All news in category “Events and Conferences”

🧭 The Black Hat USA 2026 conference centered on AI's influence across cybersecurity, featuring keynotes and panels with senior US officials who debated regulation, innovation, and national leadership. Speakers including the White House National Cyber Director and representatives from CISA and the FBI discussed rapid vulnerability discovery enabled by AI, industry collaboration, and the need for prioritization. Presentations highlighted incidents such as the OpenAI–Hugging Face case and emphasized that AI systems act through human-set tasks and controls, underscoring accountability and governance requirements.

🛡️ Check Point Research presented four technical talks at Black Hat USA 2026 exposing trusted layers attackers abuse. Researchers dissected a decade-old Windows kernel driver in Defender, found post-injection exploitation paths across major AI agent frameworks, developed a pipeline to decompile compiled V8 bytecode malware, and identified sandbox escape vulnerabilities in Cloudflare’s Code Mode. Each talk highlighted how trusted or overlooked components can be repurposed offensively.

📢 Next Tuesday, August 11, Cisco Talos Incident Responders will host a 30-minute, unrecorded webinar reviewing high-impact incidents from Q2 2026. The session will candidly cover timelines, containment, and remediation efforts rather than repeating the published trends report. Designed for security professionals at all levels, it emphasizes strategic takeaways, business impact, and enough technical detail to inform discussions. Registration is required to attend this exclusive briefing.

🔒 Black Hat remains a vital forum for practitioners despite commercialization; attendees should avoid flashy distractions and focus on substantive technical content. Key topics to prioritize this year include agentic AI exploitation, modern APT infrastructure, AI-powered vulnerability discovery, threat hunting in the AI era, and real-world adversary AI use. Seek sessions and case studies that emphasize operational controls, behavioral detection, and collaboration across security, IT, and development teams.

🎤 Talos will be present at Black Hat USA 2026 across the Cisco and Splunk booths to discuss threat research, incident response, and how Talos powers the Cisco security portfolio. The team will deliver lightning talks, a Main Stage keynote on securing enterprises in the age of AI agents, and hands-on workshops demonstrating AI-driven SOC workflows and the Foundry Security Spec. Attendees can also learn how Talos is embedded across Cisco products and view the new “Where Protection Starts” video.

🗓️ This page lists Bruce Schneier's scheduled speaking engagements for mid to late 2026, including virtual and in-person appearances. Events include the Policy-Relevant Privacy Research Workshop (Calgary) on July 20, the Boston Leadership Exchange on July 22, and several conferences in Las Vegas, Anaheim, and Vancouver with dates in August through October. Specific talk times for several events are noted as TBD and the list is maintained on this page.

📅 This page lists Bruce Schneier’s confirmed speaking engagements in June–October 2026, including keynotes, panels, and talks across Europe and North America. Events include Cybernation 2026 in Berlin, the Potsdam Conference at Hasso Plattner Institut, panels in Vienna, a talk at Czech Technical University in Prague, the Nuremberg Digital Festival, and CanSecWest in Vancouver. Times and formats vary; one panel is via Zoom.

🛡️ Semperis will host "Enter the War Room: A Tabletop Experience" at Infosecurity Europe 2026, a 90-minute red team vs blue team simulation based on real retailer ransomware incidents. The immersive exercise places participants in a fast-moving, multi-stage cyber-attack on a fictional supermarket, testing detection, decision-making, communication and executive escalation. Attendees will work with reformed hackers and defenders from government, law enforcement and industry to identify blind spots and sharpen crisis playbooks.

🛡️ The Cybersecurity Communities of Support (CyCOS) pilot, launched by academics from UK universities, is expanding from two to seven small peer-led communities to help SMEs improve cyber resilience. The program combines webinars, AMAs, an online support platform and shared resources, and will transition operational leadership to the Chartered Institute of Information Security (CIISec). New communities are being founded by volunteer SME facilitators and supported by a Community Toolkit to ensure replicability.

🚀 Infosecurity Europe 2026 will introduce a new Cyber Startup competition and a dedicated Cyber Startups Zone, giving five emerging companies a platform to present technologies and connect with potential customers, partners and investors. The live pitching event takes place on Tuesday 2 June and will be judged by industry figures including Shlomo Kramer alongside CISOs Mun Valiji and Kirsty Kelly. The winner receives a prize package that includes a free exhibition stand at Infosecurity Europe 2027, PR support from Origin Communications and a brand workshop from Dusted.

🔒 At Pwn2Own Berlin (May 14–16), researchers uncovered 47 zero-day vulnerabilities and shared almost $1.3 million in prize money, with Devcore taking $505,000. The enterprise-focused competition targeted AI databases, coding agents, LLM toolchains and NVIDIA products. Notable wins included exploits against VMware ESXi, Microsoft Exchange, SharePoint and a sandbox escape on Microsoft Edge. ZDI will disclose the findings to vendors, who have 90 days to patch.

🏆 The Pwn2Own Berlin 2026 contest at OffensiveCon (May 14–16) awarded security researchers $1,298,250 for exploiting 47 zero-day vulnerabilities across browsers, enterprise apps, servers, virtualization, containers, LLMs and local privilege escalation. Competitors earned $523,000 on day one, $385,750 on day two, and $389,500 on day three. DEVCORE topped the leaderboard with $505,000 and 50.5 Master of Pwn points; Cheng‑Da Tsai secured the highest single payout of $200,000 for an Exchange RCE chain.

🔒 During day two of Pwn2Own Berlin 2026 at OffensiveCon (May 14–16), competitors earned $385,750 by exploiting 15 unique zero-day vulnerabilities across enterprise products, including Windows 11, Microsoft Exchange, and Red Hat Enterprise Linux. Cheng-Da Tsai (Orange Tsai) earned $200,000 by chaining three bugs to achieve remote code execution as SYSTEM on Exchange, while other researchers demonstrated privilege escalations on Windows and RHEL and exploited the NVIDIA Container Toolkit. The AI category also saw multiple successes against coding agents such as Cursor AI and OpenAI Codex. Under Pwn2Own rules all targets run the latest patched OS versions and vendors receive a 90-day disclosure window to issue fixes.

🎤 Bruce Schneier lists his upcoming speaking engagements through July 2026, including virtual and European events. He will give a virtual talk on “The Security of Trust in the Age of AI” for the Financial Women’s Association of New York at 6:00 PM ET on May 21, 2026. He is scheduled to speak at the Potsdam Conference on National Cybersecurity (evening of June 24), the Digital Humanism Conference in Vienna on June 26, and the Nuremberg Digital Festival on July 1. The list is maintained on this page.

🔒 Tomorrow at 2:00 PM ET, BleepingComputer will host a live webinar titled "From phishing to fallout: Why MSPs must rethink both security and recovery," with Austin O'Saben and Adam Marget of Kaseya. The session explains why prevention alone is insufficient as AI-driven phishing, ransomware, SaaS abuse and BEC evolve faster than many defenses. It will show how attackers exploit trusted infrastructure and why organizations must combine security, backups and rapid recovery. Attendees will learn practical steps to reduce downtime and disruption.

🔒This webinar delivers a practical, technical playbook for identifying and neutralizing a corporate 'Patient Zero'—the first compromised device that enables rapid lateral movement. Speakers will unpack how generative AI enables stealthy phishing, the critical five-minute window, and how Zero Trust isolation halts spread. Attendees gain an actionable Recovery Blueprint to contain, remediate, and restore systems.

🔒 On May 14, 2026 at 2:00 PM ET, BleepingComputer will host a live webinar titled From phishing to fallout: Why MSPs must rethink both security and recovery with Austin O'Saben and Adam Marget of Kaseya. The session examines how AI-driven phishing, business email compromise, ransomware, and SaaS compromise are reshaping the threat landscape for managed service providers. Attendees will learn why prevention and recovery must operate together and how SaaS backups and a formal BCDR plan can reduce downtime and data loss.

🔔 On June 02, 2026 at 12:00 PM ET, BleepingComputer will host a live webinar titled From alert to containment: Fixing the gaps in network incident response with Edgar Ortiz, Solutions Engineering Leader at Tines. The session explores why incidents escalate when response processes—triage, enrichment, and routing—break down, not because of a lack of alerts. Attendees will learn how intelligence workflows that combine automation and AI can enrich alerts, prioritize and route incidents, and coordinate containment across systems to reduce response times and prevent broader service disruption.

🎖️ The Hacker News has opened submissions for the Cybersecurity Stars Awards 2026, a global recognition program celebrating excellence across products, companies, industry solutions, and professionals. The initiative aims to highlight often unseen defensive achievements and deliver visibility to CISOs, security leaders, and enterprise buyers. Submissions are accepted through May 15, 2026, and entries will be assessed via a structured, impartial review. Winners will be announced on May 26, 2026.

🤖 Join hands-on developer workshops across North America that teach secure, scalable deployment of agentic AI for enterprises. These sessions are practical, bring-your-laptop labs where Platform, Security, and Data practitioners build end-to-end solutions, including GKE cluster hardening, secure sandboxing, and governed data pipelines. Tracks cover GKE + Data and Data Engineering & Analytics, with guidance from Google experts. Attendees leave with runnable labs and operational best practices to accelerate production adoption.