Program

An AI-augmented ransomware attack made a rehearsed incident response plan irrelevant within 90 minutes, exposing gaps regulators now penalise.

Identity frameworks built for humans fail when AI agents act autonomously with legitimate credentials, and this session maps that accountability gap.

As generative AI crawlers and agentic browsers surge, websites need a framework to distinguish trustworthy automation from attackers using the same access.

Crowd-based expert forecasting turns distributed security knowledge into a calibrated, dollar-denominated risk signal for assets no scanner can reach.

Multi-year research into validated SME assessments reveals a governance blind spot where self-reported confidence still substitutes for real cyber assurance.

Infostealer logs expose far more than usernames and passwords, including session cookies and SaaS access most security teams never think to monitor.

Using Colonial Pipeline and Stuxnet as examples, this session shows why OT risk increasingly comes from architecture and dependencies, not missing controls.

Well-designed checklists for the first two, eight and twenty-four hours of a cyber incident turn chaotic decision-making into calm, coordinated response.

Detection engineering should be driven by continuous adversarial simulation as ground truth, closing the gap between telemetry and real assurance.

Anthropic Deputy CISO Jason Clinton spent more than a decade at Google, where he led Chrome infrastructure security against advanced persistent threats.

Sir Tim Berners-Lee, founder of the World Wide Web Foundation and co-founder of the Open Data Institute, on where data and privacy are heading online.