Topics

Sanctions, trade controls, geopolitical instability, and their impact on cyber risk posture.

SEC cyber disclosure rules, privacy regulations, enforcement actions, and compliance obligations.

Third-party compromise, vendor risk, software supply chain attacks, and dependency vulnerabilities.

State-sponsored cyber operations, espionage campaigns, and geopolitical cyber conflict.

Vendor breaches, TPRM program failures, concentration risk, and supply chain due diligence.

Attacks on energy, water, transportation, healthcare, and other critical sectors.

AI-enabled attacks, model poisoning, prompt injection, and organizational risks from AI adoption.

Large-scale data breaches, exposed databases, data broker risks, and breach notification failures.

Banking and financial sector threats, SWIFT attacks, fintech risk, and financial regulatory actions.

BEC, payment fraud, deepfake-enabled fraud, and financial crime convergence with cyber.

Breach response lessons, IR program maturity, and post-incident analysis.

Credential theft, MFA bypass, identity provider compromise, and access management failures.

Malicious insiders, negligent employees, credential misuse, and privilege abuse.

Attacks on power grids, oil and gas, renewable energy infrastructure, and energy-sector espionage.

Ransomware operations, extortion tactics, and the business impact of data encryption attacks.

Zero-day vulnerabilities, mass exploitation events, and patch management failures.

Cloud misconfigurations, SaaS compromise, container escapes, and cloud-native attack patterns.

Sanctions enforcement, evasion techniques, cryptocurrency mixing, and compliance risks.

Patch prioritization, CISA KEV catalog, exploit availability, and vulnerability lifecycle.