In his CYBR.SEC.CON. 2026 keynote, Joe Marshall introduces the Human Incident Response Framework, a practical playbook for recognizing cybersecurity burnout, secondary traumatic stress, vicarious trauma and moral injury — and responding before the human incident becomes a crisis.
Ann Delenela, VP and CISO at Entergy, on the lessons surviving the fall of South Vietnam, hang gliding over the Pacific and leading through a personal health crisis can teach security leaders about the age of AI.
RegScale CISO Dale Hoak explains why point-in-time cybersecurity compliance cannot keep pace with AI-driven threats — and why continuous controls, risk management and resilience must replace the checkbox mindset. (Sponsored by RegScale)
From the CYBR.SEC.Community
Three teams are talking at once. An attacker may still be active. The logs disagree. The current owner is on vacation. A cloud console shows one state, the SIEM shows another, and the incident commander has a spreadsheet that was copied from a spreadsheet that was correct last quarter.
Twenty-five years after the Sept. 11 attacks, I look back at how 9/11 changed my life, led me into cybersecurity and shaped how I see our responsibility to protect the systems and civilization we depend on.
Security architecture accumulates “adaptation debt” when local fixes, exceptions and compensating controls force users, systems and now AI agents to work around designs that no longer match how identity, authority and data actually flow.
From Army signal intelligence and radio jamming to modern DDoS defense, the same lessons in reconnaissance, timing, disruption and adaptation reveal how attackers overwhelm networks — and how defenders can stay ahead.
Most IAM failures don't start with a broken platform. They start with a person making a reasonable decision under bad conditions.
CISOLeadership
RegScale CISO Dale Hoak says the cybersecurity leadership debate should focus less on reporting lines and more on ensuring cyber risk reaches the board — while security, compliance and engineering stop fighting separate battles. (Sponsored by RegScale)
Open-Source SecuritySuricataCYBR.SEC.CON
At CYBR.SEC.CON 2026, OISF President Kelley Misata explains why critical open source security projects like Suricata depend on more than developers — and why funding, governance, licensing and succession planning are now cybersecurity issues.
Hugging FaceAI GovernanceAI security risks
OpenAI agents left a larger public trail on Hugging Face than the company documented in its account of unauthorized activity earlier this year, according to a new SentinelLabs investigation.
LaunchPadCYBR.SEC.CON
The exposure management startup beat four other early-stage cybersecurity companies at CYBR.SEC.CON 2026, pitching an approach that focuses remediation on vulnerabilities attackers can actually reach.
AI security risksHuman Risk ManagementCYBR.SEC.CON
CYBR.SEC.CON. 2026 speaker Andy Ellis explores how AI, algorithms and human cognitive shortcuts could combine to undermine the decision-making systems that helped humanity thrive.
Cognitive WarfareCognitive SecurityCYBR.SEC.CON
CYBR.SEC.CON. 2026 opening keynote argues that critical thinking is no longer enough in an age of AI, algorithms and information overload. Security starts with knowing what deserves our attention.
AI.SEC.CONAI GovernanceCYBR.SEC.CON
At CYBR.SEC.CON. 2026’s first AI.SEC.CON. track, Elizabeth Wharton argues that headline-grabbing AI disasters keep exposing familiar failures in validation, least privilege, data governance, trust boundaries and change control.
Podcast
Video
Video
Video
Podcast
Video
Video
This talk by Jon Rhodes explores security vulnerabilities and evasion techniques targeting Microsoft RemoteApp, focusing on breakout methods that escape the isolated RemoteApp container to access the underlying host system, as well as bypasses for common detection and restriction mechanisms.
