Agenda

Organizations continue to struggle with the ever-growing influx of vulnerabilities introduced by developers each day. Despite years of investment, Application Security programs are still dominated by endless finding and triage, with far too little actual fixing—and almost no true prevention. The rise of AI-enhanced development has accelerated not only the speed of code delivery but also the frequency and complexity of vulnerabilities within that code. At the same time, attackers are arming themselves with AI to exploit weaknesses faster and inflict greater damage.

Unless we evolve our practices and build stronger partnerships with development teams, the gap between attackers and defenders will only widen, leading to even greater losses. This session will provide practical, actionable guidance to help security leaders stem the tide of vulnerabilities and empower developers to become their most effective defense against modern threats.

AI is everywhere, but clarity isn’t. In a time of hype and uncertainty, this keynote offers a new lens on what “intelligence” should mean for security and technology leaders. Instead of bigger models and bigger risks, we’ll explore quieter truths: how systems learn, how they reason, how they fail, and how people remain essential. This is a perspective-shifting session that challenges assumptions and leaves you rethinking not just AI—but what we expect from intelligence itself.

The cybersecurity threat landscape has grown more sophisticated and relentless than ever, marked by surging ransomware volumes, widespread identity-centric attacks, supply-chain compromises, and the rapid integration of generative AI into attacker toolkits. Analysis of major incidents throughout the year, corroborated by leading industry reports, reveals a consistent pattern: once initial access is gained, threat actors exploit flat or poorly segmented environments to achieve lateral movement at unprecedented speed, often reaching critical assets in hours or minutes.

A defining factor in nearly every large-scale breach was the lack of granular, enforceable segmentation across hybrid IT, OT, IoT, and cloud environments. Real-world cases demonstrate that comprehensive asset visibility and policy enforcement—capabilities exemplified by platforms like Forescout—repeatedly proved decisive in detecting anomalous movement, blocking lateral traversal, and containing damage before encryption or exfiltration could occur.

This session combines 2025 threat landscape statistics, newly observed breach tactics, and concrete examples of segmentation done right to illustrate why modern, identity- and asset-aware segmentation has become the cornerstone control for limiting blast radius and maintaining resilience in today’s environment.