SANS Institute

The threats are evolving. So is our leadership. James Lyne is now CEO of @SANSInstitute. The next chapter starts now. 👏 Watch the full announcement → linkedin.com/feed/update/ur… #SANSInstitute #Cybersecurity

.@lspitzner wants your voice in the 2026 SANS Security Awareness Report®. A few minutes of your time helps shape research used globally, and gets you early access to data that helps you mature your program and grow your career. Take the survey → go.sans.org/isMrhn #SecurityAwareness #HumanRisk #Cybersecurity

🔧 Manual labor to cybersecurity. Yesi Flores made the switch with SANS Cyber Academy and changed his career path. Spots are limited. Apply by May 29, 10 AM ET. 📈 Apply: go.sans.org/mL4fNR Watch: youtu.be/uZVKlGgUhVM?si…

"Old model: smart people vs smart people. New model: smart people with AI vs smart people with AI." James Lyne, SANS CEO, on @BBC Radio 4. The next decade is a workforce problem, not a tooling one. 1h 15m: bbc.com/audio/play/m00…

EU AI Act is being enforcing. Boards want proof, not promises. Most teams still can't answer: "Where does our AI security program actually stand?" 📥 That answer arrives May 12 → go.sans.org/PJjMWh #AISecurity #Cybersecurity

Practitioner paper from @CloudSecAlliance and the community: labs.cloudsecurityalliance.org/mythos-ciso/ Board paper from @AspenDigital: aspendigital.org/blog/cybersecu…

11 questions every executive should be asking their security team right now. Most organizations can't answer them cleanly.

Two papers. Same threat. Different rooms that both need to act. "The AI Vulnerability Storm" was built for practitioners. This one from @SANS_Institute's @robtlee + former @NSAGov, @CISAgov, and @WhiteHouse officials is for the board.🧵

New episode out now 🎙️ AI finds vulnerabilities faster than ever. So do attackers. Gadi Evron, Rob Lee & Ed Skoudis join James Lyne & Ciaran Martin on SANS Cyber Leaders to break down Claude Mythos — and what it means for every defender right now. Are you moving fast enough? 🎧 Listen Now → go.sans.org/GgVizq #CyberLeaders #AI #Cybersecurity #SANSInstitute #Mythos

In industrial control systems, stress has real-world consequences. Protecting critical infrastructure means safeguarding lives, the environment, and societal stability. Justin Searle (@meeas) shares how to stay focused on doing the right thing, at the right time. Join him May 11–16 at SANS Security West. Register: go.sans.org/24c5SA #SANSSecurityWest #SANSLiveTraining

What does AI-enabled pen testing find on a codebase your team already cleared? @EdSkoudis and his team ran that experiment. Day one: five critical vulnerabilities. And he estimates 20-40x the current vuln volume is coming within the year. Full methodology and replay: go.sans.org/7TWDpY #Cybersecurity #PenTesting #VulnerabilityManagement

"The opposite of security isn't being not secure. It's convenience." — Chris Cochran SANS Field CISO Chris Cochran joins the Cybersecurity Readiness Podcast for an unfiltered take on the widening AI security gap — visibility, agentic AI, and why security must be embedded at model selection, not after. 🎙️ cybersecurityreadinesspodcast.com #AISecurity #Cybersecurity #CISO

Most ICS/OT protocols lack native crypto, and quantum risk makes this urgent. Michael Hoffman breaks down where OT exposure lives: trust boundaries, SCADA telemetry, remote access & IIoT. 🔗 More on @IndustCybersec: industrialcyber.co/features/indus… #OTSecurity #PostQuantum #ICS

Compliance gets you audit-ready. Culture keeps you secure. The 2026 SANS Security Awareness Report® Survey is open. Help build the benchmark that actually moves the needle. 👉 Take the Survey → go.sans.org/isMrhn #SecurityAwareness #HumanRisk

🔥 Amazing day at the @SANSInstitute #AISummit 2026. I had the chance to join the SANS360 lightning talks. 10 practitioners, 6 minutes each. No fluff. My message was simple: #AI is collapsing prevention time, but time-based security still holds. Speed doesn’t make these attacks smarter. In fact, it often makes them more fragile. To show how #AllAroundDefenders can flip the script, today we introduced #Decipio, our latest community project from the @AWNetworks Labs team. #Decipio injects controlled “lies” into the environment to expose credential theft the moment it begins. It also applies automation and AI-assisted workflows defensively, creating a home-field advantage for defenders. To protect the #cyberdefense community, we decided to release Decipio as a gated, community-driven release. 👉 You can start requesting access today through our website, and learn more about it in our latest blog: 🔹 arcticwolf.com/decipio/ 🔹 arcticwolf.com/resources/blog… #CyberDefense #AI #ThinkRedActBlue

We’re grateful to all the sponsors who made SANS #AISummit incredible! Your support and partnership helped bring this experience to life and created meaningful moments ✨

A year ago, AI-enabled cyber ops were a troubleshooting story. That’s no longer the picture. Jacob Klein, Head of Threat Intelligence at @Anthropic, presented the twelve-month data at SANS AI Cybersecurity Summit — and it moves fast. Watch the keynote ↓ youtu.be/fPODoqvx-3s?si… #AISummit #AI #Anthropic

📣 Don’t miss the return of SANS360 — starting now! 💥 10 experts. 360 seconds each. = 60 minutes of rapid-fire technical brilliance! We’re closing out the virtual portion of Day 2 of SANS AI Cybersecurity Summit with power-packed AI Cybersecurity talks — featuring practical solutions you can use now to integrate AI/ML into your security workflows. ➡️ It's not too late to Register for Free & Join Us: sans.org/u/1CNB #AISummit #AI #GenAI #cybersecurity

Brigadier General Reid J. Novotny is at the podium at #AISummit and diving into how AI is shaping real-world cyber operations. Register for Free & Join Online: sans.org/u/1CNB #AISecurity #CyberSecurity #AI #ThreatIntelligence #Infosec