live Hacking, Remote Shells, and Command & Control

  Presented by Wayne Johnson, Chief Executive Officer • Stellar

Step into the attacker’s perspective in this live, unscripted demonstration of real-world hacking techniques. We’ll walk through every phase of a modern intrusion: crafting initial payloads to gain foothold, establishing resilient remote shells, and building robust command and control (C2) channels that blend into normal network traffic.

This session will showcase:

  • Methods for delivering and executing payloads without triggering defenses.
  • Techniques for spawning and managing reverse shells on Windows and Linux.
  • Approaches to encrypting and obfuscating C2 communications.
  • Tips for evading detection and maintaining persistence.

Whether you’re defending enterprise environments or learning to think like an adversary, you’ll leave with practical insights into how attackers operate—and how you can detect and disrupt them. Live Q&A will follow, so bring your questions and curiosity.

[1 CPE] Why Modern Enterprises Invest in REAL Security

  Presented by Mac Avancena, Field CISO • Check Point Software

Cybersecurity isn’t failing because of technology. It’s failing because we’re talking about it the wrong way.

In today’s boardroom, cyber risk is financial risk. Yet most organizations still treat security as a cost center rather than a performance driver. The result? Overspend, complexity, and risk continue to compound.

In this session, Mac Avancena challenges that model, showing how leading enterprises are rewriting the narrative. By aligning security to business outcomes, simplifying fragmented environments, and leading with data, they’re transforming cybersecurity from overhead into a competitive advantage.

This isn’t about more tools or better alerts. It’s about changing the conversation—so security drives growth, resilience, and measurable ROI.

If you can’t tie security to business performance, you’re not securing the business—you’re slowing it down.

[1 CPE] When Unchecked Innovation Becomes Institutional Risk: The Leadership Moment for AI

  Presented by Mac Avancena, Field CISO • Check Point Software

AI adoption is accelerating, but most organizations are not ready.

While investment surges, the majority of AI initiatives fail to scale, deliver value, or operate securely. The challenge isn’t the technology; it’s the inability to align AI with governance, financial realities, and measurable business outcomes.

In this session, Mac Avancena cuts through the hype to expose the real gap between AI ambition and execution. Learn why most AI programs stall, which organizations are actually succeeding, and how leaders can fund, secure, and scale AI in constrained environments.

This session delivers a clear framework to:

  • Connect AI initiatives to business value and funding priorities
  • Close the gap between innovation and governance
  • Manage risk across AI, identity, and data
  • Turn AI from experimental spend into a strategic advantage

AI won’t wait. The question is whether your organization can keep up, securely and profitably.

[1 CPE] From Known-Bad to Known-Normal: The Future of Threat Detection

  Presented by Patricia Titus, Field CISO • Abnormal

As email-based threats continue to evolve in speed and sophistication, traditional “known-bad” detection methods are no longer enough to protect modern organizations. This session explores the shift toward a “known-normal” security model, where behavioral AI establishes a dynamic baseline of trusted activity to identify anomalies, detect emerging threats, and stop attacks before they escalate.

Designed for executive and security leaders, this presentation will examine how behavioral-based threat detection strengthens resilience against advanced phishing, business email compromise, and AI-driven attacks. Attendees will leave with practical guidance for evaluating their current email security stack, adopting modern AI-powered defenses, and implementing key strategies to stay ahead of today’s rapidly changing threat landscape.

[1 CPE] 2026 Cyber Crime Trends from the FBI

  Presented by FBI

Hijacked networks, cryptocurrency heists, and corporate espionage are but a few examples of the spiraling cyber threat. Every year, our adversaries become savvier and increasingly callous – attacking power grids, shutting down hospitals, and stoking geopolitical tensions. State-sponsored cyber actors wield every element of their national power to target the United States and its critical infrastructure. Skilled cybercriminals exploit new and longstanding vulnerabilities to steal our money and hold our data for ransom.

Combating these threats is the primary mission of the FBI’s cyber program. As the lead federal agency for investigating cyberattacks and intrusions, we engage with victims and work to unmask those committing malicious cyber activities, wherever they are.

Join us for a session from an FBI Special Agent to learn how you can improve your security approach.

[1 CPE] Identity: The Target and The Weapon

  Presented by Jeffrey Kongswangwongsa, GTM Tech Lead, Identity • Rubrik

Identity infrastructure has quietly become the most critical — and most targeted — attack surface in the enterprise. In this session, we’ll explore why today’s cyberattacks have fundamentally shifted from malware to identity, and what that means for how organizations need to think about protection and recovery.

The session covers the growing threat landscape around Identity Providers (IdPs) like Active Directory, Microsoft Entra ID, and Okta, including why detection is no longer the hard part — removal and recovery are. We’ll dig into real-world case studies, the dangerous “”domino effect”” that happens when identity systems fail during recovery, and how AI is accelerating the speed and scale of identity-based attacks.

Attendees will walk away with a clearer picture of what modern identity resilience looks like: from protecting IdPs with immutable, air-gapped backups to orchestrating clean recovery in hours instead of weeks — without losing legitimate changes or reintroducing attacker persistence.

[1 CPE] Speaking the Language of Risk

  Presented by Tom Ruoff, Principal Consultant • ImageSource

Organizations face rapidly evolving cyber threats, yet many still view technology as a cost center rather than a strategic partner. This presentation reframes the conversation by translating technical risks into business and financial terms leaders understand. Attendees will learn how to identify Business Essential Functions (BEFs), quantify operational and financial impacts, and apply practical risk‑estimation methods. By establishing a common language of risk, leaders can align priorities, invest where it matters most, and meaningfully reduce enterprise exposure. The session equips both executives and IT teams with tools to build consensus and drive smarter, outcome‑based cybersecurity decisions.

Tom Ruoff serves as Principal Consultant for ImageSource, Inc. providing cybersecurity consulting services (risk assessments, threat hunting, pen testing, breach remediation, security architectures, policies, business impact assessment) to commercial clients including Native American Tribes and Tribal Casinos, he is also a founder and current CEO of Zorse Cyber. Tom retired from the Dept of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA) in June 2023, as Chief, Methodology Branch, supervising vulnerability assessments for elections, power generation/distribution, and pipelines, and Federal Government IT systems. Before DHS, Tom was the Director of Systems Division at Northrop Grumman, developing cross domain solutions (CDS) for National Security Agency (NSA) and Central Intelligence Agency (CIA). Air Force veteran with tours at NSA, CIA element of the National Geospatial-Intelligence Agency, and Defense Intelligence Agency He is a Level III Federally Certified Program Manager, PMP, CISSP, CMMI Associate, MS/BS degrees in physics and electrical engineering.

[1 CPE] 2026 Global Threat Report: Why Speed, Scale, & Lifecycle Visibility Now Define Cyber Risk

  Presented by Brad Daniels, Systems Engineer • Fortinet

This session explores how cybercrime has evolved into a fully industrialized ecosystem, breaking down the modern threat lifecycle from initial exposure through weaponization, exploitation, and large-scale monetization—often operating at machine speed. Attendees will gain insight into the rise of cloud- and identity-driven attacks, along with practical strategies to increase defensive velocity, disrupt adversaries earlier, and improve visibility across the entire attack lifecycle.