Webinars
Stay current with the latest webinars on cybersecurity. Explore more related webinars on TechTarget's BrightTALK platform.
-
There's No Cybersecurity Mindset: Why Diverse Thinking Strengthens Security
Adversaries are accelerating their use of automation and AI, outpacing what legacy SOC architectures can handle. Relying solely on new technology addresses only part of the challenge. Effective cybersecurity demands equal focus on people and policy. Staying ahead requires building adaptive, analyst-driven teams that integrate human and machine strengths. Individuals facing the same threat interpret risks and priorities differently. Harnessing these varied perspectives improves communication, reduces risk and boosts readiness. Charles Kolodgy discusses why there is no single ideal cybersecurity mindset. Instead, a spectrum of perspectives shapes how teams assess threats, make decisions, and respond to incidents. Tune in to discover why an environment that harnesses these differences to challenge assumptions and drive better outcomes is crucial for resilient security operations. Key Takeaways: - Pinpoint the elements of diverse cybersecurity mindsets and show how different perspectives influence priorities, risk assessments, incident response, and business decisions. - Apply practical methods to manage mindset diversity, using techniques for constructive challenge, clear communication, conflict resolution, and team cohesion. - Adopt strategies to align varied mindsets across SOC teams, IT operations, leadership, and users. - Recognize how cognitive diversity and complementary mindsets strengthen defenses against complex, evolving threats. - Evaluate how AI is reshaping cybersecurity thinking and how human-machine collaboration changes perception, decision-making, and response.
Charles Kolodgy, Principal | Security Mindsets LLC
-
Awareness Alone Fails: Transform Security Habits Across SaaS Environments
Attackers exploit established routines and workflows, making traditional training ineffective. Human error is magnified in hybrid environments. The SaaS footprint keeps expanding, access paths keep shifting, and oversight becomes uneven. This drives up fraud losses, data exposure, operational downtime, and regulatory risk. Ultimately, customer trust, employee confidence and your security team's credibility are on the line. Leaders need to make the secure path the path of least resistance by embedding clear guidance and guardrails into daily workflows and tools. This session examines how organizations can move past compliance-focused training and implement a human-centered security strategy by identifying risky behaviors, reducing security friction, and building controls that employees naturally embrace. Fatema Fardan, Cybersecurity Digital Data Lead at a leading international bank, draws on lessons from banking, fraud prevention, and cybersecurity operations to show practical ways to measure behavior change, design effective security nudges and balance user experience with risk in today’s hybrid workplace. Topics for discussion include: - Pinpoint why awareness programs fall short and map risky behaviors across your environment. - Design controls employees actually use, from adaptive MFA to real-time guidance at critical decision points. - Counter phishing and fraud by integrating training, simulations, and behavioral nudges linked to identity signals. - Track what drives impact: reporting rates, time-to-report, reduction in repeat clicks, control adoption, and measurable ROI. - Establish a cross-functional operating model using pilots, A/B testing and leadership dashboards.
Fatema Fardan, Cybersecurity Digital Data Lead | Leading International Bank
-
Secure-by-Design Digital Transformation: ISO/ISMS & ITSM as Business Value
Security and compliance are often viewed as one-time, box-ticking exercises, serving as certificates rather than integral business practices. As organisations digitize, this approach is no longer effective. Evolving risks and regulations require security to be continuous and embedded from the outset. Abhishek Bansal explores how established enterprise frameworks such as ISO 27001, ISMS, and ITSM/ITIL can shift from compliance obligations to drivers of business value. These disciplines can reduce risk, strengthen compliance and build trust, enabling faster business operations. With over 20 years of experience in IT, security, and transformation, Abhishek emphasizes embedding security-by-design into digital transformation from the outset. Key takeaways: - Why compliance is an operating model, not a one-time audit. - How to translate ISO/ISMS and ITSM discipline into measurable business value. - Practical ways to build security into transformation from day one. - Governance and clear ownership of cyber risk across the organisation.
Abhishek Bansak, Senior Manager IT | Chint Solar Europe
-
Weakest Link: How Security Gaps and Bad AI Hygiene Can Kill a Business
AI is already in your business, whether you rolled it out or not. Someone on your team pasted a contract into a chatbot this week, connected an AI assistant to their inbox, or signed up for a new tool with a work email, and every one of those moves opened a new door into your environment. In this session, John Hansman, CEO of Truit, a managed IT, cybersecurity and AI consulting firm, walks leaders through the security gaps and bad AI habits he sees most often in real organizations: free tools that keep or train on what employees type, shared and orphaned logins, sensitive data pasted into public AI, and AI agents wired into business systems with no owner and no oversight. He'll show how these small gaps chain together into a business-ending incident, and why adopting AI without a plan means adopting risk without a plan. Attendees will leave with: - A vendor-neutral, three-step framework (see it, secure it, strategize it) for finding the AI already in use. - Setting guardrails such as a short-written AI policy, an approved-tools list and clear data-handling rules. - Building a prioritized roadmap with an owner for every use case, so AI becomes an advantage instead of the weakest link. Meet the Speaker John Hansman is CEO of Truit, a family-owned managed IT, cybersecurity, and AI consulting company with offices in Tumwater and Spokane, Washington. He spent the first 20 years of his career in the electronic security industry, rising from entry-level technician to Central Station Manager and later IT Project Manager for a major corporation. He now helps organizations strengthen their cybersecurity, protect their data, and put AI to work safely. A frequent speaker for chambers of commerce and industry groups, including the Thurston County Chamber and the Washington Trucking Association, John turns complex cybersecurity and AI topics into practical steps business leaders can act on immediately.
John Hansman, CEO | Truit
-
Cyber Threat Intelligence and AI: Are We Ready?
AI is rapidly changing the cyber threat intelligence landscape, and not always in ways we are prepared for. Threat actors are using AI to remove traditional barriers, scale attacks faster, improve targeting, automate research, and make malicious activity more effective. At the same time, defenders are increasingly relying on AI-powered tools, AI-generated analysis, and solutions that may be poorly secured, poorly understood, or built on questionable data. More of our security products and business systems are also becoming AI-driven, introducing new attack surfaces, dependencies, and opportunities for manipulation. Adoption is moving faster than governance, security controls, and regulation, creating new risks across the intelligence lifecycle. In this talk, Alex Holden examines how AI is changing attackers, defenders and the technologies we depend on, where the biggest weaknesses are emerging, and asks whether we are truly ready for what comes next. Key Takeaways: - Understand how AI is changing both cyber-attacks and threat intelligence. - Recognize new risks introduced by AI-driven security tools and business systems. - Learn where human validation, governance and security controls still matter most.
Alex Holden, CISSP, Chief Information Security Officer | Hold Security LLC
-
When Exploits Move at Machine Speed: Autonomous Agents and the Collapse of the Patching Window
The traditional patch window is gone, and automated AI exploitation is the reason. In the first half of 2026, web and API attacks more than doubled as autonomous agents with advanced scaffolding rose, and frontier and open-weight models became increasingly powerful. Join this session to unpack how AI models and advanced local agentic scaffolding are rewiring the threat landscape and how defense must adapt before it's too late.
Pascal Geenens, VP of Cyber Threat Intelligence, Radware
-
Beyond the CPU: Exposing AI Attacks in the GPU Stack
AI infrastructure runs on GPUs, but most security tooling still watches the CPU. That creates a huge visibility gap. From the host, very different AI workloads can all look like the same trusted Python process using a GPU. As attackers target more of the GPU stack, CPU-centric tools like EDR, CSPM and SIEM can miss critical behaviour. Closing that gap starts with understanding where existing controls lose visibility and what signals can restore it. Security teams need better telemetry across the AI infrastructure, along with sharper questions for GPU cloud and neocloud providers. They also need to account for unexpected attack paths, like model manipulation techniques that leave files on disk unchanged and generate no obvious network or driver activity. In this session, AI & Accelerator Security Specialist Chris Hosking, will break down the GPU attack surface layer by layer, from orchestration and container runtime risks to driver exploits, side channels, cryptojacking, and ROME-class attacks. He will show what attackers gain, what current tools actually see, and what security teams can do to close the visibility gap. Key takeaways: - Understand where the GPU attack surface begins and how it expands across the AI stack. - Spot the signs of ROME-class attacks and other threats that traditional controls are likely to miss. - Pinpoint the gaps in CPU-focused security tooling and the telemetry needed to close them. - Challenge GPU cloud and neocloud providers with the questions that matter before deploying sensitive workloads.
Chris Hosking, Director of Accelerator & AI Research | Stealthium
-
Six Pillars, Zero Gateways: The Security Model Your SEG Can’t Deliver
Today’s most damaging email attacks frequently contain no malicious payload. They originate from legitimate accounts, blend into normal communications, and sail through SPF, DKIM, and DMARC. Secure email gateways (SEGs) were built to filter out known-bad content, inspect signatures, and conduct perimeter inspection — a model that doesn’t account for attacks exploiting trust rather than technology. This session covers six pillars of modern email security, which, when taken together, replace the static SEG with security that understands how people, identities, and business relationships normally behave. You’ll learn: - Why modern email security must account for behaviour and identity - Why API-based cloud visibility and cross-channel coverage are essential - Why modern platforms must reduce operational burden through automated remediation and cloud-native deployment See why stopping modern email attacks requires going beyond the gateway.
Christian Hamilton, Cybersecurity Administrator, Commercial Vehicle Group, Inc., Chris Haley, Sales Engineering Director, Abnormal AI, and Mike Shema, Host at Application Security Weekly
-
2026 オープンソース・セキュリティ＆リスク分析レポート解説 ―AI時代のソフトウェアガバナンスとは
オープンソースとAIの普及によりソフトウェア開発は急速に進化する一方、コードベースの複雑化に伴い、OSSの脆弱性やライセンス競合が増加し、サプライチェーン全体のリスクが高まっています。サプライチェーン攻撃は業界を問わず現実的な脅威となっており、さらにAIコーディング・アシスタントの普及により、従来のセキュリティやガバナンスは変化に追いつきにくくなっています。 今年で11回目となる年次レポート「オープンソース・セキュリティ＆リスク分析(OSSRA)レポート」では、17の業界にわたる947のコードベースに対する監査結果を分析しています。本レポートでは、今回の調査データを元に、OSSの利用の傾向、セキュリティ・リスクやライセンスのリスクの現状、OSSのメンテナンスのリスクについて考察しています。 本セミナーでは、オープンソースとAIを取り巻く最新の実態データをもとに、これらの変化がオープンソースのセキュリティ、法務、運用リスクにどのような影響を与えているのかを整理します。その上で、変化を前提とした時代において、企業がどのようにオープンソースと向き合い、現実的なガバナンスと意思決定を行っていくべきかについて考察します。 ◎主な内容 ・AIコーディングアシスタントの出現によるソフトウェアの変化 ・オープンソースの様々なリスク ・EU CRAを始めとする法規制への対応 ・オープンソースのリスクにどのように対応していくかの提言 ※ 本セミナーは2026年4月に開催した回の再配信です。
ブラック・ダック・ソフトウェア合同会社 セールスエンジニアリング シニアマネージャー 吉井 雅人
-
ON-DEMAND 36 mins
Securing AI Applications Across the AI Lifecycle
AI applications are changing and security teams must expand their scope beyond cloud infrastructure to include application-level risk. Cloud context remains foundational, but securing AI applications also requires understanding how they're built, what they're designed to do, and what they're capable of. Without that application context, it's impossible to fully understand AI-native risk or the real attack paths introduced by AI. Join this session to examine a unified approach to AI application security. We will demonstrate how to map AI applications across custom code, managed AI platforms, and SaaS; uncover AI-native risks; prioritize real attack paths using unified cloud and AI context; and detect threats at runtime. Learn how a unified approach to AI application security enables teams to secure the entire AI application lifecycle—from build through production—without impacting development velocity.
Snegha Ramnarayanan
