SANS Emerging Threats Summit 2025

This talk will provide a foundational understanding of quantum technology, exploring its transformative potential alongside the emerging security challenges it presents. A concise introduction to quantum technology, covering both its exciting advancements and the critical security implications that must be addressed.

Quantum computing threatens traditional cryptography, making proactive preparation essential. This session covers key steps, including cryptographic inventory, developing a quantum-safe strategy, and exploring hybrid approaches when a direct upgrade to PQC isn't feasible. It will also touch on QKD and other solutions for specific use cases. Attendees will gain insights from real-world lessons learned by early adopters

NIST released its first standards for PQC in August 2024, and the industry is expected to spend billions or more migrating. What are spending all this money on, exactly? Join Konstantinos for an explanation of how PQC works, why it’s safe, and what comes next.

In the wake of Salt Typhoon, understanding the threat landscape of our communications is now more critical than ever. The vast amounts of data available that’s being shared and used by criminal organizations is staggering. Join me as we look at what data we know is being gathered, what technical tools and exploits are being used to weaponize it, and what governments are doing to protect themselves.

AI has been set to revolutionize every aspect of cybersecurity in the next 6 months... for the last 3 years. Cyber Threat Intelligence is supposed to be the exact kind of high intensity knowledge work where LLMs were supposed to make human analysts obsolete. We will look at where AI systems can and can't support analysts, rather than replace them, by makign the exact techniques analysts should do, but often can't, possible.

Join us for an engaging Q&A session where our three expert speakers will break down the current threat landscape, share real-world insights, and debate the most pressing issues affecting their respective fields. 

Artificial intelligence is reshaping our world at an unprecedented pace, creating new opportunities and new threats. In cybersecurity, we are primarily focused on how attackers can use AI to cause trouble or how the business' use of AI creates new attack surfaces and governance challenges. Of course, we're also looking at how AI can help us do the practice of cybersecurity, but herein lies what may be the biggest emerging threat that we all face. Tasks that we thought were the sole territory of humans, including those in cybersecurity, are now being accomplished by machines. Jobs that we thought were safe from AI are now being displaced. How do we best stay ahead of this trend so that we can ride the rising tide?

Smart Phone forensics has been an ever-evolving science with constantly moving goal posts - but what challenges lie in the future? Between access and encryption, privacy concerns, AI, workload balancing and a host of other issues, what will the future look like for Digital Examiners?

Vulnerability Chaining continues to be an emerging threat across our complex IT/OT landscapes. With the advent of AI and extended use of ML and LLM's, vulnerability chaining identification and remediation becomes even more complex. Come learn about the complexities of AI use in various environments and what that means to evaluating chained vulnerabilities in your environment.