Everyone’s a Builder Now: Securing the AI-Powered Enterprise – Gil Geron – BH26 #2
AI is fundamentally changing software development, turning employees across the business into builders and reshaping how organizations think about innovation and risk. In this session, Orca Security CEO Gil Geron explores what this shift means for enterprise leaders and why security must evolve alongside the next generation of AI-powered software creation.
Segment Resources:
https://orca.security/resources/press-releases/orca-security-extends-its-platform-to-the-new-generation-of-ai-builders/ https://orca.security/platform/ai-appgen-security/
This segment is sponsored by Orca Security. Visit https://securityweekly.com/orcabh to learn more about them!
Gil Geron is CEO & Co-founder of Orca Security. Gil has more than 20 years of experience leading and delivering cybersecurity products. Previous to his role as CEO, Gil was chief product officer from the inception of Orca. He’s passionate about customer satisfaction and has worked closely with customers to ensure they are able to thrive securely in the cloud. Gil is committed to providing seamless cybersecurity solutions without compromising on efficiency. Prior to co-founding Orca Security, Gil directed a large team of cyber professionals at Check Point Software Technologies.
InfoSec World brings cybersecurity professionals together across industries, from healthcare and financial services to government and the Fortune 500. Join the community in Orlando, October 12–14, for practical education, new perspectives, and cybersecurity research unveiled live. Listeners save 30% on their pass with code ISW26-SWSAVINGS at securityweekly.com/infosecworld2026.
The Identity Crisis Your Security Team Didn’t See Coming: Governing AI Agents – Darren Guccione – BH26 #2
AI agents exponentially outnumber human identities in enterprise environments, and traditional security software was never built to govern them. Eighty-nine percent of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder.
In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.
Segment Resources:
https://www.keepersecurity.com/ https://www.keepersecurity.com/privileged-access-management/ https://www.keepersecurity.com/resources/insight-report-identity-security-at-machine-speed/
To meet with Keeper Security at Black Hat 2026, stop by Booth 2157. To learn more about Keeper Security, visit: https://securityweekly.com/keeperbh
Darren Guccione is an entrepreneur, technologist and business leader. He is the CEO and Co-Founder of Keeper Security, the leading zero-trust and zero-knowledge identity security and Privileged Access Management (PAM) platform, used by more than 95,000 organizations globally. Guccione is a frequent keynote speaker and panelist at global technology and cybersecurity conferences and is regularly featured in national, trade and broadcast media as a cybersecurity subject matter expert. As a visionary entrepreneur, Guccione has co-founded other successful ventures and advised industry-leading companies. Guccione holds a master’s degree from the Kellstadt Graduate School of Business at DePaul University and a Bachelor of Science in Industrial and Mechanical Engineering from the University of Illinois at Urbana-Champaign.
Above Security on Why Legacy Tools Don’t Cut It for Modern Insider Risk – Tricia Howard – BH26 #2
As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.
Segment Resources:
https://www.above.security/blog-posts/redefining-insider-threat https://www.above.security/blog-posts/above-security-what-i-wanted-ueba-to-be-years-ago https://www.prnewswire.com/news-releases/above-security-raises-50m-to-solve-insider-risk-in-the-agentic-era-302721984.html https://www.prnewswire.com/news-releases/above-security-announces-strategic-investment-from-the-crowdstrike-falcon-fund-furthering-its-mission-to-democratize-elite-insider-risk-management-302842676.html
To meet with Above Security at Black Hat 2026 stop by Booth #5332 in the Business Hall. To learn more about Above Security and insider risk management in the era of agentic AI, visit: https://securityweekly.com/abovebh
Tricia Howard is an artist gone rogue who ended up in cybersecurity. With a bachelor’s degree in theater arts and interests ranging from “Star Wars” to opera, she likes to bring a bit of pizzazz into the cyber realm. She is the Head of Marketing at Above Security, an AI-native agentic managed insider threat platform built to make insider risk proactive and operational through behavioral intelligence. She has over a decade of cybersecurity experience spanning threat research, content strategy, and technical storytelling, with a particular passion for making complex security topics accessible to both technical and non-technical audiences.
After Mythos: Securing Frontier AI as Attack and Defense Accelerate – Sean Murphy – BH26 #2
Frontier AI is compressing the time between discovering and exploiting vulnerabilities, forcing enterprises to rethink how they secure modern applications and AI systems. F5 will discuss how security teams can prepare for the next generation of AI-powered threats, why known vulnerabilities may become a bigger risk than zero-days, and what it takes to secure AI at scale from shadow AI and governance to agent and API protection.
This segment is sponsored by F5. Visit https://securityweekly.com/f5bh to learn more about them!
Dr. Sean Murphy is an accomplished cybersecurity executive with more than 20 years’ experience leading information security and risk management in highly regulated industries and fast-paced organizations in the military, healthcare, and financial services space. A 5X former CISO, he has had a wide range of responsibilities for providing and optimizing enterprise-wide security program and architecture that minimizes risk, enables business imperatives, and further strengthens the trust customers have in his organizations.
Sean retired from the U.S. Air Force (Medical Service Corps) after achieving the rank of Lieutenant Colonel. Sean has a Ph.D. in Information Security from Northwestern University, a master’s degree in business administration (advanced IT concentration) from the University of South Florida, a master’s degree in health services administration from Central Michigan University, and a bachelor’s degree in human resource management from the University of Maryland. He holds numerous industry-leading certifications, including NACD.DC, CCISO, CISSP, and ISSMP. He has served on many industry security boards and advisory groups. He is a sought-after speaker at a national level and the author of numerous industry whitepapers, articles, and educational materials. Dr Murphy is also an educator and is currently an adjunct professor at Central Washington University and over time, has held similar posts at several other colleges.
Ransomware Moves up the Org Chart: Managers Are Prime Targets – Brett Stone-Gross – BH26 #2
When a ransomware attack makes headlines, attention usually turns to the organization that was breached, the systems encrypted, data stolen, and disruption or ransom demand that followed. Less, if anything, is revealed about the employees compromised at the start of the attack, and what makes those individuals valuable targets.
New Zscaler ThreatLabz research examines this early stage of a real-world ransomware attack. ThreatLabz identified victims of a campaign associated with a ransomware group known for gaining initial access, stealing large amounts of corporate data, and selectively encrypting critical systems. The findings show who those victims were and how their roles and authority could help an attacker move deeper into an organization.
This is part of ongoing ransomware research by ThreatLabz. The Zscaler ThreatLabz 2026 Ransomware Report, coming in the next two months, will include additional data on ransomware victims, the latest ransomware trends, targets, and tactics, and the risks enterprises should prepare for next.
This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerbh to learn more about them!
Dr. Brett Stone-Gross is the Senior Director of Threat Intelligence at Zscaler. He has over 20 years of experience tracking sophisticated malware threats and leading technical research teams. Brett has authored dozens of publications and presented at top cybersecurity conferences. His work has led to the disruption of numerous large-scale criminal operations in collaboration with international law enforcement agencies. Some of these operations have included GameOver Zeus, Kelihos, Dridex, Qakbot, and SmokeLoader.
From Secrets to Verified Workload Identity—at Enterprise Scale – Ellen Boehm – BH26 #2
As AI agents become autonomous participants inside enterprise environments, organizations can no longer rely on static credentials and traditional identity models to establish trust. Enterprise AI is driving a shift from possession-based access to cryptographically verified identity, as AI agents, cloud-native workloads, and automated services increasingly make decisions and interact with critical systems. In this discussion, we'll discuss why organizations need to continuously establish trust, govern machine identities and cryptography, and build a resilient foundation for securing AI across increasingly dynamic environments.
Segment Resources:
https://www.keyfactor.com/blog/ai-agents-the-identity-problem-nobody-owns-yet/
https://www.keyfactor.com/education-center/what-is-trust-infrastructure/
https://www.keyfactor.com/newsroom/press-releases/
This segment is sponsored by Keyfactor. Visit https://securityweekly.com/keyfactorbh to learn more about them!
Ellen Boehm is the SVP, Strategy & AI Innovation at Keyfactor. Ellen leads strategy and market positioning to embed security solutions into emerging markets, including IoT, OT, and Agentic AI. Ellen is passionate about emerging technologies and helping customers establish strong security implementations for the lifecycle of their overall connected systems, as they adopt new technologies to grow their business success.
Ellen has 20+ years of experience leading go-to-market strategy and new product development with a focus on IoT and connected products in lighting controls, smart cities, connected buildings, and smart home technology. Ellen has held leadership roles in Product & Engineering at General Electric and Sky Technologies over her career.
The Evolving Exploitation of Trust – Josh Davies – BH26 #2
Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.
Segment Resources:
Art of Security Podcast - https://www.youtube.com/watch?v=3NwwwJdRIzc&list=PLTWUEP9e5aG6tR_j-czWdCeIneKeWCZhm Fortra Research - https://www.fortra.com/security/research
This segment is sponsored by Fortra. Access FIRE Research here: https://securityweekly.com/fortrabh
Josh Davies is a Principal Market Strategist at Fortra, where he helps shape the strategic direction of the company’s security portfolio and coordinates the activities of the Fortra Intelligence and Research Experts (FIRE) team. Drawing on a career that spans frontline security operations, incident response, threat hunting, solutions architecture, and product strategy, Josh combines practitioner experience with deep market intelligence to help organizations build effective, forward-looking security strategies. He regularly analyzes emerging threats, attacker techniques, and industry trends to inform both product innovation and customer security outcomes.
He is also the co-host of The Art of Security podcast, where he explores cybersecurity challenges, trends, and best practices with industry experts, helping security professionals navigate an increasingly complex threat landscape. Having worked directly with organizations ranging from mid-market businesses to large enterprises, Josh has helped architect security strategies that align technology, risk, and business objectives. Through his podcast, speaking engagements, and research, he is a strong advocate for intelligence-sharing, collaboration, and practical security approaches that enable organizations to stay ahead of an ever-evolving threat landscape.
Bugcrowd Launches Pathseeker: Flipping the Script on Traditional Pentesting – Braden Russell – BH26 #2
Bugcrowd is launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line, which combines continuous agentic pentesting with on-demand human validation. The launch comes as the security industry grapples with a growing "AI slop" problem, where unchecked AI-generated vulnerability reports have overwhelmed bug bounty programs and even forced some, like Curl, to shut theirs down. Braden will unpack how Bugcrowd is positioning Savant Pathseeker as a response to that industry-wide trust problem, not just a new product launch.
Segment Resources:
https://www.bugcrowd.com/products/pathseeker/ https://www.bugcrowd.com/press-release/bugcrowd-introduces-savant-pathseeker-delivering-continuous-agentic-pentesting-across-the-attack-surface/ https://www.bugcrowd.com/products/platform https://www.bugcrowd.com/products/ai-powered-security-intelligence/
Apply for early access: https://securityweekly.com/bugcrowdbh
Braden Russell is a seasoned cybersecurity leader with over 20 years of experience across various disciplines, including Vulnerability Management, Risk and Compliance, Advanced Endpoint Protection, Cloud Security, and Digital Commerce. He has held key leadership roles at prominent companies like Foundstone, McAfee, Intel Security, and Cylance. At Cylance, Braden served as the founding SVP of Product Development and Engineering, where he built the teams and technologies behind all Cylance products, including the award-winning CylancePROTECT, the first Next-Gen Antivirus (NGAV).
Most recently, Braden was the CTO of the Falcon Platform and Next-Gen SIEM at CrowdStrike, where he led the vision and strategy for the first Security Cloud. His innovative contributions to the field are reflected in his patents for advanced techniques in automated vulnerability discovery and intelligent malware detection.
Before transitioning to cybersecurity, Braden was part of the Advanced Digital Systems Group at Sony Pictures Studios, where his team received a Technical Academy Award in 2000.
Braden holds an MBA from Pepperdine University and a BS in Electrical and Computer Engineering from the University of California, Irvine. He resides in Southern California with his wife and their five sons.
Decoding Agentic: Securing the Data Layer AI Just Set on Fire – Ronan Murphy – BH26 #2
AI didn't ask permission — and it permanently changed what data risk looks like. Forcepoint Chief Data Strategy officer and member of the Artificial Intelligence Advisory Council in Ireland, shares insights on a clear call to action for agentic enterprises: stop locking AI down and start securing it where the risk actually lives, in the data itself. Learn why data trust is the foundation of the agentic era and how the world's leading enterprises are ending the false choice between AI innovation and data safety.
Segment Resources:
https://www.forcepoint.com/resources/ebooks/enterprise-guide-ai-data-security
https://www.forcepoint.com/blog/insights/forcepoint-announces-ai-data-security
This segment is sponsored by Forcepoint. Visit https://securityweekly.com/forcepointbh to learn more about them!
Ronan Murphy is the Chief Data Strategy Officer at Forcepoint. He is an accomplished executive with over 20 years of experience in the tech industry.
Ronan is the Founder and Executive Chairman of Smarttech247 Group Plc, a multi-award-winning managed cybersecurity company. Ronan is also the Co-founder of Getvisibility, one of the world’s leading AI data governance & security software companies.
Recognized for his expertise, Ronan has been honored with membership in the Artificial Intelligence Advisory Council in Ireland. This council is composed of experts from various fields and is tasked with providing independent advice to the Irish government on AI policy.
Black Hat 2026 Wrap-Up: AI Hype, Agent Risks, and Why Secure Design Still Matters – BH26 #2
Black Hat 2026 made one thing clear: AI is reshaping cybersecurity, but the industry is still working through what secure adoption looks like in practice. In this wrap-up discussion, Jackie McGuire and Mike Shema reflect on the biggest themes from the event, including AI agents, non-human identities, secure-by-design principles, and the challenge of scaling security controls in increasingly complex environments.
The conversation looks beyond the AI hype to examine how organizations can build stronger security foundations, rethink traditional approaches, and prepare for a future where innovation and security must move forward together.
