Spring Cyber Solutions Fest 2026: Emerging Technologies Track

Tue, May 5, 2026
Duration: 5 Hours
English
Dave Shackleford
Solutions Forum

Thank You To Our Sponsors

The 2026 Emerging Technologies Track of the SANS Spring Cyber Solutions Fest will bring together leading cybersecurity innovators and thought leaders to explore the newest frontiers in defensive technology. Building on the practical, real-world use cases featured in 2025, the 2026 edition will highlight emerging tools, advanced automation, and threat-detection strategies tailored for increasingly hybrid and AI-driven environments. Attendees can expect deep dives into next-generation defenses—including AI-assisted incident response, secure DevSecOps pipelines, and adaptive threat-hunting processes—with live demonstrations and interactive sessions.

In addition to technical presentations, the 2026 Track will provide strategic guidance for integrating emerging technologies into enterprise-scale security architectures. Participants will walk away with actionable roadmaps for expanding their security arsenals, leveraging cutting-edge tools, and strengthening their cyber posture in the face of evolving threats. Whether you’re on the defensive team, part of a SOC, or leading security strategy, the Emerging Technologies Track aims to equip you with both the knowledge and the practical tools to stay ahead in a rapidly changing cyber landscape.

What to Expect

Live demos showcasing next-gen tools for detection, automation, and AI-powered response.
Expert-led sessions offering practical guidance on integrating emerging technologies into modern SOC workflows.
Real-world case studies demonstrating successful deployments of innovative security solutions.
Actionable frameworks for evaluating, testing, and adopting new security capabilities within your organization.
Interactive Q&A and discussions with industry leaders on the future trajectory of cyber defense technology.

Why Register

Stay ahead of the curve by learning how emerging technologies are reshaping detection, response, and automation in modern security operations.
Gain practical, ready-to-use insights from experts who have deployed next-generation tools in real environments.
Accelerate your technology roadmap with guidance on evaluating, adopting, and operationalizing cutting-edge security capabilities.
Engage directly with industry leaders through Q&A, discussions, and demonstrations you won’t find in standard training sessions.
Strengthen your organization’s cyber posture with strategies that help you prepare for — rather than react to — the evolving threat landscape.

Full Spring Cyber Solutions Fest Track List:

Emerging Technology | May 5
Cloud Security | May 6
Detection and Response | May 6
Exposure Management | May 7
Insider Threat, Malware and Ransomware | May 7

Get Connected —> Join us on Slack!

Schedule

Showing 8 of 8

Filter by:

Select day:

Kickoff & Welcome

11:00AM - 11:15AM EDT

Virtual

Presented by

Dave Shackleford

Founder at Voodoo Security

AI is Finding Real Zero-Days: What Defenders Need to Know

Anthropic's unreleased Mythos model represents a step-change in AI-driven vulnerability discovery, but the security community is fractured between dismissing AI completely and calling it the next security apocalypse. This talk cuts through both extremes to find the truth: why this trend clearly favors attackers, and what security teams can do right now to respond, from layering AI with deterministic tooling to building real defense-in-depth before the attackers find your zero-days first.

*Sponsored by Semgrep

11:15AM - 11:45AM EDT

Virtual

Presented by

Milan Williams

Senior Product Manager at Semgrep

From Guesswork to GRC Intelligence: How AI Is Rewiring Compliance From the Inside Out

Every security team knows the drill: compliance requests pile up, audits consume weeks, and manual evidence gathering pulls your best people off mission-critical work. What if AI could eliminate that friction entirely? This session explores how purpose-built AI — embedded directly into a compliance-as-code platform — is fundamentally changing how organizations manage risk, respond to regulatory change, and stay audit-ready in real time. You'll see how capabilities like automated policy generation, intelligent evidence reuse, and AI-powered audit evaluation compress months of work into minutes, delivering results like: • 80% increase in accuracy across compliance documentation • 10x boost in staff productivity • 92% reduction in time to stand up new compliance programs Walk away with a practical understanding of what embedded AI in GRC actually looks like, why it matters to security teams — not just compliance teams — and how compliance-as-code turns your program from an organizational tax into a force multiplier.

*Sponsored by RegScale

11:45AM - 12:15PM EDT

Virtual

Presented by

Travis Howerton

Co-Founder and CEO at RegScale

Real-Time Defense Against Frontier AI Threats

Agentic AI lets adversaries execute attacks up to 100x faster. New frontier models help them uncover zero-days earlier and compress attacks that once took days into minutes. Legacy, manual security cannot keep pace. You need to operate at machine speed.

In this session, see how agentic security operations help you reduce attack surface, cut noise by up to 99%, and respond in real time.

A live demo shows how an agentic AI workforce investigates and stops AI-fueled threats while enabling analysts, regardless of experience, to operate like experts.

*Sponsored by Palo Alto Networks

12:15PM - 12:45PM EDT

Virtual

Presented by

Kasey Cross

Director of Product Marketing at Palo Alto Networks

Hardening Sttack Surfaces Against AI-powered Exploits

The window between vulnerability discovery and weaponization has collapsed into mere hours. When AI agents can autonomously chain exploits across networks, any blind spot—be it a rogue IoT device or a forgotten OT gateway—becomes a dangerous entry point. In this session, HD Moore (founder of Metasploit and runZero) breaks down why truly complete attack surface management is the only viable countermeasure.

Moore will demonstrate how to regain control using runZero’s latest capabilities for discovery, exposure detection, and attack path mapping. We’ll go beyond basic CVEs to uncover the "soft" exposures attackers love: default credentials, multi-homed devices, misconfigurations and more. Whether you’re securing a hybrid cloud or a complex industrial environment, you’ll walk away with a blueprint for finding the unknown and closing critical pathways that invite lateral movement.

Key Takeaways:

Agentless Discovery: How to map your total attack surface—internal, external, and unmanaged—without the friction of agents or credentials.
Visualizing Attack Paths: Identify hidden pathways and segmentation issues before they are exploited.
Beyond the CVE: Uncover hard-to-find exposures and prepare for responding to an onslaught of zero days.
The New Baseline: Why "seeing everything" is the prerequisite for modern defense, AI-assisted incident response, and adaptive threat hunting.

*Sponsored by RunZero

12:45PM - 01:15PM EDT

Virtual

Presented by

HD Moore

Founder and CEO at runZero

Your Incident Response Plan Won’t Survive a Real Attack. Here’s What Will.

Most incident response plans fail under real-world conditions, when identity systems are compromised, communication tools are down, and teams can’t coordinate effectively.

Today’s attacks don’t just target endpoints. They disrupt the very systems organizations rely on to respond. As a result, security teams are shifting toward a new model: incident command, powered by out-of-band technologies that operate independently of compromised environments.

In this session Nick Scozzaro, Co-founder and CEO at ShadowHQ, will explore how this emerging approach is reshaping modern response by enabling teams to activate playbooks instantly, coordinate across business stakeholders, and accelerate containment and recovery under pressure. Through real-world scenarios and a live walkthrough, you’ll see how to build a response strategy that holds up when your core systems don’t.

*Sponsored by Shadow HQ

01:15PM - 01:45PM EDT

Virtual

Presented by

Nick Scozzaro

CEO at ShadowHQ

Winning AI with AI: Securing AI Apps from Code to Runtime

AI adoption is driving a "Context Crisis" as AI-generated code ships 100x faster than traditional software. This rapid innovation has outpaced legacy security tools, leaving teams blind to their AI footprint and the "toxic combinations" of risk created by interconnected models, agents, and cloud data. Join us for a demo of Wiz AI-APP, the end-to-end platform built to secure AI from development to production. You’ll learn how to unify cross-layer context across infrastructure, models, and application behavior to operationalize AI security.

*Sponsored by Wiz

01:45PM - 02:00PM EDT

Presented by

Snegha Ramnarayanan

Staff Product GTM Manager at Wiz

Wrap Up

02:00PM - 02:05PM EDT

Virtual

Presented by

Dave Shackleford

Founder at Voodoo Security

Meet Your Speaker

Dave Shackleford

Founder at Voodoo Security

Dave Shackleford, founder of Voodoo Security, has advanced cybersecurity through his leadership roles, including serving as CTO for the Center for Internet Security, where he coordinated the first published virtualization security benchmarks.

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

Spring Cyber Solutions Fest 2026: Emerging Technologies Track

Share

Thank You To Our Sponsors

What to Expect

Why Register

Full Spring Cyber Solutions Fest Track List:

Schedule

Kickoff & Welcome

AI is Finding Real Zero-Days: What Defenders Need to Know

From Guesswork to GRC Intelligence: How AI Is Rewiring Compliance From the Inside Out

Real-Time Defense Against Frontier AI Threats

Hardening Sttack Surfaces Against AI-powered Exploits

Your Incident Response Plan Won’t Survive a Real Attack. Here’s What Will.

Winning AI with AI: Securing AI Apps from Code to Runtime

Wrap Up

Meet Your Speaker

Dave Shackleford

Kickoff & Welcome

AI is Finding Real Zero-Days: What Defenders Need to Know

From Guesswork to GRC Intelligence: How AI Is Rewiring Compliance From the Inside Out

Real-Time Defense Against Frontier AI Threats

Hardening Sttack Surfaces Against AI-powered Exploits

Your Incident Response Plan Won’t Survive a Real Attack. Here’s What Will.

Winning AI with AI: Securing AI Apps from Code to Runtime

Wrap Up