9 AI Security Lessons From CYBR.SEC.CON 2026
Nine AI security lessons for CISOs on agents, identity, governance, compliance, cognitive risk, open source and human resilience.
George V. Hulme
CISO Ann Delenela: Don't Fear the Change. Lead It.
Entergy CISO Ann Delenela used her CYBR.SEC.CON. 2026 keynote to argue that AI and accelerating change demand something technology cannot provide: deliberate, accountable human leadership.
Two Security Operations Realities Are Emerging. Which One Are You Building?
A small but growing cohort of organizations has moved agentic AI from pilot to production and is already operating at a fundamentally different level. The gap between them and everyone else is growing.
Reputation, Not Ransom, Leading Driver of Incident Response Spending
A new Forrester/TransUnion survey finds 77% of security leaders rank reputation damage above revenue loss after a cyberattack — and the reasoning behind that shift matters more than the stat itself.
Chinese Spies Target U.S. Security Clearance Holders
Chinese intelligence operatives are using fake consulting firms, job offers and recruiter profiles to target U.S. security clearance holders and other government and defense professionals.
How AI Automates Detection Engineering
Detection engineering has always been expensive, slow, and dependent on scarce senior talent. AI is changing that resource equation — and giving security teams a way to measure and close coverage gaps that most programs have never been able to quantify.
Agentic AI in the SOC: The Gap Between the Haves and the Have-Nots Is Already Widening
Agentic AI is delivering sharper triage, faster investigations, and reduced analyst burnout at the organizations that have committed to production deployment. For everyone else, the gap is compounding, and the security implications are already visible.
After the Hugging Face OpenAI Swarm: What Enterprise Security Looks Like Now
Network segmentation, credential hygiene, behavioral monitoring, automated containment. The OpenAI incident didn't invent these requirements. It proved that skipping them in agent environments has consequences.
You Can’t Patch Your Way Out of the Vulnerability Backlog
Applications average 22 critical vulnerabilities while teams fix just 3.4 per month, exposing a widening AppSec gap that AI is making harder to close.
AI Is Breaking the Indicators of Compromise Model
AI-powered attacks are moving faster than traditional IOC sharing can keep up, forcing security teams to rethink how they detect threats and share threat intelligence.
Trump's 'Hack Back' Memo Lets (Some) Private Companies Strike Back Against Cybercrime Gangs
Many believe cybercriminal asymmetry allows foreign cybercrime gangs to operate with near impunity, and that decades of legislative fixes, like the repeatedly stalled Active Cyber Defense Certainty Act, have gone nowhere. Others are concerned that the doctrine may create more mayhem than it solves.
SOC AI Guardrails: How to Define What Agents Can Touch and Do
Agentic AI is closing the SOC automation gap that SOAR never did, whether the guardrails around it are explicit enough to stop a breach, survive a regulatory audit or a court case is a different question.
Attackers Striking Almost Immediately Following Patch Publication
SAP attackers moved within 72 hours of a patch, showing how AI-assisted exploit development is collapsing vulnerability response time.
Agentic AI Security Needs Guardrails and Observability
Agentic AI demands identity, observability, egress controls and inventory to detect rogue actions and enforce enterprise guardrails.
Autonomous AI Cyberattacks: Real Breaches vs. AI Hype
AI agents breached real systems. We separate autonomous AI cyberattacks from human-assisted operations and industry hype.
Three AI Luminaries, One Stage: What Ai4's Keynote Panel Signals for Enterprise AI and Cybersecurity
Self-adapting AI worms, a vetoed California bill, and a 1.4% replacement rate: how AI's founders split on security, regulation, and jobs at Ai4 2026.