SecureWorld Threat Defense Virtual Conference 2026

Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible! Peruse the many downloadable resources each booth has to offer.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

Enterprise identity can no longer be reduced to a login gate. Modern products span admin consoles, workspaces, APIs, and privileged workflows, often across multiple identity providers and assurance levels. This session presents a vendor-neutral architecture that separates principal eligibility, resource authentication requirements, and session assurance. It examines common failures in coarse-grained SSO and shows how teams can introduce stronger controls using policy evaluation, shadow decisions, decision logging, staged enforcement, and rollback safeguards without causing widespread access failures or creating brittle user experiences.

Attendees will leave with a practical architecture and rollout checklist for building resource-aware authentication and authorization controls across complex enterprise products.

Modern security architectures are built on assumptions—about identity, trust, attacker behaviour, analyst workflows, and the boundaries between systems. Those assumptions weren’t mistakes; they were the foundation upon which effective security programs were designed.

As AI reshapes both offensive and defensive capabilities, many of the conditions surrounding those assumptions are beginning to change. The question for security leaders isn’t whether to abandon existing approaches, but how to recognize which assumptions continue to serve us, which deserve to be revisited, and what that means for the future of threat defense.

Rather than focusing on the latest AI tools or attack techniques, this session explores a broader question: how should we think about threat defense when the environment itself is changing? Through the lens of systems thinking, resilience, and organizational adaptation, we’ll examine how AI is influencing the assumptions that underpin modern cybersecurity—and why revisiting those assumptions may become an increasingly important part of building resilient organizations.

As AI agents gain access to enterprise applications, APIs, sensitive data, and automated workflows, security teams must defend a new class of autonomous identities. This session presents a practical framework for securing the agentic enterprise by establishing clear human-to-agent-to-tool trust boundaries. It explores least-privilege access, scoped credentials, authorization controls, human approval for high-risk actions, and behavioral monitoring for abnormal agent activity. The session examines how existing Zero Trust, IAM, API security, and cloud security practices can evolve to address agentic threats while enabling responsible AI adoption without creating another isolated security program or adding unnecessary operational complexity.

Attendees will leave with a practical framework to secure AI agents through identity controls, Zero Trust principles, least-privilege access, human oversight, and behavioral monitoring.

This session breaks down how AI is reshaping phishing, now driving 84% of attacks, and walks through a real APT case study at a 4,000-employee finance firm. It covers the attack’s multi-stage playbook: high-volume noise campaigns, a fake Microsoft credential-harvesting alert, advanced evasion tactics, and escalation to direct phone contact from the attackers. It closes with the core message: phishing is still the top attack vector, AI has lowered the barrier to entry, and defense demands ongoing education, testing, and patching.

What you will learn:

• Real APT threat intelligence, not just trend commentary
• Tactical detail on evasion and escalation techniques they need to defend against
• Detailed description on how to stay secure

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

Agentic AI is transforming how enterprises automate decision-making and complex workflows, but it also introduces new security and governance challenges. This session explores the evolving threat landscape for autonomous AI systems, including risks related to LLMs, multi-agent architectures, Retrieval-Augmented Generation (RAG), tool integrations, and data protection. Attendees will gain practical insights into implementing guardrails, governance, observability, and security best practices to build trustworthy, resilient, and enterprise-ready AI solutions that balance innovation with risk management.

Just like a cyberattack, a deepfake hiring scam follows a predictable sequence of stages—from reconnaissance and identity fabrication to interview deception and, ultimately, insider access. In this session, we’ll walk through the Deepfake Kill Chain step by step: how bad actors research targets, construct synthetic identities, pass video interviews using real-time face-swapping and voice cloning, and slip past traditional background checks. We’ll examine real-world case studies, break down where each stage can be detected and disrupted, and show how organizations can build defenses at every link in the chain—before a synthetic candidate ever becomes an employee.

Adversaries no longer knock on the perimeter—they log in with valid session cookies, impersonate your C-suite with AI, and weaponize shadow SaaS workflows. When your budget, time, and bandwidth are maxed out, which fire do you actually fight?

In this interactive “this or that” showdown, intelligence leaders step into the hot seat to tackle four no-holds-barred dilemmas facing enterprise defense today. Each round presents two catastrophic, highly-realistic threats where they are forced to remediate one and accept total risk on the other. Expect candid debate, live audience polling, and zero buzzwords as we dissect external brand weaponization versus internal encrypted traffic, stolen tokens versus edge proxies, and the shifting reality of cyber extortion.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

AI is making social engineering attacks faster, more adaptive, and increasingly coordinated across channels. Join Doppel to explore how shared threat intelligence and AI agents connect email security, digital risk protection, and human risk management into a unified defense. Attendees will learn how this approach helps security teams identify connected threats, coordinate detection and response, and disrupt attacks across the social engineering attack chain—reducing risk while keeping pace with evolving attacker tactics.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

As enterprises push agentic AI into systems that act independently, pricing, discounting, engaging customers, and increasingly making operational decisions across the network itself, the core question shifts from “does the agent work” to “can the enterprise still trust and control it.” This session presents an architectural framework for controlled autonomy: giving agents real decision-making power while keeping enterprise governance, compliance, and security intact.

At the center is a trust layer that scores every AI-generated decision on confidence, policy alignment, and risk, enabling dynamic calibration of human involvement. Low-risk decisions get automated; high-impact ones get escalated, so autonomy scales operationally without giving up governance. Sitting alongside it is compliance-aware orchestration, validating every agent action against dynamic policy graphs in real time, so agents stay within regulatory, contractual, and internal constraints even as multiple agents interact and coordinate.

A major focus is on human override: intelligent escalation triggers and contextual decision summaries that reduce cognitive load and speed up turnaround for security and operations teams managing high-velocity, autonomous environments. We’ll also cover observability, explainability, and auditability, building a transparent decision fabric so every autonomous action stays traceable, a requirement for any security-conscious enterprise deploying agentic systems at scale.

The session closes with enterprise integration patterns, bounded autonomy gateways, and parallel decision simulation, that let organizations deploy agentic AI broadly while keeping governance and security consistent as autonomy expands across the network.

Security operations teams don’t have a headcount problem, they have a signal-to-noise problem. Over the past year, Rover’s ticket volume grew 640%—and our mean time to resolution still went down, at one point dropping four hours in a single month. This talk explains how, and then shows what that time savings actually bought us during a real attack.

First, the mechanics: we built an automated triage pipeline that connects our EDR, SIEM, and phishing tools to an LLM (Gemini). Every alert triggers a purpose-built Lambda that gathers the right context—process trees, sender domain age, login history, the underlying SIEM query—and hands it to the model with a tightly scoped prompt (including explicit instructions to treat email content as untrusted data, not commands). Within seconds, a structured verdict, reasoning, and recommended action lands as a comment on the ticket. Work that took an analyst 20-30 minutes now takes seconds, and every AI verdict is clearly labeled and still requires human sign-off before action.

Then, the case study: this summer Rover faced repeated waves of automated toll fraud—thousands of fake accounts created via disposable email domains to abuse SMS verification across international phone numbers. I’ll walk through how a cross-functional team (fraud ops, engineering, and cybersecurity) used the analyst time freed up by AI triage to focus on the harder problem: real-time network and application-layer countermeasures—domain blocking, feature-flag kill switches, and edge/WAF rules—to contain each wave within hours instead of days. You will leave this presentation with concrete actions you can take back to your organization and ways to implement without a giant budget ask.

Pre-built AI agents promise to drop into any SOC and start working. Every SOC runs on its own unique log sources, detection logic, escalation paths, and risk tolerance. A generic agent encodes someone else’s assumptions about all of it. When those assumptions don’t match your environment, the agent fails.

Black-box agents add a second problem. If you can’t inspect an agent’s logic, you can’t tune it or defend its decisions to an auditor. Governance frameworks for AI assume visibility into how decisions get made.

This session makes the case for building custom security agents based on your own environment. We’ll cover what a custom agent requires, and how lean teams can build agents on top of their existing stack. We’ll also explain why agents need deterministic workflows, with model reasoning limited to defined points. Attendees will leave with a framework for building agents to fit in their SOC.

Artificial Intelligence is no longer just a driver of productivity; it is the primary battlefield of modern global conflict. This session connects the dots between geopolitical volatility and the immediate risks to model integrity, data sovereignty, and cognitive security. We will examine how shifting alliances involving major powers like Russia, China, and the EU are reshaping the cyber threat landscape—specifically targeting sovereign AI clusters, decentralized compute networks, and the global semiconductor supply chain.

The discussion will pivot to the “internal” evolution of the sector, analyzing the rapid integration of Agentic AI in critical infrastructure and the resulting “black box” regulatory and privacy minefield. From state-aligned actors seeking to poison training datasets to sophisticated syndicates deploying automated exploit-generation engines, we will profile the adversaries threatening the global digital order.

Join us for a 2026 outlook that moves beyond mere ethical frameworks, offering a battle-tested strategy for maintaining operational resilience and model alignment in the face of unprecedented global instability.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.