){kind=logo}
){kind=logo}
){kind=logo}
)
)
)
)
)
)
2026 Summit Agenda
10:00
-
Domain names are often treated as administrative assets, but they are a critical part of an organisation’s security posture. This session will explore how overlooked domain name risks can expose your business to fraud, disruption and reputational damage. You will learn why domain governance should be a core component of your cyber risk strategy and what practical steps you can take to safeguard your brand online.
10:35
-
- Cybersecurity isn’t just about defense – it’s about enabling trust, resilience, and growth.
- Redefining the role of the CISO from a technical operator to a strategic business leader.
- Transforming cybersecurity from a cost centre into a value creator, enabling innovation and resilience in a rapidly evolving threat landscape.
- Adapting at the speed of frontier AI - build a team that evolves at pace while protecting the business, its data, and its people.
Speakers
11:10
-
AI isn't replacing penetration testers; it's becoming part of the team. Discover how Rootshell's consultants work alongside AI to analyse vulnerabilities faster, uncover meaningful attack paths, prioritise real-world risk and spend more time thinking like attackers. A practical look at human-led, AI-augmented penetration testing in action.
11:45
-
Midmarket organisations are entering a defining moment, where geopolitical instability, accelerating AI, and increasingly sophisticated threats are converging to reshape the risk and security landscape. With high-value data, limited security resources, and mounting regulatory pressure, the stakes have never been higher. This session explores how forward-thinking leaders can seize this moment, adopting a security-by-design approach, harnessing AI responsibly, and building the resilience and visibility needed to stay ahead in a fast-moving threat environment.
12:20
-
Ukraine is one of the most cyberattacked countries on Earth, facing thousands of coordinated attacks each year targeting energy, telecom, government, and critical services. In this talk, Iryna Volnytska shares what CISOs and security teams can learn from training on scenarios built from real conflict data: what breaks first, where teams fail under pressure, and why rehearsing with real-world attack data produces fundamentally different preparedness outcomes. Backed by the whitepaper ʼFour Years on the Digital Frontline: Ukraine’s Cybersecurity Resilienceʼ drawing on data from CERT-UA, SSSCIP, and NATO CCDCOE.
12:55
-
IoT Forensics IoT Device
Identification Purpose of Blockchain in evidentiary process
Spidernet phases
13:30
-
Finance, HR, account teams, ops, and managers are now making trust calls at speed; in email, chat, docs, and approvals. And the old shortcuts (“this looks polished”, “this sounds like them”, “this feels confident”) don’t hold up anymore. This talk is about what good looks like in that new reality: a practical verification muscle across the workforce. When do you pause? What do you check? What’s a safe way to handle AI-written content without losing momentum? And when is it genuinely an escalation?
14:05
14:40
-
Everyone has a plan until they get punched in the mouth,” a quote attributed to Mike Tyson about his opponents at the height of his powers.
Most of today’s attendees (hopefully) will have a plan in place should a cyber incident potentially occur. However, in our experience when a real incident occurs then the gaps appear.
So, in this short session we share the experiences from several of the incidents we have worked on – so you can learn lessons from others and ensure you have covered the most common gaps.
We will always make mistakes, however, it is always a lot easier and less painful to learn from other people’s mistakes.
15:15
-
Step inside the seedy underworld of cyber crime, where stolen identities, hijacked inboxes and VPN logins are traded like business leads. In Cyber Crime Unmasked, Huntress Sales Engineer Alex Hitchen goes undercover into the modern cyber crime economy - pulling back the curtain on how attackers really operate, and how you can shut them down before they cash out. You’ll follow the money trail from that first “harmless” phishing email through Business Email Compromise (BEC), session token theft and Ransomware as a Service. Along the way, Alex will decode the roles of initial access brokers, affiliates and ransomware operators. This will include how the same playbooks that fuel their profits can be used against them with the right visibility and response.
15:50
-
Cyber incidents are still primarily treated as attacks against organisations and systems. In reality, the question of who the victims are is far broader and often poorly understood. This panel explores why putting victims first may be one of the most important and most overlooked aspects of incident response.
16:25
10:00
10:35
-
As AI agents become increasingly capable of autonomously navigating systems, writing code and conducting cyber operations, the distinction between controlled experimentation and real-world attack is becoming increasingly blurred. But can an AI agent really “break free” from its environment and attack another organisation? In a modern, highly virtualised world, can we genuinely sandbox an AI system - or are we all potentially operating inside somebody else’s cyber warfare test range? The implications for information and national security are significant. What happens when hostile nation-state actors gain access to increasingly autonomous offensive AI capabilities? For the cybersecurity industry, the implications could be even more disruptive. If an AI agent can create, adapt and deploy offensive capabilities on demand, does the era of specialised offensive security tools begin to fade? Why buy a tool designed for one particular attack when an AI can potentially build something better in real time? This discussion will examine what the rise of autonomous offensive AI means for security, cyber warfare and the future of the cybersecurity industry.
11:10
-
- Analyze how state-sponsored adversaries weaponize AI to rapidly scale offensive operations, bypassing traditional corporate and national security investments.
- Explore the chilling convergence of digital and kinetic domains, where autonomous AI agents independently hire humans for physical sabotage.
- Assess the profound geopolitical and legal implications of attributing international infrastructure attacks orchestrated entirely by non-transparent AI algorithms.
- Equip CISOs with a strategic framework to regain operational control by applying zero-trust principles directly to autonomous AI models.
Speakers
12:20
-
Trust, AI and Human Intelligence: Securing Tomorrow’s Connected World explores how AI, biometrics, cyber and physical security are reshaping the security industry. Andy Schofield examines the opportunities, risks and governance challenges of emerging technologies, highlighting how trusted AI, ethical deployment and collaboration are critical to building a safer and more resilient future.
12:55
-
- Looking at the 3 fundamental points of the 10 year plan
- What these could entail in terms of changes to services and delivery
- How it is fundamental to have secure by design principles that ultimately lead to the delivery of safe patient and citizen care.
13:30
-
Modern AI systems rarely fail because of AI alone. Most risks emerge from the way architecture, data, APIs, identities, and business workflows become increasingly interconnected at scale. During my talk, I will focus on using threat modeling as a practical decision tool to help organizations understand realistic attack paths, prioritize security efforts, and make technical and regulatory security decisions more explicit, defensible, and actionable.
14:05
-
The talk will both motivate and inform cyber security professionals with a lively and entertaining discussion around future trends (AI, Robotics and Quantum Computing) and what it means to be a cyber security professional helping firms/governments adopt these technologies. The talk will focus on:
- The value of red-teaming early as an advisory activity to avoid adoption of vulnerabilities.
- The focus on security/resilience decision making as separate to the technologies.
- A workable framework for encountering the "new".
- Potential changes to the threat landscape as we consider both security *of* and security *through* novel technologies.
14:40
-
Join members of the UK Cyber Security Council’s Youth Advisory Panel as they share practical insights on choosing a pathway into cyber security. From exploring specialisms to gaining hands on experience during university, this session will help you take confident next steps in your cyber career. The discussion will be followed by an interactive Q&ASpeakers
15:15
-
Overview of the most dangerous risks of agentic AI, illustrated with real-world incidents and practical examples Threat modeling of agentic AI systems using MAESTRO, focusing on autonomy, tool-use, memory and control boundaries Design and execution of AI red teaming scenarios aligned to MAESTRO threat categories and real-world attack patterns Translation of red team findings into structured risk assessments, mitigations and enterprise security controlsSpeakers
