A successful exploit doesn’t automatically become a successful breach. After gaining a foothold, an attacker still needs ways to execute commands, retrieve tooling, communicate externally, establish persistence, and move further into the environment.

In this practical session, we’ll look at how Windows endpoint hardening can disrupt those next steps by reducing capabilities users don’t actually need. We’ll examine commonly abused Windows utilities, execution paths, Internet access, and communication channels that can make a compromised endpoint more useful to an attacker.

You’ll learn:

• Which Windows capabilities attackers commonly rely on after exploitation
• How to identify and restrict unnecessary execution, connectivity, and communication
• How to apply role-based hardening without unnecessarily disrupting users
• Why hardening and rapid vulnerability remediation work best together

The goal isn’t perfect prevention. It’s to make the path from foothold to meaningful compromise slower, noisier, and harder to complete.

AI dominated cybersecurity conversations in 2026. But when OSec looked at what actually created exploitable risk across more than 32,000 validated vulnerabilities, the story was far less futuristic.

The most consequential weaknesses were familiar ones: identity failures, insecure configurations, outdated software, missing protections, and seemingly minor issues that became dangerous when chained together. AI may be increasing the speed and volume of attacks, but it has not replaced the fundamentals of how organizations get compromised.

In this webinar, OSec will examine what its teams actually saw across client environments in 2026, including which vulnerabilities were most exploitable, where remediation broke down, and why traditional severity scores often fail to reflect real-world risk. We’ll also discuss what these findings mean for 2027 priorities, from identity and external attack surface visibility to third-party access and testing complete attack paths rather than isolated findings.

When adversaries use machine-generated attack chains to exploit blind spots in AI tools and agents, legacy defenses fail. To stop these automated threats, your prevention must be just as autonomous.

Join this session to discover how Agentic Endpoint Security (AES), built on Koi technology, secures the agentic ecosystem, neutralizes stealthy behavior in real time, and breaks the attack lifecycle of the most advanced AI-driven threats.

Most organizations measure cyber risk the way they always have—periodic assessments, annual reviews, and point-in-time snapshots that were outdated before the ink dried. The problem isn't that risk management frameworks are wrong. It's that they were built for an environment where risk moved slowly enough to measure on a schedule. That environment is gone. Cloud adoption, third-party dependencies, and expanding attack surfaces are creating new exposure faster than periodic programs can track. Risk programs that can't keep pace with continuous change aren't managing risk. They're documenting it after the fact.

See how security and risk teams are closing the gap between risk measurement and risk reality.

AI agents are moving into security operations faster than most organizations can answer a basic question: Can we trust our agents to work as expected when AI-fueled attacks hit?

A successful demo of agent performance isn’t proof. Neither is a static dataset, tabletop exercise, or vendor benchmark. Agents behave differently when they encounter real systems, identities, tools, users, and adversaries—and those conditions continuously change after deployment.

Join Rowan Curran, Principal Analyst at Forrester and Lee Rossey, Co-Founder and CTO at SimSpace, as they explore how to prove performance before—and after—production.

Attendees will learn how to:

• Prove AI agents before (and after) production by continuously testing them under realistic attack conditions.
• Move beyond scripted demos and static testing to see how agents perform within real-world systems and workflows.
• Expose hidden failure points across agents, security tools, processes, and human-AI handoffs.
• Generate evidence of AI readiness to support more informed deployment decisions.

Don’t make production your proving grounds. Learn how preemptive cyber simulation can help organizations test what happens when AI meets the real world.

The latest frontier AI models are changing cyber risk faster than traditional defenses can adapt. During this webinar, our Palo Alto Networks expert will break down how these new models can find and exploit exposures that have gone undetected for years and the implications for security leaders.

This session examines how the threat landscape has hit an inflection point, with work that once took deep expertise, time and manual effort happening in seconds at machine scale. Our expert will discuss what leaders need to prioritize now to reduce exposure before attackers put these capabilities to broader use.

• Exploit time compression: How frontier AI models are shrinking the time from vulnerability discovery to exploitation from months to minutes.
• The biggest risks today: The most immediate risks created by sophisticated, automated attacks at scale.
• Immediate actions to take: Practical guidance on what leaders should do now.

AI is changing the attack surface, empowering the attacker, and increasing the blast radius faster than traditional assessment cycles were designed to handle. As a result, security posture can no longer be assessed by periodic point-in-time reports. Practitioners must adopt an approach that combines discovery and exposure reduction with detection and response into a continuous feedback loop.

This session explores how security teams can connect these functions into a closed-loop operating model that continuously adapts to change. The objective isn't zero risk. It's reducing exposure continuously and shrinking the time between something changing, something going wrong, and action.

• The Problem - Frontier AI Breaks the Old Cadence
• Why Point-in-Time Assessments Fail
• Continuous Exposure Management: Finding and Reducing Risk
• Why Exposure Reduction Alone Isn't Enough
• Continuous Detection & Response for an AI-Accelerated Threat Landscape
• The Combined Lifecycle - Continuous Exposure Reduction (left) + Continuous Detection & Response

"Reduce the risks you can control. Detect and respond fast to the threats you can't."

As enterprise infrastructure teams modernize their environments to optimize costs and avoid vendor lock-in, the shift toward multi-hypervisor architectures is accelerating. However, managing a hybrid estate often means juggling fragmented security tools, navigating complex migrations, and dealing with operational chaos. The most critical risk of all? The very real threat of unknowingly migrating dormant malware into your newly minted infrastructure.

You need a way to evolve your virtualization strategy without the cyber risk. This webinar demonstrates how Rubrik serves as your ultimate cyber safety net, giving you the operational freedom to adopt new hypervisors confidently. We will show you how to decouple your data security from the underlying hypervisor, ensuring clean data mobility while protecting your entire estate. Join us to learn how to unify your defenses and modernize with absolute certainty.

What You Will Learn

Join us as we dive into the technical capabilities that enable a seamless, secure infrastructure evolution. You’ll learn how Rubrik can help you:

• Achieve Clean Data Mobility: Learn how to leverage proactive Threat Hunting to scan for and isolate hidden malware before you shift workloads, ensuring you only migrate clean data to your new environments.
• Decouple Security from the Hypervisor: Discover how abstracting your data protection layer gives you the agility to transition between hypervisors seamlessly, without compromising your security posture or creating new silos.
• Unify Your Hybrid Management: See how to apply, automate, and enforce consistent SLA policies across a diverse, multi-platform estate from a single, simplified control plane.

The cybersecurity landscape has reached a critical tipping point. With the rise of Agentic AI, exploit windows shrinking to under 15 minutes, and the persistent complexity of fragmented infrastructure, traditional siloed defenses are no longer sufficient. To survive, organizations must move beyond point solutions toward a unified platform capable of protecting the entire digital ecosystem.

Join us for an inside look at the strategic vision driving the future of data protection. This session explores the essential intersection of cyber resilience and enterprise AI acceleration, highlighting how a unified approach secures the three pillars of the modern enterprise: data, identities, and AI agents.

Attendees will gain insights into:

• Why sub-15-minute exploit windows demand a shift from reactive security to autonomous, real-time defense.
• Strategies for securing "agentic" workloads and digital identities as they move from data processing to independent action.
• Why modern recovery requires moving past siloed point solutions toward a converged data and identity strategy.

The future of cyber resilience is no longer a concept—it’s a requirement. Discover how to ensure your organization is ready for what comes next.

Most enterprises running AI and analytics on AWS have Apache Iceberg sitting at the center of their data lakehouse. It's the layer that makes everything queryable, but it's also the layer almost nobody has a real recovery plan for.

That used to be an acceptable gap. It isn't anymore. The data sitting in those tables now feeds ML models, real-time decisioning, and financial reporting. When it goes down, your whole business goes with it.

In this fireside chat, Rubrik and AWS get into what it actually takes to protect a production data lakehouse and what real recovery looks like when something goes wrong.

What we'll cover:

• Why the lakehouse has quietly become the most business-critical layer in the modern data stack, and what that means for how you think about resilience
• What catalog-aware recovery is, why it matters, and why it's the step most incident response plans don't account for
• How Rubrik and AWS protect the full lakehouse stack with independent backup stored outside your account and automatic catalog recovery on restore

Prevention doesn't always hold. Host John Murphy talks with Steven Foskett (Tech Field Day, Futurum Group) and Kyle Feeler (Rubrik Zero Labs) about what really happens after the 2AM phone call — and how to be ready before it rings.

Drawing on frontline threat intelligence and hands-on data protection experience, Steven and Kyle break down how today's threat actors target identity infrastructure and cloud backups, why social engineering keeps working, and what it takes to prove recovery readiness to boards and regulators.

This is a practical, practitioner-level look at what resilience actually takes when prevention fails.

What you'll learn:

• Why identity infrastructure and cloud backups are prime targets for ransomware and state-sponsored actors alike
• How vaults and clean-room recovery validate that an environment is truly clean before coming back online
• What boards and regulators (SEC, NIS2, DORA) expect as proof of recovery readiness — and the myths still putting organizations at risk

In an era where weaponized AI can corrupt data in seconds, traditional backup processes are no longer enough to protect your organization.

Your Minimum Viable Business matters now more than ever because attacks move faster than your team can respond, identity is the new perimeter, and your SaaS and cloud data are no longer outside the blast radius. Leveraging an agentic cyber resilience platform that provides comprehensive, end-to-end protection across your Cloud, SaaS, Identity, and AI is the only way to recover at the speed of the attack.

Join us for the unveiling of Rubrik's evolved cyber resilience platform:

• Discover how to defend against identity-based attacks
• Secure AI pipelines
• Ensure M365 SaaS data and mission-critical applications residing in your Azure cloud remain unstoppable

We’ll discuss section:

• Why identity is the first thing attackers target — and the first thing you must recover. Identity-based attacks don't just lock you out of systems. They break the trust layer your entire business runs on.
• How to secure AI pipelines before they become your biggest liability. As AI becomes core infrastructure, it also becomes a target. Learn how to protect the pipelines your business is starting to depend on.
• What it takes to keep M365 and Azure workloads unstoppable mid-attack. Your mission-critical SaaS data and cloud applications can't afford downtime. We'll show you how to make sure they don't have any.
• How Rubrik's evolved platform delivers end-to-end resilience across Cloud, SaaS, Identity, and AI. A first look at the platform announced at Forward 2026 — and what it means for how you defend, respond, and recover.

Your SaaS apps came back online. Your data didn't. Most organizations won't know the difference until it's too late.

The assumption that your SaaS provider handles recovery is the most expensive mistake IT leaders make. And most won't find out they made it until they're already in an incident.

In this session, Rubrik and IDC analyst, Johnny Yu, break down what organizations actually get from native recovery tools, what ready really looks like before a crisis, and why AI agents are introducing a risk factor most recovery plans weren't built for.

Walk away knowing exactly what questions to ask, what gaps to close, and what your recovery plan is missing before it gets tested for real.

See how leading healthcare organizations are building cyber resilience with Rubrik. From PACS to other critical stores of unstructured clinical data, Rubrik helps healthcare teams continuously scan for threats, automatically flag compromised data, discover and classify sensitive patient information, and identify clean recovery points with confidence.

Discover how leading organizations are redefining defense as AI accelerates attacks across traditional organizational boundaries.

In this session, experts explore:

• Converging identity resilience, data security, and AI agent operations into a single defense strategy.
• Tactics to reduce systemic risk and contain blast radius as automated attacks exploit identity and data systems.
• How to maintain operational integrity and restore trust across distributed infrastructures.

Federal and state security leaders share hard-won tactical lessons on defending highly targeted public sector networks. In this session, they explore:

• Proven methods for hardening access controls and closing identity blind spots across complex government and education environments.
• How to stop attackers from elevating their access and moving laterally through your network.
• How to detect, isolate, and completely purge modern threats before an incident escalates into a mission-ending breach.

In an era where breaches are viewed as "when," not "if," true resilience isn't just about building higher walls—it’s about ensuring your business can bounce back before it becomes a business-ending event.

Join us for a demonstration where you’ll see a real-world attack lifecycle unfold. We will pit modern adversary tactics against true cyber resilience strategies, demonstrating exactly how our preemptive recovery engine is continuously evaluating your data to keep your data safe and help you bring up your operations back as quickly and cleanly as possible.