世界水準の専門家主導によるサイバーセキュリティトレーニング。 AI時代のために設計されています

Cyber42: GRC Leadership Simulations for the AI Era

Cyber42 puts CISOs and security leaders in AI-era scenarios where they must act on limited data, weigh competing views, and leave with takeaways they can use immediately.

Linux is Everywhere, So That's Where the Attackers Go

Linux isn't just the majority of web servers in the world, it also lives inside infrastructure devices you might not think about, like routers, switches, firewalls, and most IOT devices.

2026 SANS CTI Survey Insights: From Indicators to Insights

This session walks through the findings: where AI and automation are genuinely changing analyst workflows and where they are not, which CTI practices are gaining ground, the challenges analysts report most often, and how teams are measuring the value and effectiveness they deliver back to the business.

Latest in Social Engineering Scams and Attacks

Scammers are smarter than ever — and they're coming for you and your family. Learn the latest social engineering tricks and how to spot and stop them before they strike.

SANS 2026 DFIR Summit Solutions Track

SANS 2026 DFIR Summit Solutions Track delivers a deep technical exploration of the tools, methodologies, and operational models driving next-generation digital forensics and incident response.

Ransomware Solutions Track 2026

The Ransomware Solutions Track brings together practitioners, researchers, and technology innovators to showcase actionable strategies that strengthen resilience against the world’s most disruptive cyber threat.

SANS Cyber Defense Initiative 2026 - SANS@Night: Rehearsing the End of the World: A MITRE-Led TTX on Protracted Cyber Conflict

MITRE recently hosted the Critical Infrastructure Cybersecurity Tabletop Exercise (CICS TTX), bringing together approximately 200 participants from 70 organizations—including federal, state, and local governments, emergency managers, and industry representatives from pipelines, electricity, IT, communications, and rail—across five metropolitan areas.

Trends in mobile threats – from silly adware apps to mobile banking malware

In this session, we investigate all the different kinds of malware that are actively infecting devices, explain how they achieve the needed permissions, and discover why Android is much more susceptible to malware than iOS.

IoT and Wireless Penetration Testing: What’s New in SEC556 and SEC617

See how SEC556 and SEC617 have evolved with AI-assisted workflows, updated labs, revised hardware kits, and broader platform support—and learn which course fits your IoT or wireless testing goals.

Breaking Into Cybersecurity: Real Stories from Recent Graduates

Breaking into cyber can feel overwhelming. Hear how recent SANS grads landed their first roles, stood out, and the advice they wish they'd had, in an honest conversation with NICE's Karen Wetzel.

Defending EMEA: Is That Con Artist Real? Phishing and Social Engineering in the Age of AI

In this webinar, we’ll explore how AI is changing phishing and social engineering, from convincing emails and messages to cloned voices, synthetic identities and deepfakes.

SANS 2026 Cloud Security Survey Insights: Navigating the Evolving Landscape of Threats, Tools, and Priorities

The 2026 SANS Cloud Security Research Survey brings together insights from security leaders and practitioners worldwide. This year’s study examines the current state of cloud security, highlighting key challenges, top threats, and the tools organizations are using—or wish they had—to secure cloud environments at scale. Join us for this exclusive webcast to explore the survey findings, gain practical insights, and benchmark your organization’s approach to cloud security.

From Threat Intelligence to Adversary Emulation: Are Australian Organisations Testing the Right Threats?

In this webcast, SEC565 co-author David Mayer will explore how organisations can use publicly available threat intelligence to identify relevant adversary behaviours, map tactics, techniques and procedures to MITRE ATT&CK, and develop an adversary-emulation plan that reflects the threats they are most likely to face.

Cyber Quest CTF Orientation Webinar

Get ready for Cyber Quest CTF, Powered by RBC. Join the orientation webinar to learn how to access the platform, prepare your setup, navigate the competition, and get answers before the 72-hour challenge begins.

Building an AI Ready Cybersecurity Workforce: Hiring, Skills and Strategy

AI is changing what cybersecurity teams need from every role. This session shows leaders, HR teams, and practitioners how to adapt hiring, training, and workforce strategy to build resilient, AI-ready security teams.

Hiring Your First AI Security Agent: Evaluating Agents Like You Hire People

This session reframes agent adoption as a hiring decision. It covers what to document before an agent touches production, how to audit and red team what it actually does, how to evaluate performance against something more useful than vibes, and why an offboarding plan matters as much as the onboarding one.

The New Priorities for Critical Infrastructure Preparedness

For years, critical infrastructure organizations have built their cybersecurity strategies around a familiar set of assumptions: cyber incidents are isolated events, communications remain available, response resources can scale, mutual aid will arrive, and recovery will be measured in days. Today’s nation-state threat landscape is exposing the limits of those assumptions. 

SANS Miami 2026 - SANS@Night: The Evolution of Vulnerability Management

This talk will take us on a trip down memory lane to cover the past, present, and future of offensive security and exposure management.

DFIRのためのAgentic Visualization-Codexとggplot2による視覚化の実践

視覚化（Visualization）は、他者への伝達手段だけでなく、自分自身の理解の手段としても有用です。ただし、的確な図の作成のためには、試行錯誤や微調整が必要となることが少なくありません。Agentic AIは多くの作業を肩代わりしてくれますが、図を画像として直接生成させてしまうと、後からの修正やデータの差し替え、手順の再現が難しくなります。

Trust Under Attack: AI-Enabled Threats in Africa's Financial Sector

Attackers have worked out that stealing an identity is cheaper than breaking a control and that deepfakes can be used to approve payments. This session puts a name to what is happening across the continent right now and shows practitioners what the attack surface looks like today.