SecureWorld East Virtual Conference 2026

Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible! Peruse the many downloadable resources each booth has to offer.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

As enterprises move from experimenting with AI to deploying autonomous agents in production, the attack surface is changing just as fast as the defenses. When ransomware hit MGM Resorts in 2023, it knocked out reservations, room keys, and slot machines for over 10 days a warning sign that manual, rule-based security can’t keep pace with modern, AI-accelerated attacks. This session covers how machine learning detects anomalies and automates threat response in real time, how attackers are using generative AI for smarter phishing and social engineering, and how organizations can build responsible-AI guardrails governance, model evaluation, human oversight into agentic systems from day one, so speed doesn’t come at the cost of safety.

Key takeaways:

Attendees will leave with a practical framework for applying AI and machine learning to real-time threat detection and automated response plus a clear-eyed view of how attackers are using generative AI against them. Most importantly, they’ll understand how to adopt AI-driven security responsibly, pairing automation with governance, model evaluation, and human oversight so speed doesn’t come at the cost of accountability.

During this session, the audience will hear from a former CIA Operations Officer who spent a career creating and exploiting insider threats in the hardest target countries and companies. He will describe common detectable activities that malicious insiders conduct inside a company that could lead to detection. The presentation will include facts about insider threats as well as case studies from the presenter’s time leading the Insider Threat program at Tesla. Attendees will walk away with concrete behaviors to look for when monitoring their computer networks and employee activity for indications of insider threat.

Most enterprises have a policy for retiring devices, but far fewer address the other moments when stored data is at risk. In this session, Blancco experts break down IEEE 2883.1-2025, the new guidance on storage sanitization, and its four points of exposure across the asset lifecycle: provisioning, internal reuse, external reuse or resale, and disposal. You’ll learn the specific threats at each stage, including pre-installed malware and pre-harvested encryption keys.

You’ll also see how to choose between Clear, Purge, and Destruct based on data sensitivity and lifecycle stage, and where “verified” sanitization has real limits, especially cryptographic erase, and what that means for your audit trail. Finally, you’ll walk away with a best-practice framework for automating and centralizing sanitization across end-user compute and data center storage before devices leave your control.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

QR code phishing (quishing) is one of the fastest-growing threats in mobile security, yet remains completely invisible to carrier defenses. This talk presents original research introducing the Signal Switch—a measurable behavioral framework defining the moment a mobile user shifts from skepticism to compliance when faced with a QR-based attack delivered through a trusted mobile channel.

Real-world study: 55 participants, 190 live QR code scans across four scenarios (restaurant, parking, Wi-Fi, banking) deployed via WhatsApp and SMS with no warning. Key finding: 85% of participants scanned when delivered via mobile versus 49% who said they would in a survey. Zero hesitations. Zero questions asked.

The talk includes: a live audience demo where attendees scan a real QR code and experience the Signal Switch firsthand, AI detection comparison across Claude, ChatGPT, and Gemini, and a proposed carrier-layer intervention architecture for pre-delivery QR threat analysis—now subject to a pending patent application filed through Charter Communications.

Session details to come.

Session details to come.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

What happens when an employee follows instructions from a trusted executive, transfers millions of dollars, and later discovers the executive was an AI-generated deepfake? The financial loss is real. The identity was fabricated. But will the organization’s cyber insurance respond?

AI-powered impersonation challenges long-standing assumptions about fraud, identity verification, and insurable cyber risk. As deepfake-enabled social engineering becomes more convincing, insurers are reassessing how their policies address financial fraud, reputational damage, and incidents that occur without a traditional network compromise.

This session examines how the cyber insurance industry is responding to AI-driven deception, including emerging deepfake endorsements, affirmative AI coverage, exclusions, and the potential gaps between cyber and crime insurance.

Drawing on real-world incidents and emerging insurance industry practices, we’ll explore what cybersecurity leaders need to understand about their organization’s financial exposure—and why security controls, insurance coverage, and executive decision-making must evolve together.

Attendees will leave understanding:

• How AI deepfakes are changing the cyber insurance industry’s approach to social engineering and financial fraud
• Where traditional cyber insurance and commercial crime policies may leave organizations exposed
• What security and risk leaders should examine when evaluating insurance coverage for AI-enabled deception

The enterprise AI landscape has matured rapidly, shifting the conversation from initial curiosity to operational reality. Yet as large language models (LLMs) weave deeper into daily workflows, they quietly amplify a critical vulnerability: the well-intentioned insider who inadvertently leaks confidential data to mainstream AI tools.

Serving as the next evolution of our discussion on generative AI governance—fully designed as a standalone briefing for first-time attendees—this session tackles how to balance aggressive productivity gains with ironclad security. The path forward is not restricting access, but establishing an enterprise-controlled gateway.

We will introduce “Your Internal AI,” a secure, scalable architecture that lets teams interact with modern LLMs naturally while ensuring confidential information never leaves organizational boundaries. Through dynamic pre-processing, anonymization, and inline policy enforcement, enterprise data remains protected at the edge.

Attendees will explore:

• How unsanctioned and mainstream AI usage expands the non-malicious insider attack surface
• The regulatory, privacy, and intellectual property stakes facing organizations today
• A live technical demonstration showing real-time prompt sanitation in active business workflows
• Frameworks for transforming security from an AI roadblock into a strategic enabler

The enterprise attack surface is no longer confined to traditional networks—it extends across distributed cloud environments, collaboration pipelines, identity fabrics, and decommissioned assets. As adversaries adopt automated tooling, sophisticated social engineering, and targeted data extortion models, security teams must evolve beyond reactive posture management to continuous, lifecycle-wide defense.

This panel brings together industry specialists to dissect the current threat landscape through the core technological capabilities driving real-world resilience:

• Hyperscale Threat Intelligence & Cloud Infrastructure Defense: How global telemetry, front-line frontline threat intelligence, and planetary-scale cloud infrastructure models uncover advanced persistent threats (APTs) and zero-day campaigns before they proliferate.
• Zero Trust Architecture & Secure Access Service Edge (SASE): Replacing perimeter trust models with identity-centric, least-privilege brokering and inline traffic inspection to halt lateral movement and secure hybrid workforces.
• Next-Gen SIEM & Unified Telemetry Analytics: Leveraging cloud-native log ingestion, real-time analytics, and automated alert correlation to dramatically shorten dwell times and triage alert fatigue in high-volume SOC environments.
• Programmable, AI-Driven Email & Inbound Threat Defense: Countering credential harvesting, business email compromise (BEC), and QR-code/quishing attacks with behavioral detection engineering and dynamic inspection layers.
• Defensible Data Lifecycle & Certified Sanitization: Eliminating data liability and residual exposure by operationalizing verified, policy-driven data erasure across active storage, virtual machines, and decommissioned endpoints.

Attendees will walk away with an integrated perspective on how to align proactive detection, inline Zero Trust controls, deep telemetry, and end-of-life data governance into an adaptable defense strategy.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

As U.S. state privacy laws expand, organizations need practical, scalable ways to fulfill consumer privacy requests across complex data environments.

This session shares Focus on the Family’s phased approach to operationalizing privacy rights. We began with a manual, cross-functional process to establish accountability, understand data locations, and validate workflows. We then used existing Microsoft investments, e.g. SharePoint and Power Automate, to streamline request tracking, internal notifications, assignments, and administrative tasks.

As the program matured, we adopted DataGrail to automate request intake and fulfillment workflows across structured PII systems such as Salesforce and unstructured repositories such as Box. Attendees will learn how to build a privacy-request program incrementally, identify high-value automation opportunities, and balance existing tools with purpose-built privacy technology.

Enterprise security is no longer just a technical discipline; it is the primary battlefield of modern conflict. This session connects the dots between global geopolitical volatility and the immediate risks to organizational integrity, supply chain continuity, and stakeholder trust. We will examine how shifting alliances and conflicts involving major global powers are reshaping the cyber threat landscape—specifically targeting critical infrastructure, distributed cloud dependencies, and the global software supply chain.

The discussion will pivot to the “internal” evolution of the enterprise, analyzing the rapid integration of Generative AI into core business logic and automated decision-making systems, and the resulting regulatory and privacy minefield. From state-aligned actors seeking to destabilize national interests to sophisticated ransomware syndicates targeting high-availability environments, we will profile the adversaries threatening the modern digital order.

Join us for a 2026 outlook that moves beyond mere framework compliance, offering a battle-tested roadmap for maintaining operational resilience and data sovereignty in the face of unprecedented global instability.

Artificial intelligence is changing the way we work, yet it isn’t replacing the need for humans to work well with humans. In this engaging and practical session, Yadi Caro challenges the idea that “soft skills” are simply nice-to-have traits. Skills like connecting, communicating, collaborating, creating, and navigating feedback and conflict are becoming essential to how teams perform, innovate, and adapt. Drawing on lessons from unexpected places, Yadi reveals what it really takes for people to work together when the environment is unpredictable, and constantly changing.

Benefits: Attendees will discover how to strengthen the distinctly human skills that AI can’t replace. They will learn how to work more effectively with their human colleagues.

Security data volume is growing faster than SIEM budgets. Leading security organizations are taking control of their security telemetry before it hits the SIEM by managing SIEM ingestion cost, routing security data to multiple destinations and keeping analytics compliance-safe by scrubbing sensitive data before it leaves your environment.

In this session, we’ll share how to:

• Cut ingestion cost, not detection coverage: send critical security logs to your SIEM and route the rest to your data lake or archive at a fraction of the cost.
• Keep sensitive data in your environment: redact PII before logs leave your infrastructure, so analytics stay compliance-safe wherever the data lands.
• Write a detection once, let it work everywhere: normalize every source to OCSF, and see where federated SIEM takes detection next

Attendees will gain a practical approach on shrinking costs and widening what you’re able to detect.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.