Former CIA, FBI, NSA and counterterrorism professionals at CruiseCon explain how intelligence tradecraft can make cyber defenders safer and more effective on and off the job.
Featured
AI-powered ransomware attacks don't need sophisticated new techniques to create more risk. ThreatLocker CTO Michael Jenkins says automation lets cybercriminals target more businesses with less work, putting smaller organizations increasingly in the crosshairs.
Zero Trust security requires more than authentication and network access controls. ThreatLocker CTO Michael Jenkins explains why organizations must restrict what users, applications and processes can do after access is granted.
CYBR.SEC.CON 2026
STARTS IN
--
Days
--
Hours
--
Minutes
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
CruiseCon AI & Privacy 2026: Ship's Log (A.K.A. Racing Isaias)
Bill Brenner posts regular updates from abourd the Mariner of the Seas cruise ship, where he is covering the proceedings during CruiseCon 2026
When the Platform Can Say No Without Saying Why
No externally governed inference or action provider should constitute an unmitigated single point of failure. Where provider behavior cannot be sufficiently characterized, treat the provider as an untrusted-availability dependency.
Nonprofit Cybersecurity Won’t Be Fixed With Another Checklist
Nonprofit cybersecurity doesn't improve with more checklists and portals. Real change starts with conversations that expose hidden risks, build trust and turn advice into action.
Stop Chasing Reach: Why Niche Influence Matters More in Cybersecurity
As a cybersecurity start-up or scale-up you don't need everybody to know your name. You need the right people to keep encountering it for the right reasons.
AI and Nonprofits: The Monster Under the Bed Uses the Same Old Doors
AI is changing the threat landscape. For nonprofits and other under-resourced organizations, panic is a bigger risk than the technology.
Latest Articles
See all
HIPAAcompliance
Senate Votes to End HIPAA’s Risk-Based Cybersecurity Era
The Health Care Cybersecurity and Resiliency Act would mandate MFA, encryption, and penetration testing — with a 36-month clock and no guaranteed funding for rural providers.
CruiseConAgentic AIAI and Privacy
CruiseCon AI/Privacy 2026: Full Coverage
Full CruiseCon 2026 coverage from aboard Mariner of the Seas, including AI security, privacy, insider threats, cyber risk and leadership.
AI GovernanceAgentic AI
Static Security Policies Can't Keep Up With Agentic AI
Agentic AI is exposing the limits of static security policies, excessive permissions and decades of technical debt. Enterprises need dynamic, runtime security controls that evaluate what AI agents are doing in real time. (Sponsored by Eve Security)
Agentic AIAI Governance
AI Agents Will Make Mistakes. Enterprise Security Must Be Ready When They Do
As enterprises deploy autonomous AI agents across critical systems, security teams must assume those agents will make mistakes. Agentic AI security requires continuous monitoring of behavior, intent and context — not blind trust in permissions. (Sponsored by Eve Security)
AI Data BreachesCruiseConAI Governance
AI-Powered Bank Attacks Exposed 67,000 People. Here Are 5 Things Security Teams Should Do Now
Suspected AI-assisted cyberattacks breached seven South Korean financial firms and exposed data on more than 67,000 people. The attacks reinforce warnings heard at CruiseCon AI and Privacy 2026 and point to five security actions organizations should take now.
CruiseConAI GovernanceAI and Compliancedata security
Data Has No Passport: Why Global Privacy Governance Must Catch Up With AI
Speaking during CruiseCon Privacy & AI 2026, global privacy leader Adriana Antunes Winkler warned that organizations need a common privacy governance core with deliberate local controls as data crosses borders, AI agents take action and computing begins moving into orbit.
CruiseConAI and Insider RiskAgentic AI
AI Could Become the Next Insider Threat as Adversaries Target What Models Trust
Speaking during CruiseCon AI and Privacy, former CIA case officer Erin Whitmore warned that attackers may not need to hack enterprise AI. Manipulating the data and sources AI trusts could turn models into unwitting insider threats that steer organizations toward attacker-controlled decisions.
Podcasts & Video
See all
Podcast
Something to do with Skyrim with Michael Jenkins
Podcast
The Wild West of Deploying Agents with Nadav Cornberg
Podcast
'Energized Cybersecurity Culture' Book Review with Michael Farnum
Podcast
CYBR.SEC.Careers with Sheridan Skurupey-McDonald & James “JB” Bryant
Video
Vendor Breaches, Shared Responsibility, and the Contract Clauses Security Teams Should Care About - Haylie Treas
Video
The 5-step Purple Team Blueprint - Ross Burke
Video
Your AI Isn't the Risk. What It Does Next Is - Bashyam Anant
Sponsored
Sponsored