3D render AI artificial intelligence technology CPU central processor unit chipset on the printed circuit board for electronic and technology concept select focus shallow depth of field

3D render AI artificial intelligence technology CPU central proc

Fortinet

Fortinet FortiGuard Labs

Threat predictions for 2024: Chained AI and CaaS operations give attackers more ‘easy’ buttons than ever

Phishing

The word "Training" is seen on a blue button on a white computer keyboard

Keyboard with training button highlighted

Security Operations

Training

AI/ML

Brief

Herd Security raises $3 million for AI-powered security training

An open roadside mailbox stands untouched as knights in armor and medieval infantrymen battle around it.

mailbox-medieval-battle-socialsight

Email security

Risk Identification/Classification/Mitigation

Exposure management

Resource

Red Sift

Beyond the inbox: Why your domain and social media are the next front lines

malware_AdobeStock_805640723

Malware

Threat Intelligence

Silver Fox expands Asia cyber campaign with new ABCDoor malware

Telegram app on smartphone screen. Telegram messenger, free speech, security, privacy

Telegram app on smartphone screen. Telegram messenger, free speech, security, privacy, Pavel Durov, Russia.

Application security

Telegram mini apps used in large-scale crypto scams and malware distribution

Azure developed by Microsoft

Identity

Cloud Security

New ConsentFix v3 attack automates Microsoft Azure account hijacking

<body>Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About</body>

<body><h3>Interview with Daniel dos Santos: Post-Quantum Cryptography and the Risks No One Is Talking About</h3></body>

<body>Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards solidify and timelines accelerate.</body>

<body><p>Post-quantum cryptography (PQC) is quickly shifting from theory to inevitability. In this segment, Daniel dos Santos, VP of Research at Forescout, explains why PQC isn’t the most immediate threat today—but still demands early attention as standards solidify and timelines accelerate.</p></body>

<body>The discussion highlights overlooked risks beyond encrypted traffic, including digital signatures, firmware integrity, and blockchain systems. Daniel also emphasizes the real challenge: migration. While client-side adoption is already underway, organizations face major hurdles identifying and upgrading servers, legacy systems, and unmanaged assets like IoT and OT.</body>

<body><p>The discussion highlights overlooked risks beyond encrypted traffic, including digital signatures, firmware integrity, and blockchain systems. Daniel also emphasizes the real challenge: migration. While client-side adoption is already underway, organizations face major hurdles identifying and upgrading servers, legacy systems, and unmanaged assets like IoT and OT.</p></body>

<body>The bottom line: PQC migration is unavoidable. Starting early—especially with crypto inventory and planning—will make the transition far less painful.</body>

<body><p>The bottom line: PQC migration is unavoidable. Starting early—especially with crypto inventory and planning—will make the transition far less painful.</p></body>

<body>RSAC Interview: Multi-Channel Impersonation: Why Legacy Controls Are Failing</body>

<body><h3>RSAC Interview: Multi-Channel Impersonation: Why Legacy Controls Are Failing</h3></body>

<body>As social engineering expands past just email to include text messages, chat apps, social platforms, and live video calls, traditional point solutions are struggling to keep up. In this segment, Bobby Ford explains how AI-powered impersonation and deepfake-enabled campaigns are exposing critical gaps in legacy defenses, and why organizations must evolve toward a unified social engineering defense platform that connects Digital Risk Management and Human Risk Management. He’ll outline what modern security programs need: real-time cross-channel visibility, behavior-driven detection, and strategies designed around how people actually communicate and make decisions today.</body>

<body><p>As social engineering expands past just email to include text messages, chat apps, social platforms, and live video calls, traditional point solutions are struggling to keep up. In this segment, Bobby Ford explains how AI-powered impersonation and deepfake-enabled campaigns are exposing critical gaps in legacy defenses, and why organizations must evolve toward a unified social engineering defense platform that connects Digital Risk Management and Human Risk Management. He’ll outline what modern security programs need: real-time cross-channel visibility, behavior-driven detection, and strategies designed around how people actually communicate and make decisions today.</p></body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/doppelrsac">https://securityweekly.com/doppelrsac</a> to learn how Doppel helps organizations defend against AI-powered impersonation, phishing, and multi-channel social engineering threats with a modern Human Risk Management approach.</body>

<body><p>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/doppelrsac">https://securityweekly.com/doppelrsac</a> to learn how Doppel helps organizations defend against AI-powered impersonation, phishing, and multi-channel social engineering threats with a modern Human Risk Management approach.</p></body>

<body>RSAC Interview: OT: Segmented Today, Breached Tomorrow</body>

<body><h3>RSAC Interview: OT: Segmented Today, Breached Tomorrow</h3></body>

<body>As the worlds of IT and OT converge, traditional network segmentation falls short, exposing risks in the critical environments that keep energy flowing and shelves stocked. Conventional security tools fail to identify these gaps, with serious repercussions for operators. At runZero, we empower defenders to win by default through comprehensive discovery, rapid detection of critical exposures, and unique segmentation analysis that does not depend on span ports, credentials, or on-device agents. runZero provides real-time insights into even the most sensitive environments — quickly, safely, and securely.</body>

<body><p>As the worlds of IT and OT converge, traditional network segmentation falls short, exposing risks in the critical environments that keep energy flowing and shelves stocked. Conventional security tools fail to identify these gaps, with serious repercussions for operators. At runZero, we empower defenders to win by default through comprehensive discovery, rapid detection of critical exposures, and unique segmentation analysis that does not depend on span ports, credentials, or on-device agents. runZero provides real-time insights into even the most sensitive environments — quickly, safely, and securely.</p></body>

<body>This segment is sponsored by runZero. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerorsac">https://securityweekly.com/runzerorsac</a> to learn more about them!</body>

<body><p>This segment is sponsored by runZero. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerorsac">https://securityweekly.com/runzerorsac</a> to learn more about them!</p></body>

<body>RSAC Interview: Securing the Next Billion Users: Why the Browser is the Front Line for Agentic AI</body>

<body><h3>RSAC Interview: Securing the Next Billion Users: Why the Browser is the Front Line for Agentic AI</h3></body>

<body>The enterprise is facing a fundamental shift: the next billion knowledge workers will not be human, they will be AI agents. While these agents offer exponential productivity, they operate at machine speed without human guardrails like MFA or skepticism, creating a massive security blind spot. Ramin Farassat discusses the "Agentic Paradox" and how a new approach to browser security is required to provide architectural immunity for the modern, hybrid workforce of both humans and agents.</body>

<body><p>The enterprise is facing a fundamental shift: the next billion knowledge workers will not be human, they will be AI agents. While these agents offer exponential productivity, they operate at machine speed without human guardrails like MFA or skepticism, creating a massive security blind spot. Ramin Farassat discusses the "Agentic Paradox" and how a new approach to browser security is required to provide architectural immunity for the modern, hybrid workforce of both humans and agents.</p></body>

<body>Learn more about how Menlo Security protects both humans and agents at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/menlorsac">https://securityweekly.com/menlorsac</a>.</body>

<body><p>Learn more about how Menlo Security protects both humans and agents at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/menlorsac">https://securityweekly.com/menlorsac</a>.</p></body>

<body>RSAC Interview: The Threat Curve Has Reset: Why AI Made “Solved” Attacks Dangerous Again</body>

<body><h3>RSAC Interview: The Threat Curve Has Reset: Why AI Made “Solved” Attacks Dangerous Again</h3></body>

<body>AI hasn’t just evolved cyberattacks—it has reset the threat curve entirely. New research shows that even “solved” problems like phishing and business email compromise are immature and dangerous again, with attackers using AI and autonomous agents to launch hyper-personalized, multi-channel attacks at scale. This session explores what Phishing 3.0 really means for security leaders—and why defending trust now requires a fundamentally new approach.</body>

<body><p>AI hasn’t just evolved cyberattacks—it has reset the threat curve entirely. New research shows that even “solved” problems like phishing and business email compromise are immature and dangerous again, with attackers using AI and autonomous agents to launch hyper-personalized, multi-channel attacks at scale. This session explores what Phishing 3.0 really means for security leaders—and why defending trust now requires a fundamentally new approach.</p></body>

<body>This segment is sponsored by IRONSCALES. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/IRONSCALESrsac">https://securityweekly.com/IRONSCALESrsac</a> to learn more about them!</body>

<body><p>This segment is sponsored by IRONSCALES. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/IRONSCALESrsac">https://securityweekly.com/IRONSCALESrsac</a> to learn more about them!</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14904″} podcast from PPWorks

Encryption

Threat Management

Post Quantum Migration Struggles, AI Threats, and Modern Defenses – Bobby Ford, HD Moore, Eyal Benishti, Ramin Farassat, Daniel dos Santos – ESW #457

the logo of US online social media and social networking service Facebook on a smartphone screen

Phishing

Related Videos