Are AI agents worth the hype? In this talk, we’ll explore the tangible impact of AI agents in cybersecurity, focusing on how they can be used to automate proactive security workflows at scale. We’ll also discuss the technical challenges of implementing agentic security solutions, from managing hallucinations, building human-in-the-loop workflows, to integrating agents with existing security datasets for improved performance. We’ll also discuss the broader implications for security teams — how AI-driven automation is shifting the role of human analysts and changing the way organizations approach cyber resilience.

Walk through elements of a table top and how to make them fun and engaging.

This presentation will explore real-life stories from the trenches, representing how unknowns have allowed malicious actors to thrive. We’ll dive into specialized tools and techniques attackers use, especially cybercriminals and nation-states. We’ll demonstrate hacking techniques that illustrate the ease of compromise against multiple target types, from cloud applications to industrial robots. Finally, we’ll share vendor-agnostic mitigation strategies to help you discover, secure, monitor, and respond more efficiently and effectively by converting your unknowns to knowns. Malicious actors count on you being passive regarding unknowns and want you to fail. Disappoint them!

How do cybercrime cases move from an initial investigation to a courtroom conviction? In this panel discussion, a federal cyber investigator and a federal prosecutor will provide insight into the investigative and legal processes behind cybercrime cases. From evidence collection to prosecution, gain a deeper understanding of how cybercriminals are identified, tracked, and brought to justice. We’ll also dive into the challenges involved in prosecuting cyber threats, offering valuable insight for cybersecurity professionals who interact with law enforcement.

In this talk, Geoff Wilson of Go Security Pro will discuss the best approaches for hardening your Microsoft cloud configuration including Microsoft 365, Entra ID (Azure AD), and Intune. This talk will include an overview of notable Microsoft 365 data breaches, top recommendations for any Microsoft cloud implementation, how to use conditional access policies to thwart specific attack vectors, Intune policies, and a detailed walkthrough of how you can assess your own Microsoft cloud configuration using CIS Benchmarks. This talk will also have applicability to on-prem Active Directory.

This talk is an introduction to Red Teaming, Blue Teaming, and the ever elusive Purple Team. It covers basic concepts around the red and blue teams, how simulating attackers can help both sides, and how working together produces better results for all parties involved.

Your company has made significant investments in Microsoft 365—through licenses, solutions, and dedicated staff. With growing threats to the Microsoft ecosystem, it’s crucial that you understand your role in responding to cyber attacks. Every Microsoft 365 professional needs to be aware of the NIST 2.0 framework and the expectations of your role to ensure a swift, effective defense.

In this session, you will deepen your knowledge in these critical areas, empowering you to protect your organization and contribute to a more effective, coordinated response to cyber attacks.

“Nothing exposes security theater like a real attack.”

When Russian hackers took down Ukraine’s power grid in 2015 and 2016, compliance didn’t save them—adaptation did. The attacks forced a rapid evolution in how infrastructure defends itself, pushing organizations to rethink network segmentation, attack surface management, and backup strategies in ways no regulation ever has.

This talk dives into how cyberwarfare forces real security progress, not through paperwork and audits, but through fire and failure. We’ll break down how nation-state threats have shaped better defenses for power grids, industrial control systems, and other critical infrastructure, and why fear of real-world consequences drives stronger security than any compliance framework ever could.

The Algorithm has won the future. Short-form content like Reels and TikTok has destroyed humanity’s attention span. In this dark future knowledge can only be delivered in quick bursts. As hackers we must adapt, the future of cybersecurity is at stake.

Attendees will learn how to develop professional relationships with senior executives, the board, and the communications skills required to be an effective executive and world class CISO.

Transhumans—individuals with advanced tech enhancements—have moved from sci-fi into reality, challenging traditional cybersecurity. With embedded tech, they can execute complex cyber attacks, pushing the need for innovative defenses. This presentation underscores the urgency for layered security solutions to address these unique, emerging risks.

Learn how to analyze and protect your organization against browser extensions that are used by many unsuspecting users each day.