Large enterprises are naming AI security leaders inside security organizations while leaving AI governance accountability with CIOs, chief AI officers, and CTOs, a 1,400-respondent report finds.
Featured
AI reshapes cybersecurity jobs, transforms security training, revives deception technology, disrupts capture-the-flag competitions and alters the path to quantum computing. Meanwhile: Critical PHP vulnerabilities trigger urgent patching.
Why do employees bypass cybersecurity rules? Craig Wood and Dr. Dustin Sachs explain how broken workflows and workplace pressure undermine security training. (includes video and infographic)
CYBR.SEC.CON 2026
STARTS IN
--
Days
--
Hours
--
Minutes
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
AI Is Finding Old Vulnerabilities Faster Than We Can Fix Them
LLM-assisted bug hunting is uncovering critical vulnerabilities in old software such as FATFS, exposing a growing cybersecurity problem: AI is accelerating vulnerability discovery while patching and remediation struggle to keep pace.
Crypto Agility: Preparing Encryption for Quantum Threats
As quantum computers become cryptographically relevant, agentic networks will have to keep one step ahead of the decryption storm.
Building Determinism in an AI World: Why AI Agents Need Proof of Control
AI agents operate unpredictably, creating security blind spots that traditional controls can't address. The emerging Proof of Control standard aims to make agent actions auditable, traceable and independently verifiable.
AI Spend as a Security Control
What if the next attacker doesn’t want your data, but your AI budget? Why usage-based billing is a security risk, and what to do before the invoice arrives.
The CAPTCHA That Needed an AI to Explain It
Five dice, a tiny zero, and a litmus test for the health of cybersecurity.
Latest Articles
See all
AI and Incident ResponseIncident ResponseAgentic AI
The Federal AI Agent Incident Playbook is Out: AI Safety Teams Wrote the Framework. Security Teams Have to Make It Real
Incident readiness for agentic systems means red teams, logging architecture and recovery. Not policy documents.
PHP2ShellCritical PHP Vulnerabilities
PHP2Shell Patches Released: Critical RCE Flaws Threaten 70% of the Web
PHP has released emergency fixes for two critical remote code execution vulnerabilities affecting its widely deployed web engine. Wiz researchers warn that AI-assisted exploitation raises the stakes, leaving organizations racing to patch exposed servers.
AI vs. CTFCapture The FlagAI and Threat Hunting
AI Is Killing Capture the Flag Competitions. What Happens to Human Hackers?
AI agents are solving hacking challenges faster than humans, threatening CTF competitions and forcing cybersecurity professionals to rethink how offensive security skills are developed and measured.
AI-powered deception technologyDeceptionAI hacking
AI-Powered Hacking Is Giving Deception Technology a Second Life
As AI agents accelerate cyberattacks and vulnerability discovery, security experts see new opportunities to turn honeypots, false targets and dynamic deception into powerful defenses against automated threats.
Critical PHP VulnerabilitiesVulnerability ManagementCVE-2026-109618CVE-2026-109619
Critical PHP RCE Flaws: 5 Steps to Take Now (Updated)
PHP is preparing emergency fixes for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. With patches expected October 21, security teams must identify exposed servers, prepare emergency updates and prioritize internet-facing systems. (Includes infographic)
AI cybersecurity tabletop exercisesIncident ResponseGaming SecurityCYBR.SEC.CON. 2026DICE (Defensive Incident Containment Exercises)
AI-Powered DICE Turns Cybersecurity Tabletop Exercises Into Interactive Incident Response Training
Unveiled at CYBR.SEC.CON 2026, K.C. Yerrid's free DICE platform uses AI and Dungeons & Dragons-style gameplay to eliminate facilitator burnout and make cybersecurity incident response training more realistic, repeatable and accessible. (Includes video and infographic)
IT-OT convergenceOT CybersecurityCYBR.SEC.CON. 2026
OT Security: 5 Fundamentals and a 90-Day Plan
Aaron Crow, Senior Director of Cybersecurity at Arcova, explains five OT security fundamentals and a practical 90-day plan for IT teams protecting industrial systems. (Includes video and infographic)
Podcasts & Video
See all
Podcast
Building the Better Mouse Trap with Craig Wood
Podcast
Chasing the White Rabbit with Jacob Krell
Video
CrowdStrike 2026 Threat Hunting Report - Quang "Q" Nguyen
Video
The SOC in Transition: AI, Automation, and the Human Role - Jay Gregg and Daniel Morris
Video
Beyond the Black Box: Demanding Inspectability for Cyber Visibility - Blake Gilson
Video
OT Is Not Hard. It's Different. A Practical Guide for IT Practitioners. - Aaron Crow
Video
Defensive Incident Containment Exercises: An AI-Moderated, Dice Driven Breach Simulator and Training Platform for Security Practitioners
Sponsored
Sponsored