World-Class, Expert-Led Cybersecurity Training. Purpose-Built for the AI Era.

SANS Virginia Beach 2026 - Cybersecurity's Original Sin

This session argues that modern cyber incidents are not the result of novel or sophisticated threats, but of the industry’s repeated failure to fix problems we have understood since the 1990s.

Escaping Restricted Endpoints in SEC660

Initial access is only the beginning. This session shows how attackers escape endpoint restrictions and pivot from constrained environments, with a new lab focused on breaking out of a Dockerized network appliance.

A brief overview of Cyber Security for Australian Rail Operators

The webinar will touch on Railway cyber security standards that are relevant for Australian operators such and what Australian railways should be doing to prepare their teams to be ready for a cyber security incident.

The Agentic SOC: Defending With, and Against, Autonomous AI

In this session, Ismael Valenzuela, author of SANS SEC530: Defensible Security Architecture and Engineering, applies his Think Red, Act Blue approach to both sides of the agentic SOC.

AI + Network Control: Visibility, Risk Prioritization, and Automation in the Age of Agentic NetOps

In this webcast, SANS Certified Instructor Matt Bromiley will explore the operational realities of managing AI-driven environments and examine the three foundational disciplines organizations must develop to close the maturity gap: governance, visibility, and control.

AI in DFIR: Real-World Lessons, Practical Use Cases, and the Future of Incident Response

Join Josh and Phill as they discuss the latest trends, practical use cases, and the challenges of integrating AI into modern DFIR workflows. 

Closing the Gaps in Modern Data Protection

Data protection strategies haven't kept pace with where data actually lives today. This SANS Security Lab will tackle the real-world gaps in modern DLP, from cloud sprawl and tool fragmentation to the emerging risks inside AI pipelines.

Integrating AI/ML into SOC Detection Engineering: Building Smarter, Faster Defenses

Discover how to effectively incorporate artificial intelligence and machine learning into SOC detection engineering workflows.

AI Is Using Your Data. Are You Watching? See Where AI Is Exposing Sensitive Data

AI is changing how sensitive data flows across the enterprise. Learn how to identify AI-driven data exposure, reduce shadow AI risk, improve visibility into AI activity, and implement practical controls that enable secure AI adoption without slowing innovation.

From Framework to Action: Applying the SANS AI Security Maturity Model: Practical Strategies From SANS Experts and Industry Leaders for Assessing, Advancing, and Operationalizing AI Security Maturity

AI is moving fast and your security program may not be keeping up. Join SANS for an exclusive look at the AI Security Maturity Model, a practical framework for benchmarking and advancing your AI security capabilities, followed by a candid expert panel on the real-world challenges of securing agentic AI.

The Need for Speed: Lost and Found

The field of cyber security seems to be living with a perpetual sense of impending doom. While news headlines are continually absorbing everyone's attention and focus, a lot of the underlying security advice for organisations has remained deceptively consistent - patch your stuff, don't click links, try not giving every user an account with root/domain admin rights.

Post-Quantum Cryptography in 2026

The session closes on the practical part: the actions worth starting now to prepare for a post-quantum future, and the ones that can safely wait.

SANS Network Security 2026 - Featured Keynote: Offense at Machine Speed: How AI Is Reshaping the Threat Landscape

The session will demonstrate how AI can be applied as both a SAST and DAST capability for discovering and exploiting zero-day vulnerabilities in web applications, as well as its growing role in binary exploitation.

SANS 2026 Threat Hunting Survey: The Evolution of Threat Hunting

Threat hunting is no longer just a niche skill—it’s a critical pillar of modern defense.

SANS Network Security 2026 - SANS@Night: Off the Clock: Using AI to Analyze Stocks, Real Estate, and Other Bad Decisions

We've all got two things in common. First, we know AI is powerful. Second, we all have investments, and every one of us would like them to do a little better.

SANS Network Security 2026 - SANS@Night: Top Network Attacks... and How To Fix Them

Do you understand Active Directory? Your enterprise, just like the entire Fortune 500, depends on it.

SANS Network Security 2026 - SANS@Night: Dr. Strangepwn or: How I Learned to Stop Worrying and Love the LLM

This talk is the story of how I went from skeptic to believer by building Plan R, an IoT-focused MCP server that gives AI agents direct access to real pentesting tools.

SANS Network Security 2026 - SANS@Night: Why Your Ransomware Plan Is Wrong: Incident Command Lessons from Arrakis

Your Incident Response plan is lying to you. Not deliberately—it just hasn't met the incident yet. Steve unpicks the gap between the plan your board signed off and the ransomware incident your team is actually fighting at three in the morning.

Operation Phantom Thread: Tracing the Attacker from First Foothold to Final Exfil

Investigate a real-world cyber intrusion in this hands-on digital forensics and incident response (DFIR) simulation. Trace attacker activity, analyze forensic evidence, uncover lateral movement, and reconstruct the full attack using free forensic tools.

SANS Network Security 2026 - SANS@Night: Cybersecurity Without the Chaos: A Step-by-Step Roadmap

In this presentation, James Tarala, Senior Faculty at the SANS Institute and Managing Partner at Cyverity, will delve into the core principles of effective cyber risk management, emphasizing the necessity of making informed decisions when allocating limited resources among good, better, and best safeguards.