Cyber risk in industrial environments carries consequences far beyond data loss—it can disrupt essential services, damage equipment, impact safety, and affect entire communities. In the utilities sector, this risk is operational, immediate, and escalating. Water treatment plants, electric grids, and energy distribution networks are now routine targets for adversaries seeking to exploit weaknesses in industrial control systems with tradit...

Cybersecurity policies are the foundation of any governance program, setting expectations for workforce behavior and establishing the rules that support compliance and risk management. But policies can quickly become outdated as new threats emerge, standards evolve, and regulators raise the bar. Each year, SANS, in partnership with the CRF, updates its library of cybersecurity policy templates to reflect current best practices and provide orga...

This webcast explores the evolution of machine learning context-based prompting, RAG, Agentic AI, and fine-tuning and associated risks. Learning ObjectivesUnderstand the architectural evolution from prompting to RAG to fine-tuningRecognize the technical and security risks at each layerGain practical insights into implementing secure fine-tuning Prerequisite KnowledgeCode samples in Python will be shown during the presentation. Basic knowledge...

AI is the most transformational technology of our generation. It is where conflict will occur. And it's our job to secure it. Come to this session and learn the trends, techniques, and tools to do just that.

Security teams are under increasing pressure to detect, respond, and adapt at the speed of today’s evolving threats. The SANS 2026 SOC, SIEM, SOAR Forum brings together practitioners, architects, and leaders to share real-world experiences, lessons learned, and proven practices for advancing Security Operations. Through interactive discussions, expert panels, and practitioner-led talks, attendees will explore the latest approaches to opt...

Overview Identity has become the new battleground. From SaaS to cloud to legacy Active Directory, it is now the central control point—and attackers know it. Credential theft, token hijacking, and consent abuse are on the rise, and defenders must adapt quickly. The 2026 SANS Identity Threat & Defenses Survey delivers benchmarks and real-world data to help you strengthen your defenses. Join this exclusive webcast to explore findings th...

In an era where adversaries exploit publicly available data with increasing sophistication, Open-Source Intelligence (OSINT) has become a vital part of modern cyber defense. This Solutions Track session explores how organizations can leverage OSINT more effectively—shifting it from ad-hoc collection to a proactive, integrated security capability. Attendees will hear how OSINT can enhance detection, threat attribution, and incident respon...

As organizations face increasing uncertainty, evolving threats, and shifting regulations, cybersecurity leaders are being challenged to lead with both vision and adaptability. This Solutions Track session focuses on translating those leadership challenges into actionable strategies—providing frameworks, proven approaches, and decision-making tools for professionals at every level who are responsible for driving security initiatives and o...

There is an old American legend about a larger-than-life lumberjack, Paul Bunyan, whose mighty axe carved forests and shaped the frontier. As the story goes, Paul faced off against a steam-powered saw that threatened to outpace his manual brute force effort. With his trusty ox, Babe, by his side, he tackled the challenge head-on. He challenged the innovators to a contest, swinging his axe with all his might. Despite his heroic effort, the mach...

Over the past few years, the cyber threat landscape has been defined by supply chain compromises, the targeting of cloud and SaaS environments, and the growing use of AI by both defenders and adversaries. At the same time, state-backed and geopolitically motivated operations and an increasingly professionalized cybercrime ecosystem are further increasing complexity. These developments reinforce that CTI serves a dual mission: enabling operatio...