Webinars to pollinate your perspective.

The analyst workflow is changing. Where investigation once meant manually querying across disconnected tools and assembling context from multiple sources, AI is generating investigation summaries, surfacing relevant threat context, and recommending response actions in the time it used to take to open the first ticket. Agentic AI is going further—running investigative steps autonomously, executing playbooks, and escalating only what requires human judgment.

Find out where AI is delivering measurable security impact—and how organizations are turning early experimentation into operational results.

Your SaaS apps came back online. Your data didn't. Most organizations won't know the difference until it's too late.

The assumption that your SaaS provider handles recovery is the most expensive mistake IT leaders make. And most won't find out they made it until they're already in an incident.

In this session, Rubrik and IDC analyst, Johnny Yu, break down what organizations actually get from native recovery tools, what ready really looks like before a crisis, and why AI agents are introducing a risk factor most recovery plans weren't built for.

Walk away knowing exactly what questions to ask, what gaps to close, and what your recovery plan is missing before it gets tested for real.

AI agents are moving into security operations faster than most organizations can answer a basic question: Can we trust our agents to work as expected when AI-fueled attacks hit?

A successful demo of agent performance isn’t proof. Neither is a static dataset, tabletop exercise, or vendor benchmark. Agents behave differently when they encounter real systems, identities, tools, users, and adversaries—and those conditions continuously change after deployment.

Join Rowan Curran, Principal Analyst at Forrester and Lee Rossey, Co-Founder and CTO at SimSpace, as they explore how to prove performance before—and after—production.

Attendees will learn how to:

• Prove AI agents before (and after) production by continuously testing them under realistic attack conditions.
• Move beyond scripted demos and static testing to see how agents perform within real-world systems and workflows.
• Expose hidden failure points across agents, security tools, processes, and human-AI handoffs.
• Generate evidence of AI readiness to support more informed deployment decisions.

Don’t make production your proving grounds. Learn how preemptive cyber simulation can help organizations test what happens when AI meets the real world.

When adversaries use machine-generated attack chains to exploit blind spots in AI tools and agents, legacy defenses fail. To stop these automated threats, your prevention must be just as autonomous.

Join this session to discover how Agentic Endpoint Security (AES), built on Koi technology, secures the agentic ecosystem, neutralizes stealthy behavior in real time, and breaks the attack lifecycle of the most advanced AI-driven threats.

AI adoption is accelerating across APAC, but securing AI is becoming more than a technology challenge. As organizations move AI from experimentation into production, security leaders must answer a harder question: Can we prove our AI is secure, governed, and continuously managed?

Policies and questionnaires alone cannot provide that proof. Organizations need visibility across AI assets, configurations, applications, models, agents, and runtime environments, along with evidence that security controls continue to work as risks evolve.

Join Qualys experts to explore how organizations can build an evidence-based AI governance program from code to runtime, connecting AI security with continuous risk management, regulatory expectations, customer assurance, and executive oversight.

Discover how to turn fragmented AI security signals into measurable risk and actionable governance.

What You'll Learn

• How to establish visibility across AI assets, models, applications, and agents.
• How to continuously identify, assess, and prioritize AI-related security risks.
• How to connect AI security controls with governance and compliance requirements.
• How to generate evidence for NIST, EU AI Act, customer questionnaires, and executive oversight.
• How to move from fragmented AI security signals to measurable, actionable AI risk management.

AI agents are moving into security operations faster than most organizations can answer a basic question: Can we trust our agents to work as expected when AI-fueled attacks hit?

A successful demo of agent performance isn’t proof. Neither is a static dataset, tabletop exercise, or vendor benchmark. Agents behave differently when they encounter real systems, identities, tools, users, and adversaries—and those conditions continuously change after deployment.

Join Marcus Hutchins, Principal Threat Researcher at Expel and Lee Rossey, Co-Founder and CTO at SimSpace, as they explore how to prove performance before—and after—production.

Attendees will learn how to:

• Prove AI agents before (and after) production by continuously testing them under realistic attack conditions.
• Move beyond scripted demos and static testing to see how agents perform within real-world systems and workflows.
• Expose hidden failure points across agents, security tools, processes, and human-AI handoffs.
• Generate evidence of AI readiness to support more informed deployment decisions.

Don’t make production your proving grounds. Learn how preemptive cyber simulation can help organizations test what happens when AI meets the real world.

See how leading healthcare organizations are building cyber resilience with Rubrik. From PACS to other critical stores of unstructured clinical data, Rubrik helps healthcare teams continuously scan for threats, automatically flag compromised data, discover and classify sensitive patient information, and identify clean recovery points with confidence.

A successful exploit doesn’t automatically become a successful breach. After gaining a foothold, an attacker still needs ways to execute commands, retrieve tooling, communicate externally, establish persistence, and move further into the environment.

In this practical session, we’ll look at how Windows endpoint hardening can disrupt those next steps by reducing capabilities users don’t actually need. We’ll examine commonly abused Windows utilities, execution paths, Internet access, and communication channels that can make a compromised endpoint more useful to an attacker.

You’ll learn:

• Which Windows capabilities attackers commonly rely on after exploitation
• How to identify and restrict unnecessary execution, connectivity, and communication
• How to apply role-based hardening without unnecessarily disrupting users
• Why hardening and rapid vulnerability remediation work best together

The goal isn’t perfect prevention. It’s to make the path from foothold to meaningful compromise slower, noisier, and harder to complete.

Federal and state security leaders share hard-won tactical lessons on defending highly targeted public sector networks. In this session, they explore:

• Proven methods for hardening access controls and closing identity blind spots across complex government and education environments.
• How to stop attackers from elevating their access and moving laterally through your network.
• How to detect, isolate, and completely purge modern threats before an incident escalates into a mission-ending breach.

Critical infrastructure policy and enterprise cybersecurity are undergoing a fundamental transformation. For years, organizational strategy centered heavily on perimeter defense, vulnerability identification, and static compliance checklists. However, modern threat dynamics and tightening global regulatory frameworks are forcing leaders to confront an urgent operational reality: What happens when a critical security control fails or an attacker bypasses the perimeter?

Sweeping global mandates—including mandatory CIRCIA incident reporting in the U.S., EU NIS2 risk-management obligations across critical sectors, and the EU Cyber Resilience Act (CRA) establishing upstream manufacturer accountability—demonstrate that continuous cyber resilience is no longer optional. Proving that a security control was installed at a single point in time is no longer sufficient; organizations must maintain continuous visibility into control health, detect silent degradation instantly, and recover critical systems at machine speed.

Join Absolute Security and OpenPolicy for an executive thought leadership session examining the intersection of policy evolution, enterprise risk, and cutting-edge autonomous technology. Featuring independent policy and regulatory intelligence alongside enterprise security leadership, this session explores how organizations can bridge the gap between regulatory intent and technical execution. We will also examine recent breakthroughs in Agentic Resilience—highlighting how Absolute and NVIDIA are collaborating to give AI agents the embedded control, visibility, and authority needed to mitigate failures and stop downtime safely at scale.

AI dominated cybersecurity conversations in 2026. But when OSec looked at what actually created exploitable risk across more than 32,000 validated vulnerabilities, the story was far less futuristic.

The most consequential weaknesses were familiar ones: identity failures, insecure configurations, outdated software, missing protections, and seemingly minor issues that became dangerous when chained together. AI may be increasing the speed and volume of attacks, but it has not replaced the fundamentals of how organizations get compromised.

In this webinar, OSec will examine what its teams actually saw across client environments in 2026, including which vulnerabilities were most exploitable, where remediation broke down, and why traditional severity scores often fail to reflect real-world risk. We’ll also discuss what these findings mean for 2027 priorities, from identity and external attack surface visibility to third-party access and testing complete attack paths rather than isolated findings.

Strengthen network boundaries and maintain control as AI accelerates threats and infrastructure change with centralized visibility, continuous segmentation validation, and governed policy automation.

AI is accelerating attackers’ ability to identify security gaps, compromise entry points, and move through environments before manual processes can respond. When an identity, endpoint, or workload is compromised, the network becomes a critical line of defense—determining what the attacker can reach and how far the attack can spread. Clearly defined boundaries and consistently enforced segmentation will contain that movement and protect critical assets.

At the same time, AI coding agents and AI-driven operations are increasing the speed and volume of network changes. AI-driven operations are also increasing the speed and volume of network changes. Across firewalls, cloud, SASE, and microsegmentation, policies are often managed through separate tools—raising the risk of policy drift, segmentation gaps, and overly permissive access. Without a unified view, manual reviews and point-in-time audits cannot keep pace.

In this webinar, Erez Tadmor, Global Field CTO at Tufin, will show how security teams can stay in control. You’ll learn how a unified approach to network security posture management can provide centralized visibility, continuously validate segmentation and policy intent, evaluate risk before changes are implemented, and govern policy changes across complex hybrid networks.

Attendees will learn how to:

• Gain a centralized view of security policy across hybrid, multi-vendor environments
• Identify policy drift and inconsistencies across different enforcement points
• Continuously validate segmentation and security policy against intended controls
• Evaluate the risk and potential impact of network changes before implementation
• Automate policy changes while maintaining governance and compliance
• Produce audit-ready evidence that security controls are working as intended

The attacks are faster and so are the change requests. Security teams that can see, validate, and govern network policy in one place can keep up with both, without choosing between exposure and delay.

In an era where breaches are viewed as "when," not "if," true resilience isn't just about building higher walls—it’s about ensuring your business can bounce back before it becomes a business-ending event.

Join us for a demonstration where you’ll see a real-world attack lifecycle unfold. We will pit modern adversary tactics against true cyber resilience strategies, demonstrating exactly how our preemptive recovery engine is continuously evaluating your data to keep your data safe and help you bring up your operations back as quickly and cleanly as possible.

Need a capability you don't have today? You're in good company. From March 30 to Sept. 29, 54% of the security vendor-selection requests IANS handled started with a capability gap, and AI adoption drove 29%.

AJ King and Dave Shackleford, both IANS Faculty, show you how to turn that need into a defensible shortlist without burning cycles on vendors that don't fit. They cover the pre-work, RFP, proof of concept (PoC), and customer reference steps that separate opinion from evidence. You'll learn how to:

• Define the gap, budget, owner, and must-have requirements before you talk to a vendor
• Run an RFP and PoC with standardized scoring and realistic lab conditions
• Separate "AI-powered" from "AI security," and test AI claims instead of taking them at face value
• Pick, back-channel, and score customer references to hear what a vendor-curated list won't tell you

As enterprise AI adoption accelerates, organizations are realizing that the biggest challenge is proving that it's secure. The industry is rapidly shifting. Security alone is no longer enough; today’s AI initiatives are driven by strict governance, emerging compliance regulations, and the overwhelming burden of complex vendor questionnaires.

Organizations need continuous technical evidence showing what AI they use, how it is configured, whether models and agents can be exploited, what risks require remediation and whether controls continue to work after deployment.

Join us for this session where Qualys experts discuss how you can turn fragmented AI security signals into AI governance and risk management that is measurable, evidence-based.

Key takeaways

• What a governable AI programme needs beyond policy and questionnaires.
• How to operationalize continuous AI risk management across the AI lifecycle.
• How to achieve visibility into AI assets and assess AI risk, consolidated in one place.
• How to satisfy NIST, the EU AI Act, customer questionnaires, board oversight and endless vendor questionnaire.

As enterprise AI adoption accelerates, organizations are realizing that the biggest challenge is proving that it's secure. The industry is rapidly shifting. Security alone is no longer enough; today’s AI initiatives are driven by strict governance, emerging compliance regulations, and the overwhelming burden of complex vendor questionnaires.

Organizations need continuous technical evidence showing what AI they use, how it is configured, whether models and agents can be exploited, what risks require remediation and whether controls continue to work after deployment.

Join us for this session where Qualys experts discuss how you can turn fragmented AI security signals into AI governance and risk management that is measurable, evidence-based.

Key takeaways

• What a governable AI programme needs beyond policy and questionnaires.
• How to operationalize continuous AI risk management across the AI lifecycle.
• How to achieve visibility into AI assets and assess AI risk, consolidated in one place.
• How to satisfy NIST, the EU AI Act, customer questionnaires, board oversight and endless vendor questionnaire.

Article 14 of the EU Cyber Resilience Act is active law, holding CISOs accountable for software supply chain risks across connected operational networks. Forward-thinking security leaders are turning this regulatory mandate into a competitive edge by transforming supply chain visibility into long-term operational resilience. Organisations deploying automated visibility eliminate blind spots while saving up to €15 million (£13 million) in potential non-compliance penalties.

Key takeaways for senior security leaders:

• Convert CRA visibility requirements into stronger cyber-physical network uptime before full 2027 enforcement.
• Automate 24-hour incident reporting workflows to streamline compliance without burdening operational teams.
• Eliminate hidden OT supply chain risks that traditional IT vulnerability tools consistently miss.

Aligning your supply chain strategy today turns regulatory pressure into an operational advantage that ensures future production.

Advanced artificial intelligence capabilities have fundamentally compressed the time between vulnerability disclosure and active weaponization. Adversaries can now automate exploitation techniques to immediate and wide effect, turning newly discovered security flaws into active threats in hours rather than weeks. Recognizing that uniform, compliance-based approaches to patching can no longer scale to meet this reality, new mandates and executive orders emphasize the immediate prioritization of cyber defense against AI-driven risks across public sector organizations.

To meet the challenges of this shifting AI-threat landscape, public sector organizations must move toward a unified view of enterprise risk. This requires connecting previously siloed tools covering cloud infrastructure, connected on-premises servers, and external attack surfaces into a single operational plane.

This session explores how to:

• Leverage a unified Cloud-Native Application Protection Platform (CNAPP) approach to solve the complex hybrid exposure problem across legacy and modern environments.
• Integrate telemetry from existing vulnerability scanners and on-premises systems into Wiz’s Unified Vulnerability Management (UVM), translating disconnected point-solution data into centralized architectural context.
• Utilize Attack Surface Management (ASM) network path analysis to verify actual internet reachability, allowing agencies to safely implement isolating controls and extend mandatory compliance windows.
• Deploy full-stack workload visibility and identity analytics to automate remediation timeline assessments, map blast radius, track lateral movement, identify true asset ownership, and accelerate targeted forensic investigations.

Discover how leading organizations are redefining defense as AI accelerates attacks across traditional organizational boundaries.

In this session, experts explore:

• Converging identity resilience, data security, and AI agent operations into a single defense strategy.
• Tactics to reduce systemic risk and contain blast radius as automated attacks exploit identity and data systems.
• How to maintain operational integrity and restore trust across distributed infrastructures.

Most organizations measure cyber risk the way they always have—periodic assessments, annual reviews, and point-in-time snapshots that were outdated before the ink dried. The problem isn't that risk management frameworks are wrong. It's that they were built for an environment where risk moved slowly enough to measure on a schedule. That environment is gone. Cloud adoption, third-party dependencies, and expanding attack surfaces are creating new exposure faster than periodic programs can track. Risk programs that can't keep pace with continuous change aren't managing risk. They're documenting it after the fact.

See how security and risk teams are closing the gap between risk measurement and risk reality.