Start
End
7:30 am
8:30 am
Registration
7:30 am - 8:30 am
8:00 am
8:30 am
Breakfast
8:00 am - 8:30 am
8:30 am
9:40 am
Opening Remarks & Keynote
8:30 am - 9:40 am
Grand Lilac Ballroom
9:40 am
10:00 am
Sponsor Visitation Break
9:40 am - 10:00 am
Other Events
Sponsor Track
Grand Lilac Ballroom
Highland A/B
Highland D/E
Cascade A-C
Highland C
Come & Go
10:00 am
10:50 am
Punk Rock AI: The Work/Life OS Digital Assistant Big Tech Won't Build for You
JP Bourget
10:00 am-10:50 am
Track 1 - Grand Lilac Ballroom
Defending at Machine Speed Without Losing Human Judgment
Daniel Megalo
10:00 am-10:50 am
Track 2 - Highland A/B
The Vendor Has Your Domain Admin: Why Third-Party Risk Programs Are Looking the Wrong Way
Brandon Finton
10:00 am-10:50 am
Track 3 - Highland D/E
Beyond the Hype: Practical AI Use Cases for Modern GRC Teams
Deke Johnson
10:00 am-10:50 am
Track 4 - Cascade A-C
Capture the Flag Competition by
MetaCTF
Compete solo or in groups of up to four
Come & Go
Registration: 9:40 am
Start: 10:00 am
End: Thursday 3pm
10:00 am-10:50 am
Other Events - Hightland C - Come & Go
11:00 am
11:50 am
Build It, Break It, Learn From It: Designing Bespoke CTF and Malware Analysis Labs for Your Organization
Aaron Walker, Ph. D.
11:00 am-11:50 am
Track 1 - Grand Lilac Ballroom
Running an Effective Vulnerability Management Program
Rich Ingersoll
11:00 am-11:50 am
Track 2 - Highland A/B
One Control Set to Rule Them All
Patrick Rost
11:00 am-11:50 am
Track 3 - Highland D/E
Real-Time Telemetry Analytics for Cybersecurity: Detecting Anomalies in High-Speed Data Streams
Janhavi Dhariya
11:00 am-11:50 am
Track 4 - Cascade A-C
12:00 pm
1:00 pm
Lunch
12:00 pm - 1:00 pm
Empire Hall (2nd Floor)
1:00 pm
1:50 pm
Securing Shadow AI: Practical Controls for AI Risk, Data Exposure, and Vendor Oversight
Lawana Jones
1:00 pm-1:50 pm
Track 1 - Grand Lilac Ballroom
Cybersecurity Outlook 2026... We’re All in Trouble!
Steve Stasiukonis
1:00 pm-1:50 pm
Track 2 - Highland A/B
Verified Lies: Exposing Verification Theater Before the Fraud Matures
Andre Piazza
1:00 pm-1:50 pm
Track 3 - Highland D/E
Small Team, Big Security: How to Punch Above Your Weight
Ryan McCoy & Paul Scott
1:00 pm-1:50 pm
Track 4 - Cascade A-C
Lockpick Village by
Toool
Hands-on lockpicking workshop
Come & Go
Start: 12:30 pm
End: 3:45 pm
1:00 pm-1:50 pm
Other Events - Hightland C - Come & Go
2:00 pm
2:50 pm
AI-Augmented Web App Pentesting: Lessons from the Field
Mike Lisi
2:00 pm-2:50 pm
Track 1 - Grand Lilac Ballroom
Don't Go Alone: Take this Threat Intel!
Thomas Richards
2:00 pm-2:50 pm
Track 2 - Highland A/B
Anatomy of an API Key: Mapping the Sprawl of Non-Human Identities in Modern SaaS
Chaim Sanders
2:00 pm-2:50 pm
Track 3 - Highland D/E
Federated Learning for the Real World: Privacy, Security, and Cost, Without the Trade-offs
Dmitrii Korobeinikov, AJ Barea & Dr. Leon Reznik
2:00 pm-2:50 pm
Track 4 - Cascade A-C
3:00 pm
3:45 pm
Sponsor Visitation Break
3:00 pm - 3:45 pm
3:45 pm
4:45 pm
3:45 pm - 4:45 pm
Grand Lilac Ballroom
4:45 pm
5:45 pm
Happy Hour
4:45 pm - 5:45 pm
Start
End
7:30 am
8:30 am
Registration
7:30 am - 8:30 am
8:00 am
8:30 am
Breakfast
8:00 am - 8:30 am
8:30 am
9:40 am
8:30 am - 9:40 am
Grand Lilac Ballroom
9:40 am
10:00 am
Sponsor Visitation Break
9:40 am - 10:00 am
Other Events
Sponsor Track
Grand Lilac Ballroom
Highland A/B
Highland D/E
Cascade A-C
Highland C
Come & Go
10:00 am
10:50 am
AI Security Without the Noise: How to Evaluate Third‐Party AI Tools Without Flooding Your SOC
Joe Cicero
10:00 am-10:50 am
Track 1 - Grand Lilac Ballroom
Extending Shared Threat Models with the Application Attack Matrix
J. Fridley
10:00 am-10:50 am
Track 2 - Highland A/B
Fast Cars Need Good Brakes: Why Speed and Innovation Should Welcome the Safety of GRC
Eric Anderson
10:00 am-10:50 am
Track 3 - Highland D/E
Designing Around Risk: Building a Stateless Healthcare Data Transformation Platform
Lisa Smith
10:00 am-10:50 am
Track 4 - Cascade A-C
CTF Competition by MetaCTF (Continued)
Come & Go
End: 3pm
Top 3 prizes awarded EOD
10:00 am-10:50 am
Other Events - Hightland C - Come & Go
11:00 am
11:50 am
TBA
Michaela Lee
11:00 am-11:50 am
Track 1 - Grand Lilac Ballroom
A Standard For Investigative Playbooks
Matthew Gracie
11:00 am-11:50 am
Track 2 - Highland A/B
Consolidated but Captive? The Hidden Cost of Security Platformization
Chris Aiwanse
11:00 am-11:50 am
Track 3 - Highland D/E
Real-Time Telemetry Obscurize: Malware for Defense and Counter Offense
Aaron Beardslee
11:00 am-11:50 am
Track 4 - Cascade A-C
12:00 pm
1:00 pm
Lunch
12:00 pm - 1:00 pm
Empire Hall (2nd Floor)
1:00 pm
1:50 pm
The Good News: One Prompt Took My AI Security Scores to 70%. The Bad News: The Other 30%
Scott Bly
1:00 pm-1:50 pm
Track 1 - Grand Lilac Ballroom
SecReviewAgent: Context-Aware Security Review for Infrastructure as Code
Naga Krishna Reddy Muppidi
1:00 pm-1:50 pm
Track 2 - Highland A/B
Values-Driven Cybersecurity: Nerdy Fanatic to Empathic Pragmatist
Reg Harnish
1:00 pm-1:50 pm
Track 3 - Highland D/E
Beyond the AI Hype: Rule-Based Neural Networks for Threat Detection
Antoine Nikolaos Valadon
1:00 pm-1:50 pm
Track 4 - Cascade A-C
Lockpick Village by
Toool
Hands-on lockpicking workshop
Come & Go
Start: 12:30 pm
End: 3:00 pm
1:00 pm-1:50 pm
Other Events - Hightland C - Come & Go
2:00 pm
2:50 pm
AI Security Myths We Can Finally Stop Repeating
Cris Thomas
2:00 pm-2:50 pm
Track 1 - Grand Lilac Ballroom
So, You Want to Be a Forensicator...
Dr. Catherine J. Ullman
2:00 pm-2:50 pm
Track 2 - Highland A/B
Biometric Assured Identity
Kevin Surace
2:00 pm-2:50 pm
Track 3 - Highland D/E
Real-Time Telemetry Analytics for Cybersecurity: Detecting Anomalies in High-Speed Data Streams
Carlo Toma & Ethan Rosenblum
2:00 pm-2:50 pm
Track 4 - Cascade A-C
2:50 pm
3:00 pm
Snack Break
2:50 pm - 3:00 pm
3:00 pm
4:00 pm
3:00 pm - 4:00 pm
Grand Lilac Ballroom
4:00 pm
4:30 pm
Closing Remarks, and Raffles
4:00 pm - 4:30 pm
Grand Lilac Ballroom